last executing test programs: 10.329709035s ago: executing program 1 (id=2260): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000006000/0x4000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) 7.893012886s ago: executing program 3 (id=2268): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) socket(0x400000000010, 0x3, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, 0x0, 0xff00) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 7.343839146s ago: executing program 3 (id=2270): socket(0x200000000000011, 0x2, 0xd) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2000000000000000840000000200000000"], 0x50, 0x810}, 0x4000040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010003000000140012800b0001006d6163736563000078ff028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n'], 0x44}}, 0x0) 7.002073472s ago: executing program 3 (id=2273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fanotify_init(0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x62) socket$pppl2tp(0x18, 0x1, 0x1) syz_mount_image$hfsplus(&(0x7f0000000a40), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010410, &(0x7f0000000000)=ANY=[], 0x1, 0x684, &(0x7f0000001780)="$eJzs3c9vHFcdAPDvrNdrbwip2yZtQJVqNRIgLBI7lgvmQkCALNFDVQ6crcRpVtmkxd4it0J0+X3toX9AOfiAxAmJe6Ry4QK3HnrxsRISl14wp0UzO7O/191Nmuym+Xyi2fdm3sz78Z15O7trRRPAE2tnLcr3IomdtVcO0/Xjo8368dHmnSIfEUsR0YwoR0QpIpL/tlqtDyOuRSSdapKBNGKxv533a9uvffTp8SfttXK+ZPuX+o67L818idWIWMjTz6u+6w9cX9IZ4bWIuJSnMHPpNG31+fk/zrZLKn07VkcdvfxoOgk8VEn7vjlkJeJMPtHTzwHtu2L73v1Ya866AwAAAPAIPHUSJ3GYnJt1PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBx0ew+/z/Jl1KRX42keP5/Jd8WeX6+vDjd7vceVj8AAAAAAAAA4H4tTX/IiydxEodxrlhvJdnf/F/KVs5nr1+Kt+Ig9mI/Lsdh7EYjGrEfGxGx0lNR5XC30djfmODIqyOPvDrh2KpDJcNbAAAAAAAAAODJ85vY6f79HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5kESsdBOsuV8kV+JUjkiliOiku7XjPhXkX+c3Zt1BwAAAODBVUdtXOrJP3USJ3EY54r1VpJ9538u+96/HG/F3WhELRpRj724kf0W0P7WXzo+2qwfH23eSZfhNr7/n6n6mdUY7d8eRrd8MdujGjejlm25HNfjjajHjShlR6Yu5v0pah3o16/TPiXfy03Ysxt5mo78vTwd8u5Ugx3n9B9Tbi/nmYU8XckistiJyHretzQaTxdnZvQZKs7O4mQdG2xpI0qdzp4faGlgEN2YL0/WVupMnqbj+cO4mM9EXySyEXWvvudOj3nE1//2l5/dqt+9fevmwdr8DGkyxUXXyl6rw9fEZk8knv8iR2LIehaJC531nfhx/DTWYjVejf2oxS9iNxqxF6vxwyy3m1/PSc+UHxOpa31rr47pQOfNu5Jfoe2TNV2fXsqOPRe1zpvCy9m/q7ER346t2IrtnjN84fQznM360ph32taXR47i0jfyTHrP+uO4e9dMpHF9uohrEn3vuStZWe+WbpSemSBKU96Pyl/N52Daxm/zdD4MRmKjJxLPnh6JP2VDOqjfvb1/a/fNyZp75r08k86j38/VXaKSz6Fy9tp/daTX0rMjyzaysvOdstJQ2YVOWXumNuONuBF7I2ZqJf8MN1zT1azs+ZFlm1nZxZ6yUZ+3AJh7Z755plL9d/Wf1Q+qv6veqr6y/IOl7yy9UInFvy9+t7y+8LXSC8lf44P4VfcjJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcP8O3n7n9m69vrffl2nWW63WuyOLHjTz8cd/zh7w9PnXPEmmeJzZI2z0K2cjPnPnszOJxgNnkmTSnf/XarXyLcmcdP6UTCs3L/2ZRWa270vAw3elcefNKwdvv/Ot2p3d1/de37u7vbW1vb699fLmlZu1+t56+3XwqCme6QrMre5Nf0Thygw6BAAAAAAAAAAAAHymR/HfCWY9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODxtrMW5XuRxMb65fV0/fhos54uRb67ZzkiShGR/DIi+TDiWrSXWOmpLhnXzvu17dc++vT4k25d5WL/0ojjfjTdKJr5EqsRsZCnhZ9MVEV5bH3XB0unlnRGmAbsUhE4mLX/BwAA//8gngvp") ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 6.932852023s ago: executing program 0 (id=2274): syz_usb_connect(0x5, 0x45, &(0x7f0000003240)={{0x12, 0x1, 0x110, 0xa5, 0x8e, 0x87, 0x8, 0x421, 0x420, 0xe4c4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x33, 0x1, 0x25, 0x64, 0x10, 0xe, [{{0x9, 0x4, 0xd, 0xa, 0x0, 0x2, 0x2, 0xff, 0x72, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x0, 0x40}, {0x6, 0x24, 0x1a, 0x1000, 0x4}, [@acm={0x4, 0x24, 0x2, 0x8}]}]}}]}}]}}, 0x0) 5.953391289s ago: executing program 4 (id=2275): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') socket$netlink(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 5.674115854s ago: executing program 3 (id=2276): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f00000004c0)={{@host, 0x966}, 0x0, 0x0, 0x3}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000c14000328bd7000fcdbdf2508003d0000000000080003000400edff070001000000000008016956ea297e10b975626a9e3393003d00130000000800030000000000fe50cf9c909aebb5ee561524f32b7709db1e40e10c367c8ba879721511acc65c13547070c1f5ca662e38543992"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000089) openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, &(0x7f0000000600)={[&(0x7f0000000440)='=\'@\x96\x00']}, 0x0) openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 4.697076381s ago: executing program 3 (id=2278): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0xc4, 0x2b, 0xb, 0x70bd2a, 0x0, {0x5}, [@typed={0x8, 0x3, 0x0, 0x0, @ipv4=@empty}, @nested={0xa8, 0x1, 0x0, 0x1, [@nested={0xa3, 0x5b, 0x0, 0x1, [@nested={0x20, 0x125, 0x0, 0x1, [@typed={0x8, 0x23, 0x0, 0x0, @pid}, @typed={0x8, 0x8e, 0x0, 0x0, @pid}, @typed={0x8, 0xd9, 0x0, 0x0, @u32=0x3}, @nested={0x4, 0xc1}]}, @typed={0x8, 0xa1, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x36}}, @typed={0x8, 0xbe, 0x0, 0x0, @fd}, @generic="f8d782c9e6b4cd31afeffc12e9e930958a1d269dc298bb5de3a1469bfa6743de8f1cf4ad1b", @typed={0x8, 0x83, 0x0, 0x0, @u32=0x7f}, @generic="0357cfd72fd8fe8fbb54853394c57caa4f1492da8cea51dfc91c31b364dd2fe85cd1dfdd5d1ceac710532a903bc9d6f3bcd656bd2a2c535eb97914da4faa56b40f68"]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20080c40) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0xc000001) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, '\x00', "595786437e882122fba8132c60b2e265", "17ede429", "59f47ac2f711d652"}, 0x28) 4.674991311s ago: executing program 4 (id=2279): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = dup(0xffffffffffffffff) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRESHEX, @ANYRES8=r0, @ANYRESDEC=0x0, @ANYRESOCT=r0, @ANYRES16=r1, @ANYRES32=r2], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1000000000000002) mount$tmpfs(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000701, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000000000a3359a1631b9570bc19451a1ab929a9028b08e7791ede8dfa1f5b0ba0c16581d"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) syz_open_dev$video(&(0x7f0000000b40), 0x80000001, 0x189200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x0) 4.550729563s ago: executing program 1 (id=2280): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) writev(r0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(r2) 3.395013253s ago: executing program 3 (id=2281): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x2000003}) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000000)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}, {@nojournal_checksum}, {@errors_remount}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000a80)='./file1\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@sb={'sb', 0x3d, 0x50cf}}, {@orlov}, {@norecovery}, {@barrier}, {@data_journal}]}, 0x66, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000140)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfd3fb, {0x0, 0x0, 0x0, 0x0, 0x54210, 0x23}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=r4, 0x24, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.120390348s ago: executing program 0 (id=2282): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f02", 0x8}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x40400c0) 3.090234758s ago: executing program 4 (id=2284): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x3b, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x50) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="9800000010000104fcffffff0000000000000000", @ANYRES32=r3, @ANYBLOB="0025000000000000780012800b000100697036746e6c00006800028006000f00"], 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 2.94327801s ago: executing program 0 (id=2285): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x9b69}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) r2 = epoll_create1(0x80000) ppoll(&(0x7f0000000040)=[{r1, 0x1250}, {r2, 0x100}], 0x2, &(0x7f0000000080)={0x77359400}, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x8851}, 0x40000) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000"], 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}, 0x38) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.759932623s ago: executing program 4 (id=2286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x8}}]}}]}, 0x40}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003ec0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2.751790083s ago: executing program 2 (id=2287): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r1, &(0x7f0000009500)=[{&(0x7f00000092c0)=""/71, 0x47}], 0x1) 2.584761437s ago: executing program 2 (id=2288): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$NL80211_CMD_SET_KEY(r1, 0x0, 0x4004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, 0x500}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) 2.468287229s ago: executing program 2 (id=2289): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f00000004c0)={{@host, 0x966}, 0x0, 0x0, 0x3}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000c14000328bd7000fcdbdf2508003d0000000000080003000400edff070001000000000008016956ea297e10b975626a9e3393003d00130000000800030000000000fe50cf9c909aebb5ee561524f32b7709db1e40e10c367c8ba879721511acc65c13547070c1f5ca662e38543992"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000089) openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, &(0x7f0000000600)={[&(0x7f0000000440)='=\'@\x96\x00']}, 0x0) openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 2.263929112s ago: executing program 1 (id=2290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fanotify_init(0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3fb, 0x2, 0x70bd28, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000085}, 0x54) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 1.505271795s ago: executing program 2 (id=2291): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0xc4, 0x2b, 0xb, 0x70bd2a, 0x0, {0x5}, [@typed={0x8, 0x3, 0x0, 0x0, @ipv4=@empty}, @nested={0xa8, 0x1, 0x0, 0x1, [@nested={0xa3, 0x5b, 0x0, 0x1, [@nested={0x20, 0x125, 0x0, 0x1, [@typed={0x8, 0x23, 0x0, 0x0, @pid}, @typed={0x8, 0x8e, 0x0, 0x0, @pid}, @typed={0x8, 0xd9, 0x0, 0x0, @u32=0x3}, @nested={0x4, 0xc1}]}, @typed={0x8, 0xa1, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x36}}, @typed={0x8, 0xbe, 0x0, 0x0, @fd}, @generic="f8d782c9e6b4cd31afeffc12e9e930958a1d269dc298bb5de3a1469bfa6743de8f1cf4ad1b", @typed={0x8, 0x83, 0x0, 0x0, @u32=0x7f}, @generic="0357cfd72fd8fe8fbb54853394c57caa4f1492da8cea51dfc91c31b364dd2fe85cd1dfdd5d1ceac710532a903bc9d6f3bcd656bd2a2c535eb97914da4faa56b40f68"]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20080c40) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0xc000001) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, '\x00', "595786437e882122fba8132c60b2e265", "17ede429", "59f47ac2f711d652"}, 0x28) 1.449441095s ago: executing program 0 (id=2292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000200"], 0x50}}, 0x4000850) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.439818616s ago: executing program 4 (id=2293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x9, 0x9, 0x89, 0x8}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8085}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x0, 0x6, 0x9, 0x5, 0xfff, 0x9, 0x7, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.269405029s ago: executing program 1 (id=2294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r0, 0x0, 0x4004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000001500)=[{&(0x7f0000001380)=""/180, 0xb4}, {0x0}, {0x0}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f0000003680)=""/197, 0xc5}, {&(0x7f0000001300)=""/63, 0x3f}], 0x6}}], 0x2, 0x34000, 0x0) 1.18944846s ago: executing program 2 (id=2295): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x10, 0x8, 0x2}, {0x1, 0x3, 0x5}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 299.000615ms ago: executing program 0 (id=2296): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f02", 0x8}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x40400c0) 284.723995ms ago: executing program 1 (id=2297): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x3c, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", 0x0, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x50) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="9800000010000104fcffffff0000000000000000", @ANYRES32=r3, @ANYBLOB="0025000000000000780012800b000100697036746e6c00006800028006000f00"], 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 164.316378ms ago: executing program 0 (id=2298): socket(0x200000000000011, 0x2, 0xd) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200000000000000084000000020000000004"], 0x50, 0x810}, 0x4000040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010003000000140012800b0001006d6163736563000078ff028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n'], 0x44}}, 0x0) 25.73319ms ago: executing program 4 (id=2299): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r1, &(0x7f0000009500)=[{&(0x7f00000092c0)=""/71, 0x47}], 0x1) 5.09075ms ago: executing program 1 (id=2300): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) writev(r0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(r2) 0s ago: executing program 2 (id=2301): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') socket$netlink(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) kernel console output (not intermixed with test programs): ady [ 64.833744][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.844325][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.856618][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.902605][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.913197][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.922632][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.931359][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.940707][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.949716][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.961115][ T4265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.970034][ T4265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.979080][ T4265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.988003][ T4265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.008288][ T4270] device veth1_vlan entered promiscuous mode [ 65.046817][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.052293][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.057881][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.074159][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.082805][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.091355][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.099502][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.116181][ T4276] device veth0_vlan entered promiscuous mode [ 65.126035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.134804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.168728][ T4264] device veth0_vlan entered promiscuous mode [ 65.176302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.184906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.207034][ T4276] device veth1_vlan entered promiscuous mode [ 65.240123][ T4264] device veth1_vlan entered promiscuous mode [ 65.267822][ T4270] device veth0_macvtap entered promiscuous mode [ 65.282629][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.291140][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.299630][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.307827][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.316935][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.328018][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.337174][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.355961][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.372442][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.391966][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 65.398010][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 65.411369][ T4276] device veth0_macvtap entered promiscuous mode [ 65.419888][ T4270] device veth1_macvtap entered promiscuous mode [ 