last executing test programs: 3m47.386927837s ago: executing program 2 (id=2040): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000dc0)={0x0, 0x0}) recvmmsg$unix(r0, 0x0, 0x0, 0x52ade306269bbc1, &(0x7f0000000ec0)={r1, r2+60000000}) close(0x4) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x966, 0x0, 0xfffc, 0xa}, {0x1, 0x4, 0x0, 0x80000000, 0x6, 0x9, 0x0, 0x40000000000000}, {0x0, 0x9, 0x53e5, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x2, @in=@multicast1, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8) getsockopt(r3, 0x101, 0x4, &(0x7f00000003c0)=""/150, &(0x7f0000000540)=0x96) r5 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40}}, &(0x7f0000000180)='GPL\x00', 0x9, 0xc5, &(0x7f00000002c0)=""/197, 0x0, 0x8}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000190001000100000000000a0080201400000400050000081e0e000900"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x38, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0x20040800) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000080)='syz1\x00', 0x1ff) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) openat$cgroup(r7, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r9 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r8, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) 3m45.727532306s ago: executing program 2 (id=2047): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='fuseblk\x00', &(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='^,/\x00', &(0x7f0000000a80)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\x1c@\\\x00', &(0x7f00000002c0)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='\xe7', &(0x7f0000000340)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000380)='}\x00', &(0x7f0000000880)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xecQ\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849@\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xf4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\xf1C\xea!J\x19\xe1\xfe\x0f\x84\xdfY\x10\xed\x1c\xb2n\xc0ME\xaa\x9e\xd1f\x92q\xeb\xdb)\xcd1(>\x8e\x0f}\x03\xdd\xf8\x84\x9bz!\x80F\xc5ls< \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x1c\x9f\xbd\xcd\xea\xc3w\xa3\xf5\x1d.\x00\x00\x00\xa0\xf4\xe9\xe2\x83\xac\xde\x95cmvM\x12\xc1O\x1f#\xcd\x90\x1e\x03\x1e}\xe7w\xe7\"Oh`\xed\bM9\xaf\xa3BQ\xbf\xfd1\x1cG\xb5\xed\x86\xb9Q(\x19dZ\x8da\x008e*\x928\xcf\x0f\x0e\x05\x1dM?\x11$E\xc3\x12\x1e\xffI\x84t0D\xec\xf3T\xe2\xddJm\x87\xc9\xb1\xff\n\xa1\x13\xcbo\xc6\xda\x84\x02\xa3\x14\xf2q\x96\xa8Sa\xe4\x1f\x01\xa2]\xb2\xc9\xd5\xff\xfd\xf2\xb5\xf5\xef \xc7\x02\x927\xdb\xa5\a\x9eS\xb6\xe2\xbaL\x99n\xb4\xe3\xf7\x0eU\xc0', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='fuseblk\x00', 0x0, r0) 3m45.492304887s ago: executing program 2 (id=2050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a210200000000000000000a0000050900030073797a300000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) 3m44.478242012s ago: executing program 2 (id=2053): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m44.394444673s ago: executing program 2 (id=2054): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) r3 = io_uring_setup(0x76fc, &(0x7f0000000340)={0x0, 0xafd4, 0x1000, 0x5, 0x2d2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) r4 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x10000, 0x0, 0x28e, 0x0, r3}) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r3], 0x1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f0000636000/0x2000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) getsockopt$sock_buf(r5, 0x1, 0x21, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socketpair$unix(0x1, 0x2, 0x0, 0x0) 3m40.96431859s ago: executing program 2 (id=2067): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000dc0)={0x0, 0x0}) recvmmsg$unix(r0, 0x0, 0x0, 0x52ade306269bbc1, &(0x7f0000000ec0)={r1, r2+60000000}) close(0x4) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x966, 0x0, 0xfffc, 0xa}, {0x1, 0x4, 0x0, 0x80000000, 0x6, 0x9, 0x0, 0x40000000000000}, {0x0, 0x9, 0x53e5, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x2, @in=@multicast1, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8) getsockopt(r3, 0x101, 0x4, &(0x7f00000003c0)=""/150, &(0x7f0000000540)=0x96) r5 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40}}, &(0x7f0000000180)='GPL\x00', 0x9, 0xc5, &(0x7f00000002c0)=""/197, 0x0, 0x8}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000190001000100000000000a0080201400000400050000081e0e000900"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x38, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0x20040800) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000080)='syz1\x00', 0x1ff) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) openat$cgroup(r7, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r9 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r8, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) 3m25.106028219s ago: executing program 32 (id=2067): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000dc0)={0x0, 0x0}) recvmmsg$unix(r0, 0x0, 0x0, 0x52ade306269bbc1, &(0x7f0000000ec0)={r1, r2+60000000}) close(0x4) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x966, 0x0, 0xfffc, 0xa}, {0x1, 0x4, 0x0, 0x80000000, 0x6, 0x9, 0x0, 0x40000000000000}, {0x0, 0x9, 0x53e5, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x2, @in=@multicast1, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8) getsockopt(r3, 0x101, 0x4, &(0x7f00000003c0)=""/150, &(0x7f0000000540)=0x96) r5 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40}}, &(0x7f0000000180)='GPL\x00', 0x9, 0xc5, &(0x7f00000002c0)=""/197, 0x0, 0x8}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000190001000100000000000a0080201400000400050000081e0e000900"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x38, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0x20040800) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000080)='syz1\x00', 0x1ff) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) openat$cgroup(r7, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r9 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r8, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) 5.600250093s ago: executing program 4 (id=2735): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xffffffff, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4000094) sendmsg$nl_route_sched(r6, 0x0, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.210823404s ago: executing program 4 (id=2737): sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000054) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000400000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00!\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000013c0)={0x20, 0x1, 0x3, "a78863"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000002140)=ANY=[@ANYBLOB='@\r\r'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000002000)={0x20, 0x1, 0xd, "b68ef1c291785b8e54bef54eed"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x1, 0xd, "1b5f16d1fd98e4568487f083be"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2.928538366s ago: executing program 3 (id=2754): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) 2.684638807s ago: executing program 0 (id=2755): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000780)={0x3, {{0xa, 0x4e23, 0x9, @mcast1, 0x8}}}, 0x90) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.580419047s ago: executing program 3 (id=2756): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000001000/0x400000)=nil) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x4) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000300)={"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"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000001c0)=0x1fff) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.570039818s ago: executing program 0 (id=2757): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xffffffff, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4000094) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.16494889s ago: executing program 0 (id=2758): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0xfffffffc}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4008843) write$binfmt_aout(r1, &(0x7f0000000a40)={{0x107, 0xf0, 0x9, 0x33a, 0x191, 0x5, 0x39b, 0x3ff}}, 0x20) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1_to_hsr\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x7, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7b, 0x9}, 0x9c) write$P9_RSETATTR(r2, &(0x7f0000000140)={0x7, 0x1b, 0x1}, 0x7) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x806, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 2.01565232s ago: executing program 3 (id=2759): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb000000000000000002000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 2.01537054s ago: executing program 0 (id=2760): r0 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x0, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000000500), 0x0) r1 = epoll_create(0xaf2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000004c0)={0xe000200b}) 1.9815945s ago: executing program 3 (id=2761): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r3 = gettid() r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r3, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000023c0)=r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) r9 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r10 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r10, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c) sendmsg(r10, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) recvmmsg$unix(r9, &(0x7f0000002240)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001680), 0x0, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001880)=""/188, 0xbc}, {&(0x7f0000001940)=""/167, 0xa7}, {&(0x7f0000001a00)=""/9, 0x9}, {&(0x7f0000001a40)=""/135, 0x87}, {&(0x7f0000001b00)=""/205, 0xcd}, {&(0x7f0000001c00)=""/26, 0x1a}], 0x6, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d80)=""/70, 0x46}], 0x1}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001ec0)=""/61, 0x3d}, {&(0x7f0000001f00)=""/224, 0xe0}], 0x2}}, {{&(0x7f0000002040), 0x6e, &(0x7f0000002200)=[{&(0x7f00000021c0)=""/29, 0x1d}], 0x1}}], 0x5, 0x10002, &(0x7f0000002100)={0x77359400}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r7, @ANYBLOB="c46141a0c845c9a72f7680de078c359d26396001c6d7c4b4d80f82dfd579929490065b0673d5f6eab50456ad56aa44e8c6006d6ee93ff7cc3ce0435cb1c42fae019fd1d4ba02d04e5c33fb298166e20df03f38653ef3672c47024a9b3a39b04b040ce905377de40590d5d211646dd4201e793f6d39801f2a33f3a2fde03a942a0b34646d4fcb7891d7074cc8981f32c2a6d262"], 0x1c}}, 0x0) ioctl$sock_inet_SIOCGIFADDR(r8, 0x8915, &(0x7f00000020c0)={'pim6reg0\x00', {0x2, 0x0, @dev}}) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400003218f19c00010014000200fc02000000000000000000000000000105001600320000001400010020010000000000000000000000000001"], 0x4c}}, 0x40000) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000024c0)=ANY=[@ANYBLOB="6000000010003904000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036746e6c00003000028008000100", @ANYRES32=r7, @ANYBLOB="05000600480000000000000000000000001d92e5c19e1bba17b0ecceca6f2541e7275a42454a452d600417bb9de33ddeea8d102c3b2e"], 0x60}}, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000040)={'wlan0\x00', 0x2}) 1.877170981s ago: executing program 3 (id=2763): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r5 = socket$inet(0xa, 0x801, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) accept4(r5, 0x0, 0x0, 0x800) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x804) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x7, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x98, 0x160, 0x160, 0x0, 0x220, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0xff, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x0, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@ip={@private=0xa010102, @multicast1, 0xffffffff, 0xff000000, 'veth1\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0xff, 0x1, 0xc}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x7}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00', {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0xffff]}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) openat(0xffffffffffffff9c, 0x0, 0x107042, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, 0x0) 1.700414652s ago: executing program 4 (id=2765): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000780)={0x3, {{0xa, 0x4e23, 0x9, @mcast1, 0x8}}}, 0x90) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.696818002s ago: executing program 1 (id=2766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 1.578645783s ago: executing program 4 (id=2767): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xffffffff, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4000094) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.488413163s ago: executing program 1 (id=2768): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7c, 0xe) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r0, &(0x7f0000000740)="50fbdf12", 0x4, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000380)="c751b5b88abcaf8f615e0e330bf9d5009bcebaa2d214a4e7e99ab9119ea35eff49c30ca151b33001b5d1a1ed04ed04c4f8a1bd26a8e1f1a5603fe38e5b0ed624c2505e93e764e6593de0d9a59f4172598677e9c2a6b8fd8b6d0e28cca5dae647445b57e8a18c9fff7adad46db1f99ac016ea66c70dc4db44fbebd023ad53648000917dc90192a65d708c3fb5e5562769e68d9717c05a28bd7e1bc0f18da67b04301df75bdbff2111304cbfeb565e7d234ac007f7cfbf5c616dbf5accd252b4f938237eaacdc8", 0xc6) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) 1.154646864s ago: executing program 4 (id=2769): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb000000000000000002000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 1.099202665s ago: executing program 0 (id=2770): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0xd968d5b908ac0cde, 0x0, {0x0, 0x8}, {0x350, 0x20002}, {0xf4ef}, {0x0, 0x0, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x4}) 932.253156ms ago: executing program 1 (id=2771): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r3 = gettid() r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r3, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000023c0)=r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) r9 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r10 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r10, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c) sendmsg(r10, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) recvmmsg$unix(r9, &(0x7f0000002240)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001680), 0x0, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001880)=""/188, 0xbc}, {&(0x7f0000001940)=""/167, 0xa7}, {&(0x7f0000001a00)=""/9, 0x9}, {&(0x7f0000001a40)=""/135, 0x87}, {&(0x7f0000001b00)=""/205, 0xcd}, {&(0x7f0000001c00)=""/26, 0x1a}], 0x6, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d80)=""/70, 0x46}], 0x1}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001ec0)=""/61, 0x3d}, {&(0x7f0000001f00)=""/224, 0xe0}], 0x2}}, {{&(0x7f0000002040), 0x6e, &(0x7f0000002200)=[{&(0x7f00000021c0)=""/29, 0x1d}], 0x1}}], 0x5, 0x10002, &(0x7f0000002100)={0x77359400}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r7, @ANYBLOB="c46141a0c845c9a72f7680de078c359d26396001c6d7c4b4d80f82dfd579929490065b0673d5f6eab50456ad56aa44e8c6006d6ee93ff7cc3ce0435cb1c42fae019fd1d4ba02d04e5c33fb298166e20df03f38653ef3672c47024a9b3a39b04b040ce905377de40590d5d211646dd4201e793f6d39801f2a33f3a2fde03a942a0b34646d4fcb7891d7074cc8981f32c2a6d262"], 0x1c}}, 0x0) ioctl$sock_inet_SIOCGIFADDR(r8, 0x8915, &(0x7f00000020c0)={'pim6reg0\x00', {0x2, 0x0, @dev}}) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400003218f19c00010014000200fc02000000000000000000000000000105001600320000001400010020010000000000000000000000000001"], 0x4c}}, 0x40000) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000024c0)=ANY=[@ANYBLOB="6000000010003904000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036746e6c00003000028008000100", @ANYRES32=r7, @ANYBLOB="05000600480000000000000000000000001d92e5c19e1bba17b0ecceca6f2541e7275a42454a452d600417bb9de33ddeea8d102c3b2e"], 0x60}}, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000040)={'wlan0\x00', 0x2}) 903.951046ms ago: executing program 4 (id=2772): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_channels={0x3c, 0x1, 0x9040, 0x3, 0x1, 0xc000, 0x8, 0x2f, 0x1ff}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000006c0)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) socket(0x6, 0x3, 0x5) pselect6(0x40, &(0x7f0000000000)={0xb66, 0xfffffffffffffeff, 0x1, 0x5, 0x7f, 0x41, 0x5, 0xb}, &(0x7f00000000c0)={0x6, 0x9, 0x7fff, 0xfffffffffffffffc, 0x8, 0xffff, 0x3, 0xe0}, &(0x7f0000000100)={0x37, 0x1, 0xff, 0x9273, 0x1, 0x6, 0x1, 0xfffffffffffffff9}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000300)={&(0x7f00000002c0)={[0xe79]}, 0x8}) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, 0x0, 0x0) pselect6(0x40, &(0x7f0000000340)={0x4, 