last executing test programs: 16.975587856s ago: executing program 2 (id=473): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x44080) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 16.647024923s ago: executing program 2 (id=476): r0 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0xcc08, @mcast1}, 0x1c) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000400), &(0x7f0000000280)=0x60) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000) sendto$inet6(r0, &(0x7f00000001c0), 0xffdd, 0x40001, 0x0, 0x0) 15.543382783s ago: executing program 2 (id=480): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) epoll_create(0x81) syz_mount_image$udf(&(0x7f0000000500), &(0x7f00000000c0)='./file3\x00', 0x0, &(0x7f0000000700)=ANY=[], 0x43, 0xc11, &(0x7f0000000d00)="$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") 13.796929085s ago: executing program 3 (id=487): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$cec(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x2000000) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f00000003c0)={0xf0, 0x0, 0x2}) 12.496313101s ago: executing program 3 (id=492): add_key(&(0x7f0000002240)='dns_resolver\x00', &(0x7f0000002180)={'syz', 0x3}, &(0x7f0000000080)="ae", 0xfffff, 0xffffffffffffffff) 12.004057961s ago: executing program 3 (id=494): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000140)) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[], 0x50}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) close_range(r0, 0xffffffffffffffff, 0x0) 11.03761421s ago: executing program 3 (id=497): socket$igmp(0x2, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$unix(0x1, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r4, &(0x7f0000000280)=""/172, 0xac, 0xe0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r6, r5, 0x0, 0x6) read$watch_queue(r6, &(0x7f0000000540)=""/4096, 0x1000) 9.714583458s ago: executing program 2 (id=503): r0 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 8.905001084s ago: executing program 3 (id=505): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x80000000}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, 0xffffffffffffffff, 0x2000) 7.72422123s ago: executing program 0 (id=507): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'vcan0\x00', &(0x7f0000000100)=@ethtool_rxfh={0x46, 0x1, 0x5, 0x2e, 0x6, "6e63de", 0x9}}) 7.508088587s ago: executing program 0 (id=508): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x40) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f0000000080)) 6.414825727s ago: executing program 0 (id=509): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x68}, 0x1, 0x7}, 0x4a79a644ae8bc70) r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0xf) accept4$unix(r5, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={0x0}, 0x18) 5.475985363s ago: executing program 0 (id=511): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r4 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x0, 0x6, 0x100009, 0x8, 0x3ff}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r6, 0x0, 0x0) recvmsg(r6, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x12020) bind$inet(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 4.824367546s ago: executing program 1 (id=513): openat$vmci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000040, &(0x7f00000004c0)=ANY=[@ANYBLOB='gid=forget,umask=00000000000000000000003,gid=', @ANYRESDEC=0x0, @ANYBLOB=',session=00000000000000043620,gid=ignore,iocharset=euc-jp,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c6164696e6963622c6d6f64653d30303030303030303030303030303030303030303030332c6e6f7374726963742c009b801a9990a34c426430bf3757fbcea5d9a21b29b4ae2c6d10e74873111016bc74ff654722640a72d8cc5e210fef2b359e9e61ade82c60025773de99df3af6548534bfdef68d88ae15c726"], 0xfe, 0xc2d, &(0x7f0000000f40)="$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") syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x235, &(0x7f00000002c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0xfefc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r2, 0x0, &(0x7f0000000280)=""/58}, 0x20) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) fanotify_init(0x8, 0x40000) rename(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000480), 0x7f03) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x68042, 0x62) r4 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r4, 0x2007ffb) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={'L-', 0x2}, 0x16, 0x0) sendfile(r3, r4, 0x0, 0x1000000201005) 4.77993959s ago: executing program 2 (id=514): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) epoll_create(0x81) syz_mount_image$udf(&(0x7f0000000500), &(0x7f00000000c0)='./file3\x00', 0x0, &(0x7f0000000700)=ANY=[], 0x43, 0xc11, &(0x7f0000000d00)="$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") 4.41053488s ago: executing program 1 (id=515): socket$igmp(0x2, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$unix(0x1, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r4, &(0x7f0000000280)=""/172, 0xac, 0xe0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r6, r5, 0x0, 0x6) read$watch_queue(r6, &(0x7f0000000540)=""/4096, 0x1000) 3.987971835s ago: executing program 4 (id=517): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 3.446088579s ago: executing program 4 (id=518): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r0, 0xc048aeca, &(0x7f0000000080)) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) preadv2(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) dup(r1) 3.204172669s ago: executing program 1 (id=519): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a0000000000000000181200", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1, 0x0, 0x7}, 0x18) socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{0x0}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x4) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 2.319781681s ago: executing program 4 (id=520): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x10000, 0x6000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.316701901s ago: executing program 1 (id=521): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kexec_load(0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fsetxattr$security_capability(r4, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$FITRIM(r5, 0xc4009420, &(0x7f0000000180)={0x5}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r7 = accept$alg(r6, 0x0, 0x0) write$binfmt_script(r7, &(0x7f0000000600), 0xfec8) recvmmsg(r7, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/105, 0x69}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000740)=""/135, 0x87, 0x2000000}}, {{0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000000640)={0x0, 0x989680}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) 2.147165325s ago: executing program 0 (id=522): socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x6) read$watch_queue(r4, &(0x7f0000000540)=""/4096, 0x1000) 1.464748181s ago: executing program 4 (id=523): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000140)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[], 0x50}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNGETSNDBUF(r5, 0x800454d3, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) close_range(r0, 0xffffffffffffffff, 0x0) 1.275973786s ago: executing program 1 (id=524): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000080), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, 0x0) bpf$MAP_CREATE(0x700000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000008c0)) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x68}}, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000580)={0x1ff, 0x8, 0x2, {0x4, @sdr={0x30324c4a, 0x3}}, 0x8}) r6 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000019000100200000000000000080"], 0x30}}, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x1, 0xb, 0x0, "fbda6b21f1d7479797795318a9b4b19471c838f51ef5dfaee256e99c476c937d", 0x2036315a}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="8c4f388cc3ff6fa6c5538344e486e675aff358d64b2973e9d5033a94f2c1a7867168a9c9295740b7598d9d078cef5607699533abb6981a225a837fa582c9c4694d7d7321129efa459efea13953cccbc99bfdcd3caea291210d2f1424261fadb7fc892b39c1120b7f39bc5fb09f967b76a6b2a6eb63c24bf52dc98bfe20d592367b4f9258d5d95326e70504b2a95e5148f10304b571b589394dc4a8e8167f6f00c81a7cc00c42981840504d87f1abc29fd7f7989b942f70941a1dc71385eef8bec360271cd1463e38007038522b660048c44e595e501f14d8d41c3d6a1824a4020ab97c99f5b955e5666f99d660ea137373d2c563169f7cbccd2e72c43d132e95") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) 1.029349796s ago: executing program 0 (id=525): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x23b, &(0x7f0000000380)={0x0, 0xce0a, 0x10100, 0x3, 0x370, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r5, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], 0x0, 0x0) 289.017536ms ago: executing program 1 (id=526): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x4000000000fc) read$char_usb(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_disconnect(r0) 168.767137ms ago: executing program 4 (id=527): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0x4, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000180)='4\x00', 0x2) 95.032832ms ago: executing program 2 (id=528): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 72.273034ms ago: executing program 4 (id=529): socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$unix(0x1, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r3, &(0x7f0000000280)=""/172, 0xac, 0xe0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r5, r4, 0x0, 0x6) read$watch_queue(r5, &(0x7f0000000540)=""/4096, 0x1000) 0s ago: executing program 3 (id=530): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x240048d0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x966, 0x0, 0xfffc, 0xa}, {0x1, 0x4, 0x0, 0x80000000, 0x6, 0x9, 0x0, 0x40000000000000}, {0x0, 0x9, 0x53e5, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x2, @in=@multicast1, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x80, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000010000"], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00"/27], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.160' (ED25519) to the list of known hosts. [ 64.060543][ T4173] cgroup: Unknown subsys name 'net' [ 64.199956][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.715453][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.318711][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 67.351546][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 67.368825][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 67.404586][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 67.472308][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 67.582376][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.590381][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.599077][ T4184] device bridge_slave_0 entered promiscuous mode [ 67.607655][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.615093][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.623482][ T4185] device bridge_slave_0 entered promiscuous mode [ 67.636082][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.643411][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.652208][ T4186] device bridge_slave_0 entered promiscuous mode [ 67.664821][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.672185][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.680466][ T4184] device bridge_slave_1 entered promiscuous mode [ 67.688538][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.695628][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.703713][ T4185] device bridge_slave_1 entered promiscuous mode [ 67.713901][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.721249][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.729627][ T4186] device bridge_slave_1 entered promiscuous mode [ 67.788206][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.795341][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.803746][ T4183] device bridge_slave_0 entered promiscuous mode [ 67.829769][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.841908][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.858147][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.865484][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.874489][ T4183] device bridge_slave_1 entered promiscuous mode [ 67.884381][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.911844][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.925028][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.943739][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.953118][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.961240][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.969651][ T4187] device bridge_slave_0 entered promiscuous mode [ 68.007302][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.014994][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.023793][ T4187] device bridge_slave_1 entered promiscuous mode [ 68.033407][ T4185] team0: Port device team_slave_0 added [ 68.049418][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.076181][ T4185] team0: Port device team_slave_1 added [ 68.084315][ T4186] team0: Port device team_slave_0 added [ 68.092107][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.103664][ T4184] team0: Port device team_slave_0 added [ 68.125992][ T4186] team0: Port device team_slave_1 added [ 68.140326][ T4184] team0: Port device team_slave_1 added [ 68.155372][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.189843][ T4183] team0: Port device team_slave_0 added [ 68.208779][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.220403][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.227385][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.253924][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.276830][ T4183] team0: Port device team_slave_1 added [ 