65.431598][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.446081][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.457312][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.470473][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.472192][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 65.479167][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 65.484647][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 65.509587][ T4264] device veth0_macvtap entered promiscuous mode [ 65.519746][ T4276] device veth1_macvtap entered promiscuous mode [ 65.536158][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.557534][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.574526][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.612099][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.625730][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.637077][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.638507][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.656008][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.667580][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.679018][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.681243][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.699617][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.708254][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.717204][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.725498][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.734087][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.743100][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.751518][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.760386][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.768583][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.777057][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.785938][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.813323][ T4270] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.823373][ T4270] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.833042][ T4270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.842059][ T4270] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.878486][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.893325][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.903792][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.915129][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.925137][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.936020][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.950768][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.961556][ T4264] device veth1_macvtap entered promiscuous mode [ 65.976597][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.985619][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.997146][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.007864][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.018063][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.028642][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.040264][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.050856][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.063132][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.077450][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.107281][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.138609][ T4276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.161754][ T4276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.176774][ T4276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.189345][ T4276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.243352][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.255875][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.266457][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.277748][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.288020][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.300001][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.310338][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.322159][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.333356][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.361242][ T4388] device syzkaller0 entered promiscuous mode [ 66.371365][ T4391] tipc: Started in network mode [ 66.378876][ T4391] tipc: Node identity 8ee7d08193ab, cluster identity 4711 [ 66.386979][ T4391] tipc: Enabled bearer , priority 0 [ 66.396576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.409326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.431021][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.443414][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.454282][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.465074][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.474984][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.485606][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.496660][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.508488][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.520783][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.565036][ T4391] tipc: Resetting bearer [ 66.571362][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.589813][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.612753][ T4264] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.621480][ T4264] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.631856][ T4264] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.640648][ T4264] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.663864][ T4387] tipc: Resetting bearer [ 66.689721][ T4387] tipc: Disabling bearer [ 66.719815][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.734557][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.778507][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.795054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.814431][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.831137][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.875121][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.892112][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.906194][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.930490][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.947408][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.958284][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.976340][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.979300][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.025352][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.060675][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.072847][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.081883][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.352454][ T4408] tipc: Started in network mode [ 67.367591][ T4408] tipc: Node identity , cluster identity 4711 [ 67.387823][ T4408] tipc: Failed to obtain node identity [ 67.397949][ T4408] tipc: Enabling of bearer rejected, failed to enable media [ 67.411322][ T4417] Zero length message leads to an empty skb [ 67.442510][ T4418] device syzkaller0 entered promiscuous mode [ 67.491142][ T4275] Bluetooth: hci2: command 0x0419 tx timeout [ 67.491162][ T4277] Bluetooth: hci4: command 0x0419 tx timeout [ 67.552490][ T4275] Bluetooth: hci1: command 0x0419 tx timeout [ 67.552518][ T4277] Bluetooth: hci3: command 0x0419 tx timeout [ 67.558506][ T4275] Bluetooth: hci0: command 0x0419 tx timeout [ 67.832734][ T4428] Bluetooth: MGMT ver 1.22 [ 68.018094][ T4436] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19'. [ 68.637956][ T4467] tipc: Enabled bearer , priority 0 [ 68.657873][ T4467] device syzkaller0 entered promiscuous mode [ 68.726195][ T4467] tipc: Resetting bearer [ 68.740807][ T4465] tipc: Resetting bearer [ 68.778412][ T4465] tipc: Disabling bearer [ 69.297161][ T4484] netlink: 16 bytes leftover after parsing attributes in process `syz.2.37'. [ 69.915871][ T4513] netlink: 20 bytes leftover after parsing attributes in process `syz.2.46'. [ 69.941067][ T4513] device team_slave_0 entered promiscuous mode [ 69.947497][ T4513] device team_slave_1 entered promiscuous mode [ 69.957706][ T4513] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 69.970364][ T4513] device team_slave_0 left promiscuous mode [ 69.976409][ T4513] device team_slave_1 left promiscuous mode [ 70.101330][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 70.436932][ T4529] syz.2.54 uses obsolete (PF_INET,SOCK_PACKET) [ 71.155344][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.161875][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.179043][ T4553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.62'. [ 71.199910][ T4553] device team_slave_0 entered promiscuous mode [ 71.206180][ T4553] device team_slave_1 entered promiscuous mode [ 71.242282][ T4553] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 71.251143][ T4553] device team_slave_0 left promiscuous mode [ 71.257148][ T4553] device team_slave_1 left promiscuous mode [ 71.292532][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 71.580363][ T4569] netlink: 16 bytes leftover after parsing attributes in process `syz.0.69'. [ 73.239848][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 73.255738][ T4604] netlink: 20 bytes leftover after parsing attributes in process `syz.3.80'. [ 73.286493][ T4604] device team_slave_0 entered promiscuous mode [ 73.292867][ T4604] device team_slave_1 entered promiscuous mode [ 73.318009][ T4604] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 73.356623][ T4604] device team_slave_0 left promiscuous mode [ 73.362680][ T4604] device team_slave_1 left promiscuous mode [ 73.519941][ T4615] netlink: 16 bytes leftover after parsing attributes in process `syz.4.84'. [ 73.925740][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 75.123594][ T4654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.100'. [ 75.445708][ T4650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.98'. [ 75.459213][ T4650] device team_slave_0 entered promiscuous mode [ 75.465452][ T4650] device team_slave_1 entered promiscuous mode [ 75.473045][ T4650] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 75.495014][ T4650] device team_slave_0 left promiscuous mode [ 75.500988][ T4650] device team_slave_1 left promiscuous mode [ 75.702528][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 75.878899][ T4678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.109'. [ 75.895931][ T4678] device vlan2 entered promiscuous mode [ 75.902183][ T4678] device team0 entered promiscuous mode [ 75.915996][ T4678] device team_slave_0 entered promiscuous mode [ 75.932864][ T4678] device team_slave_1 entered promiscuous mode [ 75.981918][ T4682] tipc: Started in network mode [ 75.986915][ T4682] tipc: Node identity , cluster identity 4711 [ 75.993478][ T4682] tipc: Failed to obtain node identity [ 75.999100][ T4682] tipc: Enabling of bearer rejected, failed to enable media [ 76.009953][ T4682] device syzkaller0 entered promiscuous mode [ 76.276044][ T2038] cfg80211: failed to load regulatory.db [ 76.539359][ T4695] tipc: Started in network mode [ 76.561790][ T4695] tipc: Node identity 5ee147f0a0cc, cluster identity 4711 [ 76.612964][ T4695] tipc: Enabled bearer , priority 0 [ 76.627799][ T4698] device syzkaller0 entered promiscuous mode [ 76.714906][ T4700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.118'. [ 76.741234][ T4700] device team_slave_0 entered promiscuous mode [ 76.747514][ T4700] device team_slave_1 entered promiscuous mode [ 76.787537][ T4700] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 76.817118][ T4700] device team_slave_0 left promiscuous mode [ 76.823159][ T4700] device team_slave_1 left promiscuous mode [ 76.902326][ T4695] tipc: Resetting bearer [ 76.928586][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 77.053972][ T4694] tipc: Resetting bearer [ 77.124228][ T4694] tipc: Disabling bearer [ 77.154818][ T4712] netlink: 20 bytes leftover after parsing attributes in process `syz.1.122'. [ 77.207021][ T4712] device vlan2 entered promiscuous mode [ 77.221927][ T4712] device team0 entered promiscuous mode [ 77.233871][ T4712] device team_slave_0 entered promiscuous mode [ 77.301795][ T4712] device team_slave_1 entered promiscuous mode [ 77.370679][ T4720] tipc: Started in network mode [ 77.379889][ T4720] tipc: Node identity , cluster identity 4711 [ 77.414820][ T4720] tipc: Failed to obtain node identity [ 77.435016][ T4720] tipc: Enabling of bearer rejected, failed to enable media [ 77.558694][ T4722] device syzkaller0 entered promiscuous mode [ 77.828322][ T4744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'. [ 79.034990][ T4756] netlink: 20 bytes leftover after parsing attributes in process `syz.1.135'. [ 79.059677][ T4756] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 79.213157][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 79.229260][ T4761] tipc: Started in network mode [ 79.235237][ T4761] tipc: Node identity 86705131e98c, cluster identity 4711 [ 79.242917][ T4761] tipc: Enabled bearer , priority 0 [ 79.250859][ T4761] device syzkaller0 entered promiscuous mode [ 79.327193][ T4761] tipc: Resetting bearer [ 79.360554][ T4760] tipc: Resetting bearer [ 79.398793][ T4760] tipc: Disabling bearer [ 79.449129][ T4769] loop3: detected capacity change from 0 to 1024 [ 79.825726][ T4774] ceph: No source [ 80.141377][ T4775] overlayfs: failed to resolve './file0': -2 [ 80.692052][ T4780] overlayfs: failed to resolve './file0': -2 [ 81.387222][ T4788] loop2: detected capacity change from 0 to 1024 [ 82.167334][ T4795] overlayfs: failed to resolve './file0': -2 [ 82.705269][ T4806] ceph: No source [ 83.302441][ T4814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.150'. [ 83.334539][ T4814] device team_slave_0 entered promiscuous mode [ 83.340771][ T4814] device team_slave_1 entered promiscuous mode [ 83.368794][ T4814] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 83.389836][ T4814] device team_slave_0 left promiscuous mode [ 83.395887][ T4814] device team_slave_1 left promiscuous mode [ 83.457867][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 83.466096][ T4824] tipc: Enabled bearer , priority 0 [ 83.487687][ T4827] netlink: 20 bytes leftover after parsing attributes in process `syz.3.153'. [ 83.509909][ T4827] device vlan2 entered promiscuous mode [ 83.516897][ T4827] device team0 entered promiscuous mode [ 83.544433][ T4827] device team_slave_0 entered promiscuous mode [ 83.550849][ T4827] device team_slave_1 entered promiscuous mode [ 83.559489][ T4819] device syzkaller0 entered promiscuous mode [ 83.631459][ T4823] tipc: Resetting bearer [ 84.505783][ T14] tipc: Node number set to 4264380400 [ 85.110725][ T4818] tipc: Resetting bearer [ 85.126247][ T4818] tipc: Disabling bearer [ 85.133808][ T4837] tipc: Enabling of bearer rejected, failed to enable media [ 85.297107][ T4856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 85.500535][ T4866] IPv6: sit1: Disabled Multicast RS [ 85.625425][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 85.843460][ T4878] netlink: 20 bytes leftover after parsing attributes in process `syz.0.167'. [ 85.889101][ T4878] device team_slave_0 entered promiscuous mode [ 85.895413][ T4878] device team_slave_1 entered promiscuous mode [ 85.932885][ T4878] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 85.951596][ T4878] device team_slave_0 left promiscuous mode [ 85.957645][ T4878] device team_slave_1 left promiscuous mode [ 86.226603][ T4894] tipc: Enabled bearer , priority 0 [ 86.267033][ T4894] device syzkaller0 entered promiscuous mode [ 86.297089][ T4896] tipc: Enabled bearer , priority 0 [ 86.318180][ T4896] device syzkaller0 entered promiscuous mode [ 86.367889][ T4896] tipc: Resetting bearer [ 86.409987][ T4893] tipc: Resetting bearer [ 86.466894][ T4893] tipc: Disabling bearer [ 86.513051][ T4895] tipc: Resetting bearer [ 86.565608][ T4895] tipc: Disabling bearer [ 86.654185][ T4904] netlink: 20 bytes leftover after parsing attributes in process `syz.4.175'. [ 86.686549][ T4904] device vlan2 entered promiscuous mode [ 87.417615][ T4936] tipc: Started in network mode [ 87.449710][ T4936] tipc: Node identity 36ca3e3cdfaa, cluster