0x1f, 0x95300000000, 0x2, 0xb3, 0x0, 0x1001, 0x1}, &(0x7f00000004c0)={0x3, 0x800000000000004, 0x3, 0x8, 0x2, 0x3, 0x8, 0x1}, &(0x7f00000003c0)={0xb, 0x4796, 0x10003, 0x7, 0x6, 0x4, 0x401, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000480)={&(0x7f0000000440)={[0x3]}, 0x8}) ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x89e3, 0x0) 886.824976ms ago: executing program 0 (id=2773): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0xfd, 0x32, 0x8, 0x424, 0xcf18, 0x90db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0xe8, 0x0, 0x0, 0x1f, 0xc6, 0xba}}]}}]}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) 780.122516ms ago: executing program 1 (id=2774): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x0, 0x1, "f700", '\x00', "0300", "fcffffff", ["5089986400005cacf10000b6", "808effffff6000000200", "0c436d743c97c443084000", "ff81000000008000"]}) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000140)={0x4, 0xffffffffffff8000, 0x4, 0x2, 0x7f, 0xa, "d5489c8e68145db0da91c3d32931b17e", 0x5, 0x7, 0x81, 0x8, 0x2, 0x4, 0x3}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, 0x0, 0x0) 383.860738ms ago: executing program 3 (id=2775): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x10) timer_create(0x0, 0x0, 0x0) 132.28051ms ago: executing program 1 (id=2776): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000780)={0x3, {{0xa, 0x4e23, 0x9, @mcast1, 0x8}}}, 0x90) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=2777): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x90, 0x0, 0xfffffffffffffffd, {0x2, 0x0, 0x0, 0xa6, 0x4000, 0x0, {0x3, 0x100000000000, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000001240)={0x50, 0x0, r1, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x100) ioctl(r2, 0x2202, 0x0) kernel console output (not intermixed with test programs): ] type 1 family 0 port 8472 - 0 [ 279.530879][T10304] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.539963][T10304] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.549029][T10304] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.366583][T10343] tipc: Enabled bearer , priority 0 [ 280.397158][T10343] tipc: Resetting bearer [ 280.447035][T10342] tipc: Disabling bearer [ 280.578158][T10349] tipc: Enabling of bearer rejected, failed to enable media [ 280.680629][T10356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1484'. [ 281.431273][T10389] tipc: Enabling of bearer rejected, failed to enable media [ 281.819409][T10404] tipc: New replicast peer: 0.0.0.0 [ 281.831882][T10404] tipc: Enabled bearer , priority 10 [ 282.114913][ T5796] Bluetooth: hci2: command 0x0406 tx timeout [ 282.620279][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1519'. [ 282.775456][T10451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1522'. [ 282.955412][ T5888] tipc: Node number set to 510984192 [ 283.038245][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1528'. [ 283.104115][T10468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1530'. [ 283.568321][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1541'. [ 283.597670][T10492] tipc: Enabling of bearer rejected, failed to enable media [ 284.408227][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1551'. [ 284.469281][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 284.591450][T10527] tipc: Enabling of bearer rejected, failed to enable media [ 285.394126][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 285.652019][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'. [ 285.743579][T10557] tipc: Enabling of bearer rejected, failed to enable media [ 286.688970][T10599] tipc: Enabling of bearer rejected, failed to enable media [ 287.118096][T10612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1581'. [ 287.512739][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1588'. [ 287.663276][T10631] tipc: Enabling of bearer rejected, failed to enable media [ 288.537643][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1608'. [ 288.575497][T10681] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 288.656275][T10683] tipc: Enabling of bearer rejected, failed to enable media [ 288.674486][ T5105] Bluetooth: hci2: command 0x0406 tx timeout [ 289.285099][T10709] syzkaller0: entered promiscuous mode [ 289.290654][T10709] syzkaller0: entered allmulticast mode [ 289.315597][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'. [ 289.360857][T10714] syz_tun: entered allmulticast mode [ 289.451083][T10717] tipc: Enabled bearer , priority 0 [ 289.467222][T10717] syzkaller0: entered promiscuous mode [ 289.472962][T10717] syzkaller0: entered allmulticast mode [ 289.574572][T10717] tipc: Resetting bearer [ 289.594653][T10716] tipc: Resetting bearer [ 289.654877][T10716] tipc: Disabling bearer [ 289.667715][T10726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1627'. [ 289.859265][T10734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1631'. [ 290.072921][T10744] syzkaller0: entered promiscuous mode [ 290.091601][T10744] syzkaller0: entered allmulticast mode [ 290.357661][T10751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1639'. [ 290.371326][T10751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1639'. [ 290.693988][T10768] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1643'. [ 290.716988][T10765] tipc: Enabled bearer , priority 0 [ 290.737622][T10765] tipc: Resetting bearer [ 290.766380][T10764] tipc: Disabling bearer [ 291.125294][T10787] bridge0: port 3(hsr0) entered blocking state [ 291.142410][T10787] bridge0: port 3(hsr0) entered disabled state [ 291.149285][T10787] hsr0: entered allmulticast mode [ 291.159290][T10787] hsr_slave_0: entered allmulticast mode [ 291.169618][T10787] hsr_slave_1: entered allmulticast mode [ 291.184020][T10787] hsr0: entered promiscuous mode [ 292.646361][T10829] syzkaller1: entered promiscuous mode [ 292.652886][T10829] syzkaller1: entered allmulticast mode [ 292.869514][T10833] syzkaller0: entered promiscuous mode [ 292.878941][T10833] syzkaller0: entered allmulticast mode [ 293.617316][T10854] netlink: 67 bytes leftover after parsing attributes in process `syz.3.1680'. [ 293.824994][T10858] syzkaller0: entered promiscuous mode [ 293.836905][T10858] syzkaller0: entered allmulticast mode [ 293.874421][ T5105] Bluetooth: hci2: command 0x0406 tx timeout [ 294.811562][T10875] syzkaller0: entered promiscuous mode [ 294.820914][T10875] syzkaller0: entered allmulticast mode [ 294.832082][T10880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1692'. [ 294.887407][T10877] tipc: Enabling of bearer rejected, failed to enable media [ 295.143443][T10895] netlink: 'syz.2.1695': attribute type 7 has an invalid length. [ 295.183970][T10895] netlink: 'syz.2.1695': attribute type 8 has an invalid length. [ 295.637624][T10914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1703'. [ 295.695181][T10915] syzkaller0: entered promiscuous mode [ 295.704017][T10915] syzkaller0: entered allmulticast mode [ 295.890561][T10921] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1706'. [ 295.954331][ T5105] Bluetooth: hci2: command 0x0406 tx timeout [ 295.994811][T10923] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 296.175013][T10931] tipc: Enabling of bearer rejected, failed to enable media [ 297.042333][T10962] syzkaller0: entered promiscuous mode [ 297.048730][T10962] syzkaller0: entered allmulticast mode [ 297.257610][T10971] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.391582][T10971] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.455732][T10982] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1724'. [ 297.513270][T10971] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.544928][T10983] netlink: set zone limit has 8 unknown bytes [ 297.556552][T10982] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 297.623368][T10971] bond0: (slave netdevsim0): Releasing backup interface [ 297.639494][T10971] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.839265][T10971] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.893936][T10971] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.972816][T10971] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.045438][T10971] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.475632][T10997] syzkaller0: entered promiscuous mode [ 298.493854][T10997] syzkaller0: entered allmulticast mode [ 298.715932][T11001] syzkaller0: entered promiscuous mode [ 298.721483][T11001] syzkaller0: entered allmulticast mode [ 298.836532][T11010] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 299.489654][T11032] syzkaller0: entered promiscuous mode [ 299.500763][T11032] syzkaller0: entered allmulticast mode [ 299.625490][T11036] tipc: Enabled bearer , priority 0 [ 299.637685][T11036] tipc: Resetting bearer [ 299.656976][T11035] tipc: Disabling bearer [ 299.852770][T11040] loop1: detected capacity change from 0 to 1024 [ 301.465349][T11062] syzkaller0: entered promiscuous mode [ 301.483209][T11062] syzkaller0: entered allmulticast mode [ 301.549255][T11066] loop0: detected capacity change from 0 to 512 [ 301.558717][T11066] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 301.574269][T11066] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 301.598702][T11066] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 301.613316][T11066] EXT4-fs (loop0): 1 truncate cleaned up [ 301.620401][T11066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.028137][ T5894] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 302.273791][ T5894] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 302.282957][ T5894] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 302.305391][ T5894] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 302.328902][ T5894] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 302.347430][ T5894] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 302.372740][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.395794][ T5894] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 302.418886][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 302.443416][ T5894] usb 2-1: Product: syz [ 302.449227][ T5894] usb 2-1: Manufacturer: syz [ 302.475426][ T5894] cdc_wdm 2-1:1.0: skipping garbage [ 302.484014][ T5894] cdc_wdm 2-1:1.0: skipping garbage [ 302.505446][ T5894] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 302.511443][ T5894] cdc_wdm 2-1:1.0: Unknown control protocol [ 302.630209][T11082] syzkaller0: entered promiscuous mode [ 302.638868][T11082] syzkaller0: entered allmulticast mode [ 302.720400][ T5894] usb 2-1: USB disconnect, device number 2 [ 302.851313][T11088] syzkaller0: entered promiscuous mode [ 302.857299][T11088] syzkaller0: entered allmulticast mode [ 303.611826][T11106] syzkaller0: entered promiscuous mode [ 303.619042][T11106] syzkaller0: entered allmulticast mode [ 303.836799][T11111] syzkaller0: entered promiscuous mode [ 303.842591][T11111] syzkaller0: entered allmulticast mode [ 304.291646][T11127] syzkaller0: entered promiscuous mode [ 304.301997][T11127] syzkaller0: entered allmulticast mode [ 304.347325][T11129] loop3: detected capacity change from 0 to 512 [ 305.077883][T11152] syzkaller0: entered promiscuous mode [ 305.090128][T11152] syzkaller0: entered allmulticast mode [ 306.057028][T11172] loop2: detected capacity change from 0 to 128 [ 306.143074][T11175] syzkaller0: entered promiscuous mode [ 306.153807][T11175] syzkaller0: entered allmulticast mode [ 306.936897][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 306.946917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 306.955896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 306.965814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 306.975709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 306.984335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 307.812747][T11201] loop1: detected capacity change from 0 to 128 [ 308.787722][T11215] bridge0: port 1(team_slave_0) entered blocking state [ 308.795325][T11215] bridge0: port 1(team_slave_0) entered disabled state [ 308.802408][T11215] team_slave_0: entered allmulticast mode [ 308.812977][T11215] team_slave_0: entered promiscuous mode [ 309.004977][ T28] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 309.167984][T11226] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.179424][T11226] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 309.203839][ T28] usb 2-1: Using ep0 maxpacket: 32 [ 309.222025][ T28] usb 2-1: New USB device found, idVendor=2770, idProduct=9051, bcdDevice=d9.3e [ 309.231674][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.256700][ T28] usb 2-1: Product: syz [ 309.278274][ T28] usb 2-1: Manufacturer: syz [ 309.290296][ T28] usb 2-1: SerialNumber: syz [ 309.323880][ T28] usb 2-1: config 0 descriptor?? [ 309.332064][T11226] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.340838][ T28] gspca_main: sq905c-2.14.0 probing 2770:9051 [ 309.353842][T11226] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 309.455673][T11226] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.471203][T11226] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 309.555073][ T28] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 309.574554][ T28] sq905c 2-1:0.0: Get version command failed [ 309.580830][ T28] sq905c: probe of 2-1:0.0 failed with error -71 [ 309.596597][ T28] usb 2-1: USB disconnect, device number 3 [ 309.620207][T11226] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.637002][T11226] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 309.762667][T11226] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 309.776662][T11226] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 309.801872][T11226] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 309.812683][T11226] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 309.842120][T11226] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 309.852174][T11226] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 309.879909][T11226] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 309.891039][T11226] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 310.375290][T11238] loop3: detected capacity change from 0 to 128 [ 311.446840][T11230] loop2: detected capacity change from 0 to 40427 [ 311.480730][T11230] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x7ffff [ 311.658645][T11263] syzkaller0: entered promiscuous mode [ 311.666164][T11263] syzkaller0: entered allmulticast mode [ 312.695734][T11268] syzkaller0: entered promiscuous mode [ 312.713622][T11268] syzkaller0: entered allmulticast mode [ 316.623276][T11318] loop2: detected capacity change from 0 to 32768 [ 316.642619][T11318] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 316.669368][T11318] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 316.746940][ T5788] ocfs2: Unmounting device (7,2) on (node local) [ 317.131445][T11350] syzkaller0: entered promiscuous mode [ 317.138486][T11350] syzkaller0: entered allmulticast mode [ 317.392081][T11362] process 'syz.3.1876' launched './file0' with NULL argv: empty string added [ 317.481804][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.087404][T11397] syzkaller0: entered promiscuous mode [ 318.092961][T11397] syzkaller0: entered allmulticast mode [ 318.270599][T11404] syzkaller0: entered promiscuous mode [ 318.276431][T11404] syzkaller0: entered allmulticast mode [ 318.809630][T11431] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1907'. [ 318.957558][T11436] bridge0: port 2(hsr_slave_0) entered blocking state [ 318.964838][T11436] bridge0: port 2(hsr_slave_0) entered disabled state [ 318.977408][T11436] hsr_slave_0: entered allmulticast mode [ 318.995247][T11436] hsr_slave_0: left allmulticast mode [ 319.176869][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1911'. [ 321.031227][T11462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1918'. [ 321.107186][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1920'. [ 323.199772][T11483] 9pnet_fd: Insufficient options for proto=fd [ 323.695157][T11494] loop1: detected capacity change from 0 to 8 [ 323.736583][T11492] syzkaller0: entered promiscuous mode [ 323.742214][T11492] syzkaller0: entered allmulticast mode [ 323.900087][T11496] syzkaller0: entered promiscuous mode [ 323.906630][T11496] syzkaller0: entered allmulticast mode [ 323.911219][T11497] SQUASHFS error: Failed to read block 0x1ec: -5 [ 323.919188][T11497] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 324.243399][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 324.243817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 324.294028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 324.346080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 324.537894][T11500] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1930'. [ 324.572120][T11502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1931'. [ 325.967429][T11520] bridge0: port 1(hsr_slave_1) entered blocking state [ 326.029715][T11520] bridge0: port 1(hsr_slave_1) entered disabled state [ 326.044926][T11520] hsr_slave_1: entered allmulticast mode [ 326.052401][T11520] hsr_slave_1: left allmulticast mode [ 326.187144][T11522] syzkaller0: entered promiscuous mode [ 326.223929][T11522] syzkaller0: entered allmulticast mode [ 326.441449][T11506] loop0: detected capacity change from 0 to 32768 [ 326.536242][T11506] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 326.601326][T11528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1941'. [ 326.641380][T11530] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1942'. [ 326.711367][ T5787] ocfs2: Unmounting device (7,0) on (node local) [ 326.894697][ T5881] IPVS: starting estimator thread 0... [ 327.003981][T11535] IPVS: using max 19 ests per chain, 45600 per kthread [ 327.492550][T11547] bridge0: port 4(hsr_slave_1) entered blocking state [ 327.501826][T11547] bridge0: port 4(hsr_slave_1) entered disabled state [ 329.829216][T11558] loop1: detected capacity change from 0 to 4096 [ 330.733592][T11558] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 331.068651][T11570] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1953'. [ 332.007923][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1952'. [ 333.326575][T11591] loop1: detected capacity change from 0 to 2048 [ 333.338900][T11575] loop2: detected capacity change from 0 to 32768 [ 333.349121][T11591] NILFS (loop1): invalid segment: Magic number mismatch [ 333.357133][T11591] NILFS (loop1): trying rollback from an earlier position [ 333.382936][T11591] NILFS (loop1): recovery complete [ 333.384489][T11575] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1955 (11575) [ 333.408347][T11594] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 333.490237][T11575] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 333.518227][T11575] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 333.542043][T11575] BTRFS info (device loop2): using free space tree [ 333.695846][T11575] BTRFS info (device loop2): enabling ssd optimizations [ 333.862034][T11575] BTRFS info (device loop2): auto enabling async discard [ 334.013878][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 334.013897][ T27] audit: type=1326 audit(1761733435.002:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11588 comm="syz.0.