68.284229][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.292597][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.319363][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.347749][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.356634][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.385598][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.397588][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.405289][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.432695][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.455250][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.462501][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.488856][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.513086][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.520194][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.546499][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.573166][ T4187] team0: Port device team_slave_0 added [ 68.581575][ T4187] team0: Port device team_slave_1 added [ 68.596060][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.603180][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.629562][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.641903][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.649640][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.675776][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.751862][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.759180][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.785291][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.823542][ T4186] device hsr_slave_0 entered promiscuous mode [ 68.830913][ T4186] device hsr_slave_1 entered promiscuous mode [ 68.838262][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.845327][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.872003][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.885794][ T4184] device hsr_slave_0 entered promiscuous mode [ 68.893102][ T4184] device hsr_slave_1 entered promiscuous mode [ 68.900122][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.908697][ T4184] Cannot create hsr debugfs directory [ 68.917157][ T4183] device hsr_slave_0 entered promiscuous mode [ 68.919697][ T4194] Bluetooth: hci0: command 0x0409 tx timeout [ 68.923456][ T4190] Bluetooth: hci4: command 0x0409 tx timeout [ 68.930358][ T4194] Bluetooth: hci1: command 0x0409 tx timeout [ 68.942471][ T4194] Bluetooth: hci3: command 0x0409 tx timeout [ 68.945144][ T4183] device hsr_slave_1 entered promiscuous mode [ 68.948976][ T4194] Bluetooth: hci2: command 0x0409 tx timeout [ 68.961118][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.969146][ T4183] Cannot create hsr debugfs directory [ 68.977591][ T4185] device hsr_slave_0 entered promiscuous mode [ 68.984523][ T4185] device hsr_slave_1 entered promiscuous mode [ 68.991578][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.999958][ T4185] Cannot create hsr debugfs directory [ 69.128517][ T4187] device hsr_slave_0 entered promiscuous mode [ 69.135353][ T4187] device hsr_slave_1 entered promiscuous mode [ 69.143171][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.151964][ T4187] Cannot create hsr debugfs directory [ 69.436827][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.473503][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.489590][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.499926][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.527431][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.547578][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.571752][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.581968][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.632889][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.668447][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.690376][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.709507][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.728811][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.752806][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.786227][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.821811][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.891875][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.906801][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.923289][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.933507][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.944028][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.966277][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.986718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.997002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.011186][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.023533][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.032149][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.040527][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.050290][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.060154][ T3105] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.067622][ T3105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.079273][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.104390][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.114307][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.126040][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.137340][ T3105] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.145029][ T3105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.153718][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.162619][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.171868][ T3105] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.179043][ T3105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.187583][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.203993][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.214634][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.224575][ T3105] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.232436][ T3105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.262420][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.275026][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.292569][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.316607][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.339212][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.348925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.359720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.368678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.379163][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.389020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.398919][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.409307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.434521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.444202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.452670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.462921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.472058][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.479622][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.489054][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.498680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.508466][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.515904][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.525173][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.534228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.544368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.554349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.565451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.574961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.584251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.621848][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.632603][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.646111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.656621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.681123][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.703217][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.714581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.725045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.737291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.747090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.762696][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.801210][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.820193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.830799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.841630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.852469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.863615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.874719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.885631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.895685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.911849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.945371][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.967737][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.980211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.991490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.000442][ T4240] Bluetooth: hci2: command 0x041b tx timeout [ 71.006789][ T4240] Bluetooth: hci3: command 0x041b tx timeout [ 71.014241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.023850][ T4240] Bluetooth: hci1: command 0x041b tx timeout [ 71.032413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.041719][ T4240] Bluetooth: hci4: command 0x041b tx timeout [ 71.049279][ T4240] Bluetooth: hci0: command 0x041b tx timeout [ 71.056170][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.064098][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.074681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.118463][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.136700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.146780][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.154292][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.166950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.188565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.210878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.220779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.231300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.241161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.256451][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.268440][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.287081][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.300676][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.315264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.329347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.339629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.349856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.361121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.372596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.380820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.389152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.399556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.408356][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.414986][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.416152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.442269][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.465831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.481300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.513223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.523237][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.534674][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.562704][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.577248][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.586576][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.603956][ T3105] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.611247][ T3105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.639093][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.658835][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.670351][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.701896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.716506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.726568][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.733845][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.780338][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.796049][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.806005][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.816210][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.826938][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.836781][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.865069][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.881723][ T4183] device veth0_vlan entered promiscuous mode [ 71.891060][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.905432][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.914613][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.924700][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.934696][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.949947][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.960036][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.969746][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.981675][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.989888][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.997682][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.010810][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.022456][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.035875][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.052731][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.063793][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.077933][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.101320][ T4186] device veth0_vlan entered promiscuous mode [ 72.119957][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.131429][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.140646][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.150801][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.163110][ T4183] device veth1_vlan entered promiscuous mode [ 