identity 4711 [ 87.460988][ T4936] tipc: Enabled bearer , priority 0 [ 87.469352][ T4940] device syzkaller0 entered promiscuous mode [ 87.495015][ T4935] tipc: Resetting bearer [ 87.518797][ T4935] tipc: Disabling bearer [ 87.529536][ T4941] tipc: Enabled bearer , priority 0 [ 87.537167][ T4941] device syzkaller0 entered promiscuous mode [ 87.573406][ T4941] tipc: Resetting bearer [ 87.592230][ T4937] tipc: Resetting bearer [ 87.636713][ T4937] tipc: Disabling bearer [ 87.860843][ T4953] netlink: 20 bytes leftover after parsing attributes in process `syz.1.192'. [ 88.253157][ T4974] tipc: Enabled bearer , priority 0 [ 88.260783][ T4974] device syzkaller0 entered promiscuous mode [ 88.294936][ T4972] tipc: Resetting bearer [ 88.330920][ T4972] tipc: Disabling bearer [ 88.553568][ T4986] tipc: Enabled bearer , priority 0 [ 88.561182][ T4986] device syzkaller0 entered promiscuous mode [ 88.603992][ T4986] tipc: Resetting bearer [ 88.628611][ T4985] tipc: Resetting bearer [ 88.678508][ T4985] tipc: Disabling bearer [ 88.867173][ T4994] netlink: 20 bytes leftover after parsing attributes in process `syz.4.206'. [ 90.179762][ T5039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.219'. [ 91.407848][ T5082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.234'. [ 91.729410][ T5096] netlink: 'syz.1.240': attribute type 11 has an invalid length. [ 91.793342][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 91.824883][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 91.856033][ T5096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.892371][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 91.932383][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 91.952978][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 91.969677][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 91.987613][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 92.003728][ T5103] tipc: Enabled bearer , priority 0 [ 92.017310][ T5103] device syzkaller0 entered promiscuous mode [ 92.037090][ T5103] tipc: Resetting bearer [ 92.065314][ T5102] tipc: Resetting bearer [ 92.083021][ T5102] tipc: Disabling bearer [ 92.310259][ T5116] netlink: 20 bytes leftover after parsing attributes in process `syz.4.247'. [ 92.335044][ T5116] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 92.795826][ T5133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.254'. [ 92.988065][ T5140] netlink: 20 bytes leftover after parsing attributes in process `syz.1.256'. [ 93.190790][ T5146] netlink: 20 bytes leftover after parsing attributes in process `syz.3.259'. [ 93.214483][ T5146] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 93.263029][ T5148] tipc: Enabled bearer , priority 0 [ 93.270397][ T5148] device syzkaller0 entered promiscuous mode [ 93.310575][ T5148] tipc: Resetting bearer [ 93.329240][ T5147] tipc: Resetting bearer [ 93.359584][ T5147] tipc: Disabling bearer [ 93.512627][ T5159] netlink: 'syz.2.263': attribute type 11 has an invalid length. [ 93.596572][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 93.648491][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 93.672179][ T5163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.689303][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 93.700587][ T5168] ax25_connect(): syz.1.267 uses autobind, please contact jreuter@yaina.de [ 93.721943][ T5166] netlink: 32 bytes leftover after parsing attributes in process `syz.0.266'. [ 93.740332][ T5168] ax25_connect(): syz.1.267 uses autobind, please contact jreuter@yaina.de [ 93.783329][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 93.810838][ T5170] netlink: 20 bytes leftover after parsing attributes in process `syz.3.268'. [ 93.840931][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 93.890278][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 93.928228][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 94.212928][ T5185] netlink: 20 bytes leftover after parsing attributes in process `syz.1.274'. [ 94.227213][ T5185] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 94.369864][ T5187] tipc: Enabled bearer , priority 0 [ 94.378428][ T5187] device syzkaller0 entered promiscuous mode [ 94.392205][ T5187] tipc: Resetting bearer [ 94.399336][ T5186] tipc: Resetting bearer [ 94.414643][ T5186] tipc: Disabling bearer [ 94.656386][ T5194] xt_hashlimit: size too large, truncated to 1048576 [ 95.036179][ T5202] netlink: 32 bytes leftover after parsing attributes in process `syz.0.280'. [ 95.741776][ T5215] tipc: Enabled bearer , priority 0 [ 95.801417][ T5215] device syzkaller0 entered promiscuous mode [ 95.824489][ T5215] tipc: Resetting bearer [ 96.588730][ T5214] tipc: Resetting bearer [ 98.158649][ T5214] tipc: Disabling bearer [ 98.177580][ T5219] tipc: Started in network mode [ 98.182687][ T5219] tipc: Node identity , cluster identity 4711 [ 98.190161][ T5219] tipc: Failed to obtain node identity [ 98.241358][ T5219] tipc: Enabling of bearer rejected, failed to enable media [ 98.300327][ T5227] device syzkaller0 entered promiscuous mode [ 98.475486][ T5250] netlink: 20 bytes leftover after parsing attributes in process `syz.2.293'. [ 98.512402][ T5250] device team_slave_0 entered promiscuous mode [ 98.518682][ T5250] device team_slave_1 entered promiscuous mode [ 98.543525][ T5250] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 98.568633][ T5250] device team_slave_0 left promiscuous mode [ 98.574711][ T5250] device team_slave_1 left promiscuous mode [ 99.475035][ T5269] Driver unsupported XDP return value 0 on prog (id 54) dev N/A, expect packet loss! [ 99.961208][ T5256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 99.970246][ T5256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 99.979097][ T5256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 99.987914][ T5256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 99.996723][ T5256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 100.005540][ T5256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 100.014804][ T5256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 100.023745][ T5256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 100.032859][ T5256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 100.245411][ T5273] xt_hashlimit: size too large, truncated to 1048576 [ 100.614111][ T5292] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 102.252946][ T5306] tipc: Enabled bearer , priority 0 [ 102.300037][ T5307] device syzkaller0 entered promiscuous mode [ 102.518254][ T5307] tipc: Resetting bearer [ 103.261722][ T14] tipc: Node number set to 491573377 [ 104.769184][ T5307] tipc: Disabling bearer [ 104.984231][ T5375] tipc: Enabled bearer , priority 0 [ 105.022331][ T5375] device syzkaller0 entered promiscuous mode [ 105.123411][ T5375] tipc: Resetting bearer [ 105.142042][ T5374] tipc: Resetting bearer [ 105.232646][ T5374] tipc: Disabling bearer [ 105.379022][ T5390] __nla_validate_parse: 45 callbacks suppressed [ 105.379037][ T5390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.335'. [ 105.683182][ T5404] netlink: 20 bytes leftover after parsing attributes in process `syz.3.340'. [ 105.709843][ T5404] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 106.187233][ T5421] tipc: Enabled bearer , priority 0 [ 106.223111][ T5421] device syzkaller0 entered promiscuous mode [ 106.312283][ T5421] tipc: Resetting bearer [ 106.384819][ T5420] tipc: Resetting bearer [ 106.454574][ T5420] tipc: Disabling bearer [ 106.569276][ T5435] tipc: Enabled bearer , priority 0 [ 106.578608][ T5435] device syzkaller0 entered promiscuous mode [ 106.683949][ T5434] tipc: Resetting bearer [ 106.724593][ T5434] tipc: Disabling bearer [ 107.182495][ T5459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.364'. [ 107.228971][ T5462] netlink: 68 bytes leftover after parsing attributes in process `syz.4.365'. [ 107.461009][ T5471] tipc: Enabled bearer , priority 0 [ 107.488697][ T5471] device syzkaller0 entered promiscuous mode [ 107.930996][ T5470] tipc: Resetting bearer [ 107.972841][ T5470] tipc: Disabling bearer [ 108.057862][ T5495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.379'. [ 108.188781][ T5497] netlink: 68 bytes leftover after parsing attributes in process `syz.0.381'. [ 108.427113][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 108.687255][ T5518] tipc: Enabled bearer , priority 0 [ 108.712993][ T5518] device syzkaller0 entered promiscuous mode [ 108.817038][ T5517] tipc: Resetting bearer [ 108.876577][ T5517] tipc: Disabling bearer [ 108.906011][ T5526] netlink: 28 bytes leftover after parsing attributes in process `syz.3.395'. [ 109.507212][ T5552] netlink: 32 bytes leftover after parsing attributes in process `syz.1.406'. [ 109.579307][ T5557] tipc: Enabled bearer , priority 0 [ 109.595792][ T5557] device syzkaller0 entered promiscuous mode [ 109.641936][ T5560] netlink: 28 bytes leftover after parsing attributes in process `syz.1.409'. [ 109.663734][ T5556] tipc: Resetting bearer [ 109.726481][ T5556] tipc: Disabling bearer [ 110.097006][ T5574] tipc: Enabled bearer , priority 0 [ 110.133181][ T5574] device syzkaller0 entered promiscuous mode [ 110.193615][ T5574] tipc: Resetting bearer [ 110.228605][ T5573] tipc: Resetting bearer [ 110.270860][ T5573] tipc: Disabling bearer [ 110.304753][ T5583] tipc: Enabled bearer , priority 0 [ 110.446107][ T5583] device syzkaller0 entered promiscuous mode [ 110.480190][ T5583] tipc: Resetting bearer [ 110.508528][ T5582] tipc: Resetting bearer [ 111.381851][ T14] tipc: Node number set to 3915398716 [ 111.796888][ T5582] tipc: Disabling bearer [ 111.822417][ T5594] tipc: Enabling of bearer rejected, failed to enable media [ 112.000983][ T5613] team0: No ports can be present during mode change [ 112.166536][ T5620] netlink: 'syz.1.432': attribute type 10 has an invalid length. [ 112.215861][ T5620] netlink: 40 bytes leftover after parsing attributes in process `syz.1.432'. [ 112.279964][ T5620] device geneve0 entered promiscuous mode [ 112.289549][ T5620] team0: Port device geneve0 added [ 112.303727][ T5626] tipc: Started in network mode [ 112.326796][ T5626] tipc: Node identity 0ed1750ee59c, cluster identity 4711 [ 112.338640][ T5626] tipc: Enabled bearer , priority 0 [ 112.361342][ T5630] device syzkaller0 entered promiscuous mode [ 112.370913][ T5620] syz.1.432 (5620) used greatest stack depth: 20576 bytes left [ 112.456114][ T5630] tipc: Resetting bearer [ 112.509604][ T5634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.438'. [ 112.534466][ T5625] tipc: Resetting bearer [ 112.581970][ T5625] tipc: Disabling bearer [ 112.626359][ T5640] tipc: Enabled bearer , priority 0 [ 112.647195][ T5640] device syzkaller0 entered promiscuous mode [ 112.697896][ T5638] tipc: Resetting bearer [ 112.737909][ T5638] tipc: Disabling bearer [ 113.844035][ T5682] tipc: Enabled bearer , priority 0 [ 113.877370][ T5682] tipc: Resetting bearer [ 113.910370][ T5681] tipc: Disabling bearer [ 114.096777][ T5691] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 114.576420][ T5705] tipc: Enabled bearer , priority 0 [ 114.632122][ T5705] device syzkaller0 entered promiscuous mode [ 114.728153][ T5705] tipc: Resetting bearer [ 114.941500][ T5704] tipc: Resetting bearer [ 115.016674][ T5704] tipc: Disabling bearer [ 115.113414][ T5724] netlink: 28 bytes leftover after parsing attributes in process `syz.0.475'. [ 116.137856][ T5759] netlink: 'syz.3.490': attribute type 10 has an invalid length. [ 116.153309][ T5759] netlink: 40 bytes leftover after parsing attributes in process `syz.3.490'. [ 116.244950][ T5759] device geneve0 entered promiscuous mode [ 116.255638][ T5759] team0: Port device geneve0 added [ 116.269103][ T5762] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 116.420709][ T5764] tipc: Enabled bearer , priority 0 [ 116.504842][ T5764] tipc: Resetting bearer [ 116.554981][ T5763] tipc: Disabling bearer [ 117.027070][ T5784] netlink: 68 bytes leftover after parsing attributes in process `syz.1.501'. [ 117.439191][ T5801] device syzkaller0 entered promiscuous mode [ 117.526295][ T5803] netlink: 'syz.1.510': attribute type 10 has an invalid length. [ 117.573124][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.583804][ T5803] bond0: (slave team0): Enslaving as an active interface with an up link [ 117.602425][ T5806] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 118.084957][ T5817] netlink: 68 bytes leftover after parsing attributes in process `syz.2.516'. [ 119.386766][ T5850] netlink: 68 bytes leftover after parsing attributes in process `syz.0.530'. [ 121.252938][ T5913] netlink: 'syz.1.553': attribute type 1 has an invalid length. [ 121.430407][ T5906] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.095788][ T5939] tipc: Enabling of bearer rejected, failed to enable media [ 122.433197][ T5906] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.654021][ T5906] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.827950][ T5906] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.878969][ T5960] tipc: Enabled bearer , priority 0 [ 122.898456][ T5960] device syzkaller0 entered promiscuous mode [ 123.008483][ T5960] tipc: Resetting bearer [ 123.052886][ T5906] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.068728][ T5958] tipc: Resetting bearer [ 123.115441][ T5958] tipc: Disabling bearer [ 123.144584][ T5906] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.167356][ T5906] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.208034][ T5906] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.331141][ T5978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.574'. [ 123.381269][ T5979] netlink: 'syz.3.575': attribute type 1 has an invalid length. [ 123.633944][ T5987] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 123.999301][ T5998] tipc: Enabled bearer , priority 0 [ 124.047122][ T5998] device syzkaller0 entered promiscuous mode [ 124.102839][ T5998] tipc: Resetting bearer [ 124.126782][ T5997] tipc: Resetting bearer [ 124.167068][ T5997] tipc: Disabling bearer [ 124.314252][ T6021] netlink: 20 bytes leftover after parsing attributes in process `syz.3.592'. [ 127.255439][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.629'. [ 127.999179][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.642'. [ 130.141486][ T6224] netlink: 20 bytes leftover after parsing attributes in process `syz.3.667'. [ 130.160717][ T6224] device dummy0 entered promiscuous mode [ 130.554738][ T6244] tipc: Enabling of bearer rejected, failed to enable media [ 131.265044][ T6269] netlink: 'syz.2.681': attribute type 1 has an invalid length. [ 131.641992][ T6279] netlink: 24 bytes leftover after parsing attributes in process `syz.2.687'. [ 131.811187][ T6283] netlink: 44 bytes leftover after parsing attributes in process `syz.1.689'. [ 131.849932][ T6283] netlink: 24 bytes leftover after parsing attributes in process `syz.1.689'. [ 131.874517][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.690'. [ 131.886549][ T6287] netlink: 20 bytes leftover after parsing attributes in process `syz.4.690'. [ 131.900638][ T6287] device dummy0 entered promiscuous mode [ 132.603898][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.610372][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.386545][ T6345] netlink: 'syz.2.709': attribute type 1 has an invalid length. [ 133.706641][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.713'. [ 133.736249][ T6354] device dummy0 entered promiscuous mode [ 133.803600][ T6354] device dummy0 left promiscuous mode [ 135.672363][ T6418] netlink: 24 bytes leftover after parsing attributes in process `syz.0.738'. [ 136.136523][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.745'. [ 136.171781][ T6443] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 136.200775][ T6443] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.330079][ T6451] netlink: 'syz.3.751': attribute type 6 has an invalid length. [ 137.114475][ T6477] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 137.284373][ T6488] xt_hashlimit: size too large, truncated to 1048576 [ 139.054307][ T6514] tipc: Enabled bearer , priority 0 [ 139.093313][ T6514] tipc: Resetting bearer [ 139.166017][ T6513] tipc: Disabling bearer [ 139.437641][ T6527] netlink: 'syz.3.784': attribute type 12 has an invalid length. [ 139.518929][ T6527] IPVS: set_ctl: invalid protocol: 60 172.30.1.4:19999 [ 139.637330][ T6532] netlink: 'syz.4.786': attribute type 9 has an invalid length. [ 139.645538][ T6532] netlink: 'syz.4.786': attribute type 7 has an invalid length. [ 139.655180][ T6532] netlink: 'syz.4.786': attribute type 8 has an invalid length. [ 139.790206][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.2.789'. [ 140.080245][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 140.671806][ T6555] netlink: 'syz.3.796': attribute type 1 has an invalid length. [ 140.908440][ T6555] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.990085][ T6556] bond1: (slave geneve2): making interface the new active one [ 141.036953][ T6556] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 141.103516][ T6557] device bond1 entered promiscuous mode [ 141.124354][ T6557] device geneve2 entered promiscuous mode [ 141.159355][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.801'. [ 141.211224][ T6572] device gretap0 entered promiscuous mode [ 141.501884][ T6584] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 142.349938][ T6612] netlink: 20 bytes leftover after parsing attributes in process `syz.3.819'. [ 142.411544][ T6615] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 142.961446][ T6639] netlink: 56 bytes leftover after parsing attributes in process `syz.3.829'. [ 143.140973][ T6644] xt_CT: You must specify a L4 protocol and not use inversions on it [ 143.451305][ T6659] device syz_tun entered promiscuous mode [ 143.492650][ T6659] device vlan3 entered promiscuous mode [ 143.532247][ T6662] netlink: 'syz.2.835': attribute type 6 has an invalid length. [ 143.753046][ T6670] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 144.359596][ T6688] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 144.664686][ T6703] netlink: 68 bytes leftover after parsing attributes in process `syz.4.855'. [ 144.867008][ T6714] netlink: 'syz.2.859': attribute type 1 has an invalid length. [ 144.909180][ T6714] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.927777][ T6714] bond1: (slave geneve2): making interface the new active one [ 144.937364][ T6714] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 144.946292][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 144.985925][ T6714] device bond1 entered promiscuous mode [ 145.034233][ T6714] device geneve2 entered promiscuous mode [ 145.738350][ T6754] netlink: 68 bytes leftover after parsing attributes in process `syz.0.873'. [ 146.275801][ T6786] netlink: 20 bytes leftover after parsing attributes in process `syz.0.888'. [ 146.285226][ T6785] netlink: 'syz.1.889': attribute type 6 has an invalid length. [ 146.293564][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.888'. [ 146.386614][ T6789] netlink: 68 bytes leftover after parsing attributes in process `syz.2.890'. [ 146.508019][ T6794] tipc: Enabled bearer , priority 0 [ 146.519332][ T6794] device syzkaller0 entered promiscuous mode [ 146.569660][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.892'. [ 146.585912][ T6794] tipc: Resetting bearer [ 146.612809][ T6792] tipc: Resetting bearer [ 146.642572][ T6792] tipc: Disabling bearer [ 146.706050][ T6798] netlink: 'syz.2.895': attribute type 1 has an invalid length. [ 146.735732][ T6798] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.769102][ T6805] device bond2 entered promiscuous mode [ 146.924799][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.900'. [ 147.233196][ T6825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.907'. [ 147.236927][ T6821] netlink: 40 bytes leftover after parsing attributes in process `syz.0.905'. [ 147.483037][ T6833] tipc: Enabled bearer , priority 0 [ 147.495865][ T6833] device syzkaller0 entered promiscuous mode [ 147.598910][ T6833] tipc: Resetting bearer [ 147.624876][ T6832] tipc: Resetting bearer [ 147.679342][ T6832] tipc: Disabling bearer [ 147.780838][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.919'. [ 147.913521][ T6853] netlink: 28 bytes leftover after parsing attributes in process `syz.1.920'. [ 147.937668][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.920'. [ 147.958540][ T6853] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 149.263474][ T6905] netlink: 'syz.2.941': attribute type 1 has an invalid length. [ 149.284614][ T6905] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.474221][ T6914] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 150.074629][ T6941] netlink: 'syz.0.958': attribute type 1 has an invalid length. [ 150.158347][ T6941] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.196917][ T6945] bond1: (slave geneve2): making interface the new active one [ 150.207249][ T6945] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 150.243794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 150.292514][ T6945] syz.0.958 (6945) used greatest stack depth: 19840 bytes left [ 150.744991][ T6972] tipc: Enabled bearer , priority 0 [ 150.869283][ T6972] device syzkaller0 entered promiscuous mode [ 150.897993][ T6983] netlink: 'syz.1.976': attribute type 6 has an invalid length. [ 151.405040][ T7001] IPVS: set_ctl: invalid protocol: 60 172.30.1.5:19999 [ 151.861966][ T4316] tipc: Node number set to 1878806833 [ 151.907786][ T7011] netlink: 'syz.3.987': attribute type 6 has an invalid length. [ 152.723898][ T6985] tipc: Resetting bearer [ 152.729904][ T6986] netlink: 'syz.1.977': attribute type 1 has an invalid length. [ 152.752822][ T6998] netlink: 'syz.4.982': attribute type 12 has an invalid length. [ 152.760980][ T6970] tipc: Resetting bearer [ 152.787550][ T6970] tipc: Disabling bearer [ 152.824439][ T7006] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 152.889929][ T7013] __nla_validate_parse: 2 callbacks suppressed [ 152.889942][ T7013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.988'. [ 153.557462][ T7040] netlink: 'syz.0.1000': attribute type 1 has an invalid length. [ 153.589842][ T7040] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.628002][ T7040] device bond2 entered promiscuous mode [ 153.934600][ T7054] netlink: 'syz.3.1006': attribute type 6 has an invalid length. [ 154.016268][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1007'. [ 154.208421][ T7063] device syz_tun entered promiscuous mode [ 154.224661][ T7063] device vlan3 entered promiscuous mode [ 154.404294][ T7071] netlink: 'syz.0.1014': attribute type 1 has an invalid length. [ 154.497309][ T7071] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.544092][ T7075] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1016'. [ 154.600104][ T7078] device bond3 entered promiscuous mode [ 154.682730][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 155.150561][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 155.179918][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.189471][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.234843][ T7096] device bridge_slave_0 left promiscuous mode [ 155.242359][ T7096] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.293492][ T7096] device bridge_slave_1 left promiscuous mode [ 155.332222][ T7096] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.398020][ T7096] bond0: (slave bond_slave_0): Releasing backup interface [ 155.429914][ T7096] bond0: (slave bond_slave_1): Releasing backup interface [ 155.529903][ T7096] team0: Port device team_slave_0 removed [ 155.588511][ T7096] team0: Port device team_slave_1 removed [ 155.602959][ T7096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.630536][ T7096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.656812][ T7096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.671426][ T7096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.699769][ T7096] bond1: (slave geneve2): Releasing active interface [ 155.706604][ T7096] device geneve2 left promiscuous mode [ 155.915199][ T7132] netlink: 'syz.1.1039': attribute type 6 has an invalid length. [ 155.968198][ T7135] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 157.005729][ T7186] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1064'. [ 157.967972][ T7212] netlink: 'syz.4.1074': attribute type 4 has an invalid length. [ 158.001844][ T7212] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1074'. [ 158.031427][ T7212] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 158.947264][ T7250] netlink: 'syz.0.1092': attribute type 29 has an invalid length. [ 158.957793][ T7250] netlink: 'syz.0.1092': attribute type 29 has an invalid length. [ 158.970613][ T7250] netlink: 'syz.0.1092': attribute type 29 has an invalid length. [ 158.986686][ T7250] netlink: 'syz.0.1092': attribute type 29 has an invalid length. [ 159.375938][ T7262] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1097'. [ 159.681049][ T7277] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1101'. [ 159.703088][ T7277] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1101'. [ 159.729430][ T7272] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1101'. [ 159.752180][ T7277] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1101'. [ 159.973918][ T7287] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1106'. [ 160.138492][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1111'. [ 160.260231][ T7300] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1112'. [ 160.316190][ T7302] netlink: 'syz.0.1114': attribute type 1 has an invalid length. [ 160.357518][ T7302] 8021q: adding VLAN 0 to HW filter on device bond4 [ 160.377315][ T7309] device bond4 entered promiscuous mode [ 160.449195][ T7312] 8021q: VLANs not supported on ip6tnl0 [ 160.787097][ T7328] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1125'. [ 161.579803][ T7361] netlink: 'syz.2.1141': attribute type 12 has an invalid length. [ 161.594798][ T7361] IPVS: set_ctl: invalid protocol: 60 172.30.1.3:19999 [ 162.097118][ T7380] 8021q: VLANs not supported on ip6tnl0 [ 162.117700][ T7378] device team_slave_0 entered promiscuous mode [ 162.123971][ T7378] device team_slave_1 entered promiscuous mode [ 162.132497][ T7378] device team_slave_0 left promiscuous mode [ 162.138454][ T7378] device team_slave_1 left promiscuous mode [ 162.806951][ T7406] netlink: 'syz.2.1161': attribute type 29 has an invalid length. [ 162.822296][ T7406] netlink: 'syz.2.1161': attribute type 29 has an invalid length. [ 162.831428][ T7406] netlink: 'syz.2.1161': attribute type 29 has an invalid length. [ 162.978392][ T7412] netlink: 'syz.3.1163': attribute type 6 has an invalid length. [ 163.519558][ T7428] __nla_validate_parse: 3 callbacks suppressed [ 163.519574][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1172'. [ 163.610910][ T7433] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1173'. [ 163.650769][ T7433] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.1173'. [ 163.699502][ T7433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1173'. [ 163.936518][ T7444] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1179'. [ 164.360375][ T7463] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.386495][ T7463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.415691][ T7463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.940858][ T7479] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1193'. [ 165.084432][ T7485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1196'. [ 165.384510][ T7500] netlink: 'syz.2.1202': attribute type 6 has an invalid length. [ 165.482350][ T7502] tipc: Enabled bearer , priority 0 [ 165.592957][ T7502] device syzkaller0 entered promiscuous mode [ 165.970072][ T7525] netlink: 'syz.2.1213': attribute type 29 has an invalid length. [ 167.350775][ T7512] 8021q: VLANs not supported on ip6gre0 [ 167.362222][ T7515] tipc: Resetting bearer [ 167.378374][ T7525] netlink: 'syz.2.1213': attribute type 29 has an invalid length. [ 167.399830][ T7501] tipc: Resetting bearer [ 167.475059][ T7501] tipc: Disabling bearer [ 167.500922][ T7543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1216'. [ 167.685691][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1220'. [ 167.735067][ T7549] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1219'. [ 167.757331][ T7555] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 168.012393][ T7562] 8021q: VLANs not supported on ip6gre0 [ 168.228243][ T7573] tipc: Enabled bearer , priority 0 [ 168.345371][ T7573] device syzkaller0 entered promiscuous mode [ 170.028798][ T7584] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 170.038173][ T7584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.045893][ T7584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.056356][ T7584] device bridge_slave_0 left promiscuous mode [ 170.063320][ T7584] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.072718][ T7584] device bridge_slave_1 left promiscuous mode [ 170.079048][ T7584] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.089518][ T7584] bond0: (slave bond_slave_0): Releasing backup interface [ 170.105276][ T7584] bond0: (slave bond_slave_1): Releasing backup interface [ 170.116556][ T7584] device team_slave_0 left promiscuous mode [ 170.136463][ T7584] team0: Port device team_slave_0 removed [ 170.143356][ T7584] device team_slave_1 left promiscuous mode [ 170.154699][ T7584] team0: Port device team_slave_1 removed [ 170.161482][ T7584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.169291][ T7584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.177482][ T7584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.185241][ T7584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.198350][ T7584] device geneve0 left promiscuous mode [ 170.208672][ T7584] team0: Port device geneve0 removed [ 170.226702][ T7584] bond1: (slave geneve2): Releasing active interface [ 170.235201][ T7584] device geneve2 left promiscuous mode [ 170.249193][ T7585] tipc: Resetting bearer [ 170.282111][ T7603] 8021q: VLANs not supported on ip6tnl0 [ 170.397568][ T7572] tipc: Resetting bearer [ 170.459470][ T7572] tipc: Disabling bearer [ 170.506659][ T7611] netlink: 'syz.2.1247': attribute type 6 has an invalid length. [ 170.969989][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 171.000562][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.012933][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.113308][ T7636] __nla_validate_parse: 2 callbacks suppressed [ 171.113324][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1257'. [ 171.158380][ T7636] device team_slave_0 entered promiscuous mode [ 171.164655][ T7636] device team_slave_1 entered promiscuous mode [ 171.179790][ T7636] device team_slave_0 left promiscuous mode [ 171.185839][ T7636] device team_slave_1 left promiscuous mode [ 171.274465][ T7643] tipc: Enabled bearer , priority 0 [ 171.316734][ T7643] device syzkaller0 entered promiscuous mode [ 172.391810][ T4316] tipc: Node number set to 3947721998 [ 173.129351][ T7649] tipc: Resetting bearer [ 173.139184][ T7664] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1268'. [ 173.152360][ T7642] tipc: Resetting bearer [ 173.217515][ T7642] tipc: Disabling bearer [ 173.358587][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1276'. [ 173.447010][ T7687] netlink: 'syz.4.1277': attribute type 12 has an invalid length. [ 173.477484][ T7687] IPVS: set_ctl: invalid protocol: 60 172.30.1.5:19999 [ 173.839144][ T7699] netlink: 'syz.2.1281': attribute type 6 has an invalid length. [ 174.113248][ T7712] tipc: Enabled bearer , priority 0 [ 174.149086][ T7712] device syzkaller0 entered promiscuous mode [ 175.982183][ T7717] tipc: Resetting bearer [ 175.991456][ T7720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 175.999280][ T7720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.009713][ T7720] device bridge_slave_0 left promiscuous mode [ 176.016284][ T7720] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.026369][ T7720] device bridge_slave_1 left promiscuous mode [ 176.032773][ T7720] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.046531][ T7720] bond0: (slave bond_slave_0): Releasing backup interface [ 176.057115][ T7720] bond0: (slave