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ec98efc9 code=0x7fc00000 [ 334.315533][T11616] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1962'. [ 334.369898][ T5788] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 335.384229][T11625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1966'. [ 336.073494][T11628] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 336.105111][T11628] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 336.205408][T11628] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 336.285206][T11628] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 336.289323][T11633] vivid-007: ================= START STATUS ================= [ 336.304573][T11633] vivid-007: Enable Output Cropping: true [ 336.312953][T11633] vivid-007: Enable Output Composing: true [ 336.319533][T11633] vivid-007: Enable Output Scaler: true [ 336.327616][T11633] vivid-007: Tx RGB Quantization Range: Automatic [ 336.335601][T11633] vivid-007: Transmit Mode: HDMI [ 336.342015][T11633] vivid-007: Display Present: true inactive [ 336.349322][T11633] vivid-007: Hotplug Present: 0x00000001 [ 336.357436][T11633] vivid-007: RxSense Present: 0x00000001 [ 336.363714][T11633] vivid-007: EDID Present: 0x00000001 [ 336.369275][T11633] vivid-007: ================== END STATUS ================== [ 336.482911][T11633] loop2: detected capacity change from 0 to 8 [ 336.492208][T11633] squashfs: Unknown parameter 'euid>00000000000000000000' [ 336.856448][T11628] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 336.877902][T11628] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 336.932902][T11628] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 336.948347][T11628] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 337.206425][T11628] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 337.219610][T11628] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 337.239598][T11628] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 337.267469][T11628] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 338.051677][T11628] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 338.084119][T11628] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 338.104994][T11628] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 338.113318][T11628] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 338.917140][ T27] audit: type=1326 audit(1761733439.912:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.2.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc398f8efc9 code=0x7fc00000 [ 340.680034][T11674] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.841420][T11674] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.976664][T11674] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.041444][T11680] syz_tun: entered allmulticast mode [ 341.053582][T11679] syz_tun: left allmulticast mode [ 341.081776][T11682] loop1: detected capacity change from 0 to 512 [ 341.103243][T11682] EXT4-fs: Invalid want_extra_isize 2 [ 341.116311][T11674] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.342367][T11674] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.353430][T11690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1989'. [ 341.371583][T11674] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.390825][T11674] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.413851][T11674] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.524954][T11696] syzkaller0: entered promiscuous mode [ 341.530694][T11696] syzkaller0: entered allmulticast mode [ 342.150497][ T27] audit: type=1326 audit(1761733443.152:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11687 comm="syz.1.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8836f8efc9 code=0x7fc00000 [ 344.289085][T11717] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1998'. [ 344.537520][T11724] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.613360][T11724] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.705725][T11731] syzkaller0: entered promiscuous mode [ 344.711415][T11731] syzkaller0: entered allmulticast mode [ 344.844420][T11724] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.921503][T11724] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.550471][T11724] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.580725][T11724] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.608378][T11724] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.631643][T11724] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.951457][T11744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2008'. [ 348.495425][T11757] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 348.505609][T11757] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 348.527245][T11755] tipc: Enabling of bearer rejected, failed to enable media [ 348.539728][T11755] syzkaller0: entered promiscuous mode [ 348.546978][T11755] syzkaller0: entered allmulticast mode [ 348.583209][T11757] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 348.593274][T11757] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 348.602499][T11759] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2014'. [ 348.673209][T11757] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 348.684538][T11757] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 348.701542][T11761] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2015'. [ 348.752131][T11757] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 348.769195][T11763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2016'. [ 348.773468][T11757] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 348.899522][T11767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2018'. [ 348.946896][T11757] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 348.960126][T11757] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 348.980858][T11757] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 348.994087][T11757] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 349.017061][T11757] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 349.032005][T11757] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 349.052543][T11757] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 349.063816][T11757] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 350.477369][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2025'. [ 350.589994][T11788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2027'. [ 353.025174][T11794] loop3: detected capacity change from 0 to 65536 [ 353.071626][T11794] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 353.098525][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2034'. [ 353.164712][T11794] XFS (loop3): Ending clean mount [ 353.188189][T11794] XFS (loop3): Quotacheck needed: Please wait. [ 353.191830][T11820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2036'. [ 353.268574][T11794] XFS (loop3): Quotacheck: Done. [ 353.314880][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 354.206872][T11829] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2038'. [ 354.232086][ T5794] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 354.255870][T11832] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.312067][T11832] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.330519][T11833] syzkaller0: entered promiscuous mode [ 354.353147][T11833] syzkaller0: entered allmulticast mode [ 354.418597][T11832] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.626687][T11832] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.754175][T11837] loop1: detected capacity change from 0 to 128 [ 354.862326][T11837] qnx6: wrong signature (magic) in superblock #1. [ 355.681706][T11832] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.729805][T11832] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.761929][T11832] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.789056][T11832] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.800289][T11846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2045'. [ 355.849942][T11848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2046'. [ 356.074627][T11855] tipc: Enabling of bearer rejected, failed to enable media [ 356.348768][T11861] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2050'. [ 357.170256][T11876] syzkaller0: entered promiscuous mode [ 357.184807][T11876] syzkaller0: entered allmulticast mode [ 357.340172][T11885] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.369711][T11886] mmap: syz.2.2054 (11886) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 357.422511][T11885] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.480193][T11885] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.522432][T11885] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.622352][T11885] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.645402][T11885] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.676037][T11885] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.698614][T11885] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.871368][T11890] syzkaller0: entered promiscuous mode [ 357.877550][T11890] syzkaller0: entered allmulticast mode [ 357.986746][T11892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2059'. [ 360.342044][T11910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2062'. [ 360.798962][T11921] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.872277][T11921] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.532066][T11921] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.755617][T11921] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.788218][T11926] syzkaller0: entered promiscuous mode [ 361.804283][T11926] syzkaller0: entered allmulticast mode [ 361.827914][T11928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2069'. [ 362.939267][T11932] loop1: detected capacity change from 0 to 512 [ 363.704699][T11932] EXT4-fs: journaled quota format not specified [ 364.422909][T11941] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2073'. [ 364.600122][T11945] loop0: detected capacity change from 0 to 512 [ 364.609096][T11945] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 364.623686][T11945] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 364.633545][T11945] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 364.651496][T11945] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 364.659928][T11945] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 364.673405][T11945] EXT4-fs (loop0): orphan cleanup on readonly fs [ 364.697363][T11945] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2075: bg 0: block 34: padding at end of block bitmap is not set [ 364.718098][T11945] Quota error (device loop0): write_blk: dquota write failed [ 364.731006][T11945] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 364.742579][T11945] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2075: Failed to acquire dquot type 1 [ 364.788993][T11945] EXT4-fs (loop0): 1 truncate cleaned up [ 364.804700][T11945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 369.258935][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.104952][T11961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2078'. [ 371.698948][T11974] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2082'. [ 372.737060][T11986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2087'. [ 373.006770][T11921] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.425473][T11993] overlayfs: missing 'lowerdir' [ 376.461347][T11921] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.545028][T11921] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.658068][T11921] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.777887][T12008] syzkaller0: entered promiscuous mode [ 376.793532][T12008] syzkaller0: entered allmulticast mode [ 377.506378][T12014] tipc: Enabling of bearer rejected, failed to enable media [ 377.510710][ T5796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 377.560755][ T5796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 377.570908][ T5796] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 377.579126][ T5796] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 377.608256][ T5796] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 377.620368][ T5796] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.659886][T12014] syzkaller0: entered promiscuous mode [ 377.688268][T12014] syzkaller0: entered allmulticast mode [ 378.043780][ T5796] Bluetooth: hci2: command 0x0406 tx timeout [ 378.372351][T12024] syzkaller0: entered promiscuous mode [ 378.378129][T12024] syzkaller0: entered allmulticast mode [ 379.096961][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.713822][ T5796] Bluetooth: hci4: command tx timeout [ 379.802900][T12031] loop0: detected capacity change from 0 to 65536 [ 379.839501][T12038] syzkaller0: entered promiscuous mode [ 379.861903][T12038] syzkaller0: entered allmulticast mode [ 379.890740][T12031] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 379.940487][T12031] XFS (loop0): Ending clean mount [ 379.947735][T12012] chnl_net:caif_netlink_parms(): no params data found [ 379.973372][T12031] XFS (loop0): Quotacheck needed: Please wait. [ 380.039240][T12031] XFS (loop0): Quotacheck: Done. [ 380.181744][ T5787] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 380.273387][T12012] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.282353][T12012] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.292522][T12012] bridge_slave_0: entered allmulticast mode [ 380.300720][T12012] bridge_slave_0: entered promiscuous mode [ 380.311404][T12012] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.318880][T12012] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.326288][T12012] bridge_slave_1: entered allmulticast mode [ 380.333987][T12012] bridge_slave_1: entered promiscuous mode [ 380.373129][T12054] A link change request failed with some changes committed already. Interface uj?Zj may have been left with an inconsistent configuration, please check. [ 380.397412][T12012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.423939][T12012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.471043][T12056] loop1: detected capacity change from 0 to 2048 [ 380.497894][T12056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 380.527721][T12012] team0: Port device team_slave_0 added [ 380.541826][T12012] team0: Port device team_slave_1 added [ 380.547916][T12056] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 380.552450][T12056] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 380.578191][T12056] EXT4-fs (loop1): This should not happen!! Data will be lost [ 380.578191][T12056] [ 380.588174][T12056] EXT4-fs (loop1): Total free blocks count 0 [ 380.595907][T12056] EXT4-fs (loop1): Free/Dirty block details [ 380.604112][T12056] EXT4-fs (loop1): free_blocks=2415919104 [ 380.610026][T12056] EXT4-fs (loop1): dirty_blocks=32 [ 380.614593][T12062] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 380.615638][T12056] EXT4-fs (loop1): Block reservation details [ 