last executing test programs: 2.275323035s ago: executing program 0 (id=232): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'bond0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x2d, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0xfffffffb, 0x42a43b0a, 0x0, 0x0, 0x0, 0x0, 0x200]}}) 2.054188292s ago: executing program 3 (id=234): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x240, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x22c, 0x1, [@m_csum={0x138, 0x14, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x2, 0x2, 0x1000, 0x8}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x80000001, 0x8, 0x1, 0xa}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x10080, 0xffffffffffffffff, 0x48fa, 0x2}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3e5, 0x4, 0x3, 0x1}, 0x21}}]}, {0x99, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a372961e6acf9f73f3ab3a6d19010c501877fc1473ff3fe388a502702c7e7d4eb99cd479f52be"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x8c, 0x9, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x4, 0x3, 0x87f3, 0x4}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x9, 0x6, 0x3, 0x7fb}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x6, 0x5, 0x5, 0x69e}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x64, 0xd, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x80}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.034535714s ago: executing program 0 (id=235): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 1.869234358s ago: executing program 1 (id=236): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x380, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98b9, 0x800000000000009, 0x0, 0x100000000000004, 0xfffe, 0x100, 0x1, 0x0, 0x5, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x300, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x6c3f, 0x4, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x0, 0xe6, 0x200000000000101, 0x5, 0x3, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x3, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0xb, 0x8, 0x3, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0x8, 0x3]}) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x8, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x1, 0x0, 0x791, 0x0, 0x800000006, 0x0, 0xbdb], 0xffff1001, 0x120182}) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)=[{{&(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10, 0x0}}], 0x1, 0x4080) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0x1, 0x202}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000480)={[{0x9570000, 0x3, 0x0, 0x0, 0x85, 0x1, 0xff, 0x2, 0x6, 0x4, 0x47, 0xf, 0x1}, {0x9f83, 0x7, 0xe, 0x5a, 0x1, 0x3, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x6}, {0x6, 0x1005, 0x81, 0xa, 0x6, 0x46, 0xf8, 0x4f, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.855618288s ago: executing program 3 (id=237): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x200a017, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, 0x0, 0x30}]) 1.620129808s ago: executing program 3 (id=238): socket$alg(0x26, 0x5, 0x0) socket$igmp6(0xa, 0x3, 0x2) unshare(0x22020600) r0 = socket(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) 1.523196896s ago: executing program 0 (id=239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 1.522074366s ago: executing program 1 (id=240): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.316967813s ago: executing program 3 (id=242): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) writev(r1, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0xfd1}], 0x1) 1.265380177s ago: executing program 1 (id=244): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.210319071s ago: executing program 0 (id=245): socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8ea9, 0xfffd, {0x0, 0x5}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0xb}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$inet(r1, 0x0, 0x0, 0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x40044591, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1.064874853s ago: executing program 0 (id=247): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 949.034333ms ago: executing program 1 (id=248): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 877.512438ms ago: executing program 2 (id=249): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000940)=ANY=[@ANYBLOB="540100001000010028bd7000ffdbdf25ac1414aa0000000000000000000000007f0000010000000000000000000000004e23000020008000000020000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010101000000000000000000000000000000206c000000fe800000000000000000000000000023feffffffffffffff000000000000000000000000000000000100000000000008c802000000000100060000000000000000000000000004000000000000000000ffffffffff1f0000080000000000000000000000000000000400000000000019000000000900000000000000000000000000000002"], 0x154}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) 840.668241ms ago: executing program 0 (id=250): syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x3400, 0x7ffe, 0x40024e}, 0x0, 0x0) eventfd2(0xff, 0x80000) socket(0x2a, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 670.398525ms ago: executing program 2 (id=251): socket$alg(0x26, 0x5, 0x0) socket$igmp6(0xa, 0x3, 0x2) unshare(0x22020600) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000), 0x0) 659.735316ms ago: executing program 2 (id=252): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r1, 0x0, 0xffffffffffffffff, 0xa3}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r1, 0x0, &(0x7f0000000480)="a9", 0x1, 0x8}) 592.918842ms ago: executing program 2 (id=253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 426.263245ms ago: executing program 2 (id=254): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 388.572288ms ago: executing program 3 (id=255): socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8ea9, 0xfffd, {0x0, 0x5}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0xb}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$inet(r1, 0x0, 0x0, 0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x40044591, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 331.379253ms ago: executing program 2 (id=256): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 218.730022ms ago: executing program 1 (id=257): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x200a017, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, 0x0, 0x30}]) 218.010882ms ago: executing program 3 (id=258): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) pwrite64(r0, &(0x7f0000000100)="52035d912eef26f7b37ed9c6cab294610fa7f74b0f562ca8037c06aac6f59ea9aae287f664e4339e0c6c8fbe42f6a75e5e3a8b957e603cdd2a7b36d69457504a105840b7dd76092ce26f30", 0x4b, 0x7fff) 0s ago: executing program 1 (id=259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.174' (ED25519) to the list of known hosts. syzkaller login: [ 74.848181][ T5775] cgroup: Unknown subsys name 'net' [ 75.016293][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.673486][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.346153][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.359225][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.369100][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.376589][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.397668][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.405975][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.407835][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.422924][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.423056][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.430987][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.446007][ T5797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.446004][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.446564][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.454034][ T5793] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.475006][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.477838][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.487276][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.497329][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.506734][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.515011][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.533056][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.550120][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.558361][ T5797] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.565813][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.036151][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 79.114391][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 79.175535][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 79.242871][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 79.291100][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.298752][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.306207][ T5785] bridge_slave_0: entered allmulticast mode [ 79.314187][ T5785] bridge_slave_0: entered promiscuous mode [ 79.361556][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.368894][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.376442][ T5785] bridge_slave_1: entered allmulticast mode [ 79.383717][ T5785] bridge_slave_1: entered promiscuous mode [ 79.461365][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.468914][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.476129][ T5790] bridge_slave_0: entered allmulticast mode [ 79.483892][ T5790] bridge_slave_0: entered promiscuous mode [ 79.533103][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.540419][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.547854][ T5790] bridge_slave_1: entered allmulticast mode [ 79.555498][ T5790] bridge_slave_1: entered promiscuous mode [ 79.567128][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.580157][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.589685][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.596802][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.604392][ T5789] bridge_slave_0: entered allmulticast mode [ 79.611554][ T5789] bridge_slave_0: entered promiscuous mode [ 79.620430][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.627680][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.634870][ T5789] bridge_slave_1: entered allmulticast mode [ 79.642145][ T5789] bridge_slave_1: entered promiscuous mode [ 79.700143][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.707297][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.714738][ T5791] bridge_slave_0: entered allmulticast mode [ 79.722251][ T5791] bridge_slave_0: entered promiscuous mode [ 79.771524][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.780912][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.789490][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.796700][ T5791] bridge_slave_1: entered allmulticast mode [ 79.803901][ T5791] bridge_slave_1: entered promiscuous mode [ 79.813392][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.826109][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.839122][ T5785] team0: Port device team_slave_0 added [ 79.848144][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.894140][ T5785] team0: Port device team_slave_1 added [ 79.946915][ T5790] team0: Port device team_slave_0 added [ 79.982380][ T5789] team0: Port device team_slave_0 added [ 79.990981][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.003546][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.014379][ T5790] team0: Port device team_slave_1 added [ 80.033555][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.041307][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.067464][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.081024][ T5789] team0: Port device team_slave_1 added [ 80.087646][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.094727][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.121729][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.218702][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.225694][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.252031][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.264986][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.272667][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.298702][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.311444][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.318487][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.344621][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.358331][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.365339][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.391509][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.419851][ T5791] team0: Port device team_slave_0 added [ 80.434497][ T5791] team0: Port device team_slave_1 added [ 80.462863][ T5785] hsr_slave_0: entered promiscuous mode [ 80.470019][ T5785] hsr_slave_1: entered promiscuous mode [ 80.518727][ T5788] Bluetooth: hci0: command tx timeout [ 80.518746][ T5797] Bluetooth: hci2: command tx timeout [ 80.562697][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.569757][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.596957][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.597984][ T5788] Bluetooth: hci1: command tx timeout [ 80.610479][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.620289][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.646354][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.677677][ T5788] Bluetooth: hci3: command tx timeout [ 80.693953][ T5790] hsr_slave_0: entered promiscuous mode [ 80.701122][ T5790] hsr_slave_1: entered promiscuous mode [ 80.707960][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.715823][ T5790] Cannot create hsr debugfs directory [ 80.752857][ T5789] hsr_slave_0: entered promiscuous mode [ 80.760104][ T5789] hsr_slave_1: entered promiscuous mode [ 80.766385][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.774022][ T5789] Cannot create hsr debugfs directory [ 80.845323][ T5791] hsr_slave_0: entered promiscuous mode [ 80.851728][ T5791] hsr_slave_1: entered promiscuous mode [ 80.859362][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.866954][ T5791] Cannot create hsr debugfs directory [ 81.226843][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.246002][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.262423][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.272940][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.350528][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.363587][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.374483][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.384948][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.493753][ T5790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.504003][ T5790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.514959][ T5790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.527199][ T5790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.631989][ T5791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.654315][ T5791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.678828][ T5791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.690195][ T5791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.738559][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.770061][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.796444][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.842318][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.860606][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.868113][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.880753][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.887992][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.947310][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.954587][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.014406][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.021653][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.069649][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.148411][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.183933][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.226970][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.234225][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.254780][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.261988][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.295997][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.380349][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.387592][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.440805][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.448094][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.600011][ T5788] Bluetooth: hci0: command tx timeout [ 82.605517][ T5788] Bluetooth: hci2: command tx timeout [ 82.634220][ T5791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.680175][ T5788] Bluetooth: hci1: command tx timeout [ 82.759825][ T5788] Bluetooth: hci3: command tx timeout [ 82.912992][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.049916][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.127324][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.182634][ T5785] veth0_vlan: entered promiscuous mode [ 83.212309][ T5789] veth0_vlan: entered promiscuous mode [ 83.232258][ T5785] veth1_vlan: entered promiscuous mode [ 83.255667][ T5789] veth1_vlan: entered promiscuous mode [ 83.273447][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.327022][ T5785] veth0_macvtap: entered promiscuous mode [ 83.335929][ T5790] veth0_vlan: entered promiscuous mode [ 83.362666][ T5790] veth1_vlan: entered promiscuous mode [ 83.381315][ T5785] veth1_macvtap: entered promiscuous mode [ 83.421695][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.434438][ T5789] veth0_macvtap: entered promiscuous mode [ 83.454349][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.464559][ T5789] veth1_macvtap: entered promiscuous mode [ 83.504604][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.514284][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.523162][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.532298][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.557774][ T5791] veth0_vlan: entered promiscuous mode [ 83.564225][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.575271][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.587363][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.622083][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.634808][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.647180][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.672946][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.682235][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.691514][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.702535][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.727226][ T5790] veth0_macvtap: entered promiscuous mode [ 83.750270][ T5791] veth1_vlan: entered promiscuous mode [ 83.801085][ T5790] veth1_macvtap: entered promiscuous mode [ 