bond_slave_1): Releasing backup interface [ 176.084478][ T7720] team0: Port device team_slave_0 removed [ 176.100150][ T7720] team0: Port device team_slave_1 removed [ 176.106748][ T7720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.114477][ T7720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.124271][ T7720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.131904][ T7720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.144986][ T7720] bond1: (slave geneve2): Releasing active interface [ 176.160765][ T7728] 8021q: VLANs not supported on sit0 [ 176.217949][ T7711] tipc: Resetting bearer [ 176.268422][ T7711] tipc: Disabling bearer [ 177.517879][ T7760] IPVS: set_ctl: invalid protocol: 60 172.30.1.4:19999 [ 177.781522][ T7751] netlink: 'syz.2.1298': attribute type 2 has an invalid length. [ 177.803456][ T7751] netlink: 'syz.2.1298': attribute type 8 has an invalid length. [ 177.825920][ T7751] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1298'. [ 177.887375][ T7759] netlink: 'syz.3.1301': attribute type 12 has an invalid length. [ 177.937827][ T7765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.000935][ T7765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.209780][ T7780] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 178.219109][ T7780] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 178.228673][ T7780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.237654][ T7780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.249922][ T7780] device bridge_slave_0 left promiscuous mode [ 178.270063][ T7780] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.299708][ T7780] device bridge_slave_1 left promiscuous mode [ 178.317320][ T7780] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.339197][ T7780] bond0: (slave bond_slave_0): Releasing backup interface [ 178.357761][ T7780] bond0: (slave bond_slave_1): Releasing backup interface [ 178.377496][ T7780] device team_slave_0 left promiscuous mode [ 178.444068][ T7780] team0: Port device team_slave_0 removed [ 178.457908][ T7780] device team_slave_1 left promiscuous mode [ 178.484992][ T7780] team0: Port device team_slave_1 removed [ 178.493647][ T7780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.501349][ T7780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.510611][ T7780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.527330][ T7780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.547781][ T7783] tipc: Enabled bearer , priority 0 [ 178.598745][ T7786] device syzkaller0 entered promiscuous mode [ 180.336905][ T7779] tipc: Resetting bearer [ 180.345224][ T7778] tipc: Resetting bearer [ 180.363540][ T7778] tipc: Disabling bearer [ 180.595863][ T7829] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 180.600953][ T7831] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1324'. [ 180.625515][ T7829] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.641941][ T7829] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.676853][ T7831] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1324'. [ 180.739460][ T7835] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1324'. [ 180.879401][ T7847] netlink: 'syz.3.1334': attribute type 33 has an invalid length. [ 180.889055][ T7847] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1334'. [ 180.899929][ T7850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 180.923033][ T7850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1333'. [ 181.305241][ T7866] netlink: 'syz.3.1340': attribute type 6 has an invalid length. [ 181.471486][ T7872] 8021q: VLANs not supported on ip6gre0 [ 181.949577][ T7890] netlink: 'syz.0.1353': attribute type 12 has an invalid length. [ 182.317574][ T7902] device ip6gretap0 entered promiscuous mode [ 182.328634][ T7902] device vlan3 entered promiscuous mode [ 182.754026][ T7922] netlink: 'syz.2.1368': attribute type 29 has an invalid length. [ 182.772705][ T7922] netlink: 'syz.2.1368': attribute type 29 has an invalid length. [ 182.838163][ T7922] netlink: 'syz.2.1368': attribute type 29 has an invalid length. [ 182.877321][ T7922] netlink: 'syz.2.1368': attribute type 29 has an invalid length. [ 182.901082][ T7922] netlink: 'syz.2.1368': attribute type 29 has an invalid length. [ 182.983136][ T7931] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1372'. [ 183.109746][ T7935] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1374'. [ 183.146534][ T7935] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.172187][ T7937] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1376'. [ 183.562465][ T7955] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1384'. [ 183.693283][ T7964] sctp: [Deprecated]: syz.2.1388 (pid 7964) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.693283][ T7964] Use struct sctp_sack_info instead [ 183.809297][ T7971] device ip6gretap0 entered promiscuous mode [ 183.819664][ T7971] device vlan3 entered promiscuous mode [ 184.184579][ T7988] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 184.518797][ T8004] 8021q: VLANs not supported on ip6gre0 [ 184.841249][ T8020] netlink: 'syz.4.1413': attribute type 1 has an invalid length. [ 184.876447][ T8020] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.884153][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1411'. [ 184.900452][ T8022] device dummy0 entered promiscuous mode [ 185.012948][ T8029] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 185.881859][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 185.887954][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 185.894747][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 185.894772][ T4275] Bluetooth: hci3: command 0x0406 tx timeout [ 187.063324][ T8069] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1433'. [ 187.077456][ T8069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.346643][ T8081] 8021q: VLANs not supported on ip6gre0 [ 187.740307][ T8104] IPv6: Can't replace route, no match found [ 189.576940][ T8116] 8021q: VLANs not supported on ip6gre0 [ 190.037376][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1469'. [ 190.060078][ T8161] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1470'. [ 190.069248][ T8161] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1470'. [ 190.088867][ T8161] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1470'. [ 190.113190][ T8161] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1470'. [ 190.203410][ T8168] IPv6: Can't replace route, no match found [ 190.209626][ T8167] tipc: Enabled bearer , priority 0 [ 190.228064][ T8167] tipc: Resetting bearer [ 190.272106][ T8164] tipc: Disabling bearer [ 190.810665][ T8193] netlink: 'syz.3.1485': attribute type 13 has an invalid length. [ 190.836390][ T8193] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1485'. [ 190.887318][ T8193] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 191.549813][ T8229] netlink: 'syz.0.1498': attribute type 12 has an invalid length. [ 191.748291][ T8241] netlink: 'syz.1.1506': attribute type 29 has an invalid length. [ 191.757579][ T8241] netlink: 'syz.1.1506': attribute type 29 has an invalid length. [ 191.768274][ T8241] netlink: 'syz.1.1506': attribute type 29 has an invalid length. [ 191.800955][ T8241] netlink: 'syz.1.1506': attribute type 29 has an invalid length. [ 191.809997][ T8241] netlink: 'syz.1.1506': attribute type 29 has an invalid length. [ 191.851137][ T8245] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1508'. [ 192.263671][ T8259] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1514'. [ 192.481303][ T8271] netlink: 'syz.4.1520': attribute type 10 has an invalid length. [ 192.563446][ T8271] batman_adv: batadv0: Adding interface: team0 [ 192.569828][ T8271] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.609781][ T8271] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 192.791450][ T8288] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 193.003986][ T8296] 8021q: VLANs not supported on ip6gre0 [ 193.952119][ T126] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 194.038652][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.049958][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.171731][ T126] usb 5-1: Using ep0 maxpacket: 16 [ 194.203028][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.233222][ T126] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 194.244007][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.276637][ T126] usb 5-1: config 0 descriptor?? [ 194.955765][ T8318] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 195.157713][ T8328] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 195.289189][ T126] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 195.302918][ T126] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 195.310798][ T126] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 195.320406][ T126] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 195.327782][ T126] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 195.345517][ T126] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 195.472793][ T8309] i2c i2c-1: unsupported multi-msg i2c transaction [ 195.521844][ T126] usb 5-1: USB disconnect, device number 2 [ 195.749838][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1535'. [ 195.778303][ T8321] netlink: 'syz.1.1539': attribute type 10 has an invalid length. [ 195.817664][ T8321] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 195.889864][ T8336] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1545'. [ 196.382454][ T8349] device bridge0 entered promiscuous mode [ 196.389099][ T8349] device macvlan2 entered promiscuous mode [ 197.311847][ T8365] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1553'. [ 197.593285][ T8366] 8021q: VLANs not supported on sit0 [ 197.602569][ T8368] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1558'. [ 197.667315][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1557'. [ 198.051772][ T4321] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 198.131699][ T126] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 198.251757][ T4321] usb 2-1: Using ep0 maxpacket: 16 [ 198.267748][ T4321] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 198.297152][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.320497][ T4321] usb 2-1: config 0 descriptor?? [ 198.342220][ T126] usb 5-1: Using ep0 maxpacket: 8 [ 198.363553][ T126] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.383060][ T4321] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 198.391152][ T126] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.412899][ T4321] usb 2-1: Detected FT4232H [ 198.419564][ T126] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 198.435252][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.448634][ T126] usb 5-1: config 0 descriptor?? [ 198.595401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 198.823262][ T4348] usb 5-1: USB disconnect, device number 3 [ 199.101875][ T8398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.117819][ T8401] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1571'. [ 199.171857][ T8398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.220707][ T4321] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 199.234531][ T4321] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 199.259993][ T4321] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 199.325130][ T4321] usb 2-1: USB disconnect, device number 2 [ 199.379537][ T4321] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 199.400651][ T4321] ftdi_sio 2-1:0.0: device disconnected [ 199.502346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 199.510694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 199.519074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 199.528116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 199.549404][ T8411] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1574'. [ 199.711822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 200.446942][ T8418] loop1: detected capacity change from 0 to 8 [ 200.462393][ T8418] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 200.509427][ T8418] cramfs: bad root offset 64 [ 200.519572][ T4256] udevd[4256]: incorrect cramfs checksum on /dev/loop1 [ 200.533782][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1579'. [ 200.571837][ T8418] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1579'. [ 200.782998][ T8429] netlink: 'syz.1.1584': attribute type 6 has an invalid length. [ 200.997509][ T8434] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1585'. [ 202.832301][ T8459] lo speed is unknown, defaulting to 1000 [ 202.838439][ T8459] lo speed is unknown, defaulting to 1000 [ 202.847744][ T8459] lo speed is unknown, defaulting to 1000 [ 202.858215][ T8459] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 202.871904][ T8459] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 202.905791][ T8459] lo speed is unknown, defaulting to 1000 [ 202.914694][ T8459] lo speed is unknown, defaulting to 1000 [ 202.922449][ T8459] lo speed is unknown, defaulting to 1000 [ 202.929515][ T8459] lo speed is unknown, defaulting to 1000 [ 202.936931][ T8459] lo speed is unknown, defaulting to 1000 [ 203.443834][ T8486] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1604'. [ 203.765945][ T8497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 203.775974][ T8497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.801783][ T126] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 203.996728][ T126] usb 2-1: Using ep0 maxpacket: 16 [ 204.013923][ T126] usb 2-1: unable to get BOS descriptor or descriptor too short [ 204.049672][ T126] usb 2-1: config 3 has an invalid interface number: 106 but max is 0 [ 204.073878][ T126] usb 2-1: config 3 has no interface number 0 [ 204.111308][ T126] usb 2-1: config 3 interface 106 has no altsetting 0 [ 204.128777][ T126] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 204.131788][ T8504] device syzkaller0 entered promiscuous mode [ 204.137986][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.156592][ T126] usb 2-1: Product: syz [ 204.160912][ T126] usb 2-1: Manufacturer: syz [ 204.165874][ T126] usb 2-1: SerialNumber: syz [ 204.749540][ T126] kobil_sct 2-1:3.106: KOBIL USB smart card terminal converter detected [ 204.878515][ T126] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 204.893892][ T126] usb 2-1: USB disconnect, device number 3 [ 204.903264][ T126] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 204.914574][ T126] kobil_sct 2-1:3.106: device disconnected [ 205.173154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 205.181652][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 205.322270][ T8524] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1619'. [ 206.155719][ T8541] device syzkaller0 entered promiscuous mode [ 206.458138][ T8551] netlink: 'syz.3.1630': attribute type 6 has an invalid length. [ 206.529105][ T8555] process 'syz.0.1628' launched './file1' with NULL argv: empty string added [ 207.151515][ T8555] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(0) [ 207.158454][ T8555] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 207.159904][ T8554] tipc: Enabling of bearer rejected, failed to enable media [ 207.167283][ T8555] vhci_hcd vhci_hcd.0: Device attached [ 207.298164][ T8565] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1631'. [ 207.382028][ T22] vhci_hcd: vhci_device speed not set [ 207.461852][ T22] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 207.658357][ T8558] vhci_hcd: connection reset by peer [ 207.688722][ T8355] vhci_hcd: stop threads [ 207.696133][ T8355] vhci_hcd: release socket [ 207.708146][ T8355] vhci_hcd: disconnect device [ 207.771636][ T4321] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 207.859006][ T8586] vivid-004: ================= START STATUS ================= [ 207.868032][ T8586] vivid-004: Radio HW Seek Mode: Bounded [ 207.874261][ T8586] vivid-004: Radio Programmable HW Seek: false [ 207.880810][ T8586] vivid-004: RDS Rx I/O Mode: Block I/O [ 207.886566][ T8586] vivid-004: Generate RBDS Instead of RDS: false [ 207.893020][ T8586] vivid-004: RDS Reception: true [ 207.898040][ T8586] vivid-004: RDS Program