380.635310][T12056] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 380.654813][T12012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.661879][T12012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.689279][T12012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.704642][T12012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.711723][T12012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.739176][T12012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.822113][T12012] hsr_slave_0: entered promiscuous mode [ 380.834327][T12012] hsr_slave_1: entered promiscuous mode [ 380.842256][T12012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.856521][T12012] Cannot create hsr debugfs directory [ 381.803741][ T5796] Bluetooth: hci4: command tx timeout [ 382.012249][T12012] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 382.117862][T12012] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 382.235723][T12012] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 382.540542][T12012] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 383.035109][T12012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.085441][T12012] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.170919][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.178217][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.217537][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.224814][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.446134][T12085] syzkaller0: entered promiscuous mode [ 383.474628][T12085] syzkaller0: entered allmulticast mode [ 383.703291][T12083] loop3: detected capacity change from 0 to 65536 [ 383.717104][T12067] loop1: detected capacity change from 0 to 40427 [ 383.729899][T12067] F2FS-fs (loop1): Invalid log sectorsize (14) [ 383.739220][T12067] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 383.751646][T12067] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff [ 383.767198][T12083] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 383.871368][T12083] XFS (loop3): Ending clean mount [ 383.877608][ T5796] Bluetooth: hci4: command tx timeout [ 383.907291][T12083] XFS (loop3): Quotacheck needed: Please wait. [ 383.963109][T12083] XFS (loop3): Quotacheck: Done. [ 383.969225][T12099] loop0: detected capacity change from 0 to 4096 [ 383.993099][T12099] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 384.013833][T12099] EXT4-fs (loop0): Test dummy encryption mode enabled [ 384.030990][T12012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.067245][T12099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.112001][ T5794] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 384.139838][T12099] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 80: comm syz.0.2111: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 384.203096][T12099] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz.0.2111: directory missing '..' [ 384.331647][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.620464][ T6142] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.797848][ T6142] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.874114][T12012] veth0_vlan: entered promiscuous mode [ 385.036396][ T6142] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.789317][ T6142] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.854167][T12012] veth1_vlan: entered promiscuous mode [ 386.004067][ T5796] Bluetooth: hci4: command tx timeout [ 386.040047][T12124] syzkaller0: entered promiscuous mode [ 386.059889][T12124] syzkaller0: entered allmulticast mode [ 386.086530][T12012] veth0_macvtap: entered promiscuous mode [ 386.178558][T12012] veth1_macvtap: entered promiscuous mode [ 387.180301][T12012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.197789][T12012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.207974][T12012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.226979][T12012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.249166][T12012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.272944][T12012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.290144][T12012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.300883][T12012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.335759][T12012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.355770][T12012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.379408][T12136] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2121'. [ 387.455864][T12136] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2121'. [ 387.494784][T12136] netlink: 38 bytes leftover after parsing attributes in process `syz.3.2121'. [ 387.578140][ T6142] tipc: Left network mode [ 387.764980][T12012] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.826688][T12012] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.883994][T12012] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.938668][T12012] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.506782][ T6147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.530713][ T6147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.601770][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.610056][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.812283][T12155] loop1: detected capacity change from 0 to 8 [ 389.527050][T12156] loop3: detected capacity change from 0 to 256 [ 389.636090][T12155] SQUASHFS error: xz decompression failed, data probably corrupt [ 389.645736][T12155] SQUASHFS error: Failed to read block 0x108: -5 [ 389.652199][T12155] SQUASHFS error: Unable to read metadata cache entry [106] [ 389.659593][T12155] SQUASHFS error: Unable to read inode 0x101f [ 389.902283][T12156] FAT-fs (loop3): Directory bread(block 64) failed [ 389.909877][T12156] FAT-fs (loop3): Directory bread(block 65) failed [ 389.917209][T12156] FAT-fs (loop3): Directory bread(block 66) failed [ 389.923947][T12156] FAT-fs (loop3): Directory bread(block 67) failed [ 389.931090][T12156] FAT-fs (loop3): Directory bread(block 68) failed [ 389.937905][T12156] FAT-fs (loop3): Directory bread(block 69) failed [ 389.945137][T12156] FAT-fs (loop3): Directory bread(block 70) failed [ 389.957494][T12156] FAT-fs (loop3): Directory bread(block 71) failed [ 389.964380][T12156] FAT-fs (loop3): Directory bread(block 72) failed [ 389.971057][T12156] FAT-fs (loop3): Directory bread(block 73) failed [ 390.576994][T12166] loop3: detected capacity change from 0 to 128 [ 390.766110][T12166] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 390.804062][T12162] syzkaller0: entered promiscuous mode [ 390.809790][T12162] syzkaller0: entered allmulticast mode [ 390.811379][T12166] FAT-fs (loop3): Filesystem has been set read-only [ 391.711056][T12185] syzkaller0: entered promiscuous mode [ 391.717235][T12185] syzkaller0: entered allmulticast mode [ 392.090843][ T6142] dvmrp1 (unregistering): left allmulticast mode [ 393.587770][T12215] tipc: Enabling of bearer rejected, failed to enable media [ 393.658449][T12217] syzkaller0: entered promiscuous mode [ 393.666795][T12217] syzkaller0: entered allmulticast mode [ 393.677237][T12214] syzkaller0: entered promiscuous mode [ 393.682901][T12214] syzkaller0: entered allmulticast mode [ 393.723969][ T6142] hsr_slave_0: left promiscuous mode [ 393.731492][ T6142] hsr_slave_1: left promiscuous mode [ 393.763499][ T6142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.780158][ T6142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.792203][ T6142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.800528][ T6142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.809482][ T6142] hsr0: left allmulticast mode [ 393.815978][ T6142] hsr0: left promiscuous mode [ 393.823375][ T6142] bridge0: port 3(hsr0) entered disabled state [ 393.833596][ T6142] bridge_slave_1: left allmulticast mode [ 393.842955][ T6142] bridge_slave_1: left promiscuous mode [ 393.851615][ T6142] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.862296][ T6142] bridge_slave_0: left allmulticast mode [ 393.868086][ T6142] bridge_slave_0: left promiscuous mode [ 393.874018][ T6142] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.910077][ T6142] veth1_macvtap: left promiscuous mode [ 393.916623][ T6142] veth0_macvtap: left promiscuous mode [ 393.924228][ T6142] veth1_vlan: left promiscuous mode [ 393.930119][ T6142] veth0_vlan: left promiscuous mode [ 394.053799][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 394.236984][ T23] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 394.245904][ T23] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 394.258892][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 394.268635][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 394.284228][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 394.311201][ T23] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 394.339471][ T23] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 394.348372][ T23] usb 1-1: Product: syz [ 394.352583][ T23] usb 1-1: Manufacturer: syz [ 394.382308][ T23] cdc_wdm 1-1:1.0: skipping garbage [ 394.388204][ T23] cdc_wdm 1-1:1.0: skipping garbage [ 394.418717][ T23] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 394.437479][ T23] cdc_wdm 1-1:1.0: Unknown control protocol [ 395.159620][ T6142] team0 (unregistering): Port device team_slave_1 removed [ 395.230266][ T6142] team0 (unregistering): Port device team_slave_0 removed [ 395.301390][ T6142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.373445][ T6142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.082323][ T6142] bond0 (unregistering): Released all slaves [ 397.155136][ T5888] usb 1-1: USB disconnect, device number 2 [ 397.310892][ T6142] IPVS: stop unused estimator thread 0... [ 398.440364][T12262] tipc: Enabling of bearer rejected, failed to enable media [ 400.461113][T12292] loop4: detected capacity change from 0 to 512 [ 400.476501][T12292] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 400.500473][T12292] EXT4-fs (loop4): 1 truncate cleaned up [ 400.507931][T12292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.249801][T12012] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.395938][T12301] tipc: Enabling of bearer rejected, failed to enable media [ 401.428120][T12301] syzkaller0: entered promiscuous mode [ 401.462043][T12308] loop1: detected capacity change from 0 to 1024 [ 401.470402][T12301] syzkaller0: entered allmulticast mode [ 401.470939][T12308] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 401.580663][T12308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.634033][T12308] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 401.653989][T12308] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 401.700838][T12308] EXT4-fs (loop1): This should not happen!! Data will be lost [ 401.700838][T12308] [ 401.732190][T12308] EXT4-fs (loop1): Total free blocks count 0 [ 401.750290][T12308] EXT4-fs (loop1): Free/Dirty block details [ 401.776585][T12308] EXT4-fs (loop1): free_blocks=20480 [ 401.782413][T12308] EXT4-fs (loop1): dirty_blocks=80 [ 401.793557][T12308] EXT4-fs (loop1): Block reservation details [ 401.834600][T12308] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 402.051577][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 402.404580][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 402.647963][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.662814][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.695876][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.725673][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 402.753887][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.790733][ T8] usb 1-1: config 0 descriptor?? [ 402.832909][ T8] hub 1-1:0.0: USB hub found [ 403.777520][ T8] hub 1-1:0.0: 1 port detected [ 404.154111][ T8] hub 1-1:0.0: activate --> -90 [ 404.902197][ T23] usb 1-1: USB disconnect, device number 3 [ 405.080922][T12347] tipc: Enabling of bearer rejected, failed to enable media [ 405.095435][T12347] syzkaller0: entered promiscuous mode [ 405.101165][T12347] syzkaller0: entered allmulticast mode [ 405.188349][T12349] tipc: Enabling of bearer rejected, failed to enable media [ 405.341662][T12356] loop4: detected capacity change from 0 to 1024 [ 405.588205][T12361] syzkaller0: entered promiscuous mode [ 405.595665][T12361] syzkaller0: entered allmulticast mode [ 406.722619][T12354] loop1: detected capacity change from 0 to 40427 [ 406.785300][T12354] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff [ 407.185312][T12376] tipc: Enabling of bearer rejected, failed to enable media [ 407.214903][T12376] syzkaller0: entered promiscuous mode [ 407.220454][T12376] syzkaller0: entered allmulticast mode [ 407.375507][T12378] tipc: Enabling of bearer rejected, failed to enable media [ 407.472955][ T5105] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 407.496263][ T5105] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 407.506302][ T5105] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 407.549465][ T5105] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 407.564301][ T5105] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 407.581258][ T5105] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 407.590528][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2200'. [ 407.617218][T12387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2200'. [ 407.956662][ T6157] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 408.274477][ T6157] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 408.793505][ T6157] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 408.805594][ T6157] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 408.903615][ T6157] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 408.919450][ T6157] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 409.030124][ T6157] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 409.040869][ T6157] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 409.444512][ T6157] tipc: Left network mode [ 409.715059][ T5105] Bluetooth: hci0: command tx timeout [ 410.079129][T12380] chnl_net:caif_netlink_parms(): no params data found [ 410.188412][T12423] loop1: detected capacity change from 0 to 512 [ 410.217983][T12423] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 410.242487][T12423] EXT4-fs (loop1): orphan cleanup on readonly fs [ 410.262395][T12423] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 410.292913][T12422] tipc: Enabling of bearer rejected, failed to enable media [ 410.296165][T12423] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 410.323384][T12423] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2212: Failed to acquire dquot type 1 [ 410.372882][T12423] EXT4-fs (loop1): Remounting filesystem read-only [ 410.381079][T12423] EXT4-fs (loop1): 1 truncate cleaned up [ 410.388336][T12427] syzkaller0: entered promiscuous mode [ 410.407351][T12427] syzkaller0: entered allmulticast mode [ 410.417193][T12423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 410.513128][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.172177][ T5105] Bluetooth: hci0: command tx timeout [ 412.406654][T12380] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.447399][T12380] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.478103][T12380] bridge_slave_0: entered allmulticast mode [ 412.507315][T12380] bridge_slave_0: entered promiscuous mode [ 412.800608][T12380] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.808457][T12380] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.817811][T12380] bridge_slave_1: entered allmulticast mode [ 412.827413][T12380] bridge_slave_1: entered promiscuous mode [ 413.832689][T12461] tipc: Enabling of bearer rejected, failed to enable media [ 413.987989][T12380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.056641][T12380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.148423][T12380] team0: Port device team_slave_0 added [ 414.164520][T12380] team0: Port device team_slave_1 added [ 414.194856][ T5105] Bluetooth: hci0: command tx timeout [ 414.304487][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 414.400799][T12380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.418168][T12380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.451265][T12380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.473085][T12380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.481177][T12380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.513610][T12380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.556672][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.591394][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.611795][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 414.641772][ T23] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 414.665323][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.707118][ T23] usb 2-1: config 0 descriptor?? [ 414.736686][T12380] hsr_slave_0: entered promiscuous mode [ 414.760901][T12380] hsr_slave_1: entered promiscuous mode [ 414.781308][T12380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 414.794868][T12380] Cannot create hsr debugfs directory [ 414.901352][ T6157] team0: left promiscuous mode [ 414.915617][ T6157] batadv0: left promiscuous mode [ 414.953097][ T6157] hsr_slave_0: left promiscuous mode [ 414.972109][ T6157] team_slave_0: left allmulticast mode [ 414.987725][ T6157] team_slave_0: left promiscuous mode [ 414.996396][ T6157] bridge0: port 1(team_slave_0) entered disabled state [ 415.047095][ T6157] veth1_macvtap: left promiscuous mode [ 415.058971][ T6157] veth0_macvtap: left promiscuous mode [ 415.066570][ T6157] veth1_vlan: left promiscuous mode [ 415.073048][ T6157] veth0_vlan: left promiscuous mode [ 415.157665][ T23] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 415.206762][ T23] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 415.702735][ T6157] bond2 (unregistering): Released all slaves [ 415.786782][ C0] plantronics 0003:047F:FFFF.0003: hid_field_extract() called with n (132) > 32! (kworker/u4:19) [ 415.991984][ T28] usb 2-1: USB disconnect, device number 4 [ 416.062034][ T6157] bond1 (unregistering): Released all slaves [ 416.283861][ T5105] Bluetooth: hci0: command tx timeout [ 417.986562][ T6157] bond0 (unregistering): Released all slaves [ 418.083972][T12492] tipc: Enabling of bearer rejected, failed to enable media [ 418.100184][T12493] syzkaller0: entered promiscuous mode [ 418.109389][T12493] syzkaller0: entered allmulticast mode [ 419.245495][ T6157] IPVS: stop unused estimator thread 0... [ 420.591296][T12380] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 420.617397][T12380] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 420.635927][T12380] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 420.648556][T12380] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 420.676688][T12538] syzkaller0: entered promiscuous mode [ 420.697810][T12538] syzkaller0: entered allmulticast mode [ 421.032021][T12380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.051498][T12551] syzkaller0: entered promiscuous mode [ 421.062022][T12551] syzkaller0: entered allmulticast mode [ 421.109042][T12380] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.179057][ T2925] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.186324][ T2925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.208203][ T6147] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.215433][ T6147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.334259][T12380] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.854679][T12380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.987013][T12380] veth0_vlan: entered promiscuous mode [ 422.012198][T12380] veth1_vlan: entered promiscuous mode [ 422.111500][T12380] veth0_macvtap: entered promiscuous mode [ 422.136025][T12380] veth1_macvtap: entered promiscuous mode [ 422.185180][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.215416][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.240838][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.262094][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.294981][T12380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.336035][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.373778][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.483772][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.528913][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.575759][T12380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.629104][T12380] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.644886][T12380] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.655380][T12380] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.664523][T12380] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.598295][ T6142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.615463][ T6142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.676285][ T6173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.686609][ T6173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.066487][T12579] syzkaller0: entered promiscuous mode [ 424.072036][T12579] syzkaller0: entered allmulticast mode [ 424.199685][T12582] syzkaller0: entered promiscuous mode [ 424.224017][T12582] syzkaller0: entered allmulticast mode [ 424.817201][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 424.865949][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 424.874322][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 424.882756][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 424.892567][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 424.900193][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 426.335210][T12602] loop0: detected capacity change from 0 to 1024 [ 426.918320][T12589] chnl_net:caif_netlink_parms(): no params data found [ 426.994632][ T5105] Bluetooth: hci1: command tx timeout [ 427.185743][ T2925] tipc: Disabling bearer [ 427.203701][ T2925] tipc: Left network mode [ 427.209140][T12589] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.217087][T12589] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.239935][T12589] bridge_slave_0: entered allmulticast mode [ 427.249173][T12589] bridge_slave_0: entered promiscuous mode [ 427.259027][T12589] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.266987][T12589] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.274694][T12589] bridge_slave_1: entered allmulticast mode [ 427.282285][T12589] bridge_slave_1: entered promiscuous mode [ 427.329754][T12620] syzkaller0: entered promiscuous mode [ 427.342313][T12620] syzkaller0: entered allmulticast mode [ 427.352568][T12615] syzkaller0: entered promiscuous mode [ 427.363857][T12615] syzkaller0: entered allmulticast mode [ 427.390246][T12589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.514847][T12589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.438012][T12589] team0: Port device team_slave_0 added [ 428.449214][T12589] team0: Port device team_slave_1 added [ 428.581022][T12589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.592660][T12589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.620874][T12589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.661459][T12589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.672611][T12589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.709821][T12589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.867673][T12589] hsr_slave_0: entered promiscuous mode [ 428.889974][T12589] hsr_slave_1: entered promiscuous mode [ 428.910355][T12589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.933526][T12589] Cannot create hsr debugfs directory [ 429.028243][T12636] loop0: detected capacity change from 0 to 32768 [ 429.049398][T12636] gfs2: fsid=commit: Trying to join cluster "lock_nolock", "commit" [ 429.057846][T12636] gfs2: fsid=commit: Now mounting FS (format 1802)... [ 429.073944][ T5105] Bluetooth: hci1: command tx timeout [ 429.097455][T12636] gfs2: fsid=commit.0: journal 0 mapped with 7 extents in 0ms [ 429.112184][ T788] gfs2: fsid=commit.0: jid=0, already locked for use [ 429.121833][ T788] gfs2: fsid=commit.0: jid=0: Looking at journal... [ 429.138491][ T788] kworker/1:2: attempt to access beyond end of device [ 429.138491][ T788] loop0: rw=0, sector=19193135816, nr_sectors = 8 limit=32768 [ 429.271139][ T788] gfs2: fsid=commit.0: jid=0: Failed [ 429.286906][ T5105] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 429.294362][T12636] gfs2: fsid=commit.0: error recovering journal 0: -5 [ 430.853824][ T2925] hsr_slave_0: left promiscuous mode [ 430.885745][ T2925] hsr_slave_1: left promiscuous mode [ 431.153742][ T5105] Bluetooth: hci1: command tx timeout [ 432.660422][ T2925] bond0 (unregistering): (slave team0): Releasing backup interface [ 432.892377][ T2925] bond0 (unregistering): Released all slaves [ 433.026122][T12669] syzkaller0: entered promiscuous mode [ 433.031671][T12669] syzkaller0: entered allmulticast mode [ 433.234298][ T5105] Bluetooth: hci1: command tx timeout [ 433.657801][ T2925] IPVS: stop unused estimator thread 0... [ 433.722118][T12589] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 433.962575][T12589] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 434.396049][T12589] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 434.572374][T12589] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 435.806662][T12701] syzkaller0: entered promiscuous mode [ 435.812188][T12701] syzkaller0: entered allmulticast mode [ 436.021129][T12589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.040891][T12710] syzkaller0: entered promiscuous mode [ 436.048740][T12710] syzkaller0: entered allmulticast mode [ 436.122826][T12589] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.171326][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.178571][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.233272][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.240519][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.351963][T12725] loop0: detected capacity change from 0 to 8 [ 436.391192][T12725] SQUASHFS error: zlib decompression failed, data probably corrupt [ 436.401185][T12725] SQUASHFS error: Failed to read block 0x4de: -5 [ 436.413299][T12725] SQUASHFS error: zlib decompression failed, data probably corrupt [ 436.425770][T12725] SQUASHFS error: Failed to read block 0x4df: -5 [ 436.432750][T12725] SQUASHFS error: zlib decompression failed, data probably corrupt [ 436.450674][T12725] SQUASHFS error: Failed to read block 0x4e0: -5 [ 436.468316][T12725] SQUASHFS error: zlib decompression failed, data probably corrupt [ 436.484007][T12728] SQUASHFS error: Unable to read directory block [631:26] [ 436.493434][T12725] SQUASHFS error: Failed to read block 0x4de: -5 [ 436.508648][ T27] audit: type=1800 audit(1761733537.512:5): pid=12725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2291" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 436.648514][T12735] loop0: detected capacity change from 0 to 512 [ 436.666128][T12735] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 436.683727][T12735] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 436.703851][T12735] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 436.720045][T12735] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 436.733839][T12735] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 436.741947][T12735] EXT4-fs (loop0): orphan cleanup on readonly fs [ 436.743258][T12589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.767717][T12735] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2293: bg 0: block 34: padding at end of block bitmap is not set [ 436.815589][T12735] Quota error (device loop0): write_blk: dquota write failed [ 436.842720][T12589] veth0_vlan: entered promiscuous mode [ 436.848702][T12735] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 436.881354][T12735] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2293: Failed to acquire dquot type 1 [ 436.898271][T12589] veth1_vlan: entered promiscuous mode [ 436.921573][T12735] EXT4-fs (loop0): 1 truncate cleaned up [ 436.959705][T12735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 437.002731][T12589] veth0_macvtap: entered promiscuous mode [ 437.134057][T12589] veth1_macvtap: entered promiscuous mode [ 437.166146][T12745] tipc: Enabling of bearer rejected, failed to enable media [ 437.255553][T12589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.272273][T12589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.455067][T12589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.591365][T12589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.627319][T12589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.668276][T12589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.699760][T12589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.788370][T12589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.844983][T12589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.889084][T12589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.927776][T12589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.938155][T12589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.948703][T12589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.965549][T12380] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.965743][T12589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.071228][T12589] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.091796][T12589] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.101059][T12589] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.110230][T12589] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.300293][ T2925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.317894][ T2925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.353903][ T5881] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 438.370047][ T2925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.378233][ T2925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.578592][ T5881] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 438.634308][ T5881] usb 1-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 438.650640][ T5881] usb 1-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 438.674753][ T5881] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 438.687072][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 438.701018][ T5881] usb 1-1: SerialNumber: syz [ 439.212624][ T5881] rndis_wlan 1-1:253.0: RNDIS init failed, -71 [ 439.239633][ T5881] rndis_wlan: probe of 1-1:253.0 failed with error -71 [ 439.259839][ T5881] rndis_host 1-1:253.0: RNDIS init failed, -71 [ 439.279252][ T5881] rndis_host: probe of 1-1:253.0 failed with error -71 [ 439.304012][ T5881] usb 1-1: USB disconnect, device number 4 [ 439.321559][T12772] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2302'. [ 439.522184][T12779] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2305'. [ 439.603407][T12785] tipc: Started in network mode [ 439.608683][T12785] tipc: Node identity 9e17a5effa08, cluster identity 4711 [ 439.616187][T12785] tipc: Enabled bearer , priority 0 [ 439.629653][T12785] tipc: Resetting bearer [ 439.671601][T12781] tipc: Disabling bearer [ 440.012926][ T5881] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 440.277516][ T5881] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 440.360312][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.419359][ T5881] usb 1-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 440.607167][ T5881] usb 1-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 440.967695][ T5881] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 440.981146][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 440.990153][ T5881] usb 1-1: SerialNumber: syz [ 441.051447][T12804] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2312'. [ 441.153925][ T5881] rndis_wlan 1-1:253.0: RNDIS init failed, -71 [ 441.181779][ T5881] rndis_wlan: probe of 1-1:253.0 failed with error -71 [ 441.202221][ T5881] rndis_host 1-1:253.0: RNDIS init failed, -71 [ 441.209550][ T5881] rndis_host: probe of 1-1:253.0 failed with error -71 [ 441.242493][ T5881] usb 1-1: USB disconnect, device number 5 [ 444.548903][T12835] tipc: Enabling of bearer rejected, failed to enable media [ 444.779241][T12846] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2321'. [ 446.004561][T12864] syzkaller0: entered promiscuous mode [ 446.010783][T12864] syzkaller0: entered allmulticast mode [ 447.315614][T12873] tipc: Started in network mode [ 447.320565][T12873] tipc: Node identity 327bb0eb688a, cluster identity 4711 [ 447.344094][T12873] tipc: Enabled bearer , priority 0 [ 447.351911][T12873] syzkaller0: entered promiscuous mode [ 447.361251][T12873] syzkaller0: entered allmulticast mode [ 447.416379][T12871] tipc: Resetting bearer [ 447.492958][T12871] tipc: Disabling bearer [ 447.569554][T12878] syzkaller0: entered promiscuous mode [ 447.583748][T12878] syzkaller0: entered allmulticast mode [ 448.812334][T12903] syzkaller0: entered promiscuous mode [ 448.819776][T12903] syzkaller0: entered allmulticast mode [ 450.936059][T12911] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2340'. [ 450.977991][T12914] tipc: Enabled bearer , priority 0 [ 451.000969][T12914] syzkaller0: entered promiscuous mode [ 451.012796][T12914] syzkaller0: entered allmulticast mode [ 451.083510][T12910] tipc: Resetting bearer [ 451.181689][T12921] loop5: detected capacity change from 0 to 7 [ 451.190034][T12910] tipc: Disabling bearer [ 451.201405][T12921] Dev loop5: unable to read RDB block 7 [ 451.214704][T12921] loop5: unable to read partition table [ 451.240826][T12919] syzkaller0: entered promiscuous mode [ 451.255862][T12919] syzkaller0: entered allmulticast mode [ 451.268239][T12921] loop5: partition table beyond EOD, truncated [ 451.274764][T12921] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 451.429108][T12925] loop4: detected capacity change from 0 to 16 [ 451.453216][T12925] erofs: (device loop4): mounted with root inode @ nid 36. [ 451.714921][T12928] erofs: (device loop4): z_erofs_fill_inode_lazy: unknown HEAD1 format 5 for nid 36, please upgrade kernel [ 451.738731][T12928] erofs: (device loop4): z_erofs_fill_inode_lazy: unknown HEAD1 format 5 for nid 36, please upgrade kernel [ 451.760414][T12928] erofs: (device loop4): z_erofs_read_folio: read error -95 @ 0 of nid 36 [ 451.769447][T12928] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 452.282555][T12932] loop1: detected capacity change from 0 to 2048 [ 452.351040][T12932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 452.485791][T12589] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 454.795744][T12951] tipc: Enabling of bearer rejected, failed to enable media [ 455.893798][ T5796] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 455.893843][ T5105] Bluetooth: hci3: command 0x1003 tx timeout [ 457.991342][T12982] loop1: detected capacity change from 0 to 512 [ 458.006877][T12982] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 458.036813][T12984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2364'. [ 458.061261][T12982] EXT4-fs (loop1): 1 truncate cleaned up [ 458.071823][T12982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.165799][T12984] syz_tun (unregistering): left allmulticast mode [ 458.450395][T12991] tipc: Enabled bearer , priority 0 [ 458.482711][T12988] syzkaller0: entered promiscuous mode [ 458.491207][T12988] syzkaller0: entered allmulticast mode [ 458.796129][T12988] tipc: Resetting bearer [ 458.850809][T12975] loop4: detected capacity change from 0 to 40427 [ 458.860612][T12987] tipc: Resetting bearer [ 458.873836][T12975] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(1) [ 458.899488][T12975] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 458.928193][T12975] F2FS-fs (loop4): LFS is not compatible with checkpoint=disable [ 458.940083][T12987] tipc: Disabling bearer [ 458.940106][T12589] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.373247][T13032] autofs4:pid:13032:autofs_fill_super: called with bogus options [ 462.478105][T13034] tipc: Enabled bearer , priority 0 [ 462.490017][T13034] syzkaller0: entered promiscuous mode [ 462.499085][T13034] syzkaller0: entered allmulticast mode [ 462.523522][T13034] tipc: Resetting bearer [ 462.576861][T13033] tipc: Resetting bearer [ 462.634891][T13033] tipc: Disabling bearer [ 464.455401][T13067] syzkaller0: entered promiscuous mode [ 464.471018][T13046] loop1: detected capacity change from 0 to 32768 [ 464.477682][T13067] syzkaller0: entered allmulticast mode [ 464.485870][T13046] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2383 (13046) [ 464.507322][T13046] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 464.534816][T13046] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 464.544166][T13046] BTRFS info (device loop1): turning off barriers [ 464.553410][T13046] BTRFS info (device loop1): turning on flush-on-commit [ 464.614839][T13046] BTRFS error (device loop1): unrecognized commit_interval value 0x0000000080000000 [ 464.716067][T13046] BTRFS error (device loop1): open_ctree failed: -22 [ 464.999854][T13083] loop0: detected capacity change from 0 to 2048 [ 465.011528][T13083] EXT4-fs: Ignoring removed i_version option [ 465.109793][T13087] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 465.120479][T13087] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 465.178918][T13083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.645218][T13083] EXT4-fs error (device loop0): ext4_ext_precache:627: inode #2: comm syz.0.2389: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 465.733847][T13083] EXT4-fs (loop0): Remounting filesystem read-only [ 465.790821][T13089] tipc: Started in network mode [ 465.816642][T13089] tipc: Node identity 7e7b25121868, cluster identity 4711 [ 465.838603][T13089] tipc: Enabled bearer , priority 0 [ 465.848448][T12380] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.871410][T13089] syzkaller0: entered promiscuous mode [ 465.892871][T13089] syzkaller0: entered allmulticast mode [ 465.924614][T13089] tipc: Resetting bearer [ 465.975834][T13088] tipc: Resetting bearer [ 466.004271][T13088] tipc: Disabling bearer [ 467.086339][T13093] loop0: detected capacity change from 0 to 4096 [ 467.136437][T13093] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 467.163706][T13093] UDF-fs: Scanning with blocksize 512 failed [ 467.307670][T13093] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 472.903390][T13131] tipc: Enabled bearer , priority 0 [ 472.916523][T13131] tipc: Resetting bearer [ 472.925518][T13129] tipc: Disabling bearer [ 475.421873][T13127] loop0: detected capacity change from 0 to 32768 [ 475.477224][T13127] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.2402 (13127) [ 475.539651][T13127] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 475.550623][T13127] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 475.597108][T13127] BTRFS info (device loop0): setting nodatasum [ 475.603367][T13127] BTRFS info (device loop0): using free space tree [ 475.685185][T13127] BTRFS info (device loop0): enabling ssd optimizations [ 475.692440][T13127] BTRFS info (device loop0): auto enabling async discard [ 475.750686][T12380] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 476.026328][T13176] tipc: Enabled bearer , priority 0 [ 476.057858][T13176] tipc: Resetting bearer [ 476.091190][T13175] tipc: Disabling bearer [ 476.566315][T13182] loop4: detected capacity change from 0 to 1024 [ 476.597451][T13182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.081914][ T5892] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 477.904043][T12012] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.893779][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 478.907829][ T5892] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 478.923744][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.943387][ T5892] usb 1-1: Product: syz [ 478.950043][ T5892] usb 1-1: Manufacturer: syz [ 478.960231][ T5892] usb 1-1: SerialNumber: syz [ 478.982981][ T5892] usb 1-1: config 0 descriptor?? [ 479.788077][T13202] loop1: detected capacity change from 0 to 65536 [ 479.804032][T13202] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 479.812911][T13202] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 479.825366][ T5892] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 479.854064][T13202] XFS (loop1): Ending clean mount [ 479.861398][T13202] XFS (loop1): Quotacheck needed: Please wait. [ 479.887730][T13221] tipc: Enabled bearer , priority 0 [ 479.898905][T13221] syzkaller0: entered promiscuous mode [ 479.906896][T13221] syzkaller0: entered allmulticast mode [ 479.934896][T13202] XFS (loop1): Quotacheck: Done. [ 479.967865][T13217] tipc: Resetting bearer [ 479.999340][T12589] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 480.050144][T13217] tipc: Disabling bearer [ 480.399963][ T5892] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 480.418584][ T5892] usb 1-1: USB disconnect, device number 6 [ 480.459670][T13223] loop4: detected capacity change from 0 to 4096 [ 480.473332][T13223] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 480.505181][T13223] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 480.649870][ T5796] Bluetooth: hci4: Malformed HCI Event: 0x22 [ 481.745930][T13235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2433'. [ 481.916222][T13241] tipc: Enabled bearer , priority 0 [ 481.934376][T13241] syzkaller0: entered promiscuous mode [ 481.949144][T13241] syzkaller0: entered allmulticast mode [ 481.969897][T13241] tipc: Resetting bearer [ 481.993243][T13240] tipc: Resetting bearer [ 482.057474][T13240] tipc: Disabling bearer [ 482.096584][T13245] tipc: Enabling of bearer rejected, failed to enable media [ 484.854692][ T6147] Bluetooth: (null): Invalid header checksum [ 484.973360][ T6147] Bluetooth: (null): Invalid header checksum [ 485.102784][ T6147] Bluetooth: (null): Invalid header checksum [ 485.493530][T13284] tipc: Enabled bearer , priority 0 [ 485.504280][T13284] syzkaller0: entered promiscuous mode [ 485.509811][T13284] syzkaller0: entered allmulticast mode [ 485.603763][T13282] tipc: Resetting bearer [ 485.694688][T13282] tipc: Disabling bearer [ 485.958743][T13295] netlink: 'syz.3.2454': attribute type 4 has an invalid length. [ 486.114484][T13299] tipc: Enabling of bearer rejected, failed to enable media [ 488.177259][T13315] tipc: Enabled bearer , priority 0 [ 488.202964][T13315] syzkaller0: entered promiscuous mode [ 488.273825][T13315] syzkaller0: entered allmulticast mode [ 488.312721][T13315] tipc: Resetting bearer [ 488.491748][T13314] tipc: Resetting bearer [ 488.542369][T13314] tipc: Disabling bearer [ 489.422402][T13323] Bluetooth: MGMT ver 1.22 [ 489.430509][ T23] tipc: Node number set to 1525788907 [ 489.648419][T13327] tipc: Enabled bearer , priority 0 [ 489.672848][T13327] syzkaller0: entered promiscuous mode [ 489.703719][T13327] syzkaller0: entered allmulticast mode [ 489.744544][T13327] tipc: Resetting bearer [ 489.780847][T13325] tipc: Resetting bearer [ 489.835151][T13325] tipc: Disabling bearer [ 491.191671][T13341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2470'. [ 491.665032][T13349] netlink: 'syz.1.2474': attribute type 16 has an invalid length. [ 491.709218][T13349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2474'. [ 491.807101][T13353] tipc: Enabled bearer , priority 0 [ 491.829161][T13353] syzkaller0: entered promiscuous mode [ 491.836017][T13353] syzkaller0: entered allmulticast mode [ 491.857841][T13353] tipc: Resetting bearer [ 491.878684][T13352] tipc: Resetting bearer [ 491.959226][T13352] tipc: Disabling bearer [ 493.531204][T13377] loop4: detected capacity change from 0 to 32768 [ 493.656013][T13380] tipc: Enabled bearer , priority 0 [ 493.666678][T13380] syzkaller0: entered promiscuous mode [ 493.672625][T13380] syzkaller0: entered allmulticast mode [ 493.690159][T13380] tipc: Resetting bearer [ 493.707374][T13379] tipc: Resetting bearer [ 493.758974][T13379] tipc: Disabling bearer [ 495.291302][T13392] loop4: detected capacity change from 0 to 1024 [ 495.318836][T13392] ext4: Unknown parameter 'euid' [ 495.779462][T13392] usb usb8: usbfs: process 13392 (syz.4.2491) did not claim interface 0 before use [ 496.312742][ T5105] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 496.320434][ T6157] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.323455][ T5105] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 496.339731][ T5105] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 496.349112][ T5105] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 496.357068][ T5105] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 496.371555][ T5105] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 496.456073][ T6157] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.668804][ T6157] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.730088][T13407] loop1: detected capacity change from 0 to 1024 [ 496.737591][T13407] hfsplus: unable to parse mount options [ 496.758976][ T6157] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.808832][T13398] chnl_net:caif_netlink_parms(): no params data found [ 498.566675][ T5105] Bluetooth: hci2: command tx timeout [ 498.666804][ T6157] tipc: Left network mode [ 498.772117][T13398] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.793186][T13398] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.863463][T13398] bridge_slave_0: entered allmulticast mode [ 498.931439][T13398] bridge_slave_0: entered promiscuous mode [ 498.979272][T13431] Unsupported ieee802154 address type: 0 [ 499.656587][T13398] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.663923][T13398] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.690230][T13434] loop0: detected capacity change from 0 to 1024 [ 499.704465][T13398] bridge_slave_1: entered allmulticast mode [ 499.719250][T13434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.896873][T13398] bridge_slave_1: entered promiscuous mode [ 500.643963][ T5105] Bluetooth: hci2: command tx timeout [ 500.720794][T13398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.773103][T13398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.861530][T12380] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.112909][T13398] team0: Port device team_slave_0 added [ 501.122384][T13398] team0: Port device team_slave_1 added [ 501.221805][T13398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.230345][T13398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.257757][T13398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.321906][T13398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.332213][T13398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.366220][T13398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.522725][T13398] hsr_slave_0: entered promiscuous mode [ 501.546175][T13398] hsr_slave_1: entered promiscuous mode [ 501.799972][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.109708][ T6157] hsr_slave_0: left promiscuous mode [ 502.136850][ T6157] hsr_slave_1: left promiscuous mode [ 502.151084][ T6157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.172744][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.188801][ T6157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.203683][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.244730][ T6157] bridge_slave_1: left allmulticast mode [ 502.262901][ T6157] bridge_slave_1: left promiscuous mode [ 502.281494][ T6157] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.300288][ T6157] bridge_slave_0: left allmulticast mode [ 502.306892][ T6157] bridge_slave_0: left promiscuous mode [ 502.312729][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.435566][ T6157] veth1_macvtap: left promiscuous mode [ 502.441465][ T6157] veth0_macvtap: left promiscuous mode [ 502.455478][ T6157] veth1_vlan: left promiscuous mode [ 502.461069][ T6157] veth0_vlan: left promiscuous mode [ 502.674014][ T5796] Bluetooth: hci2: command tx timeout [ 504.016760][ T5796] Bluetooth: hci4: command 0x0406 tx timeout [ 504.755734][ T5105] Bluetooth: hci2: command tx timeout [ 504.938129][ T6157] team0 (unregistering): Port device team_slave_1 removed [ 505.045416][ T6157] team0 (unregistering): Port device team_slave_0 removed [ 505.130618][ T6157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 505.236046][ T6157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.194552][ T6157] bond0 (unregistering): Released all slaves [ 510.531007][T13398] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 510.574170][T13398] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 510.601775][T13398] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 510.631518][T13398] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 510.821273][T13398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.878724][T13398] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.916849][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.924132][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.976399][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.983661][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.277220][T13539] loop4: detected capacity change from 0 to 128 [ 512.294751][T13539] ext4: Unknown parameter 'audit' [ 512.386741][T13398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.597876][T13398] veth0_vlan: entered promiscuous mode [ 512.915803][T13398] veth1_vlan: entered promiscuous mode [ 512.983164][ T6157] IPVS: stop unused estimator thread 0... [ 513.467927][T13398] veth0_macvtap: entered promiscuous mode [ 513.497990][T13398] veth1_macvtap: entered promiscuous mode [ 513.533866][T13398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.544490][T13398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.619056][T13398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.650376][T13398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.687170][T13398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.948216][T13398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.960324][T13398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.983489][T13398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.208683][T13398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.313153][T13398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.455997][T13398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.653789][T13398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.693903][T13398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.715667][T13398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.822840][T13398] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.854984][T13398] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.866446][T13398] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.875235][T13398] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.007353][T13557] tipc: Enabled bearer , priority 0 [ 515.027261][T13557] syzkaller0: entered promiscuous mode [ 515.033470][T13557] syzkaller0: entered allmulticast mode [ 515.048786][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.064959][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.131510][T13557] tipc: Resetting bearer [ 515.150077][T13556] tipc: Resetting bearer [ 515.189737][T13556] tipc: Disabling bearer [ 515.203127][ T6142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.218393][ T6142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.121474][T13575] tipc: Enabled bearer , priority 0 [ 517.135464][T13575] syzkaller0: entered promiscuous mode [ 517.141106][T13575] syzkaller0: entered allmulticast mode [ 517.198747][T13575] tipc: Resetting bearer [ 517.264067][T13574] tipc: Resetting bearer [ 517.334766][T13574] tipc: Disabling bearer [ 518.532398][T13586] tipc: Enabling of bearer rejected, failed to enable media [ 519.077445][T13598] syzkaller0: entered promiscuous mode [ 519.082993][T13598] syzkaller0: entered allmulticast mode [ 520.340980][T13612] tipc: Enabled bearer , priority 0 [ 520.349431][T13612] syzkaller0: entered promiscuous mode [ 520.359479][T13612] syzkaller0: entered allmulticast mode [ 520.619488][T13620] tipc: Resetting bearer [ 520.628667][T13611] tipc: Resetting bearer [ 520.671700][T13611] tipc: Disabling bearer [ 522.799059][T13633] tipc: Started in network mode [ 522.816209][T13633] tipc: Node identity 1adb39af3663, cluster identity 4711 [ 522.824429][T13633] tipc: Enabled bearer , priority 0 [ 522.857772][T13633] tipc: Resetting bearer [ 522.868498][T13632] tipc: Disabling bearer [ 523.199803][T13646] loop0: detected capacity change from 0 to 128 [ 523.325092][T13646] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 523.346721][T13647] tipc: Enabled bearer , priority 0 [ 523.367607][T13647] syzkaller0: entered promiscuous mode [ 523.383737][T13647] syzkaller0: entered allmulticast mode [ 523.411958][T13647] tipc: Resetting bearer [ 523.436728][T13646] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 523.558367][T13644] tipc: Resetting bearer [ 524.295063][T13644] tipc: Disabling bearer [ 524.520403][T13646] fscrypt (loop0, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 524.766553][T13646] fscrypt (loop0, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 525.602343][T12380] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 525.875564][T13687] tipc: Enabled bearer , priority 0 [ 525.978569][T13689] syzkaller0: entered promiscuous mode [ 526.007167][T13689] syzkaller0: entered allmulticast mode [ 526.132480][T13687] tipc: Resetting bearer [ 526.268520][T13686] tipc: Resetting bearer [ 526.478309][T13686] tipc: Disabling bearer [ 526.675798][T13701] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.705607][T13701] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 526.773300][T13700] tipc: Enabled bearer , priority 0 [ 527.025410][T13700] syzkaller0: entered promiscuous mode [ 527.031065][T13700] syzkaller0: entered allmulticast mode [ 527.074395][T13700] tipc: Resetting bearer [ 527.230676][T13699] tipc: Resetting bearer [ 527.614513][T13710] loop4: detected capacity change from 0 to 512 [ 527.649002][T13710] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 527.671014][T13699] tipc: Disabling bearer [ 527.690335][T13710] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 527.721026][T13710] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 527.828912][T13710] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 527.837120][T13710] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 527.845633][T13710] EXT4-fs (loop4): orphan cleanup on readonly fs [ 527.890825][T13710] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.2578: bg 0: block 34: padding at end of block bitmap is not set [ 527.931170][T13710] Quota error (device loop4): write_blk: dquota write failed [ 527.943399][T13710] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 527.972246][T13710] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2578: Failed to acquire dquot type 1 [ 528.006837][T13710] EXT4-fs (loop4): 1 truncate cleaned up [ 528.028558][T13710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 529.112215][T12012] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.230756][T13728] binder: 13727:13728 unknown command 1074553619 [ 529.237415][T13728] binder: 13727:13728 ioctl c0306201 200000000040 returned -22 [ 529.363402][T13731] tipc: Enabled bearer , priority 0 [ 529.465470][T13731] syzkaller0: entered promiscuous mode [ 529.471030][T13731] syzkaller0: entered allmulticast mode [ 529.544476][T13731] tipc: Resetting bearer [ 529.582044][T13730] tipc: Resetting bearer [ 529.623681][T13730] tipc: Disabling bearer [ 529.926928][T13742] tipc: Enabled bearer , priority 0 [ 529.934723][T13742] syzkaller0: entered promiscuous mode [ 529.940257][T13742] syzkaller0: entered allmulticast mode [ 529.953278][T13742] tipc: Resetting bearer [ 530.194962][ T28] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 530.806207][T13740] tipc: Resetting bearer [ 530.892660][T13740] tipc: Disabling bearer [ 531.024767][ T28] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 531.049655][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.087179][ T28] usb 1-1: Product: syz [ 531.119092][ T28] usb 1-1: Manufacturer: syz [ 531.124225][ T28] usb 1-1: SerialNumber: syz [ 531.183255][T13753] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2592'. [ 531.313557][ T28] usb 1-1: config 0 descriptor?? [ 531.342681][ T28] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 533.320230][T13770] overlayfs: missing 'lowerdir' [ 535.023505][ T5105] Bluetooth: hci0: command 0x0406 tx timeout [ 535.033738][ T28] gspca_sunplus: reg_r err -110 [ 535.038812][ T28] sunplus: probe of 1-1:0.0 failed with error -110 [ 535.596086][ T5887] usb 1-1: USB disconnect, device number 7 [ 535.762594][T13778] tipc: Enabled bearer , priority 0 [ 535.774472][T13778] syzkaller0: entered promiscuous mode [ 535.780186][T13778] syzkaller0: entered allmulticast mode [ 536.632848][T13780] tipc: Resetting bearer [ 536.758124][T13777] tipc: Resetting bearer [ 536.855455][T13777] tipc: Disabling bearer [ 537.082714][T13788] loop0: detected capacity change from 0 to 512 [ 537.116393][T13788] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 537.135737][T13790] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2604'. [ 537.165889][T13788] EXT4-fs (loop0): 1 truncate cleaned up [ 537.172962][T13788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.457097][T12380] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.740713][T13810] tipc: Enabled bearer , priority 0 [ 538.777327][T13810] syzkaller0: entered promiscuous mode [ 538.783059][T13810] syzkaller0: entered allmulticast mode [ 538.809256][T13810] tipc: Resetting bearer [ 539.061318][T13808] tipc: Resetting bearer [ 539.278500][T13808] tipc: Disabling bearer [ 539.618482][ T5881] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 540.665889][ T5881] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 540.683892][ T5881] usb 4-1: config 0 has no interface number 0 [ 540.707641][ T5881] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 540.757161][ T5881] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 540.777338][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.797181][ T5881] usb 4-1: Product: syz [ 540.804769][ T5881] usb 4-1: Manufacturer: syz [ 540.809693][T13823] tipc: Enabled bearer , priority 0 [ 540.816520][ T5881] usb 4-1: SerialNumber: syz [ 540.824369][ T5881] usb 4-1: config 0 descriptor?? [ 540.830552][T13823] syzkaller0: entered promiscuous mode [ 540.843156][ T5881] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 540.851037][T13823] syzkaller0: entered allmulticast mode [ 540.896571][T13825] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2614'. [ 540.929434][T13823] tipc: Resetting bearer [ 540.942712][T13822] tipc: Resetting bearer [ 540.998669][T13822] tipc: Disabling bearer [ 541.163107][ T8] usb 4-1: USB disconnect, device number 2 [ 541.247942][ T8] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 541.643517][T13841] tipc: Enabling of bearer rejected, failed to enable media [ 541.989667][T13847] loop3: detected capacity change from 0 to 1024 [ 542.031272][T13847] EXT4-fs: Ignoring removed nobh option [ 542.039346][T13847] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 542.068309][T13847] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz.3.2621: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 542.247386][T13847] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2621: couldn't read orphan inode 11 (err -117) [ 542.524653][T13847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.764088][T13847] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.2621: Invalid block bitmap block 0 in block_group 0 [ 542.866304][T13847] Quota error (device loop3): write_blk: dquota write failed [ 542.932879][T13847] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 542.953785][T13847] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2621: Failed to acquire dquot type 0 [ 542.983887][T13854] tipc: Enabled bearer , priority 0 [ 543.005328][T13854] syzkaller0: entered promiscuous mode [ 543.022115][T13398] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.031431][T13854] syzkaller0: entered allmulticast mode [ 543.066600][T13854] tipc: Resetting bearer [ 543.113360][T13853] tipc: Resetting bearer [ 543.147086][T13859] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2625'. [ 543.192270][T13853] tipc: Disabling bearer [ 543.356234][T13862] tipc: Enabled bearer , priority 0 [ 543.371054][T13862] syzkaller0: entered promiscuous mode [ 543.377703][T13862] syzkaller0: entered allmulticast mode [ 543.664482][T13867] tipc: Resetting bearer [ 544.444128][T13861] tipc: Resetting bearer [ 544.569861][T13861] tipc: Disabling bearer [ 544.583924][ T5881] tipc: Node number set to 750270895 [ 544.971903][T13855] loop4: detected capacity change from 0 to 40427 [ 545.012707][T13855] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 545.027468][T13855] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 545.050734][T13855] F2FS-fs (loop4): invalid crc value [ 545.289427][T13855] F2FS-fs (loop4): Found nat_bits in checkpoint [ 545.842630][T13855] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 545.863984][T13855] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 545.909706][T13889] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2634'. [ 547.297818][T13900] loop0: detected capacity change from 0 to 4096 [ 547.309314][T13900] ntfs3: loop0: Unsupported bytes per MFT record 8192. [ 547.320901][T13900] ntfs3: loop0: try to read out of volume at offset 0x1ffe00 [ 547.801795][T13908] tipc: Enabled bearer , priority 0 [ 547.811289][T13908] syzkaller0: entered promiscuous mode [ 547.833771][T13908] syzkaller0: entered allmulticast mode [ 547.894346][T13908] tipc: Resetting bearer [ 547.924411][T13907] tipc: Resetting bearer [ 547.955429][T13907] tipc: Disabling bearer [ 547.975771][T13911] tipc: Enabled bearer , priority 0 [ 547.983522][T13911] syzkaller0: entered promiscuous mode [ 547.990490][T13911] syzkaller0: entered allmulticast mode [ 548.026198][T13911] tipc: Resetting bearer [ 548.062792][T13910] tipc: Resetting bearer [ 548.125068][T13910] tipc: Disabling bearer [ 549.334198][T13922] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2644'. [ 549.953771][ T5105] Bluetooth: hci1: command 0x0406 tx timeout [ 550.489981][T13940] tipc: Enabled bearer , priority 0 [ 550.538709][T13940] syzkaller0: entered promiscuous mode [ 550.557734][T13940] syzkaller0: entered allmulticast mode [ 550.586184][T13942] tipc: Enabled bearer , priority 0 [ 550.622388][T13942] syzkaller0: entered promiscuous mode [ 550.630632][T13942] syzkaller0: entered allmulticast mode [ 550.671423][T13940] tipc: Resetting bearer [ 550.704795][T13942] tipc: Resetting bearer [ 550.731486][T13939] tipc: Resetting bearer [ 550.884580][T13939] tipc: Disabling bearer [ 550.928615][T13941] tipc: Resetting bearer [ 551.044987][T13941] tipc: Disabling bearer [ 551.348787][T13947] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2654'. [ 551.442506][T13938] loop4: detected capacity change from 0 to 32768 [ 551.535472][T13938] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 551.787188][T13938] XFS (loop4): Ending clean mount [ 551.806893][T13938] XFS (loop4): Quotacheck needed: Please wait. [ 551.985752][T13938] XFS (loop4): Quotacheck: Done. [ 552.303333][T12012] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 552.819809][T13967] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2658'. [ 553.149592][T13972] loop0: detected capacity change from 0 to 1024 [ 554.581741][T13987] syzkaller0: entered promiscuous mode [ 554.632297][T13987] syzkaller0: entered allmulticast mode [ 554.767519][T13979] tipc: Enabled bearer , priority 0 [ 554.896490][T13981] syzkaller0: entered promiscuous mode [ 554.960441][T13981] syzkaller0: entered allmulticast mode [ 555.048883][T13990] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2664'. [ 555.058737][T13979] tipc: Resetting bearer [ 555.278934][T13978] tipc: Resetting bearer [ 555.787725][ T788] tipc: Node number set to 1679795695 [ 555.944347][T13978] tipc: Disabling bearer [ 559.616368][T14024] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2673'. [ 559.779061][T14029] tipc: Enabled bearer , priority 0 [ 559.806774][T14029] syzkaller0: entered promiscuous mode [ 559.812414][T14029] syzkaller0: entered allmulticast mode [ 559.844729][T14029] tipc: Resetting bearer [ 559.880469][T14028] tipc: Resetting bearer [ 559.973925][T14028] tipc: Disabling bearer [ 560.794099][T14036] tipc: Enabled bearer , priority 0 [ 560.840485][T14036] syzkaller0: entered promiscuous mode [ 560.871511][T14036] syzkaller0: entered allmulticast mode [ 560.980367][T14036] tipc: Resetting bearer [ 561.002319][T14032] tipc: Resetting bearer [ 561.035423][T14032] tipc: Disabling bearer [ 563.288021][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.326220][T14071] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2687'. [ 564.519178][T14076] tipc: Enabled bearer , priority 0 [ 564.527886][T14073] tipc: Enabled bearer , priority 0 [ 564.536016][T14076] syzkaller0: entered promiscuous mode [ 564.541998][T14076] syzkaller0: entered allmulticast mode [ 564.554074][T14073] syzkaller0: entered promiscuous mode [ 564.561032][T14073] syzkaller0: entered allmulticast mode [ 564.603043][T14076] tipc: Resetting bearer [ 564.616854][T14073] tipc: Resetting bearer [ 564.634017][T14075] tipc: Resetting bearer [ 564.663028][T14075] tipc: Disabling bearer [ 564.675680][T14072] tipc: Resetting bearer [ 564.741190][T14072] tipc: Disabling bearer [ 567.085316][T14091] loop3: detected capacity change from 0 to 1024 [ 567.845275][T14091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.981393][T14090] Can't find ip_set type hash:ne [ 568.189491][T13398] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.415843][T14111] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2699'. [ 569.367468][T14123] tipc: Enabled bearer , priority 0 [ 569.384448][T14123] syzkaller0: entered promiscuous mode [ 569.408564][T14123] syzkaller0: entered allmulticast mode [ 570.000141][T14130] loop0: detected capacity change from 0 to 16 [ 570.027907][T14130] erofs: (device loop0): mounted with root inode @ nid 36. [ 570.054309][T14121] tipc: Resetting bearer [ 570.223960][T14132] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown HEAD1 format 5 for nid 36, please upgrade kernel [ 570.243914][T14132] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown HEAD1 format 5 for nid 36, please upgrade kernel [ 570.262810][T14121] tipc: Disabling bearer [ 570.271738][T14132] erofs: (device loop0): z_erofs_read_folio: read error -95 @ 0 of nid 36 [ 570.286128][T14132] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 570.520486][T14136] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2705'. [ 570.668258][T14138] tipc: Enabled bearer , priority 0 [ 570.696880][T14138] syzkaller0: entered promiscuous mode [ 570.710501][T14138] syzkaller0: entered allmulticast mode [ 570.757493][T14138] tipc: Resetting bearer [ 570.926859][T14137] tipc: Resetting bearer [ 571.781634][T14137] tipc: Disabling bearer [ 572.090315][T14150] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2708'. [ 572.220150][T14140] loop3: detected capacity change from 0 to 32768 [ 572.253030][T14140] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2706 (14140) [ 572.312998][T14155] tipc: Enabled bearer , priority 0 [ 572.322655][T14155] syzkaller0: entered promiscuous mode [ 572.330974][T14155] syzkaller0: entered allmulticast mode [ 572.380891][T14154] tipc: Resetting bearer [ 572.425092][T14140] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 572.448445][T14140] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 572.469400][T14140] BTRFS info (device loop3): using free space tree [ 572.488426][T14154] tipc: Disabling bearer [ 573.034504][T14140] BTRFS info (device loop3): enabling ssd optimizations [ 573.041694][T14140] BTRFS info (device loop3): auto enabling async discard [ 573.114213][ T23] IPVS: starting estimator thread 0... [ 573.233710][T14179] IPVS: using max 18 ests per chain, 43200 per kthread [ 573.401326][T13398] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 573.614761][T14193] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2720'. [ 574.697687][T14202] tipc: Enabling of bearer rejected, failed to enable media [ 