83.889320][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.908484][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.927752][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.936601][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.949330][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.961501][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.972364][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.983120][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.995642][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.020501][ T5791] veth0_macvtap: entered promiscuous mode [ 84.040652][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.051689][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.063488][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.074488][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.086224][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.097001][ T5791] veth1_macvtap: entered promiscuous mode [ 84.113878][ T3437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.126064][ T3437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.128056][ T5790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.143428][ T5790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.152881][ T5790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.162147][ T5790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.252072][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.266719][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.296573][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.308173][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.318789][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.329313][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.341253][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.352498][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.366035][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.394704][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.413239][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.423763][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.435495][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.447267][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.458718][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.473071][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.545112][ T5791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.557795][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.567791][ T5791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.576576][ T5791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.586029][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.626338][ T5791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.678900][ T5788] Bluetooth: hci2: command tx timeout [ 84.682529][ T5874] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.684363][ T5788] Bluetooth: hci0: command tx timeout [ 84.759791][ T5875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 84.769331][ T5788] Bluetooth: hci1: command tx timeout [ 84.775871][ T5875] Zero length message leads to an empty skb [ 84.783058][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.808065][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.838223][ T5788] Bluetooth: hci3: command tx timeout [ 84.907108][ T5875] (null): rxe_set_mtu: Set mtu to 4096 [ 84.955540][ T5875] lo speed is unknown, defaulting to 1000 [ 85.006436][ T5875] lo speed is unknown, defaulting to 1000 [ 85.043648][ T5875] lo speed is unknown, defaulting to 1000 [ 85.044425][ T3437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.097074][ T3437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.279855][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.304701][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.671704][ T5897] netlink: 'syz.0.7': attribute type 3 has an invalid length. [ 85.682702][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 85.708461][ T5875] infiniband syz0: set active [ 85.714865][ T5880] lo speed is unknown, defaulting to 1000 [ 85.725120][ T5875] infiniband syz0: added lo [ 85.739863][ T5875] syz0: rxe_create_cq: returned err = -12 [ 85.749137][ T5875] infiniband syz0: Couldn't create ib_mad CQ [ 85.755873][ T5875] infiniband syz0: Couldn't open port 1 [ 85.810715][ T5875] RDS/IB: syz0: added [ 85.817721][ T5853] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.832743][ T5875] smc: adding ib device syz0 with port count 1 [ 85.859998][ T5875] smc: ib device syz0 port 1 has pnetid [ 85.867456][ T5880] lo speed is unknown, defaulting to 1000 [ 85.910906][ T5875] lo speed is unknown, defaulting to 1000 [ 85.917694][ T5788] Bluetooth: hci2: Unknown advertising packet type: 0x18 [ 85.917945][ T5788] Bluetooth: hci2: Unknown advertising packet type: 0x1e [ 86.021971][ T5853] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 86.056719][ T5905] syz.0.10[5905]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 86.085922][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.106588][ T5853] usb 3-1: Product: syz [ 86.126415][ T5853] usb 3-1: Manufacturer: syz [ 86.150056][ T5853] usb 3-1: SerialNumber: syz [ 86.196053][ T5853] usb 3-1: config 0 descriptor?? [ 86.399054][ T5905] loop0: detected capacity change from 0 to 32768 [ 86.407359][ T5905] ======================================================= [ 86.407359][ T5905] WARNING: The mand mount option has been deprecated and [ 86.407359][ T5905] and is ignored by this kernel. Remove the mand [ 86.407359][ T5905] option from the mount to silence this warning. [ 86.407359][ T5905] ======================================================= [ 86.442592][ T5905] XFS: noikeep mount option is deprecated. [ 86.448556][ T5905] XFS: attr2 mount option is deprecated. [ 86.525036][ T5905] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 86.653232][ T5905] XFS (loop0): Ending clean mount [ 86.661177][ T5875] lo speed is unknown, defaulting to 1000 [ 86.662256][ T5905] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 86.757873][ T5788] Bluetooth: hci0: command tx timeout [ 86.773184][ T5788] Bluetooth: hci2: command tx timeout [ 86.838235][ T5788] Bluetooth: hci1: command tx timeout [ 86.918204][ T5788] Bluetooth: hci3: command tx timeout [ 87.136350][ T5853] usb 3-1: Firmware version (0.0) predates our first public release. [ 87.170551][ T27] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.228172][ T27] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 87.464744][ T5875] lo speed is unknown, defaulting to 1000 [ 87.616281][ T5929] fido_id (5929) used greatest stack depth: 20592 bytes left [ 88.133500][ T5853] usb 3-1: Please update to version 0.2 or newer [ 88.243411][ T5853] usb 3-1: USB disconnect, device number 2 [ 88.335069][ T5942] warning: `syz.3.