Type: 0 inactive [ 207.903940][ T8586] vivid-004: RDS PS Name: inactive [ 207.918305][ T8586] vivid-004: RDS Radio Text: inactive [ 207.924180][ T8586] vivid-004: RDS Traffic Announcement: false inactive [ 207.931073][ T8586] vivid-004: RDS Traffic Program: false inactive [ 207.937622][ T8586] vivid-004: RDS Music: false inactive [ 207.943323][ T8586] vivid-004: ================== END STATUS ================== [ 208.017334][ T4321] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 208.053622][ T4321] usb 2-1: config 0 has no interface number 0 [ 208.122110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 208.184779][ T4321] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 208.223367][ T8589] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1640'. [ 208.277161][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.336261][ T4321] usb 2-1: Product: syz [ 208.370001][ T4321] usb 2-1: Manufacturer: syz [ 208.418673][ T4321] usb 2-1: SerialNumber: syz [ 208.527237][ T4321] usb 2-1: config 0 descriptor?? [ 208.810494][ T4321] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 208.822049][ T8592] capability: warning: `syz.4.1641' uses deprecated v2 capabilities in a way that may be insecure [ 208.888961][ T4321] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 208.942766][ T4321] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 208.951031][ T4321] usb 2-1: media controller created [ 209.008535][ T4321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 209.011751][ T8571] usb 2-1: dvb_usb_ec168: I2C read not implemented [ 209.123080][ T4321] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 209.221942][ T4321] usb 2-1: USB disconnect, device number 4 [ 209.239177][ T8601] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.327350][ T8601] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.381188][ T8608] tipc: Enabling of bearer rejected, failed to enable media [ 209.434160][ T8601] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.522781][ T8601] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.572987][ T8619] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 209.637770][ T8619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.705105][ T8619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.872399][ T8601] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.917223][ T8601] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.940109][ T8601] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.955539][ T8601] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.532350][ T8628] loop1: detected capacity change from 0 to 32768 [ 210.558677][ T8628] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1648 (8628) [ 210.654833][ T8628] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 210.715549][ T8628] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 210.746028][ T8628] BTRFS info (device loop1): force zlib compression, level 3 [ 210.791474][ T8628] BTRFS info (device loop1): force clearing of disk cache [ 210.821736][ T8628] BTRFS info (device loop1): setting nodatasum [ 210.827940][ T8628] BTRFS info (device loop1): use zlib compression, level 3 [ 210.856627][ T8628] BTRFS info (device loop1): allowing degraded mounts [ 210.882470][ T8628] BTRFS info (device loop1): enabling disk space caching [ 210.889549][ T8628] BTRFS info (device loop1): disk space caching is enabled [ 211.296068][ T8641] loop0: detected capacity change from 0 to 32768 [ 211.321723][ T8641] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1654 (8641) [ 211.902204][ T8672] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1660'. [ 212.042774][ T8641] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 212.072564][ T8628] BTRFS info (device loop1): enabling ssd optimizations [ 212.096686][ T8641] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 212.112035][ T8641] BTRFS info (device loop0): using free space tree [ 212.122416][ T8628] BTRFS info (device loop1): rebuilding free space tree [ 212.305737][ T8628] BTRFS info (device loop1): disabling free space tree [ 212.365908][ T8628] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 212.381135][ T8628] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 212.537491][ T8641] BTRFS info (device loop0): enabling ssd optimizations [ 212.549083][ T8703] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1665'. [ 212.593172][ T22] vhci_hcd: vhci_device speed not set [ 212.691318][ T4265] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 212.703020][ T26] audit: type=1800 audit(1753332105.670:2): pid=8641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1654" name="file2" dev="loop0" ino=263 res=0 errno=0 [ 214.068430][ T4264] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 214.425659][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 214.515336][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.534689][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.739717][ T8755] tmpfs: Unknown parameter 'usrquota' [ 214.811883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 215.828256][ T8795] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1695'. [ 216.422177][ T8803] overlayfs: overlapping lowerdir path [ 217.110439][ T8789] sched: RT throttling activated [ 217.500652][ T8791] tipc: Enabled bearer , priority 0 [ 217.526454][ T8808] tipc: Resetting bearer [ 217.575237][ T8790] tipc: Disabling bearer [ 217.618652][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 217.678706][ T8811] bond0: (slave team0): Releasing backup interface [ 217.984095][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.058517][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.229429][ T8811] device bridge_slave_0 left promiscuous mode [ 218.331272][ T8811] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.546584][ T8811] device bridge_slave_1 left promiscuous mode [ 218.623522][ T8811] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.635052][ T8811] bond0: (slave bond_slave_0): Releasing backup interface [ 218.658554][ T8811] bond0: (slave bond_slave_1): Releasing backup interface [ 218.713759][ T8811] device team_slave_0 left promiscuous mode [ 218.738811][ T8811] team0: Port device team_slave_0 removed [ 218.812621][ T8811] device team_slave_1 left promiscuous mode [ 218.888076][ T8811] team0: Port device team_slave_1 removed [ 218.905829][ T8811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.921162][ T8811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.930679][ T8811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.941772][ T8811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.956950][ T8811] device geneve0 left promiscuous mode [ 219.162460][ T8839] siw: device registration error -23 [ 219.310632][ T8811] team0: Port device geneve0 removed [ 219.641899][ T4275] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 219.650563][ T4275] Bluetooth: hci3: Injecting HCI hardware error event [ 219.664286][ T4275] Bluetooth: hci3: hardware error 0x00 [ 219.694897][ T8811] bond0: (slave wlan1): Releasing backup interface [ 219.830136][ T8841] befs: (nbd3): No write support. Marking filesystem read-only [ 219.841511][ T1125] block nbd3: Attempted send on invalid socket [ 219.848358][ T1125] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.864821][ T8841] befs: (nbd3): unable to read superblock [ 220.194662][ T8823] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1702'. [ 220.500617][ T8856] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1711'. [ 220.991648][ T126] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 221.261644][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.373139][ T126] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 221.483063][ T126] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 221.519567][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.522306][ T8865] hub 2-0:1.0: USB hub found [ 221.534975][ T8865] hub 2-0:1.0: 1 port detected [ 221.578639][ T126] usb 1-1: config 0 descriptor?? [ 221.595243][ T8849] loop2: detected capacity change from 0 to 32768 [ 221.629302][ T8849] (syz.2.1710,8849,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 221.655683][ T8849] (syz.2.1710,8849,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 221.730316][ T8849] JBD2: Ignoring recovery information on journal [ 221.784915][ T8854] loop4: detected capacity change from 0 to 32768 [ 221.807951][ T8880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1719'. [ 221.822565][ T8849] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 221.901765][ T8854] (syz.4.1713,8854,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 221.927001][ T8854] (syz.4.1713,8854,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 222.078915][ T126] kovaplus 0003:1E7D:2D50.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 222.157502][ T8854] debugfs: Directory '9357E9D751824C228242B9B0D0FB6750' with parent 'ocfs2' already present! [ 222.194339][ T4275] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 222.304564][ T8854] JBD2: Ignoring recovery information on journal [ 222.532306][ T8887] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 222.569142][ T8887] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.573790][ T126] kovaplus 0003:1E7D:2D50.0002: couldn't init struct kovaplus_device [ 222.594538][ T126] kovaplus 0003:1E7D:2D50.0002: couldn't install mouse [ 222.604450][ T126] kovaplus: probe of 0003:1E7D:2D50.0002 failed with error -71 [ 222.613935][ T8854] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 222.621879][ T8887] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.651455][ T126] usb 1-1: USB disconnect, device number 2 [ 223.010527][ T8899] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1724'. [ 223.046133][ T4276] ocfs2: Unmounting device (7,4) on (node local) [ 223.054711][ T4270] ocfs2: Unmounting device (7,2) on (node local) [ 223.066307][ T8892] fido_id[8892]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 223.368017][ T8908] 9pnet_fd: Insufficient options for proto=fd [ 224.165154][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1732'. [ 224.220589][ T8911] 8021q: VLANs not supported on sit0 [ 225.347723][ T8933] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1737'. [ 225.359534][ T8933] netlink: 'syz.1.1737': attribute type 10 has an invalid length. [ 225.486651][ T8933] team0: Device dummy0 failed to register rx_handler [ 226.417543][ T8954] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1744'. [ 226.483141][ T8958] 9pnet_fd: Insufficient options for proto=fd [ 226.630474][ T8962] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1748'. [ 226.674275][ T8963] loop0: detected capacity change from 0 to 16 [ 226.776769][ T8963] erofs: (device loop0): mounted with root inode @ nid 36. [ 226.812590][ T8963] syz.0.1749: attempt to access beyond end of device [ 226.812590][ T8963] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 228.553220][ T8998] 9pnet_fd: Insufficient options for proto=fd [ 228.712148][ T9001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1763'. [ 228.764971][ T9001] device dummy0 entered promiscuous mode [ 228.822460][ T9008] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1766'. [ 229.155831][ T9012] loop3: detected capacity change from 0 to 1024 [ 229.457938][ T9012] hfsplus: invalid btree flag [ 229.465683][ T9012] hfsplus: failed to load extents file [ 230.749171][ T4275] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 230.805061][ T4275] Bluetooth: hci4: Injecting HCI hardware error event [ 230.917236][ T4267] Bluetooth: hci4: hardware error 0x00 [ 231.256415][ T4258] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 231.576671][ T9027] netlink: 'syz.2.1773': attribute type 12 has an invalid length. [ 232.046655][ T9038] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 232.057653][ T9038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 232.068375][ T9038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 232.277636][ T9046] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1781'. [ 232.622228][ T9054] 9pnet_fd: Insufficient options for proto=fd [ 233.099609][ T9062] hub 2-0:1.0: USB hub found [ 233.121444][ T9062] hub 2-0:1.0: 1 port detected [ 233.311793][ T4267] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 233.512431][ T9082] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1795'. [ 233.659889][ T9088] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1799'. [ 234.125313][ T9102] siw: device registration error -23 [ 234.318797][ T9099] tipc: Enabled bearer , priority 0 [ 234.561823][ T9099] tipc: Resetting bearer [ 234.798288][ T9098] tipc: Disabling bearer [ 234.882899][ T9112] 9pnet_fd: Insufficient options for proto=fd [ 235.632642][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1810'. [ 235.932942][ T9128] hub 2-0:1.0: USB hub found [ 235.942506][ T9128] hub 2-0:1.0: 1 port detected [ 236.172369][ T9143] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1821'. [ 237.507198][ T9148] siw: device registration error -23 [ 237.588742][ T9144] random: crng reseeded on system resumption [ 237.895880][ T9160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1825'. [ 238.077759][ T9170] hub 2-0:1.0: USB hub found [ 238.092166][ T9170] hub 2-0:1.0: 1 port detected [ 238.759017][ T9187] loop1: detected capacity change from 0 to 32768 [ 238.809220][ T9187] XFS (loop1): Mounting V5 Filesystem [ 238.880172][ T9208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1843'. [ 238.914232][ T9187] XFS (loop1): Ending clean mount [ 239.327650][ T4265] XFS (loop1): Unmounting Filesystem [ 239.909659][ T9230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1851'. [ 239.934516][ T9230] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 239.971249][ T9234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.979406][ T9234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.166291][ T9240] 8021q: adding VLAN 0 to HW filter on device bond2 [ 240.249217][ T9244] 9pnet_fd: Insufficient options for proto=fd [ 240.256138][ T9240] device bond2 entered promiscuous mode [ 241.763146][ T9259] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1864'. [ 241.997330][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1866'. [ 242.075381][ T9267] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 242.558779][ T9283] siw: device registration error -23 [ 242.769539][ T9282] 9pnet_fd: Insufficient options for proto=fd [ 242.992681][ T9284] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 243.011365][ T9284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.039748][ T9284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.336180][ T9295] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1876'. [ 243.485555][ T9298] loop2: detected capacity change from 0 to 1024 [ 243.505157][ T9298] hfsplus: invalid btree flag [ 243.510578][ T9298] hfsplus: failed to load extents file [ 244.302987][ T9311] loop4: detected capacity change from 0 to 1024 [ 244.407501][ T9311] hfsplus: invalid btree flag [ 244.413602][ T9311] hfsplus: failed to load extents file [ 244.874532][ T4258] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 245.083058][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1883'. [ 245.158845][ T9321] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1885'. [ 245.563470][ T9330] siw: device registration error -23 [ 246.198233][ T9337] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 246.249952][ T9337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 246.263794][ T9337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.291257][ T9339] 8021q: VLANs not supported on ip6tnl0 [ 246.301984][ T9317] loop0: detected capacity change from 0 to 32768 [ 246.349569][ T9317] XFS (loop0): Mounting V5 Filesystem [ 246.409440][ T9317] XFS (loop0): Ending clean mount [ 246.434511][ T9317] XFS (loop0): Quotacheck needed: Please wait. [ 246.511914][ T8737] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 246.528846][ T9317] XFS (loop0): Quotacheck: Done. [ 246.559342][ T26] audit: type=1800 audit(1753332139.520:3): pid=9317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1884" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 246.679323][ T4264] XFS (loop0): Unmounting Filesystem [ 246.729523][ T8737] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.745764][ T8737] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.757292][ T8737] usb 5-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 246.767499][ T8737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.779254][ T8737] usb 5-1: config 0 descriptor?? [ 247.172867][ T8737] usbhid 5-1:0.0: can't add hid device: -71 [ 247.183537][ T8737] usbhid: probe of 5-1:0.0 failed with error -71 [ 247.217045][ T8737] usb 5-1: USB disconnect, device number 4 [ 247.706468][ T9380] 8021q: VLANs not supported on ip6tnl0 [ 248.779697][ T9389] 9pnet_fd: Insufficient options for proto=fd [ 249.161812][ T8737] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 250.103665][ T8737] usb 4-1: Using ep0 maxpacket: 16 [ 250.110885][ T8737] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 250.131648][ T8737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.141450][ T8737] usb 4-1: config 0 descriptor?? [ 250.172294][ T8737] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 250.193576][ T8737] usb 4-1: Detected FT4232H [ 250.258800][ T9427] 9pnet_fd: Insufficient options for proto=fd [ 251.117592][ T9430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.128954][ T9430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.228623][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1921'. [ 251.645688][ T8737] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 251.662626][ T8737] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 251.670689][ T8737] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 251.680564][ T8737] usb 4-1: USB disconnect, device number 2 [ 251.719355][ T8737] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 251.752730][ T8737] ftdi_sio 4-1:0.0: device disconnected [ 254.291761][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1936'. [ 254.635566][ T9486] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1944'. [ 254.818786][ T9492] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.876446][ T9492] device bond2 entered promiscuous mode [ 255.477661][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.486498][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.399329][ T9532] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1958'. [ 257.426583][ T9534] netlink: 'syz.1.1960': attribute type 1 has an invalid length. [ 257.464567][ T9534] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.480360][ T9537] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 257.489371][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 257.652648][ T9540] device bond1 entered promiscuous mode [ 257.701735][ T9540] device geneve2 entered promiscuous mode [ 258.616935][ T9569] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 259.329003][ T9573] tipc: Enabled bearer , priority 0 [ 259.433650][ T9573] device syzkaller0 entered promiscuous mode [ 260.591908][ T9611] hub 2-0:1.0: USB hub found [ 260.635387][ T9611] hub 2-0:1.0: 1 port detected [ 262.494545][ T9585] tipc: Resetting bearer [ 262.500818][ T9570] tipc: Resetting bearer [ 262.519206][ T9570] tipc: Disabling bearer [ 263.229317][ T9638] netlink: 'syz.4.1997': attribute type 1 has an invalid length. [ 263.281313][ T9638] 8021q: adding VLAN 0 to HW filter on device bond3 [ 263.297421][ T9641] 8021q: VLANs not supported on ip6tnl0 [ 263.439166][ T9638] device bond3 entered promiscuous mode [ 264.240503][ T9657] tipc: Enabled bearer , priority 0 [ 264.353520][ T9657] device syzkaller0 entered promiscuous mode [ 266.858176][ T9667] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2008'. [ 266.877972][ T9672] tipc: Resetting bearer [ 266.894766][ T9656] tipc: Resetting bearer [ 266.948365][ T9656] tipc: Disabling bearer [ 266.956855][ T9681] tipc: Enabling of bearer rejected, failed to enable media [ 267.270588][ T9706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2019'. [ 267.318933][ T9710] 9pnet_fd: Insufficient options for proto=fd [ 267.935518][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2025'. [ 267.960150][ T9725] tipc: Enabled bearer , priority 0 [ 267.986758][ T9725] device syzkaller0 entered promiscuous mode [ 268.013782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 268.100893][ T9725] tipc: Resetting bearer [ 268.346644][ T9733] siw: device registration error -23 [ 268.804289][ T9735] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 268.812477][ T9735] batman_adv: batadv0: Removing interface: team0 [ 268.842922][ T9735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 268.916004][ T9735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 269.150995][ T9750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2037'. [ 269.214136][ T2038] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 269.261317][ T9756] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2040'. [ 269.411677][ T2038] usb 1-1: Using ep0 maxpacket: 16 [ 269.418632][ T2038] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 269.459866][ T2038] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.482827][ T9763] tipc: Enabling of bearer rejected, failed to enable media [ 269.505046][ T2038] usb 1-1: config 0 descriptor?? [ 269.527371][ T9766] netlink: 'syz.1.2044': attribute type 1 has an invalid length. [ 269.542405][ T2038] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 269.558885][ T2038] usb 1-1: Detected FT4232H [ 269.582956][ T9766] 8021q: adding VLAN 0 to HW filter on device bond2 [ 270.557743][ T9783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.610557][ T9766] device bond2 entered promiscuous mode [ 270.722110][ T9783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.907113][ T9792] 9pnet_fd: Insufficient options for proto=fd [ 271.086764][ T2038] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 271.099816][ T2038] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 271.157529][ T2038] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 271.178424][ T2038] usb 1-1: USB disconnect, device number 3 [ 271.255178][ T2038] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 271.256064][ T9803] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 271.273854][ T9803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.280251][ T2038] ftdi_sio 1-1:0.0: device disconnected [ 271.281882][ T9803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.384960][ T9804] loop4: detected capacity change from 0 to 1024 [ 271.413701][ T9804] hfsplus: invalid btree flag [ 271.419295][ T9804] hfsplus: failed to load extents file [ 272.034346][ T9803] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 272.045793][ T9803] bond1: (slave geneve2): Releasing backup interface [ 272.054066][ T9803] device geneve2 left promiscuous mode [ 272.071402][ T9807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2053'. [ 272.080808][ T9810] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2054'. [ 272.323009][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2058'. [ 272.394004][ T9819] 8021q: VLANs not supported on ip6tnl0 [ 273.157430][ T9823] tipc: Enabling of bearer rejected, failed to enable media [ 273.535532][ T9845] loop4: detected capacity change from 0 to 1024 [ 273.566098][ T9845] hfsplus: invalid btree flag [ 273.572270][ T9845] hfsplus: failed to load extents file [ 273.734510][ T9847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2066'. [ 274.028243][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2069'. [ 274.065450][ T9858] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 274.108248][ T9858] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 274.117511][ T9858] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 274.216633][ T9865] 8021q: VLANs not supported on ip6tnl0 [ 274.482093][ T4337] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 274.529594][ T9875] hub 2-0:1.0: USB hub found [ 274.537745][ T9875] hub 2-0:1.0: 1 port detected [ 274.692213][ T4337] usb 3-1: Using ep0 maxpacket: 16 [ 274.731516][ T4337] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 274.751784][ T4337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.841020][ T4337] usb 3-1: config 0 descriptor?? [ 274.902729][ T4337] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 274.928017][ T4337] usb 3-1: Detected FT4232H [ 275.157346][ T9878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.167500][ T9878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.660890][ T4337] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 275.670150][ T4337] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 275.678529][ T4337] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 275.693193][ T4337] usb 3-1: USB disconnect, device number 2 [ 275.724068][ T4337] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 275.758809][ T4337] ftdi_sio 3-1:0.0: device disconnected [ 275.786160][ T9884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2080'. [ 275.825388][ T9884] device dummy0 entered promiscuous mode [ 275.840166][ T9885] tipc: Enabling of bearer rejected, failed to enable media [ 275.999457][ T9895] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2083'. [ 276.020709][ T9899] loop1: detected capacity change from 0 to 1024 [ 276.065593][ T9899] hfsplus: invalid btree flag [ 276.090236][ T9899] hfsplus: failed to load extents file [ 277.118133][ T9910] loop1: detected capacity change from 0 to 32768 [ 277.127943][ T9910] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.2087 (9910) [ 277.157945][ T9910] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 277.471118][ T9910] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 277.801799][ T9910] BTRFS info (device loop1): using free space tree [ 277.835280][ T9927] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 277.844180][ T9927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.854438][ T9927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.031778][ T4267] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 278.040573][ T4267] Bluetooth: hci1: Injecting HCI hardware error event [ 278.050071][ T4275] Bluetooth: hci1: hardware error 0x00 [ 278.060804][ T9910] BTRFS info (device loop1): enabling ssd optimizations [ 278.492266][ T8719] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 278.588814][ T9962] hub 2-0:1.0: USB hub found [ 278.628709][ T9962] hub 2-0:1.0: 1 port detected [ 278.781793][ T8719] usb 3-1: Using ep0 maxpacket: 16 [ 278.814793][ T8719] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 278.870227][ T8719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.919269][ T8719] usb 3-1: config 0 descriptor?? [ 278.952782][ T4265] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 278.964594][ T8719] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 278.982740][ T8719] usb 3-1: Detected FT4232H [ 279.049627][ T9967] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2099'. [ 279.198108][ T9943] loop0: detected capacity change from 0 to 32768 [ 279.265068][ T9955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.273987][ T9955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.306618][ T9943] (syz.0.2092,9943,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 279.356711][ T9978] 9pnet_fd: Insufficient options for proto=fd [ 279.364339][ T9943] (syz.0.2092,9943,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 279.457938][ T9943] JBD2: Ignoring recovery information on journal [ 279.557027][ T8719] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 279.570021][ T8719] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 279.591236][ T8719] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 279.720533][ T8719] usb 3-1: USB disconnect, device number 3 [ 279.744572][ T8719] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 280.191465][ T4275] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 280.219806][ T8719] ftdi_sio 3-1:0.0: device disconnected [ 280.396812][ T9994] netlink: 'syz.1.2106': attribute type 6 has an invalid length. [ 280.424549][ T9943] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 280.712331][T10000] device syzkaller0 entered promiscuous mode [ 280.991255][ T4264] ocfs2: Unmounting device (7,0) on (node local) [ 282.757103][T10019] 8021q: VLANs not supported on ip6tnl0 [ 283.878600][T10041] netlink: 'syz.2.2119': attribute type 6 has an invalid length. [ 284.172836][ T4337] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 284.539549][ T4337] usb 2-1: Using ep0 maxpacket: 16 [ 284.553756][ T4337] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 284.575446][T10037] loop0: detected capacity change from 0 to 32768 [ 284.582109][ T4337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.597149][ T4337] usb 2-1: config 0 descriptor?? [ 284.626323][ T4337] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 284.641126][T10037] (syz.0.2121,10037,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 284.669422][T10062] device syzkaller0 entered promiscuous mode [ 284.675463][ T4337] usb 2-1: Detected FT4232H [ 284.707759][T10037] (syz.0.2121,10037,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 284.740187][T10066] kvm: pic: non byte write [ 284.749675][T10066] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 284.806846][T10037] JBD2: Ignoring recovery information on journal [ 284.893449][T10072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.905583][T10072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.500171][T10037] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 285.522618][ T4337] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 285.530178][ T4337] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 285.560644][ T4337] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 285.586122][ T4337] usb 2-1: USB disconnect, device number 5 [ 285.622759][ T4337] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 285.654181][ T4337] ftdi_sio 2-1:0.0: device disconnected [ 286.488901][ T4264] ocfs2: Unmounting device (7,0) on (node local) [ 288.656871][T10083] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2134'. [ 288.690109][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2136'. [ 290.331491][T10128] loop0: detected capacity change from 0 to 1024 [ 290.356016][T10128] hfsplus: invalid btree flag [ 290.361476][T10128] hfsplus: failed to load extents file [ 290.554966][T10125] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2147'. [ 290.929909][T10127] 9pnet_fd: Insufficient options for proto=fd [ 291.184826][T10138] device syzkaller0 entered promiscuous mode [ 291.337713][T10152] netlink: 'syz.1.2156': attribute type 6 has an invalid length. [ 294.206751][T10170] loop2: detected capacity change from 0 to 1024 [ 294.355937][T10170] hfsplus: invalid btree flag [ 294.361483][T10170] hfsplus: failed to load extents file [ 295.558908][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2155'. [ 295.587281][T10157] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2158'. [ 295.611860][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2158'. [ 295.648149][T10181] 9pnet_fd: Insufficient options for proto=fd [ 295.668539][T10168] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2161'. [ 296.432664][T10200] loop0: detected capacity change from 0 to 1024 [ 297.914372][ T8719] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 297.999400][T10200] hfsplus: invalid btree flag [ 298.004315][T10200] hfsplus: failed to load extents file [ 298.455882][ T8719] usb 2-1: Using ep0 maxpacket: 16 [ 298.525835][ T8719] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 298.584546][ T8719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.640794][ T8719] usb 2-1: config 0 descriptor?? [ 298.695192][T10212] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2175'. [ 298.696803][ T8719] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 298.722023][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2175'. [ 298.744238][ T8719] usb 2-1: Detected FT4232H [ 298.895730][T10215] 9pnet_fd: Insufficient options for proto=fd [ 299.000237][ T8719] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 299.024494][ T8719] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 299.083399][ T8719] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 