574.779502][T14200] syzkaller0: entered promiscuous mode [ 574.828727][T14200] syzkaller0: entered allmulticast mode [ 574.932242][T14205] tipc: Enabled bearer , priority 0 [ 574.942593][T14205] syzkaller0: entered promiscuous mode [ 574.948304][T14205] syzkaller0: entered allmulticast mode [ 574.984645][T14205] tipc: Resetting bearer [ 574.995898][ T788] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 575.016775][T14204] tipc: Resetting bearer [ 575.065204][T14204] tipc: Disabling bearer [ 575.186273][ T788] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 575.204021][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.232435][ T788] usb 1-1: config 0 descriptor?? [ 575.334012][T14221] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2729'. [ 576.046635][T14233] tipc: Enabled bearer , priority 0 [ 576.055371][T14233] syzkaller0: entered promiscuous mode [ 576.061095][T14233] syzkaller0: entered allmulticast mode [ 576.106414][T14233] tipc: Resetting bearer [ 576.144762][T14232] tipc: Resetting bearer [ 576.185185][ T788] ath6kl: Failed to read usb control message: -71 [ 576.191731][ T788] ath6kl: Unable to read the bmi data from the device: -71 [ 576.201518][ T788] ath6kl: unable to read target info byte count: -71 [ 576.211887][T14232] tipc: Disabling bearer [ 576.225568][ T788] ath6kl: Failed to init ath6kl core: -71 [ 576.256164][ T788] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 576.293401][ T788] usb 1-1: USB disconnect, device number 8 [ 576.713718][ T5887] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 576.771556][T14248] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2741'. [ 576.917544][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.933397][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.953862][ T5887] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 576.969150][ T5887] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 576.985232][ T5887] usb 5-1: Manufacturer: syz [ 577.002760][ T5887] usb 5-1: config 0 descriptor?? [ 577.003665][T14253] block device autoloading is deprecated and will be removed. [ 577.135378][T14259] tipc: Enabled bearer , priority 0 [ 577.154449][T14259] syzkaller0: entered promiscuous mode [ 577.160078][T14259] syzkaller0: entered allmulticast mode [ 577.217938][T14259] tipc: Resetting bearer [ 577.241485][T14258] tipc: Resetting bearer [ 577.304023][T14258] tipc: Disabling bearer [ 577.433291][ T5887] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 577.451013][ T5887] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 577.461562][ T5887] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 577.465173][T14262] comedi comedi0: Minor 48 is invalid! [ 577.481492][ T5887] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 577.492263][ T5887] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 577.503760][ T5887] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 577.510741][ T5887] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 577.537177][ T5887] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 577.566842][T14264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2749'. [ 577.718468][T14268] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2750'. [ 577.951156][T14274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.877412][T14278] overlayfs: missing 'lowerdir' [ 579.104280][T14287] tipc: Enabled bearer , priority 0 [ 579.112571][T14287] syzkaller0: entered promiscuous mode [ 579.119233][T14287] syzkaller0: entered allmulticast mode [ 579.166244][T14288] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3509858550 (449261894400 ns) > initial count (192404289664 ns). Using initial count to start timer. [ 579.197376][T14287] tipc: Resetting bearer [ 579.217660][T14286] tipc: Resetting bearer [ 579.265587][ T5887] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 579.275418][T14286] tipc: Disabling bearer [ 579.283378][ T5887] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 579.295715][ T5887] pyra: probe of 0003:1E7D:2CF6.0004 failed with error -71 [ 579.324016][ T5887] usb 5-1: USB disconnect, device number 2 [ 579.547855][T14292] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2759'. [ 580.040125][T14310] tipc: Enabled bearer , priority 0 [ 580.048213][T14310] syzkaller0: entered promiscuous mode [ 580.053818][T14310] syzkaller0: entered allmulticast mode [ 580.129831][T14310] tipc: Resetting bearer [ 580.143772][T14309] tipc: Resetting bearer [ 580.234571][T14309] tipc: Disabling bearer [ 580.565811][T14316] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2769'. [ 580.907732][T14326] sp0: Synchronizing with TNC [ 581.063743][ T788] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 581.263949][ T788] usb 1-1: Using ep0 maxpacket: 8 [ 581.280427][ T788] usb 1-1: config 5 has an invalid interface number: 232 but max is 0 [ 581.299336][ T788] usb 1-1: config 5 has no interface number 0 [ 581.316237][ T788] usb 1-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=90.db [ 581.325882][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.334058][ T788] usb 1-1: Product: syz [ 581.338360][ T788] usb 1-1: Manufacturer: syz [ 581.356531][ T788] usb 1-1: SerialNumber: syz [ 581.649612][ T788] usb 1-1: USB disconnect, device number 9 [ 581.667438][ T788] ================================================================== [ 581.675566][ T788] BUG: KASAN: slab-use-after-free in hdm_disconnect+0x10d/0x1c0 [ 581.683234][ T788] Read of size 8 at addr ffff88805bbd1898 by task kworker/1:2/788 [ 581.691144][ T788] [ 581.693514][ T788] CPU: 1 PID: 788 Comm: kworker/1:2 Not tainted syzkaller #0 [ 581.700902][ T788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 581.710977][ T788] Workqueue: usb_hub_wq hub_event [ 581.716036][ T788] Call Trace: [ 581.719333][ T788] [ 581.722286][ T788] dump_stack_lvl+0x16c/0x230 [ 581.726986][ T788] ? __lock_acquire+0x7c80/0x7c80 [ 581.732032][ T788] ? show_regs_print_info+0x20/0x20 [ 581.737253][ T788] ? load_image+0x3b0/0x3b0 [ 581.741828][ T788] ? __virt_addr_valid+0x469/0x540 [ 581.746963][ T788] print_report+0xac/0x220 [ 581.751399][ T788] ? hdm_disconnect+0x10d/0x1c0 [ 581.756264][ T788] kasan_report+0x117/0x150 [ 581.760779][ T788] ? hdm_disconnect+0x10d/0x1c0 [ 581.765702][ T788] hdm_disconnect+0x10d/0x1c0 [ 581.770414][ T788] usb_unbind_interface+0x1f2/0x870 [ 581.775645][ T788] ? kernfs_remove_by_name_ns+0x117/0x150 [ 581.781401][ T788] ? usb_driver_release_interface+0x1c0/0x1c0 [ 581.787497][ T788] device_release_driver_internal+0x4cb/0x7a0 [ 581.793604][ T788] bus_remove_device+0x342/0x400 [ 581.798577][ T788] device_del+0x50b/0x900 [ 581.802929][ T788] ? mark_lock+0x94/0x320 [ 581.807279][ T788] ? kill_device+0x160/0x160 [ 581.811913][ T788] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 581.817906][ T788] ? usb_disconnect+0x10b/0x8a0 [ 581.822779][ T788] ? mutex_lock_nested+0x20/0x20 [ 581.827831][ T788] ? _raw_spin_lock_irq+0xaf/0xe0 [ 581.832883][ T788] usb_disable_device+0x3e9/0x8a0 [ 581.837956][ T788] usb_disconnect+0x34c/0x8a0 [ 581.842680][ T788] hub_event+0x1cef/0x49c0 [ 581.847124][ T788] ? __lock_acquire+0x7c80/0x7c80 [ 581.852166][ T788] ? verify_lock_unused+0x140/0x140 [ 581.857408][ T788] ? hub_post_resume+0x120/0x120 [ 581.862447][ T788] ? read_lock_is_recursive+0x20/0x20 [ 581.867847][ T788] ? _raw_spin_unlock_irq+0x23/0x50 [ 581.873098][ T788] ? process_scheduled_works+0x957/0x15b0 [ 581.878847][ T788] ? process_scheduled_works+0x957/0x15b0 [ 581.884747][ T788] process_scheduled_works+0xa45/0x15b0 [ 581.890335][ T788] ? assign_work+0x400/0x400 [ 581.894952][ T788] ? assign_work+0x39e/0x400 [ 581.899554][ T788] worker_thread+0xa55/0xfc0 [ 581.904168][ T788] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 581.910069][ T788] ? _raw_spin_unlock+0x40/0x40 [ 581.914930][ T788] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 581.920835][ T788] kthread+0x2fa/0x390 [ 581.924915][ T788] ? pr_cont_work+0x560/0x560 [ 581.929621][ T788] ? kthread_blkcg+0xd0/0xd0 [ 581.934245][ T788] ret_from_fork+0x48/0x80 [ 581.938681][ T788] ? kthread_blkcg+0xd0/0xd0 [ 581.943282][ T788] ret_from_fork_asm+0x11/0x20 [ 581.948077][ T788] [ 581.951104][ T788] [ 581.953436][ T788] Allocated by task 788: [ 581.957718][ T788] kasan_set_track+0x4e/0x70 [ 581.962327][ T788] __kasan_kmalloc+0x8f/0xa0 [ 581.966932][ T788] hdm_probe+0x96/0x13e0 [ 581.971220][ T788] usb_probe_interface+0x5a4/0xb00 [ 581.976367][ T788] really_probe+0x25b/0xb40 [ 581.980970][ T788] __driver_probe_device+0x18c/0x330 [ 581.986298][ T788] driver_probe_device+0x4f/0x420 [ 581.991398][ T788] __device_attach_driver+0x2ca/0x520 [ 581.996788][ T788] bus_for_each_drv+0x24b/0x2d0 [ 582.001647][ T788] __device_attach+0x2b5/0x400 [ 582.006425][ T788] bus_probe_device+0x180/0x260 [ 582.011376][ T788] device_add+0x85b/0xc20 [ 582.015900][ T788] usb_set_configuration+0x1a79/0x20c0 [ 582.021373][ T788] usb_generic_driver_probe+0x8d/0x150 [ 582.026938][ T788] usb_probe_device+0x13d/0x280 [ 582.031834][ T788] really_probe+0x25b/0xb40 [ 582.036356][ T788] __driver_probe_device+0x18c/0x330 [ 582.041741][ T788] driver_probe_device+0x4f/0x420 [ 582.046788][ T788] __device_attach_driver+0x2ca/0x520 [ 582.052263][ T788] bus_for_each_drv+0x24b/0x2d0 [ 582.057126][ T788] __device_attach+0x2b5/0x400 [ 582.061902][ T788] bus_probe_device+0x180/0x260 [ 582.066771][ T788] device_add+0x85b/0xc20 [ 582.071116][ T788] usb_new_device+0xa31/0x1630 [ 582.075900][ T788] hub_event+0x2962/0x49c0 [ 582.080330][ T788] process_scheduled_works+0xa45/0x15b0 [ 582.085889][ T788] worker_thread+0xa55/0xfc0 [ 582.090498][ T788] kthread+0x2fa/0x390 [ 582.094587][ T788] ret_from_fork+0x48/0x80 [ 582.099194][ T788] ret_from_fork_asm+0x11/0x20 [ 582.103982][ T788] [ 582.106312][ T788] Freed by task 788: [ 582.110224][ T788] kasan_set_track+0x4e/0x70 [ 582.114840][ T788] kasan_save_free_info+0x2e/0x50 [ 582.119905][ T788] ____kasan_slab_free+0x126/0x1e0 [ 582.125049][ T788] slab_free_freelist_hook+0x130/0x1b0 [ 582.130554][ T788] __kmem_cache_free+0xba/0x1f0 [ 582.135428][ T788] device_release+0x96/0x1c0 [ 582.140031][ T788] kobject_put+0x221/0x470 [ 582.144460][ T788] hdm_disconnect+0xf3/0x1c0 [ 582.149166][ T788] usb_unbind_interface+0x1f2/0x870 [ 582.154379][ T788] device_release_driver_internal+0x4cb/0x7a0 [ 582.160469][ T788] bus_remove_device+0x342/0x400 [ 582.165415][ T788] device_del+0x50b/0x900 [ 582.169765][ T788] usb_disable_device+0x3e9/0x8a0 [ 582.174904][ T788] usb_disconnect+0x34c/0x8a0 [ 582.179594][ T788] hub_event+0x1cef/0x49c0 [ 582.184053][ T788] process_scheduled_works+0xa45/0x15b0 [ 582.189650][ T788] worker_thread+0xa55/0xfc0 [ 582.194276][ T788] kthread+0x2fa/0x390 [ 582.198368][ T788] ret_from_fork+0x48/0x80 [ 582.202804][ T788] ret_from_fork_asm+0x11/0x20 [ 582.207591][ T788] [ 582.209925][ T788] The buggy address belongs to the object at ffff88805bbd0000 [ 582.209925][ T788] which belongs to the cache kmalloc-8k of size 8192 [ 582.224097][ T788] The buggy address is located 6296 bytes inside of [ 582.224097][ T788] freed 8192-byte region [ffff88805bbd0000, ffff88805bbd2000) [ 582.238086][ T788] [ 582.240422][ T788] The buggy address belongs to the physical page: [ 582.246852][ T788] page:ffffea00016ef400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5bbd0 [ 582.257013][ T788] head:ffffea00016ef400 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 582.265960][ T788] ksm flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 582.274316][ T788] page_type: 0xffffffff() [ 582.278659][ T788] raw: 00fff00000000840 ffff888017842280 ffffea0000c33400 0000000000000003 [ 582.287254][ T788] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 582.295849][ T788] page dumped because: kasan: bad access detected [ 582.302275][ T788] page_owner tracks the page as allocated [ 582.308018][ T788] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 13946, tgid 13943 (syz.1.2653), ts 551343832138, free_ts 551260224263 [ 582.330212][ T788] post_alloc_hook+0x1cd/0x210 [ 582.335014][ T788] get_page_from_freelist+0x195c/0x19f0 [ 582.340585][ T788] __alloc_pages+0x1e3/0x460 [ 582.345200][ T788] alloc_slab_page+0x5d/0x170 [ 582.349919][ T788] new_slab+0x87/0x2e0 [ 582.354004][ T788] ___slab_alloc+0xc6d/0x1300 [ 582.358701][ T788] __kmem_cache_alloc_node+0x1a2/0x260 [ 582.364176][ T788] kmalloc_trace+0x2a/0xe0 [ 582.368606][ T788] tomoyo_init_log+0x1104/0x1f10 [ 582.373559][ T788] tomoyo_supervisor+0x32d/0x1080 [ 582.378605][ T788] tomoyo_env_perm+0x14a/0x1e0 [ 582.383385][ T788] tomoyo_find_next_domain+0x1594/0x1a60 [ 582.389037][ T788] tomoyo_bprm_check_security+0x116/0x170 [ 582.394771][ T788] security_bprm_check+0x62/0xa0 [ 582.399740][ T788] bprm_execve+0xa51/0x16f0 [ 582.404332][ T788] do_execveat_common+0x51b/0x6c0 [ 582.409374][ T788] page last free stack trace: [ 582.414072][ T788] free_unref_page_prepare+0x7ce/0x8e0 [ 582.419558][ T788] free_unref_page+0x32/0x2e0 [ 582.424249][ T788] __slab_free+0x35e/0x410 [ 582.428776][ T788] qlist_free_all+0x75/0xe0 [ 582.433475][ T788] kasan_quarantine_reduce+0x143/0x160 [ 582.438969][ T788] __kasan_slab_alloc+0x22/0x80 [ 582.443840][ T788] slab_post_alloc_hook+0x6e/0x4d0 [ 582.449008][ T788] kmem_cache_alloc+0x11e/0x2e0 [ 582.453893][ T788] getname_flags+0xbb/0x500 [ 582.458411][ T788] vfs_fstatat+0x111/0x1b0 [ 582.462836][ T788] __x64_sys_newfstatat+0x117/0x190 [ 582.468133][ T788] do_syscall_64+0x55/0xb0 [ 582.472659][ T788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 582.478562][ T788] [ 582.480891][ T788] Memory state around the buggy address: [ 582.486530][ T788] ffff88805bbd1780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 582.494600][ T788] ffff88805bbd1800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 582.502674][ T788] >ffff88805bbd1880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 582.510761][ T788] ^ [ 582.515628][ T788] ffff88805bbd1900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 582.523704][ T788] ffff88805bbd1980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 582.531768][ T788] ================================================================== [ 582.674119][ T788] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 582.681398][ T788] CPU: 1 PID: 788 Comm: kworker/1:2 Not tainted syzkaller #0 [ 582.688812][ T788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 582.698915][ T788] Workqueue: usb_hub_wq hub_event [ 582.703993][ T788] Call Trace: [ 582.707319][ T788] [ 582.710278][ T788] dump_stack_lvl+0x16c/0x230 [ 582.715087][ T788] ? show_regs_print_info+0x20/0x20 [ 582.720343][ T788] ? load_image+0x3b0/0x3b0 [ 582.724975][ T788] panic+0x2c0/0x710 [ 582.728887][ T788] ? bpf_jit_dump+0xd0/0xd0 [ 582.733403][ T788] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 582.739308][ T788] ? _raw_spin_unlock+0x40/0x40 [ 582.744170][ T788] ? print_memory_metadata+0x314/0x400 [ 582.750341][ T788] ? hdm_disconnect+0x10d/0x1c0 [ 582.755240][ T788] check_panic_on_warn+0x84/0xa0 [ 582.760227][ T788] ? hdm_disconnect+0x10d/0x1c0 [ 582.765128][ T788] end_report+0x6f/0x140 [ 582.769401][ T788] kasan_report+0x128/0x150 [ 582.773940][ T788] ? hdm_disconnect+0x10d/0x1c0 [ 582.778825][ T788] hdm_disconnect+0x10d/0x1c0 [ 582.783616][ T788] usb_unbind_interface+0x1f2/0x870 [ 582.788852][ T788] ? kernfs_remove_by_name_ns+0x117/0x150 [ 582.794587][ T788] ? usb_driver_release_interface+0x1c0/0x1c0 [ 582.800698][ T788] device_release_driver_internal+0x4cb/0x7a0 [ 582.806788][ T788] bus_remove_device+0x342/0x400 [ 582.811752][ T788] device_del+0x50b/0x900 [ 582.816101][ T788] ? mark_lock+0x94/0x320 [ 582.820442][ T788] ? kill_device+0x160/0x160 [ 582.825053][ T788] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 582.831042][ T788] ? usb_disconnect+0x10b/0x8a0 [ 582.835912][ T788] ? mutex_lock_nested+0x20/0x20 [ 582.840888][ T788] ? _raw_spin_lock_irq+0xaf/0xe0 [ 582.845953][ T788] usb_disable_device+0x3e9/0x8a0 [ 582.851381][ T788] usb_disconnect+0x34c/0x8a0 [ 582.856099][ T788] hub_event+0x1cef/0x49c0 [ 582.860605][ T788] ? __lock_acquire+0x7c80/0x7c80 [ 582.865657][ T788] ? verify_lock_unused+0x140/0x140 [ 582.870959][ T788] ? hub_post_resume+0x120/0x120 [ 582.875929][ T788] ? read_lock_is_recursive+0x20/0x20 [ 582.881343][ T788] ? _raw_spin_unlock_irq+0x23/0x50 [ 582.886644][ T788] ? process_scheduled_works+0x957/0x15b0 [ 582.892383][ T788] ? process_scheduled_works+0x957/0x15b0 [ 582.898125][ T788] process_scheduled_works+0xa45/0x15b0 [ 582.903717][ T788] ? assign_work+0x400/0x400 [ 582.908601][ T788] ? assign_work+0x39e/0x400 [ 582.913203][ T788] worker_thread+0xa55/0xfc0 [ 582.917828][ T788] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 582.923749][ T788] ? _raw_spin_unlock+0x40/0x40 [ 582.928619][ T788] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 582.934543][ T788] kthread+0x2fa/0x390 [ 582.938635][ T788] ? pr_cont_work+0x560/0x560 [ 582.943356][ T788] ? kthread_blkcg+0xd0/0xd0 [ 582.947984][ T788] ret_from_fork+0x48/0x80 [ 582.952500][ T788] ? kthread_blkcg+0xd0/0xd0 [ 582.957119][ T788] ret_from_fork_asm+0x11/0x20 [ 582.961934][ T788] [ 582.965221][ T788] Kernel Offset: disabled [ 582.969554][ T788] Rebooting in 86400 seconds..