72.188896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.206010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.215261][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.234037][ T4186] device veth1_vlan entered promiscuous mode [ 72.271897][ T4187] device veth0_vlan entered promiscuous mode [ 72.280094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.290498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.299863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.311056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.319276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.329036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.337784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.346345][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.355732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.364684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.387152][ T4184] device veth0_vlan entered promiscuous mode [ 72.403784][ T4187] device veth1_vlan entered promiscuous mode [ 72.435079][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.452630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.461355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.470146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.478842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.486506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.495035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.504189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.515208][ T4186] device veth0_macvtap entered promiscuous mode [ 72.529238][ T4183] device veth0_macvtap entered promiscuous mode [ 72.561309][ T4186] device veth1_macvtap entered promiscuous mode [ 72.569870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.579721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.589151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.598551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.607306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.622844][ T4183] device veth1_macvtap entered promiscuous mode [ 72.642853][ T4185] device veth0_vlan entered promiscuous mode [ 72.656916][ T4187] device veth0_macvtap entered promiscuous mode [ 72.666481][ T4184] device veth1_vlan entered promiscuous mode [ 72.676219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.685902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.695225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.704439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.713661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.727734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.736192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.744492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.766977][ T4185] device veth1_vlan entered promiscuous mode [ 72.780989][ T4187] device veth1_macvtap entered promiscuous mode [ 72.794028][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.804451][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.816171][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.827478][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.845345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.855055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.863537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.872188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.881423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.893237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.903590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.922246][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.935148][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.947551][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.957534][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.967260][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.979899][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.991161][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.004941][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.016587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.027085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.036442][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.045165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.078535][ T4002] Bluetooth: hci0: command 0x040f tx timeout [ 73.081245][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.093885][ T4002] Bluetooth: hci4: command 0x040f tx timeout [ 73.099890][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.099924][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.099952][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.114846][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.137564][ T4002] Bluetooth: hci1: command 0x040f tx timeout [ 73.144353][ T4002] Bluetooth: hci3: command 0x040f tx timeout [ 73.149808][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.151144][ T4002] Bluetooth: hci2: command 0x040f tx timeout [ 73.167143][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.177642][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.189560][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.196998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.206278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.216192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.224988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.237326][ T4185] device veth0_macvtap entered promiscuous mode [ 73.283897][ T4185] device veth1_macvtap entered promiscuous mode [ 73.300661][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.313445][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.322854][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.331778][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.342138][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.354246][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.364316][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.374894][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.387159][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.426358][ T4184] device veth0_macvtap entered promiscuous mode [ 73.441022][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.454809][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.464225][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.480132][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.490392][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.499950][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.509374][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.527454][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.542840][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.554768][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.566261][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.579797][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.590899][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.602612][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.638930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.650215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.661086][ T4184] device veth1_macvtap entered promiscuous mode [ 73.692083][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.702796][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.713228][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.725497][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.735679][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.748015][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.761305][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.784661][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.795406][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.805373][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.813258][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.822082][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.836177][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.845369][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.854285][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.885039][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.893580][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.898656][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.904742][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.921033][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.931879][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.943983][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.954630][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.965998][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.976254][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.987795][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.000028][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.020974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.030589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.040175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.056057][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.066945][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.079221][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.090929][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.101129][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.112462][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.122783][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.133361][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.144867][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.175339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.184573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.201192][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.210473][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.219612][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.228964][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.282314][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.296719][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.323095][ T840] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.365709][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.391071][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.402849][ T840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.427303][ T840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.435620][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.442900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.452172][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.465653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.482829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.569132][ T3032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.577306][ T3032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.605624][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.628053][ T4296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.636134][ T4296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.676876][ T4300] loop3: detected capacity change from 0 to 512 [ 74.686628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.708386][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.722521][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.726929][ T3032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.744431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.782960][ T3032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.834886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.862048][ T4300] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 74.875039][ T4300] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.920859][ T4300] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #2: comm syz.3.4: corrupted inode contents [ 75.104491][ T4300] EXT4-fs error (device loop3): ext4_dirty_inode:6040: inode #2: comm syz.3.4: mark_inode_dirty error [ 75.148534][ T4300] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #2: comm syz.3.4: corrupted inode contents [ 75.168002][ T4190] Bluetooth: hci3: command 0x0419 tx timeout [ 75.181341][ T4190] Bluetooth: hci1: command 0x0419 tx timeout [ 75.285616][ T4190] Bluetooth: hci4: command 0x0419 tx timeout [ 75.363744][ T4190] Bluetooth: hci0: command 0x0419 tx timeout [ 75.376519][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 75.478849][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 75.565591][ T4300] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.4: mark_inode_dirty error [ 75.585415][ T4190] Bluetooth: hci2: command 0x0419 tx timeout [ 75.718418][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 75.728082][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 75.737329][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 75.748170][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 75.764714][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 75.774773][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 76.594347][ T4326] loop2: detected capacity change from 0 to 32768 [ 76.758309][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 76.767530][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 77.428129][ T4245] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.677401][ T4335] netlink: 6336 bytes leftover after parsing attributes in process `syz.1.10'. [ 77.858139][ T4245] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 77.888296][ T4245] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 77.917732][ T4245] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 77.949087][ T4245] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.066188][ T4194] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.200652][ T4240] Process accounting resumed [ 79.278769][ T4194] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.828577][ T4240] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.772792][ T4194] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 80.883762][ T4194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.151326][ T4194] usb 4-1: config 0 descriptor?? [ 81.309077][ T4194] usb 4-1: can't set config #0, error -71 [ 81.578084][ T4194] usb 4-1: USB disconnect, device number 2 [ 81.708033][ T4240] usb 2-1: Using ep0 maxpacket: 16 [ 81.829439][ T4240] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 81.850452][ T4375] block device autoloading is deprecated and will be removed. [ 81.868180][ T4240] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.907972][ T4240] usb 2-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 81.938180][ T4240] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.955021][ T4194] usb 5-1: USB disconnect, device number 2 [ 82.120552][ T4378] loop0: detected capacity change from 0 to 2048 [ 82.134405][ T4240] usb 2-1: config 0 descriptor?? [ 82.160781][ T4240] usb 2-1: can't set config #0, error -71 [ 82.168351][ T4240] usb 2-1: USB disconnect, device number 2 [ 82.198287][ T4379] loop2: detected capacity change from 0 to 2048 [ 82.227169][ T4378] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.244639][ T4382] loop4: detected capacity change from 0 to 512 [ 82.463438][ T4388] Zero length message leads to an empty skb [ 82.553274][ T4379] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.718131][ T4386] loop3: detected capacity change from 0 to 32768 [ 82.990055][ T4382] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 83.041633][ T4382] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.162920][ T4405] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.317112][ T4409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'. [ 86.578076][ T4409] device hsr_slave_1 left promiscuous mode [ 86.592617][ T4425] fuse: Bad value for 'fd' [ 86.728778][ T4418] netlink: 6336 bytes leftover after parsing attributes in process `syz.4.34'. [ 86.761504][ T1108] cfg80211: failed to load regulatory.db [ 86.885747][ T4431] loop0: detected capacity change from 0 to 2048 [ 86.943997][ T4431] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.943832][ T4453] fuse: blksize only supported for fuseblk [ 92.858948][ T4465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.49'. [ 93.273384][ T4465] device hsr_slave_1 left promiscuous mode [ 94.613993][ T4482] netlink: 40 bytes leftover after parsing attributes in process `syz.3.54'. [ 97.927933][ T26] audit: type=1326 audit(1753959280.631:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.66" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d919d69a9 code=0x0 [ 99.482915][ T4548] loop4: detected capacity change from 0 to 512 [ 99.567669][ T4550] loop2: detected capacity change from 0 to 256 [ 99.762534][ T4548] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 100.273750][ T4548] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 100.476104][ T4548] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.75: invalid indirect mapped block 4294967295 (level 0) [ 100.520608][ T4548] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.75: invalid indirect mapped block 4294967295 (level 1) [ 100.615163][ T4548] EXT4-fs (loop4): 1 orphan inode deleted [ 100.641616][ T4548] EXT4-fs (loop4): 1 truncate cleaned up [ 100.671934][ T4548] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.253012][ T4570] tipc: Started in network mode [ 101.258359][ T4570] tipc: Node identity 4, cluster identity 4711 [ 101.265209][ T4570] tipc: Node number set to 4 [ 102.519205][ T4584] loop3: detected capacity change from 0 to 2048 [ 102.619556][ T4584] ======================================================= [ 102.619556][ T4584] WARNING: The mand mount option has been deprecated and [ 102.619556][ T4584] and is ignored by this kernel. Remove the mand [ 102.619556][ T4584] option from the mount to silence this warning. [ 102.619556][ T4584] ======================================================= [ 102.795988][ T4590] hub 8-0:1.0: USB hub found [ 102.803212][ T4590] hub 8-0:1.0: 1 port detected [ 102.838873][ T4584] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 103.510430][ T4584] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.960924][ T4600] loop0: detected capacity change from 0 to 8 [ 104.150160][ T4600] SQUASHFS error: xz decompression failed, data probably corrupt [ 104.158907][ T4600] SQUASHFS error: Failed to read block 0x108: -5 [ 104.165273][ T4600] SQUASHFS error: Unable to read metadata cache entry [106] [ 104.172710][ T4600] SQUASHFS error: Unable to read inode 0x11f [ 104.626603][ T4606] netlink: 6336 bytes leftover after parsing attributes in process `syz.3.91'. [ 104.667159][ T4587] loop2: detected capacity change from 0 to 32768 [ 104.738648][ T4587] XFS: ikeep mount option is deprecated. [ 105.258213][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.589713][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 106.146094][ T4623] hub 8-0:1.0: USB hub found [ 106.151415][ T4623] hub 8-0:1.0: 1 port detected [ 106.248772][ T21] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 106.941917][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.049260][ T21] usb 1-1: Product: syz [ 107.054477][ T21] usb 1-1: Manufacturer: syz [ 107.069371][ T21] usb 1-1: SerialNumber: syz [ 107.133473][ T21] usb 1-1: config 0 descriptor?? [ 107.377527][ T4632] loop3: detected capacity change from 0 to 512 [ 107.474565][ T4632] EXT4-fs (loop3): Ignoring removed bh option [ 107.501923][ T21] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 107.538181][ T4632] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 107.601748][ T4632] EXT4-fs (loop3): 1 truncate cleaned up [ 107.607444][ T4632] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 108.673072][ T4638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.98'. [ 108.758023][ T21] usb write operation failed. (-71) [ 108.828595][ T21] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 108.862227][ T21] dvbdev: DVB: registering new adapter (Terratec H7) [ 108.888090][ T21] usb 1-1: media controller created [ 108.921346][ T21] usb read operation failed. (-71) [ 108.953498][ T21] usb write operation failed. (-71) [ 108.987083][ T21] dvb_usb_az6007: probe of 1-1:0.0 failed with error -5 [ 109.110674][ T4643] hub 8-0:1.0: USB hub found [ 109.115937][ T4643] hub 8-0:1.0: 1 port detected [ 109.861789][ T21] usb 1-1: USB disconnect, device number 2 [ 110.187346][ T4649] loop1: detected capacity change from 0 to 2048 [ 110.264976][ T4649] loop1: p1 < > p4 [ 110.298198][ T4649] loop1: p4 size 8388608 extends beyond EOD, truncated [ 110.372382][ T4652] loop0: detected capacity change from 0 to 2048 [ 110.434588][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 110.678213][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 110.799241][ T7] usb 5-1: config 42 has an invalid interface number: 199 but max is 0 [ 110.917773][ T4652] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.962130][ T7] usb 5-1: config 42 has an invalid interface number: 1 but max is 0 [ 111.164699][ T7] usb 5-1: config 42 has 2 interfaces, different from the descriptor's value: 1 [ 111.229158][ T7] usb 5-1: config 42 has no interface number 0 [ 111.298343][ T7] usb 5-1: config 42 interface 199 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.337929][ T7] usb 5-1: config 42 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 111.365930][ T4658] loop3: detected capacity change from 0 to 8 [ 111.391079][ T7] usb 5-1: config 42 interface 199 has no altsetting 0 [ 111.426776][ T4658] SQUASHFS error: xz decompression failed, data probably corrupt [ 111.434668][ T4658] SQUASHFS error: Failed to read block 0x108: -5 [ 111.441257][ T4658] SQUASHFS error: Unable to read metadata cache entry [106] [ 111.448630][ T4658] SQUASHFS error: Unable to read inode 0x11f [ 111.478341][ T7] usb 5-1: config 42 interface 1 has no altsetting 0 [ 111.650415][ T7] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=19.cb [ 111.669107][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.678672][ T7] usb 5-1: Product: syz [ 111.861886][ T7] usb 5-1: Manufacturer: syz [ 111.867307][ T7] usb 5-1: SerialNumber: syz [ 111.978246][ T4669] process 'syz.1.105' launched './file1' with NULL argv: empty string added [ 112.478141][ T7] usb 5-1: can't set config #42, error -71 [ 112.828134][ T7] usb 5-1: USB disconnect, device number 3 [ 113.652523][ T4692] loop2: detected capacity change from 0 to 40427 [ 113.733804][ T4692] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 113.741238][ T4692] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 113.753696][ T4692] F2FS-fs (loop2): invalid crc value [ 113.786978][ T4692] F2FS-fs (loop2): Found nat_bits in checkpoint [ 113.874740][ T4692] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 113.882709][ T4692] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 113.947718][ T4701] loop0: detected capacity change from 0 to 24 [ 114.189821][ T26] audit: type=1326 audit(1753959297.021:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4691 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed949009a9 code=0x7ffc0000 [ 114.211982][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.607350][ T26] audit: type=1326 audit(1753959297.051:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4691 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fed949009a9 code=0x7ffc0000 [ 114.630966][ T26] audit: type=1326 audit(1753959297.051:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4691 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed949009a9 code=0x7ffc0000 [ 114.655193][ T26] audit: type=1326 audit(1753959297.051:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4691 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed949009a9 code=0x7ffc0000 [ 114.679138][ T26] audit: type=1326 audit(1753959297.051:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4691 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fed949009a9 code=0x7ffc0000 [ 115.176661][ T26] audit: type=1326 audit(1753959297.061:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4691 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed949009a9 code=0x7ffc0000 [ 115.179061][ T4701] romfs: Unknown parameter 'xœìÚ¿JûPð3úûutt [ 115.179061][ T4701] T¢ ù¯uÕQÜ|ƒÐæ¦ÁSAÚ'Áá:ø‚Oà#dtÓEЗˆ\›š6•v©Åïgé—œžÞ^n–£ÅQh±D#ÚéÝœ¼®ÅQ¨´œý6³˜KCGD¤ÈfÙ­NSž¿êiFú77ü¨Ú¼6Þ‡ŸÍ-__±€{öÚ' [ 115.233060][ T4187] attempt to access beyond end of device [ 115.233060][ T4187] loop2: rw=2049, want=45104, limit=40427 [ 115.274343][ T26] audit: type=1326 audit(1753959297.081:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4691 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed949009a9 code=0x7ffc0000 [ 115.296416][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.306606][ T4710] loop3: detected capacity change from 0 to 1024 [ 115.522332][ T26] audit: type=1800 audit(1753959298.351:10): pid=4710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.120" name="bus" dev="loop3" ino=26 res=0 errno=0 [ 116.143962][ T3032] hfsplus: b-tree write err: -5, ino 4 [ 116.191537][ T4715] hub 8-0:1.0: USB hub found [ 116.208754][ T4715] hub 8-0:1.0: 1 port detected [ 116.459915][ T4725] loop3: detected capacity change from 0 to 8 [ 116.588464][ T4725] SQUASHFS error: xz decompression failed, data probably corrupt [ 116.596274][ T4725] SQUASHFS error: Failed to read block 0x108: -5 [ 116.603112][ T4725] SQUASHFS error: Unable to read metadata cache entry [106] [ 116.610496][ T4725] SQUASHFS error: Unable to read inode 0x11f [ 117.050635][ T4735] loop0: detected capacity change from 0 to 2048 [ 117.258362][ T4738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.126'. [ 117.696441][ T4740] device ip6erspan0 entered promiscuous mode [ 118.265600][ T4735] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.685033][ T4746] loop4: detected capacity change from 0 to 40427 [ 118.750991][ T4746] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 118.758080][ T4746] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 118.802160][ T4746] F2FS-fs (loop4): invalid crc value [ 118.881371][ T4746] F2FS-fs (loop4): Found nat_bits in checkpoint [ 119.295755][ T4746] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 119.302898][ T4746] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 119.622620][ T26] audit: type=1326 audit(1753959302.451:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 120.021068][ T4763] hub 8-0:1.0: USB hub found [ 120.026894][ T4763] hub 8-0:1.0: 1 port detected [ 120.201993][ T26] audit: type=1326 audit(1753959302.481:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 120.224439][ T26] audit: type=1326 audit(1753959302.481:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 120.225368][ T4184] attempt to access beyond end of device [ 120.225368][ T4184] loop4: rw=2049, want=45104, limit=40427 [ 120.247430][ T26] audit: type=1326 audit(1753959302.481:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 120.285922][ T26] audit: type=1326 audit(1753959302.481:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 120.308888][ T26] audit: type=1326 audit(1753959302.491:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 121.172241][ T4190] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 121.380416][ T4755] loop2: detected capacity change from 0 to 40427 [ 121.423016][ T4755] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x7 [ 121.451872][ T4778] loop1: detected capacity change from 0 to 8 [ 121.477916][ T4190] usb 4-1: Using ep0 maxpacket: 32 [ 121.490794][ T4755] F2FS-fs (loop2): Unrecognized mount option "barrier" or missing value [ 121.538875][ T4778] SQUASHFS error: xz decompression failed, data probably corrupt [ 121.547009][ T4778] SQUASHFS error: Failed to read block 0x108: -5 [ 121.553676][ T4778] SQUASHFS error: Unable to read metadata cache entry [106] [ 121.561837][ T4778] SQUASHFS error: Unable to read inode 0x11f [ 121.648347][ T4190] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.695142][ T4190] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.789839][ T4190] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.843165][ T4781] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 121.849259][ T4190] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.887039][ T4781] CIFS: Unable to determine destination address [ 121.887426][ T4190] usb 4-1: config 0 interface 0 has no altsetting 0 [ 122.187958][ T4190] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 122.202221][ T4190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.235420][ T4190] usb 4-1: config 0 descriptor?? [ 122.578388][ T4789] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 122.656573][ T4785] hub 8-0:1.0: USB hub found [ 122.678547][ T4785] hub 8-0:1.0: 1 port detected [ 122.913281][ T4190] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 122.951848][ T4190] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 123.291800][ T4190] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 123.300627][ T4190] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 123.318331][ T4190] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 123.472536][ T4190] corsair-cpro 0003:1B1C:0C10.0001: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 123.551778][ T4190] corsair-cpro: probe of 0003:1B1C:0C10.0001 failed with error -38 [ 123.662984][ T4190] usb 4-1: USB disconnect, device number 3 [ 123.950075][ T4801] fido_id[4801]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 124.344702][ T4804] netlink: 'syz.2.148': attribute type 1 has an invalid length. [ 124.741195][ T4810] loop0: detected capacity change from 0 to 40427 [ 124.846507][ T4810] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 124.853726][ T4810] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 124.894783][ T4810] F2FS-fs (loop0): invalid crc value [ 125.002203][ T4804] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.046789][ T4810] F2FS-fs (loop0): Found nat_bits in checkpoint [ 125.098664][ T4810] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 125.105959][ T4810] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 125.240153][ T26] audit: type=1326 audit(1753959308.071:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4807 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2c6c69a9 code=0x7ffc0000 [ 125.313909][ T4797] loop1: detected capacity change from 0 to 32768 [ 125.513289][ T26] audit: type=1326 audit(1753959308.101:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4807 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7feb2c6c69a9 code=0x7ffc0000 [ 125.627702][ T4797] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 125.648143][ T4809] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.682887][ T4809] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 125.717988][ T4797] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 125.765525][ T26] audit: type=1326 audit(1753959308.101:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4807 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2c6c69a9 code=0x7ffc0000 [ 125.769996][ T4809] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 125.808911][ T4183] attempt to access beyond end of device [ 125.808911][ T4183] loop0: rw=2049, want=45104, limit=40427 [ 125.840294][ T26] audit: type=1326 audit(1753959308.101:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4807 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7feb2c6c69a9 code=0x7ffc0000 [ 125.875369][ T26] audit: type=1326 audit(1753959308.111:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4807 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2c6c69a9 code=0x7ffc0000 [ 125.933556][ T4797] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 125.977522][ T26] audit: type=1326 audit(1753959308.111:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4807 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2c6c69a9 code=0x7ffc0000 [ 126.228189][ T4670] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 126.316088][ T4670] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 126.985005][ T4830] loop4: detected capacity change from 0 to 8 [ 127.004940][ T4670] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 688ms [ 127.024963][ T4670] gfs2: fsid=syz:syz.0: jid=0: Done [ 127.042397][ T4797] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 127.083761][ T4797] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 127.142607][ T4830] SQUASHFS error: xz decompression failed, data probably corrupt [ 127.150462][ T4830] SQUASHFS error: Failed to read block 0x108: -5 [ 127.156883][ T4830] SQUASHFS error: Unable to read metadata cache entry [106] [ 127.164685][ T4830] SQUASHFS error: Unable to read inode 0x11f [ 127.817910][ T4670] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 128.123370][ T4840] hub 8-0:1.0: USB hub found [ 128.140354][ T4840] hub 8-0:1.0: 1 port detected [ 128.258026][ T4670] usb 3-1: config 0 has no interfaces? [ 128.263616][ T4670] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 128.287956][ T4670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.311479][ T4670] usb 3-1: config 0 descriptor?? [ 128.562291][ T4857] netlink: 14 bytes leftover after parsing attributes in process `syz.1.158'. [ 128.588576][ T4783] usb 3-1: USB disconnect, device number 2 [ 129.114622][ T4857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.139558][ T4857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.148390][ T4194] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 129.338458][ T4857] bond0 (unregistering): Released all slaves [ 129.620335][ T4194] usb 1-1: Using ep0 maxpacket: 32 [ 129.823421][ T4872] netlink: 'syz.3.164': attribute type 1 has an invalid length. [ 129.988279][ T4194] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.836892][ T4872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.007987][ T4194] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.023560][ T4194] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.033651][ T4194] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.071398][ T4194] usb 1-1: config 0 interface 0 has no altsetting 0 [ 131.091372][ T4194] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 131.120980][ T4194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.194845][ T4194] usb 1-1: config 0 descriptor?? [ 131.213708][ T4880] loop1: detected capacity change from 0 to 4096 [ 131.290190][ T4869] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.537055][ T4869] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 132.130336][ T4869] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 132.211018][ T4894] hub 8-0:1.0: USB hub found [ 132.216295][ T4894] hub 8-0:1.0: 1 port detected [ 132.221632][ T4194] usbhid 1-1:0.0: can't add hid device: -71 [ 132.232799][ T4194] usbhid: probe of 1-1:0.0 failed with error -71 [ 132.492364][ T4194] usb 1-1: USB disconnect, device number 3 [ 132.843782][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.850728][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.960934][ T4909] netlink: 14 bytes leftover after parsing attributes in process `syz.4.175'. [ 136.032208][ T4918] loop3: detected capacity change from 0 to 256 [ 136.867563][ T4909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.929132][ T4909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.973127][ T4909] bond0 (unregistering): Released all slaves [ 137.026587][ T4926] loop1: detected capacity change from 0 to 2048 [ 138.979435][ T4926] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 139.681469][ T4938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 139.690813][ T4938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.795924][ T4950] loop0: detected capacity change from 0 to 1024 [ 140.957417][ T26] audit: type=1800 audit(1753959323.781:23): pid=4950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.183" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 141.029766][ T4938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.043122][ T4958] device ip6erspan0 entered promiscuous mode [ 141.051756][ T4952] hub 8-0:1.0: USB hub found [ 141.063630][ T4952] hub 8-0:1.0: 1 port detected [ 141.625214][ T4423] hfsplus: b-tree write err: -5, ino 4 [ 141.667597][ T4975] netlink: 6336 bytes leftover after parsing attributes in process `syz.2.189'. [ 141.998925][ T4988] loop0: detected capacity change from 0 to 256 [ 143.127223][ T4998] netlink: 14 bytes leftover after parsing attributes in process `syz.4.196'. [ 144.840687][ T5022] hub 8-0:1.0: USB hub found [ 144.846105][ T5022] hub 8-0:1.0: 1 port detected [ 145.536179][ T5017] loop1: detected capacity change from 0 to 4096 [ 145.828291][ T5017] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 146.674095][ T5040] loop2: detected capacity change from 0 to 256 [ 146.901359][ T5038] sched: RT throttling activated [ 147.915785][ T5045] capability: warning: `syz.4.210' uses 32-bit capabilities (legacy support in use) [ 148.948170][ T4944] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 149.678046][ T4944] usb 4-1: Using ep0 maxpacket: 16 [ 149.703654][ T5076] loop2: detected capacity change from 0 to 512 [ 149.755031][ T5074] loop4: detected capacity change from 0 to 1764 [ 149.792063][ T5081] loop1: detected capacity change from 0 to 8 [ 149.883508][ T5076] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 149.912854][ T4944] usb 4-1: unable to get BOS descriptor or descriptor too short [ 149.922934][ T5081] SQUASHFS error: xz decompression failed, data probably corrupt [ 149.931890][ T5081] SQUASHFS error: Failed to read block 0x108: -5 [ 149.939977][ T5081] SQUASHFS error: Unable to read metadata cache entry [106] [ 149.947308][ T5081] SQUASHFS error: Unable to read inode 0x11f [ 149.950336][ T5076] ext4 filesystem being mounted at /46/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.973200][ T5076] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #4: comm syz.2.220: corrupted inode contents [ 150.016112][ T5076] EXT4-fs error (device loop2): ext4_dirty_inode:6040: inode #4: comm syz.2.220: mark_inode_dirty error [ 150.038369][ T5076] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #4: comm syz.2.220: corrupted inode contents [ 150.055820][ T5076] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #4: comm syz.2.220: mark_inode_dirty error [ 150.078220][ T4944] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.088725][ T5076] Quota error (device loop2): write_blk: dquota write failed [ 150.096068][ T4944] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 150.099091][ T5076] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 150.125818][ T5076] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 150.164756][ T5087] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #4: comm syz.2.220: corrupted inode contents [ 150.166506][ T4944] usb 4-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.184899][ T5076] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.220: Failed to acquire dquot type 1 [ 150.265944][ T4944] usb 4-1: config 1 interface 0 has no altsetting 0 [ 150.277076][ T5087] EXT4-fs error (device loop2): ext4_dirty_inode:6040: inode #4: comm syz.2.220: mark_inode_dirty error [ 150.299773][ T4190] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 150.319763][ T5089] loop0: detected capacity change from 0 to 2048 [ 150.335318][ T5087] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #4: comm syz.2.220: corrupted inode contents [ 150.395379][ T5087] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #4: comm syz.2.220: mark_inode_dirty error [ 150.420615][ T5089] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.428557][ T5087] Quota error (device loop2): write_blk: dquota write failed [ 150.449549][ T5087] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 150.463516][ T5087] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.220: Failed to acquire dquot type 1 [ 150.498188][ T4944] usb 4-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 150.512126][ T4944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.539984][ T4944] usb 4-1: Product: syz [ 150.546951][ T4944] usb 4-1: Manufacturer: syz [ 150.559102][ T4944] usb 4-1: SerialNumber: syz [ 150.625799][ T5064] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 150.663887][ T4190] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 150.685470][ T4190] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.715276][ T4190] usb 5-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 150.738412][ T4190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.762203][ T4190] usb 5-1: config 0 descriptor?? [ 150.871524][ T4944] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input5 [ 151.188707][ T5101] hub 8-0:1.0: USB hub found [ 151.251400][ T4190] wacom 0003:056A:0317.0002: unknown main item tag 0x0 [ 151.275300][ T5101] hub 8-0:1.0: 1 port detected [ 151.302900][ T4190] wacom 0003:056A:0317.0002: unknown main item tag 0x0 [ 151.309978][ T4190] wacom 0003:056A:0317.0002: unknown main item tag 0x0 [ 151.330367][ T4190] wacom 0003:056A:0317.0002: unknown main item tag 0x0 [ 151.338853][ T4190] wacom 0003:056A:0317.0002: unknown main item tag 0x0 [ 151.346091][ T4190] wacom 0003:056A:0317.0002: unknown main item tag 0x0 [ 151.353141][ T4190] wacom 0003:056A:0317.0002: unknown main item tag 0x0 [ 151.361749][ T4190] wacom 0003:056A:0317.0002: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 151.381841][ T4190] wacom 0003:056A:0317.0002: hidraw0: USB HID v0.01 Device [HID 056a:0317] on usb-dummy_hcd.4-1/input0 [ 151.411068][ T4190] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0317.0002/input/input6 [ 151.460888][ T4193] Bluetooth: hci1: ACL packet too small [ 151.528507][ T13] usb 4-1: USB disconnect, device number 4 [ 151.533305][ T4190] usb 5-1: USB disconnect, device number 4 [ 151.551908][ T13] bcm5974 4-1:1.0: could not read from device [ 151.852102][ T5113] fido_id[5113]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 152.237855][ T5120] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 152.704077][ T5124] loop4: detected capacity change from 0 to 512 [ 154.666826][ T5124] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 154.818051][ T5124] ext4 filesystem being mounted at /47/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.194992][ T5124] EXT4-fs error (device loop4): ext4_do_update_inode:5204: inode #4: comm syz.4.236: corrupted inode contents [ 155.313478][ T5124] EXT4-fs error (device loop4): ext4_dirty_inode:6040: inode #4: comm syz.4.236: mark_inode_dirty error [ 155.326815][ T5140] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.240'. [ 155.345706][ T5139] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.240'. [ 155.374181][ T5124] EXT4-fs error (device loop4): ext4_do_update_inode:5204: inode #4: comm syz.4.236: corrupted inode contents [ 155.397550][ T5124] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #4: comm syz.4.236: mark_inode_dirty error [ 155.513079][ T5124] Quota error (device loop4): write_blk: dquota write failed [ 155.552458][ T5124] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 155.591594][ T5124] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 155.628367][ T5137] EXT4-fs error (device loop4): ext4_do_update_inode:5204: inode #4: comm syz.4.236: corrupted inode contents [ 