299.692628][ T8719] usb 2-1: USB disconnect, device number 6 [ 299.754276][ T8719] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 299.755161][T10217] device syzkaller0 entered promiscuous mode [ 299.772180][T10222] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2178'. [ 299.797869][ T8719] ftdi_sio 2-1:0.0: device disconnected [ 299.862823][T10208] loop4: detected capacity change from 0 to 32768 [ 299.948054][T10208] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.2173 (10208) [ 300.037835][T10208] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 300.082247][T10208] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 300.122864][T10208] BTRFS info (device loop4): using free space tree [ 300.409291][T10208] BTRFS info (device loop4): enabling ssd optimizations [ 300.632596][ T4276] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 303.334042][T10273] device syzkaller0 entered promiscuous mode [ 303.387808][T10286] 8021q: VLANs not supported on ip6tnl0 [ 303.981783][ T8737] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 304.202012][ T8737] usb 2-1: Using ep0 maxpacket: 8 [ 304.215742][ T8737] usb 2-1: config 37 has an invalid interface number: 13 but max is 0 [ 304.380205][ T8737] usb 2-1: config 37 has no interface number 0 [ 304.410819][ T8737] usb 2-1: config 37 interface 13 has no altsetting 0 [ 304.447813][ T8737] usb 2-1: New USB device found, idVendor=0421, idProduct=0420, bcdDevice=e4.c4 [ 304.475558][ T8737] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.522194][ T8737] usb 2-1: Product: syz [ 304.612615][ T8737] usb 2-1: Manufacturer: syz [ 304.617256][ T8737] usb 2-1: SerialNumber: syz [ 304.767910][T10314] device syzkaller0 entered promiscuous mode [ 304.864247][ T8737] usb 2-1: bad CDC descriptors [ 304.894477][ T8737] usb 2-1: bad CDC descriptors [ 304.908195][ T8737] usb 2-1: USB disconnect, device number 7 [ 306.737792][T10322] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 306.746086][T10322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 306.753967][T10322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 306.771182][T10325] 8021q: VLANs not supported on ip6tnl0 [ 307.186769][T10353] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2213'. [ 307.203285][T10353] netlink: 'syz.3.2213': attribute type 10 has an invalid length. [ 307.235655][T10353] team0: Device dummy0 failed to register rx_handler [ 308.159648][T10362] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2217'. [ 308.183683][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2217'. [ 308.269263][T10364] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2216'. [ 308.353232][T10369] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 308.363465][T10369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 308.371035][T10369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 308.486840][T10360] loop2: detected capacity change from 0 to 32768 [ 308.527525][T10360] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.2218 (10360) [ 308.564738][T10360] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 308.614509][ T4275] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 308.675895][T10374] siw: device registration error -23 [ 308.697145][ T4275] Bluetooth: hci2: Injecting HCI hardware error event [ 308.698259][T10360] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 308.739872][ T4267] Bluetooth: hci2: hardware error 0x00 [ 308.767475][T10360] BTRFS info (device loop2): force zlib compression, level 3 [ 308.817234][T10360] BTRFS info (device loop2): force clearing of disk cache [ 308.826746][T10360] BTRFS info (device loop2): setting nodatasum [ 308.926443][T10360] BTRFS info (device loop2): use zlib compression, level 3 [ 309.018408][T10360] BTRFS info (device loop2): allowing degraded mounts [ 309.029834][T10360] BTRFS info (device loop2): enabling disk space caching [ 309.038169][T10360] BTRFS info (device loop2): disk space caching is enabled [ 310.097014][T10360] BTRFS info (device loop2): enabling ssd optimizations [ 310.122004][T10360] BTRFS info (device loop2): rebuilding free space tree [ 310.134503][T10393] device syzkaller0 entered promiscuous mode [ 310.163913][T10360] BTRFS info (device loop2): disabling free space tree [ 310.170851][T10360] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 310.211664][T10360] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 310.495540][T10421] loop1: detected capacity change from 0 to 1024 [ 310.511073][T10421] hfsplus: invalid btree flag [ 310.516667][T10421] hfsplus: failed to load extents file [ 310.831919][ T4267] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 311.036827][ T4270] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 311.237080][ T4258] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop2 scanned by udevd (4258) [ 312.951845][T10420] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2231'. [ 312.960880][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2231'. [ 312.986874][T10430] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 313.003346][T10430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 313.035194][T10430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 313.088478][T10430] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 313.403030][T10453] siw: device registration error -23 [ 314.254696][T10466] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2242'. [ 314.273850][T10466] netlink: 'syz.0.2242': attribute type 10 has an invalid length. [ 314.296683][T10466] team0: Device dummy0 failed to register rx_handler [ 315.350119][T10475] loop3: detected capacity change from 0 to 1024 [ 315.367512][T10475] hfsplus: invalid btree flag [ 315.373045][T10475] hfsplus: failed to load extents file [ 315.960321][T10476] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2246'. [ 316.048139][ T4258] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 316.127379][T10473] 9pnet_fd: Insufficient options for proto=fd [ 316.457944][T10480] device syzkaller0 entered promiscuous mode [ 316.650975][T10467] loop2: detected capacity change from 0 to 32768 [ 316.680569][T10467] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 316.701715][T10467] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 316.728899][T10467] BTRFS info (device loop2): force zlib compression, level 3 [ 316.748475][T10467] BTRFS info (device loop2): force clearing of disk cache [ 316.760453][T10467] BTRFS info (device loop2): setting nodatasum [ 316.779198][T10467] BTRFS info (device loop2): use zlib compression, level 3 [ 316.786845][T10467] BTRFS info (device loop2): allowing degraded mounts [ 316.793853][T10467] BTRFS info (device loop2): enabling disk space caching [ 316.801121][T10467] BTRFS info (device loop2): disk space caching is enabled [ 316.915724][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.923803][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.966148][T10467] BTRFS info (device loop2): enabling ssd optimizations [ 316.980602][T10467] BTRFS info (device loop2): rebuilding free space tree [ 317.040704][T10467] BTRFS info (device loop2): disabling free space tree [ 317.066872][T10467] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 317.091057][T10467] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 317.193384][ T4270] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 318.762754][T10494] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 318.770930][T10494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 318.778457][T10494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 318.795385][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2253'. [ 318.900042][T10522] 8021q: VLANs not supported on ip6tnl0 [ 319.729796][T10534] loop2: detected capacity change from 0 to 1024 [ 319.765410][T10534] hfsplus: invalid btree flag [ 319.772398][T10534] hfsplus: failed to load extents file [ 320.382822][ T4258] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 320.425232][T10529] hub 2-0:1.0: USB hub found [ 320.432881][T10529] hub 2-0:1.0: 1 port detected [ 320.837779][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2263'. [ 322.295190][T10558] netlink: 'syz.3.2268': attribute type 12 has an invalid length. [ 322.427008][T10563] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 322.458587][T10563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 322.493971][T10563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 322.599460][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2270'. [ 322.637577][T10568] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2271'. [ 323.185391][T10577] loop3: detected capacity change from 0 to 1024 [ 323.372677][T10577] hfsplus: invalid btree flag [ 323.378153][T10577] hfsplus: failed to load extents file [ 323.943700][ T9974] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 324.182585][ T9974] usb 1-1: Using ep0 maxpacket: 8 [ 324.189575][ T9974] usb 1-1: config 37 has an invalid interface number: 13 but max is 0 [ 324.231362][ T9974] usb 1-1: config 37 has no interface number 0 [ 324.266980][ T9974] usb 1-1: config 37 interface 13 has no altsetting 0 [ 324.302942][T10582] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2275'. [ 324.338181][ T9974] usb 1-1: New USB device found, idVendor=0421, idProduct=0420, bcdDevice=e4.c4 [ 324.462737][ T9974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.548369][ T9974] usb 1-1: Product: syz [ 324.568499][ T9974] usb 1-1: Manufacturer: syz [ 324.637582][ T9974] usb 1-1: SerialNumber: syz [ 325.210634][ T9974] usb 1-1: bad CDC descriptors [ 325.216790][ T9974] usb 1-1: bad CDC descriptors [ 325.421414][T10595] siw: device registration error -23 [ 326.369838][ T9974] usb 1-1: USB disconnect, device number 4 [ 326.789460][T10603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2283'. [ 326.896856][T10608] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2284'. [ 327.049730][T10613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 327.074079][T10613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 327.201735][T10622] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2288'. [ 327.449764][T10601] loop3: detected capacity change from 0 to 40427 [ 327.554240][T10601] F2FS-fs (loop3): invalid crc value [ 328.263483][T10601] F2FS-fs (loop3): Found nat_bits in checkpoint [ 328.429445][T10636] device syzkaller0 entered promiscuous mode [ 328.551268][T10638] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2292'. [ 328.567957][T10601] F2FS-fs (loop3): Start checkpoint disabled! [ 328.737671][T10601] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 329.591015][T10654] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2297'. [ 329.702544][T10658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2298'. [ 329.903713][T10659] F2FS-fs (loop3): Unrecognized mount option "bsdgroups" or missing value [ 329.912800][T10601] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN [ 329.912823][T10601] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 329.932972][T10601] CPU: 0 PID: 10601 Comm: syz.3.2281 Not tainted 6.1.146-syzkaller #0 [ 329.941135][T10601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 329.951198][T10601] RIP: 0010:update_sit_entry+0x626/0xf30 [ 329.956868][T10601] Code: 01 00 00 48 8d 5d 20 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 67 35 2b fe 48 8b 1b 4c 01 e3 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 ae 07 00 00 0f b6 2b 89 e8 44 8b 74 24 [ 329.976492][T10601] RSP: 0018:ffffc9001c0bf2f0 EFLAGS: 00010202 [ 329.977093][T10667] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2301'. [ 329.982548][T10601] RAX: 0000000000000002 RBX: 0000000000000011 RCX: 0000000000000002 [ 329.982564][T10601] RDX: ffff88801abf9dc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 329.982574][T10601] RBP: ffff88801dbe41b0 R08: ffff88801abf9dc0 R09: 0000000000000003 [ 329.982586][T10601] R10: 00000000ffffffff R11: 0000000000000002 R12: 0000000000000011 [ 329.982597][T10601] R13: ffff888031270000 R14: ffff888079edc6d1 R15: dffffc0000000000 [ 330.031318][T10601] FS: 00007fc8f07e36c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 330.040236][T10601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.046806][T10601] CR2: 000000110c2b7c5d CR3: 000000005511e000 CR4: 00000000003506f0 [ 330.054767][T10601] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 330.062723][T10601] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 330.070682][T10601] Call Trace: [ 330.073956][T10601] [ 330.076876][T10601] f2fs_allocate_data_block+0x13f8/0x35e0 [ 330.082587][T10601] ? rcu_is_watching+0x11/0xa0 [ 330.087341][T10601] __allocate_data_block+0x519/0x9f0 [ 330.092617][T10601] ? f2fs_map_blocks+0x3840/0x3840 [ 330.097804][T10601] ? f2fs_inode_dirtied+0x2a0/0x2d0 [ 330.102992][T10601] f2fs_map_blocks+0xeb0/0x3840 [ 330.107834][T10601] ? f2fs_do_map_lock+0x70/0x70 [ 330.112687][T10601] ? preempt_count_add+0x8d/0x190 [ 330.117704][T10601] ? preempt_count_add+0x8d/0x190 [ 330.122727][T10601] expand_inode_data+0x4ab/0x870 [ 330.127683][T10601] ? f2fs_insert_range+0x3b0/0x3b0 [ 330.132816][T10601] f2fs_fallocate+0x4c3/0x950 [ 330.137509][T10601] vfs_fallocate+0x584/0x6f0 [ 330.142115][T10601] do_vfs_ioctl+0x1a9d/0x1d10 [ 330.146810][T10601] ? __ia32_compat_sys_ioctl+0x780/0x780 [ 330.152457][T10601] ? tomoyo_path_number_perm+0x1b6/0x600 [ 330.158098][T10601] ? __lock_acquire+0x7c50/0x7c50 [ 330.163107][T10601] ? slab_free_freelist_hook+0x131/0x1a0 [ 330.168720][T10601] ? tomoyo_path_number_perm+0x503/0x600 [ 330.174338][T10601] ? tomoyo_path_number_perm+0x1b6/0x600 [ 330.179953][T10601] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 330.185402][T10601] ? __fget_files+0x28/0x4d0 [ 330.189988][T10601] ? bpf_lsm_file_ioctl+0x5/0x10 [ 330.194907][T10601] ? security_file_ioctl+0x7c/0xa0 [ 330.200176][T10601] __se_sys_ioctl+0x83/0x170 [ 330.204749][T10601] do_syscall_64+0x4c/0xa0 [ 330.209148][T10601] ? clear_bhb_loop+0x60/0xb0 [ 330.213806][T10601] ? clear_bhb_loop+0x60/0xb0 [ 330.218463][T10601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.224340][T10601] RIP: 0033:0x7fc8ef98e9a9 [ 330.228744][T10601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.248331][T10601] RSP: 002b:00007fc8f07e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 330.256725][T10601] RAX: ffffffffffffffda RBX: 00007fc8efbb5fa0 RCX: 00007fc8ef98e9a9 [ 330.264677][T10601] RDX: 00002000000000c0 RSI: 0000000040305828 RDI: 0000000000000004 [ 330.272637][T10601] RBP: 00007fc8efa10d69 R08: 0000000000000000 R09: 0000000000000000 [ 330.280590][T10601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.288545][T10601] R13: 0000000000000000 R14: 00007fc8efbb5fa0 R15: 00007ffe7a994bd8 [ 330.296504][T10601] [ 330.299515][T10601] Modules linked in: [ 330.434800][T10601] ---[ end trace 0000000000000000 ]--- [ 330.440426][T10601] RIP: 0010:update_sit_entry+0x626/0xf30 [ 330.447048][T10601] Code: 01 00 00 48 8d 5d 20 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 67 35 2b fe 48 8b 1b 4c 01 e3 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 ae 07 00 00 0f b6 2b 89 e8 44 8b 74 24 [ 330.468764][T10601] RSP: 0018:ffffc9001c0bf2f0 EFLAGS: 00010202 [ 330.477573][T10601] RAX: 0000000000000002 RBX: 0000000000000011 RCX: 0000000000000002 [ 330.486341][T10601] RDX: ffff88801abf9dc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 330.494823][T10601] RBP: ffff88801dbe41b0 R08: ffff88801abf9dc0 R09: 0000000000000003 [ 330.503420][T10601] R10: 00000000ffffffff R11: 0000000000000002 R12: 0000000000000011 [ 330.511507][T10601] R13: ffff888031270000 R14: ffff888079edc6d1 R15: dffffc0000000000 [ 330.535225][T10601] FS: 00007fc8f07e36c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 330.546957][T10601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.560609][T10601] CR2: 0000001b2e71eff8 CR3: 000000005511e000 CR4: 00000000003506f0 [ 330.571244][T10601] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 330.586332][T10601] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 330.599482][T10601] Kernel panic - not syncing: Fatal exception [ 330.605776][T10601] Kernel Offset: disabled [ 330.610086][T10601] Rebooting in 86400 seconds..