155.730026][ T5150] hub 8-0:1.0: USB hub found [ 155.735291][ T5150] hub 8-0:1.0: 1 port detected [ 156.409009][ T5124] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.236: Failed to acquire dquot type 1 [ 156.504855][ T5137] EXT4-fs error (device loop4): ext4_dirty_inode:6040: inode #4: comm syz.4.236: mark_inode_dirty error [ 157.034538][ T5137] EXT4-fs error (device loop4): ext4_do_update_inode:5204: inode #4: comm syz.4.236: corrupted inode contents [ 157.115549][ T5137] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #4: comm syz.4.236: mark_inode_dirty error [ 157.158806][ T5137] Quota error (device loop4): write_blk: dquota write failed [ 157.167088][ T5137] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 157.197949][ T5137] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.236: Failed to acquire dquot type 1 [ 157.576382][ T5168] loop0: detected capacity change from 0 to 2048 [ 157.635579][ T5168] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.841621][ T5182] loop4: detected capacity change from 0 to 2048 [ 158.999806][ T5182] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.545484][ T5184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.253'. [ 160.685719][ T5186] loop2: detected capacity change from 0 to 32768 [ 160.968986][ T5200] hub 8-0:1.0: USB hub found [ 160.973796][ T5200] hub 8-0:1.0: 1 port detected [ 161.039981][ T5186] XFS (loop2): Mounting V5 Filesystem [ 161.333946][ T5218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.262'. [ 162.121065][ T5186] XFS (loop2): Ending clean mount [ 162.224692][ T4187] XFS (loop2): Unmounting Filesystem [ 164.246114][ T5245] loop4: detected capacity change from 0 to 2048 [ 164.387940][ T5245] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.606636][ T5249] hub 8-0:1.0: USB hub found [ 164.611548][ T5249] hub 8-0:1.0: 1 port detected [ 165.099988][ T5258] hub 8-0:1.0: USB hub found [ 165.105570][ T5258] hub 8-0:1.0: 1 port detected [ 166.374678][ T5267] loop3: detected capacity change from 0 to 2048 [ 166.523265][ T5267] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.762281][ T5317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.289'. [ 170.571780][ T5311] syz.0.291 (5311) used greatest stack depth: 18592 bytes left [ 170.686640][ T5322] Cannot find set identified by id 0 to match [ 171.748067][ T4240] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 171.866780][ T5333] loop4: detected capacity change from 0 to 256 [ 171.899092][ T5333] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.946581][ T5333] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.037681][ T4240] usb 1-1: Using ep0 maxpacket: 16 [ 172.269787][ T4240] usb 1-1: unable to get BOS descriptor or descriptor too short [ 172.388620][ T4240] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.400237][ T4240] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 172.419040][ T4240] usb 1-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.437911][ T4240] usb 1-1: config 1 interface 0 has no altsetting 0 [ 172.649031][ T4240] usb 1-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 172.667898][ T4240] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.676124][ T4240] usb 1-1: Product: syz [ 172.737597][ T4240] usb 1-1: Manufacturer: syz [ 172.754518][ T4240] usb 1-1: SerialNumber: syz [ 172.799107][ T5327] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 172.816603][ T5337] Device name cannot be null; rc = [-22] [ 173.090636][ T5339] loop4: detected capacity change from 0 to 32768 [ 173.120956][ T4240] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input10 [ 173.169162][ T5339] XFS: ikeep mount option is deprecated. [ 173.234323][ T5344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.301'. [ 173.262626][ T5339] XFS (loop4): Mounting V5 Filesystem [ 173.444631][ T5351] netlink: 6336 bytes leftover after parsing attributes in process `syz.1.302'. [ 173.478170][ T5339] XFS (loop4): Ending clean mount [ 173.492235][ T5339] XFS (loop4): Quotacheck needed: Please wait. [ 173.670558][ T5339] XFS (loop4): Quotacheck: Done. [ 173.810301][ T5364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.303'. [ 174.478682][ T26] audit: type=1326 audit(1753959357.311:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5338 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 174.859271][ T21] usb 1-1: USB disconnect, device number 4 [ 174.867903][ C1] bcm5974 1-1:1.0: trackpad urb failed: -19 [ 174.875561][ T21] bcm5974 1-1:1.0: could not read from device [ 174.885596][ T26] audit: type=1326 audit(1753959357.331:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5338 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 174.912543][ T26] audit: type=1326 audit(1753959357.331:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5338 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 174.937047][ T26] audit: type=1326 audit(1753959357.331:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5338 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 174.963086][ T26] audit: type=1326 audit(1753959357.341:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5338 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 174.985437][ T26] audit: type=1326 audit(1753959357.341:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5338 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 175.021218][ T26] audit: type=1326 audit(1753959357.341:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5338 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 175.084182][ T26] audit: type=1326 audit(1753959357.341:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5338 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 175.110333][ T26] audit: type=1326 audit(1753959357.341:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5338 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 175.188028][ T4944] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 175.284441][ T4184] XFS (loop4): Unmounting Filesystem [ 175.327897][ T26] audit: type=1326 audit(1753959357.341:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5338 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 175.608439][ T4944] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.702976][ T4944] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 175.898692][ T4944] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 176.011708][ T4944] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 176.071118][ T4944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.141960][ T4944] usb 4-1: config 0 descriptor?? [ 177.287588][ T4944] usb 4-1: USB disconnect, device number 6 [ 179.668109][ T5399] hub 8-0:1.0: USB hub found [ 179.703431][ T5399] hub 8-0:1.0: 1 port detected [ 179.944626][ T5422] loop3: detected capacity change from 0 to 2048 [ 180.058338][ T5422] EXT4-fs (loop3): error: journal path ./file0 is not a block device [ 182.246991][ T5417] loop2: detected capacity change from 0 to 32768 [ 182.627997][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 182.628034][ T26] audit: type=1326 audit(1753959365.441:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.3.327" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d919d69a9 code=0x0 [ 183.391008][ T5417] JBD2: recovery failed [ 183.429172][ T5417] (syz.2.321,5417,1):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 183.574629][ T5417] (syz.2.321,5417,0):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5 [ 183.607977][ T5417] (syz.2.321,5417,1):ocfs2_check_volume:2493 ERROR: status = -5 [ 183.655931][ T5417] (syz.2.321,5417,1):ocfs2_mount_volume:1824 ERROR: status = -5 [ 184.053695][ T5417] (syz.2.321,5417,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 184.341900][ T5460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.330'. [ 184.621119][ T5463] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 185.041559][ T5473] loop3: detected capacity change from 0 to 512 [ 185.137620][ T5473] EXT4-fs (loop3): Unrecognized mount option "fsuuid=d 6fef [ 185.137620][ T5473] c-155b-9U9a-2c i-5033f538" or missing value [ 185.295543][ T5479] tipc: Started in network mode [ 185.300855][ T5479] tipc: Node identity ac14140f, cluster identity 4711 [ 185.309307][ T5479] tipc: New replicast peer: 255.255.255.255 [ 185.316265][ T5479] tipc: Enabled bearer , priority 10 [ 185.528210][ T21] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 186.408022][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 186.440856][ T4190] tipc: Node number set to 2886997007 [ 186.548647][ T21] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 186.565087][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.609781][ T21] usb 1-1: config 0 descriptor?? [ 187.068467][ T21] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 187.096536][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 187.201660][ T21] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 187.210572][ T21] usb 1-1: media controller created [ 187.245514][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.338161][ T21] az6027: usb out operation failed. (-71) [ 187.368015][ T21] az6027: usb out operation failed. (-71) [ 187.373883][ T21] stb0899_attach: Driver disabled by Kconfig [ 187.395419][ T26] audit: type=1326 audit(1753959370.221:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5499 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 187.426669][ T21] az6027: no front-end attached [ 187.426669][ T21] [ 187.456914][ T26] audit: type=1326 audit(1753959370.251:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5499 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 187.479176][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.491444][ T21] az6027: usb out operation failed. (-71) [ 187.499133][ T21] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 187.527053][ T21] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 187.537678][ T26] audit: type=1326 audit(1753959370.251:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5499 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 187.560320][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.604689][ T21] dvb-usb: schedule remote query interval to 400 msecs. [ 187.607445][ T26] audit: type=1326 audit(1753959370.251:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5499 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 187.671032][ T26] audit: type=1326 audit(1753959370.251:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5499 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 187.693385][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.711562][ T21] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 187.745058][ T26] audit: type=1326 audit(1753959370.261:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5499 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 187.798348][ T21] usb 1-1: USB disconnect, device number 5 [ 187.856031][ T5494] loop2: detected capacity change from 0 to 32768 [ 187.862870][ T26] audit: type=1326 audit(1753959370.261:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5499 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 187.910444][ T26] audit: type=1326 audit(1753959370.261:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5499 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 187.947750][ T5494] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 187.984079][ T5494] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 188.009922][ T21] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 188.062127][ T26] audit: type=1326 audit(1753959370.261:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5499 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 188.135068][ T5494] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 188.188044][ T1111] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 188.194896][ T1111] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 188.242121][ T26] audit: type=1326 audit(1753959370.261:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5499 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 188.331601][ T26] audit: type=1326 audit(1753959370.261:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5499 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 188.456543][ T1111] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 261ms [ 188.597526][ T1111] gfs2: fsid=syz:syz.0: jid=0: Done [ 188.603510][ T5494] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 188.614318][ T26] audit: type=1326 audit(1753959370.261:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5499 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 188.643014][ T5518] hub 8-0:1.0: USB hub found [ 188.663495][ T5518] hub 8-0:1.0: 1 port detected [ 188.669376][ T26] audit: type=1326 audit(1753959370.261:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5499 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 188.692627][ T26] audit: type=1326 audit(1753959370.261:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5499 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdde5e9a9 code=0x7ffc0000 [ 188.931673][ T5527] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 188.938834][ T5527] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 189.122992][ T5533] tipc: Started in network mode [ 189.129571][ T5533] tipc: Node identity ac14140f, cluster identity 4711 [ 189.157823][ T5533] tipc: New replicast peer: 255.255.255.255 [ 189.164436][ T5533] tipc: Enabled bearer , priority 10 [ 189.178061][ T21] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 189.241643][ T5527] vhci_hcd vhci_hcd.0: Device attached [ 189.578437][ T21] usb 4-1: config 0 has no interfaces? [ 189.585210][ T21] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 189.637962][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.647937][ T21] usb 4-1: config 0 descriptor?? [ 189.768052][ T1111] vhci_hcd: vhci_device speed not set [ 189.847877][ T1111] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 189.953186][ T5531] vhci_hcd: unknown pdu 1 [ 189.953725][ T7] usb 4-1: USB disconnect, device number 7 [ 189.974307][ T4296] vhci_hcd: stop threads [ 189.980434][ T4296] vhci_hcd: release socket [ 190.027240][ T4296] vhci_hcd: disconnect device [ 190.038402][ T1111] vhci_hcd: vhci_device speed not set [ 190.264993][ T4245] tipc: Node number set to 2886997007 [ 191.238023][ T4245] Bluetooth: hci0: command 0x0406 tx timeout [ 191.264305][ T4245] Bluetooth: hci2: command 0x0406 tx timeout [ 191.346589][ T4245] Bluetooth: hci1: command 0x0406 tx timeout [ 191.366914][ T4245] Bluetooth: hci4: command 0x0406 tx timeout [ 191.386496][ T5554] loop4: detected capacity change from 0 to 764 [ 191.416581][ T5555] loop3: detected capacity change from 0 to 2048 [ 191.488750][ T5555] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 191.516025][ T5554] Symlink component flag not implemented [ 191.557265][ T5555] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 191.592148][ T5554] Symlink component flag not implemented [ 191.606066][ T5555] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.642343][ T5558] hub 8-0:1.0: USB hub found [ 191.647543][ T5558] hub 8-0:1.0: 1 port detected [ 192.373209][ T5554] Symlink component flag not implemented (129) [ 192.379929][ T5554] Symlink component flag not implemented (6) [ 192.402884][ T5554] rock: directory entry would overflow storage [ 192.452055][ T5554] rock: sig=0x4f50, size=4, remaining=3 [ 192.502540][ T5554] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 194.093735][ T5574] loop2: detected capacity change from 0 to 2048 [ 194.180308][ T5574] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.284506][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.292896][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.435318][ T5562] loop3: detected capacity change from 0 to 32768 [ 195.534089][ T5562] JBD2: recovery failed [ 195.617905][ T5562] (syz.3.366,5562,1):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 195.868151][ T5562] (syz.3.366,5562,0):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5 [ 195.949674][ T5562] (syz.3.366,5562,0):ocfs2_check_volume:2493 ERROR: status = -5 [ 196.118088][ T5562] (syz.3.366,5562,0):ocfs2_mount_volume:1824 ERROR: status = -5 [ 196.536947][ T5562] (syz.3.366,5562,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 197.067959][ T1111] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 197.426579][ T5602] loop0: detected capacity change from 0 to 32768 [ 197.468413][ T5602] XFS: ikeep mount option is deprecated. [ 197.600216][ T1111] usb 4-1: Using ep0 maxpacket: 32 [ 197.724539][ T5609] overlayfs: failed to clone upperpath [ 198.039294][ T1111] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 198.055942][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.066101][ T5602] XFS (loop0): Mounting V5 Filesystem [ 198.152004][ T1111] usb 4-1: config 0 descriptor?? [ 198.258335][ T1111] as10x_usb: device has been detected [ 198.274688][ T1111] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 198.293575][ T5602] XFS (loop0): Ending clean mount [ 198.301283][ T5602] XFS (loop0): Quotacheck needed: Please wait. [ 198.334769][ T1111] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 198.371085][ T1111] as10x_usb: error during firmware upload part1 [ 198.378270][ T1111] Registered device nBox DVB-T Dongle [ 198.458396][ T5594] udc-core: couldn't find an available UDC or it's busy [ 198.487997][ T5594] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 198.508142][ T1111] usb 4-1: USB disconnect, device number 8 [ 198.524610][ T5602] XFS (loop0): Quotacheck: Done. [ 198.567439][ T1111] Unregistered device nBox DVB-T Dongle [ 198.572561][ T1111] as10x_usb: device has been disconnected [ 198.662862][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 198.662874][ T26] audit: type=1326 audit(1753959381.491:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2c6c69a9 code=0x7ffc0000 [ 199.539817][ T26] audit: type=1326 audit(1753959381.541:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7feb2c6c69a9 code=0x7ffc0000 [ 199.563469][ T26] audit: type=1326 audit(1753959381.541:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2c6c69a9 code=0x7ffc0000 [ 199.589490][ T26] audit: type=1326 audit(1753959381.551:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7feb2c6c69a9 code=0x7ffc0000 [ 199.615094][ T26] audit: type=1326 audit(1753959381.551:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2c6c69a9 code=0x7ffc0000 [ 199.775265][ T26] audit: type=1326 audit(1753959381.551:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2c6c69a9 code=0x7ffc0000 [ 199.873597][ T26] audit: type=1326 audit(1753959381.551:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feb2c6c69a9 code=0x7ffc0000 [ 199.913894][ T26] audit: type=1326 audit(1753959381.551:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2c6c69a9 code=0x7ffc0000 [ 199.948379][ T26] audit: type=1326 audit(1753959381.551:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2c6c69a9 code=0x7ffc0000 [ 200.001453][ T26] audit: type=1326 audit(1753959381.551:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7feb2c6c69a9 code=0x7ffc0000 [ 200.223046][ T4183] XFS (loop0): Unmounting Filesystem [ 200.400401][ T5621] loop3: detected capacity change from 0 to 32768 [ 200.594355][ T5621] XFS (loop3): Mounting V5 Filesystem [ 200.808169][ T5621] XFS (loop3): Ending clean mount [ 200.882556][ T5621] XFS (loop3): Quotacheck needed: Please wait. [ 201.065841][ T5621] XFS (loop3): Quotacheck: Done. [ 202.022723][ T4186] XFS (loop3): Unmounting Filesystem [ 202.242589][ T5659] netlink: set zone limit has 8 unknown bytes [ 202.412387][ T5664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.391'. [ 203.594679][ T5666] hub 8-0:1.0: USB hub found [ 203.599554][ T5666] hub 8-0:1.0: 1 port detected [ 204.014752][ T5671] loop0: detected capacity change from 0 to 40427 [ 204.675373][ T5678] loop4: detected capacity change from 0 to 2048 [ 204.880307][ T5671] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 204.888147][ T5671] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 204.901177][ T5671] F2FS-fs (loop0): invalid crc value [ 204.932859][ T5678] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.982972][ T5671] F2FS-fs (loop0): Found nat_bits in checkpoint [ 205.022902][ T5683] loop2: detected capacity change from 0 to 1024 [ 205.043312][ T5671] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 205.050550][ T5671] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 205.947207][ T5683] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 206.062800][ T5683] EXT4-fs (loop2): shut down requested (1) [ 207.061865][ T5708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.404'. [ 207.780321][ T5709] hub 8-0:1.0: USB hub found [ 207.859062][ T5709] hub 8-0:1.0: 1 port detected [ 208.402869][ T5720] hub 8-0:1.0: USB hub found [ 208.407735][ T5720] hub 8-0:1.0: 1 port detected [ 209.078008][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 209.621423][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 209.737950][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.783404][ T23] usb 4-1: config 1 interface 0 has no altsetting 0 [ 209.863912][ T5738] sch_fq: defrate 4294967295 ignored. [ 209.894549][ T5738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.413'. [ 209.911129][ T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 209.939604][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 209.962757][ T23] usb 4-1: SerialNumber: syz [ 209.975526][ T5738] device bridge_slave_1 left promiscuous mode [ 210.011825][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.025280][ T9] tipc: Subscription rejected, illegal request [ 210.039647][ T23] hub 4-1:1.0: bad descriptor, ignoring hub [ 210.055900][ T23] hub: probe of 4-1:1.0 failed with error -5 [ 210.116067][ T5738] device bridge_slave_0 left promiscuous mode [ 210.123637][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.703622][ T4783] usb 4-1: reset high-speed USB device number 9 using dummy_hcd [ 211.366717][ T5766] device syzkaller1 entered promiscuous mode [ 211.961471][ T4002] usb 4-1: USB disconnect, device number 9 [ 213.283911][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 213.283926][ T26] audit: type=1326 audit(1753959396.111:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5783 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d919d69a9 code=0x7ffc0000 [ 213.731442][ T26] audit: type=1326 audit(1753959396.151:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5783 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d919d69a9 code=0x7ffc0000 [ 213.781002][ T5792] hub 8-0:1.0: USB hub found [ 213.786155][ T5792] hub 8-0:1.0: 1 port detected [ 214.182936][ T26] audit: type=1326 audit(1753959396.161:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5783 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f9d919d69a9 code=0x7ffc0000 [ 214.509333][ T26] audit: type=1326 audit(1753959396.161:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5783 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d919d69a9 code=0x7ffc0000 [ 214.531631][ T26] audit: type=1326 audit(1753959396.161:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5783 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d919d69a9 code=0x7ffc0000 [ 215.439709][ T5798] hub 8-0:1.0: USB hub found [ 215.444973][ T5798] hub 8-0:1.0: 1 port detected [ 217.589167][ T5800] loop3: detected capacity change from 0 to 40427 [ 217.682939][ T5800] F2FS-fs (loop3): Invalid segment/section count (31, 24 x 1) [ 217.703476][ T5800] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 217.744036][ T5800] F2FS-fs (loop3): Unrecognized mount option "errors=continue" or missing value [ 218.607585][ T5803] loop2: detected capacity change from 0 to 32768 [ 218.636148][ T5817] netlink: 'syz.3.441': attribute type 1 has an invalid length. [ 218.693074][ T5817] netlink: 'syz.3.441': attribute type 4 has an invalid length. [ 218.719708][ T5817] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.441'. [ 218.750550][ T5803] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.435 (5803) [ 218.805744][ T5821] genirq: Flags mismatch irq 4. 00000000 (pcmmio) vs. 00000000 (ttyS0) [ 218.905988][ T5803] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 218.942593][ T5803] BTRFS info (device loop2): using free space tree [ 218.983009][ T5803] BTRFS info (device loop2): has skinny extents [ 220.283508][ T5803] BTRFS error (device loop2): open_ctree failed: -12 [ 220.388843][ T5813] loop0: detected capacity change from 0 to 32768 [ 220.455776][ T5813] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.439 (5813) [ 220.680111][ T4396] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (4396) [ 220.702183][ T5813] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 220.742289][ T5813] BTRFS info (device loop0): using free space tree [ 220.759581][ T5813] BTRFS info (device loop0): has skinny extents [ 221.207709][ T5813] BTRFS error (device loop0): open_ctree failed: -12 [ 221.302402][ T5895] netlink: 14528 bytes leftover after parsing attributes in process `syz.0.451'. [ 221.581745][ T5898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.450'. [ 223.255636][ T5906] loop3: detected capacity change from 0 to 2048 [ 223.294028][ T5908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.454'. [ 223.462880][ T5906] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.134494][ T5931] loop0: detected capacity change from 0 to 8 [ 225.816130][ T26] audit: type=1800 audit(1753959408.641:116): pid=5936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.462" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 226.998731][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.466'. [ 229.627885][ T5891] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 229.878046][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 230.067982][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.892439][ T5983] capability: warning: `syz.0.477' uses deprecated v2 capabilities in a way that may be insecure [ 230.965421][ T5891] usb 5-1: config 0 has no interfaces? [ 230.989932][ T5983] printk: syz.0.477 (5983): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 231.068171][ T5891] usb 5-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a [ 231.082785][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 231.102647][ T5891] usb 5-1: Product: syz [ 231.114617][ T5891] usb 5-1: config 0 descriptor?? [ 231.253756][ T5993] hub 8-0:1.0: USB hub found [ 231.259165][ T5993] hub 8-0:1.0: 1 port detected [ 232.582642][ T7] usb 5-1: USB disconnect, device number 5 [ 234.266749][ T6018] loop2: detected capacity change from 0 to 2048 [ 234.536645][ T6025] loop4: detected capacity change from 0 to 32768 [ 235.271034][ T6033] hub 8-0:1.0: USB hub found [ 235.276571][ T6033] hub 8-0:1.0: 1 port detected [ 235.686645][ T6037] loop0: detected capacity change from 0 to 512 [ 235.938312][ T6037] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,barrier=0x0000000000001003,errors=remount-ro,noauto_da_alloc,dioread_lock,. Quota mode: writeback. [ 236.031250][ T6037] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.611690][ T6037] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.498: corrupted xattr block 19 [ 236.749792][ T6037] EXT4-fs (loop0): Remounting filesystem read-only [ 236.792476][ T26] audit: type=1800 audit(1753959419.621:117): pid=6037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.498" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 237.912890][ T6070] loop0: detected capacity change from 0 to 1024 [ 237.968321][ T5854] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 238.048620][ T6070] hfsplus: xattr searching failed [ 238.448390][ T5854] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 239.028111][ T5854] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 239.053539][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.092202][ T5854] usb 3-1: Product: syz [ 239.116880][ T5854] usb 3-1: Manufacturer: syz [ 239.136642][ T5854] usb 3-1: SerialNumber: syz [ 239.305090][ T5854] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 239.895345][ T5854] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 241.603865][ T5853] usb 3-1: USB disconnect, device number 3 [ 242.139734][ T26] audit: type=1326 audit(1753959424.971:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd306fd69a9 code=0x7ffc0000 [ 242.189341][ T26] audit: type=1326 audit(1753959424.971:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd306fd69a9 code=0x7ffc0000 [ 242.352651][ T26] audit: type=1326 audit(1753959424.991:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fd306fd69a9 code=0x7ffc0000 [ 242.450895][ T26] audit: type=1326 audit(1753959424.991:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd306fd69a9 code=0x7ffc0000 [ 242.526184][ T26] audit: type=1326 audit(1753959424.991:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd306fd69a9 code=0x7ffc0000 [ 242.597890][ T26] audit: type=1326 audit(1753959424.991:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fd306fd69a9 code=0x7ffc0000 [ 242.687835][ T26] audit: type=1326 audit(1753959424.991:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd306fd69a9 code=0x7ffc0000 [ 242.690141][ T6106] loop4: detected capacity change from 0 to 128 [ 242.777891][ T26] audit: type=1326 audit(1753959424.991:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd306fd69a9 code=0x7ffc0000 [ 242.817755][ T6107] loop2: detected capacity change from 0 to 2048 [ 242.850527][ T6106] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 242.867853][ T26] audit: type=1326 audit(1753959424.991:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fd306fd69a9 code=0x7ffc0000 [ 242.898008][ T6106] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 243.032887][ T26] audit: type=1326 audit(1753959424.991:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd306fd69a9 code=0x7ffc0000 [ 243.106153][ T6107] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 243.464374][ T6115] netlink: 'syz.1.519': attribute type 10 has an invalid length. [ 244.560734][ T6119] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 244.626539][ T6119] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 245.606165][ T6134] hub 8-0:1.0: USB hub found [ 245.611532][ T6134] hub 8-0:1.0: 1 port detected [ 245.702819][ T6136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.524'. [ 246.728673][ T6147] ================================================================== [ 246.737510][ T6147] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 246.746898][ T6147] Read of size 1 at addr ffff888078b32600 by task syz.3.530/6147 [ 246.754647][ T6147] [ 246.757000][ T6147] CPU: 1 PID: 6147 Comm: syz.3.530 Not tainted 5.15.189-syzkaller #0 [ 246.765082][ T6147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 246.775178][ T6147] Call Trace: [ 246.778482][ T6147] [ 246.781435][ T6147] dump_stack_lvl+0x168/0x230 [ 246.786147][ T6147] ? show_regs_print_info+0x20/0x20 [ 246.791374][ T6147] ? load_image+0x3b0/0x3b0 [ 246.795903][ T6147] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 246.801312][ T6147] ? xfrm_pol_bin_obj+0x140/0x140 [ 246.806378][ T6147] print_address_description+0x60/0x2d0 [ 246.811950][ T6147] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 246.818475][ T6147] kasan_report+0xdf/0x130 [ 246.822923][ T6147] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 246.829454][ T6147] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 246.835827][ T6147] ? xfrm_policy_addr_delta+0x212/0x340 [ 246.841647][ T6147] xfrm_policy_inexact_insert_node+0x599/0xb60 [ 246.847879][ T6147] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 246.854092][ T6147] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 246.860036][ T6147] xfrm_policy_inexact_insert+0xe0/0x1460 [ 246.865813][ T6147] ? __get_hash_thresh+0x105/0x410 [ 246.870977][ T6147] ? policy_hash_bysel+0x10a/0x570 [ 246.876148][ T6147] xfrm_policy_insert+0x112/0x930 [ 246.881231][ T6147] xfrm_add_policy+0x4d6/0x860 [ 246.886052][ T6147] ? xfrm_dump_sa_done+0xc0/0xc0 [ 246.891031][ T6147] ? apparmor_capable+0x12c/0x190 [ 246.896114][ T6147] ? __nla_parse+0x3c/0x50 [ 246.900582][ T6147] xfrm_user_rcv_msg+0x58d/0x860 [ 246.905565][ T6147] ? xfrm_netlink_rcv+0x90/0x90 [ 246.910483][ T6147] ? xfrm_netlink_rcv+0x66/0x90 [ 246.915369][ T6147] ? xfrm_netlink_rcv+0x66/0x90 [ 246.920271][ T6147] ? xfrm_netlink_rcv+0x66/0x90 [ 246.925167][ T6147] ? __mutex_lock_common+0x431/0x2390 [ 246.930588][ T6147] ? __skb_clone+0x480/0x790 [ 246.935319][ T6147] netlink_rcv_skb+0x1e0/0x430 [ 246.940132][ T6147] ? xfrm_netlink_rcv+0x90/0x90 [ 246.945035][ T6147] ? netlink_ack+0xb60/0xb60 [ 246.949692][ T6147] ? __lock_acquire+0x7c60/0x7c60 [ 246.954779][ T6147] xfrm_netlink_rcv+0x75/0x90 [ 246.959523][ T6147] netlink_unicast+0x774/0x920 [ 246.964351][ T6147] netlink_sendmsg+0x8ab/0xbc0 [ 246.969174][ T6147] ? netlink_getsockopt+0x560/0x560 [ 246.974432][ T6147] ? aa_sock_msg_perm+0x94/0x150 [ 246.979416][ T6147] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 246.984743][ T6147] ? security_socket_sendmsg+0x7c/0xa0 [ 246.990251][ T6147] ? netlink_getsockopt+0x560/0x560 [ 246.995501][ T6147] ____sys_sendmsg+0x5a2/0x8c0 [ 247.000307][ T6147] ? memset+0x1e/0x40 [ 247.004332][ T6147] ? __sys_sendmsg_sock+0x30/0x30 [ 247.009407][ T6147] ? import_iovec+0x6f/0xa0 [ 247.013957][ T6147] ___sys_sendmsg+0x1f0/0x260 [ 247.018728][ T6147] ? __sys_sendmsg+0x250/0x250 [ 247.023550][ T6147] ? percpu_counter_add_batch+0x13b/0x160 [ 247.029340][ T6147] ? __fdget+0x18b/0x210 [ 247.033622][ T6147] __se_sys_sendmsg+0x190/0x250 [ 247.038518][ T6147] ? __x64_sys_sendmsg+0x80/0x80 [ 247.043501][ T6147] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 247.049541][ T6147] ? lockdep_hardirqs_on+0x94/0x140 [ 247.054801][ T6147] do_syscall_64+0x4c/0xa0 [ 247.059272][ T6147] ? clear_bhb_loop+0x30/0x80 [ 247.063980][ T6147] ? clear_bhb_loop+0x30/0x80 [ 247.068701][ T6147] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.074649][ T6147] RIP: 0033:0x7f9d919d69a9 [ 247.079310][ T6147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.098960][ T6147] RSP: 002b:00007f9d8f83e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.107444][ T6147] RAX: ffffffffffffffda RBX: 00007f9d91bfdfa0 RCX: 00007f9d919d69a9 [ 247.115461][ T6147] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000000b [ 247.123471][ T6147] RBP: 00007f9d91a58d69 R08: 0000000000000000 R09: 0000000000000000 [ 247.131478][ T6147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.139482][ T6147] R13: 0000000000000000 R14: 00007f9d91bfdfa0 R15: 00007fff30650568 [ 247.147511][ T6147] [ 247.150562][ T6147] [ 247.152913][ T6147] Allocated by task 6147: [ 247.157262][ T6147] __kasan_kmalloc+0xb5/0xf0 [ 247.161891][ T6147] sk_prot_alloc+0xe7/0x210 [ 247.166430][ T6147] sk_alloc+0x2f/0x310 [ 247.170527][ T6147] pfkey_create+0xd8/0x560 [ 247.174976][ T6147] __sock_create+0x47b/0x900 [ 247.179606][ T6147] __sys_socket+0xe2/0x170 [ 247.184068][ T6147] __x64_sys_socket+0x76/0x80 [ 247.188779][ T6147] do_syscall_64+0x4c/0xa0 [ 247.193233][ T6147] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.199167][ T6147] [ 247.201519][ T6147] The buggy address belongs to the object at ffff888078b32000 [ 247.201519][ T6147] which belongs to the cache kmalloc-2k of size 2048 [ 247.215609][ T6147] The buggy address is located 1536 bytes inside of [ 247.215609][ T6147] 2048-byte region [ffff888078b32000, ffff888078b32800) [ 247.229099][ T6147] The buggy address belongs to the page: [ 247.234746][ T6147] page:ffffea0001e2cc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78b30 [ 247.244927][ T6147] head:ffffea0001e2cc00 order:3 compound_mapcount:0 compound_pincount:0 [ 247.253274][ T6147] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 247.261299][ T6147] raw: 00fff00000010200 ffffea00006e5a00 0000000300000003 ffff888016842000 [ 247.269905][ T6147] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 247.278606][ T6147] page dumped because: kasan: bad access detected [ 247.285040][ T6147] page_owner tracks the page as allocated [ 247.290754][ T6147] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4186, ts 67786411039, free_ts 67660422975 [ 247.309865][ T6147] get_page_from_freelist+0x1b77/0x1c60 [ 247.315440][ T6147] __alloc_pages+0x1e1/0x470 [ 247.320034][ T6147] new_slab+0xc0/0x4b0 [ 247.324108][ T6147] ___slab_alloc+0x81e/0xdf0 [ 247.328701][ T6147] __kmalloc_track_caller+0x1cb/0x330 [ 247.334074][ T6147] kmemdup+0x22/0x50 [ 247.337977][ T6147] neigh_sysctl_register+0x9b/0xa80 [ 247.343186][ T6147] addrconf_sysctl_register+0xac/0x1b0 [ 247.348651][ T6147] ipv6_add_dev+0xbf3/0x1190 [ 247.353242][ T6147] addrconf_notify+0x66f/0xf00 [ 247.358009][ T6147] raw_notifier_call_chain+0xcb/0x160 [ 247.363383][ T6147] register_netdevice+0x1275/0x16b0 [ 247.368680][ T6147] veth_newlink+0x8ed/0xda0 [ 247.373186][ T6147] rtnl_newlink+0x114c/0x17d0 [ 247.377874][ T6147] rtnetlink_rcv_msg+0x9b9/0xe60 [ 247.382811][ T6147] netlink_rcv_skb+0x1e0/0x430 [ 247.387581][ T6147] page last free stack trace: [ 247.392251][ T6147] free_unref_page_prepare+0x637/0x6c0 [ 247.397718][ T6147] free_unref_page+0x94/0x280 [ 247.402403][ T6147] __unfreeze_partials+0x1a5/0x200 [ 247.407520][ T6147] put_cpu_partial+0x12d/0x190 [ 247.412287][ T6147] qlist_free_all+0x35/0x90 [ 247.416791][ T6147] kasan_quarantine_reduce+0x150/0x160 [ 247.422257][ T6147] __kasan_slab_alloc+0x2f/0xd0 [ 247.427125][ T6147] slab_post_alloc_hook+0x4c/0x380 [ 247.432236][ T6147] kmem_cache_alloc_node+0x12d/0x2d0 [ 247.437525][ T6147] __alloc_skb+0xf4/0x750 [ 247.441856][ T6147] br_vlan_notify+0x260/0x750 [ 247.446530][ T6147] nbp_vlan_init+0x3f5/0x440 [ 247.451139][ T6147] br_add_if+0xb7b/0x11d0 [ 247.455471][ T6147] do_setlink+0xd84/0x3980 [ 247.459886][ T6147] rtnl_newlink+0x1419/0x17d0 [ 247.464561][ T6147] rtnetlink_rcv_msg+0x9b9/0xe60 [ 247.469510][ T6147] [ 247.471833][ T6147] Memory state around the buggy address: [ 247.477457][ T6147] ffff888078b32500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 247.485514][ T6147] ffff888078b32580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 247.493571][ T6147] >ffff888078b32600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 247.501630][ T6147] ^ [ 247.505692][ T6147] ffff888078b32680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 247.513751][ T6147] ffff888078b32700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 247.521809][ T6147] ================================================================== [ 247.529862][ T6147] Disabling lock debugging due to kernel taint [ 247.536059][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.542130][ T6147] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 247.549356][ T6147] CPU: 1 PID: 6147 Comm: syz.3.530 Tainted: G B 5.15.189-syzkaller #0 [ 247.558833][ T6147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 247.568891][ T6147] Call Trace: [ 247.572171][ T6147] [ 247.575103][ T6147] dump_stack_lvl+0x168/0x230 [ 247.579790][ T6147] ? show_regs_print_info+0x20/0x20 [ 247.584996][ T6147] ? load_image+0x3b0/0x3b0 [ 247.589509][ T6147] panic+0x2c9/0x7f0 [ 247.593407][ T6147] ? bpf_jit_dump+0xd0/0xd0 [ 247.597909][ T6147] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 247.603803][ T6147] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 247.609697][ T6147] ? _raw_spin_unlock+0x40/0x40 [ 247.614552][ T6147] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 247.621060][ T6147] check_panic_on_warn+0x80/0xa0 [ 247.626004][ T6147] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 247.632513][ T6147] end_report+0x6d/0xf0 [ 247.636671][ T6147] kasan_report+0x102/0x130 [ 247.641178][ T6147] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 247.647685][ T6147] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 247.654018][ T6147] ? xfrm_policy_addr_delta+0x212/0x340 [ 247.659568][ T6147] xfrm_policy_inexact_insert_node+0x599/0xb60 [ 247.665734][ T6147] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 247.671893][ T6147] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 247.677792][ T6147] xfrm_policy_inexact_insert+0xe0/0x1460 [ 247.683515][ T6147] ? __get_hash_thresh+0x105/0x410 [ 247.688628][ T6147] ? policy_hash_bysel+0x10a/0x570 [ 247.693740][ T6147] xfrm_policy_insert+0x112/0x930 [ 247.698767][ T6147] xfrm_add_policy+0x4d6/0x860 [ 247.703540][ T6147] ? xfrm_dump_sa_done+0xc0/0xc0 [ 247.708474][ T6147] ? apparmor_capable+0x12c/0x190 [ 247.713496][ T6147] ? __nla_parse+0x3c/0x50 [ 247.717913][ T6147] xfrm_user_rcv_msg+0x58d/0x860 [ 247.722859][ T6147] ? xfrm_netlink_rcv+0x90/0x90 [ 247.727719][ T6147] ? xfrm_netlink_rcv+0x66/0x90 [ 247.732569][ T6147] ? xfrm_netlink_rcv+0x66/0x90 [ 247.737418][ T6147] ? xfrm_netlink_rcv+0x66/0x90 [ 247.742268][ T6147] ? __mutex_lock_common+0x431/0x2390 [ 247.747647][ T6147] ? __skb_clone+0x480/0x790 [ 247.752240][ T6147] netlink_rcv_skb+0x1e0/0x430 [ 247.757003][ T6147] ? xfrm_netlink_rcv+0x90/0x90 [ 247.762120][ T6147] ? netlink_ack+0xb60/0xb60 [ 247.766714][ T6147] ? __lock_acquire+0x7c60/0x7c60 [ 247.771741][ T6147] xfrm_netlink_rcv+0x75/0x90 [ 247.776422][ T6147] netlink_unicast+0x774/0x920 [ 247.781188][ T6147] netlink_sendmsg+0x8ab/0xbc0 [ 247.785972][ T6147] ? netlink_getsockopt+0x560/0x560 [ 247.791172][ T6147] ? aa_sock_msg_perm+0x94/0x150 [ 247.796114][ T6147] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 247.801398][ T6147] ? security_socket_sendmsg+0x7c/0xa0 [ 247.806856][ T6147] ? netlink_getsockopt+0x560/0x560 [ 247.812145][ T6147] ____sys_sendmsg+0x5a2/0x8c0 [ 247.816915][ T6147] ? memset+0x1e/0x40 [ 247.820901][ T6147] ? __sys_sendmsg_sock+0x30/0x30 [ 247.826019][ T6147] ? import_iovec+0x6f/0xa0 [ 247.830525][ T6147] ___sys_sendmsg+0x1f0/0x260 [ 247.835205][ T6147] ? __sys_sendmsg+0x250/0x250 [ 247.839975][ T6147] ? percpu_counter_add_batch+0x13b/0x160 [ 247.845700][ T6147] ? __fdget+0x18b/0x210 [ 247.849943][ T6147] __se_sys_sendmsg+0x190/0x250 [ 247.854799][ T6147] ? __x64_sys_sendmsg+0x80/0x80 [ 247.859732][ T6147] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 247.865724][ T6147] ? lockdep_hardirqs_on+0x94/0x140 [ 247.870947][ T6147] do_syscall_64+0x4c/0xa0 [ 247.875370][ T6147] ? clear_bhb_loop+0x30/0x80 [ 247.880044][ T6147] ? clear_bhb_loop+0x30/0x80 [ 247.884719][ T6147] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.890614][ T6147] RIP: 0033:0x7f9d919d69a9 [ 247.895034][ T6147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.914639][ T6147] RSP: 002b:00007f9d8f83e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.923054][ T6147] RAX: ffffffffffffffda RBX: 00007f9d91bfdfa0 RCX: 00007f9d919d69a9 [ 247.931030][ T6147] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000000b [ 247.939030][ T6147] RBP: 00007f9d91a58d69 R08: 0000000000000000 R09: 0000000000000000 [ 247.946997][ T6147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.955017][ T6147] R13: 0000000000000000 R14: 00007f9d91bfdfa0 R15: 00007fff30650568 [ 247.963035][ T6147] [ 247.966327][ T6147] Kernel Offset: disabled [ 247.970657][ T6147] Rebooting in 86400 seconds..