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.457655][ T5875] lo speed is unknown, defaulting to 1000 [ 88.505997][ T5935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 89.518374][ T5968] loop0: detected capacity change from 0 to 1024 [ 89.626995][ T5968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.657628][ T5968] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.707838][ T5975] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 89.893834][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.231337][ T5989] syz.2.32[5989] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.231488][ T5989] syz.2.32[5989] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.520078][ T5852] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.593290][ T6005] loop3: detected capacity change from 0 to 1024 [ 90.715750][ T6005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.767473][ T5852] usb 3-1: Using ep0 maxpacket: 16 [ 90.775608][ T6005] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.779562][ T5852] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.797122][ T5852] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.823896][ T5852] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.827812][ T6010] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 90.836509][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.867483][ T5852] usb 3-1: Product: syz [ 90.871816][ T5852] usb 3-1: Manufacturer: syz [ 90.876453][ T5852] usb 3-1: SerialNumber: syz [ 90.989657][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.159090][ T5852] usb 3-1: 0:2 : does not exist [ 91.186185][ T5852] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 91.281630][ T5852] usb 3-1: USB disconnect, device number 3 [ 91.436121][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.788743][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.47'. [ 92.133250][ T8] cfg80211: failed to load regulatory.db [ 92.617747][ T6056] syz.1.57[6056] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.617893][ T6056] syz.1.57[6056] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.897896][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.097538][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 93.297650][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.317561][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.478843][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.755527][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.812022][ T8] usb 2-1: Product: syz [ 93.836147][ T8] usb 2-1: Manufacturer: syz [ 94.170152][ T8] usb 2-1: SerialNumber: syz [ 94.405338][ T8] usb 2-1: 0:2 : does not exist [ 94.430890][ T8] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 94.507644][ T8] usb 2-1: USB disconnect, device number 2 [ 94.614380][ T6085] loop3: detected capacity change from 0 to 1024 [ 94.625202][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.676679][ T6085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.735704][ T6085] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.901185][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.434059][ T6117] loop0: detected capacity change from 0 to 1024 [ 96.531329][ T6117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.612830][ T6117] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.828933][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.897749][ T6137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 97.951949][ T6147] netlink: 'syz.1.92': attribute type 3 has an invalid length. [ 97.978678][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'. [ 98.214172][ T6159] loop1: detected capacity change from 0 to 1024 [ 98.284691][ T6159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.352653][ T6159] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.539546][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.166485][ T6192] netlink: 'syz.0.110': attribute type 3 has an invalid length. [ 99.201342][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.110'. [ 99.301743][ T6195] loop2: detected capacity change from 0 to 1024 [ 99.404638][ T6195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.449801][ T6195] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.663295][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.967742][ T966] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.381970][ T966] usb 2-1: Using ep0 maxpacket: 16 [ 102.390196][ T966] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.401720][ T966] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.413986][ T966] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.423388][ T966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.433326][ T966] usb 2-1: Product: syz [ 102.446137][ T966] usb 2-1: Manufacturer: syz [ 102.544077][ T966] usb 2-1: SerialNumber: syz [ 103.136755][ T966] usb 2-1: 0:2 : does not exist [ 103.169194][ T966] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 104.107469][ T966] usb 2-1: USB disconnect, device number 3 [ 104.370370][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.622927][ T6326] syzkaller0: entered promiscuous mode [ 104.631131][ T6326] syzkaller0: entered allmulticast mode [ 104.779738][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.811591][ T6330] netlink: 'syz.1.160': attribute type 3 has an invalid length. [ 104.827507][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 104.967573][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 105.009774][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.045409][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.077747][ T23] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.139704][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.188600][ T23] usb 4-1: Product: syz [ 105.214558][ T23] usb 4-1: Manufacturer: syz [ 105.242586][ T23] usb 4-1: SerialNumber: syz [ 105.520147][ T23] usb 4-1: 0:2 : does not exist [ 105.575198][ T23] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 105.702450][ T23] usb 4-1: USB disconnect, device number 2 [ 105.910983][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.270730][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.170'. [ 106.341145][ T6352] syzkaller0: entered promiscuous mode [ 106.346701][ T6352] syzkaller0: entered allmulticast mode [ 106.386069][ T6355] (null): rxe_set_mtu: Set mtu to 4096 [ 106.398775][ T6355] rdma_rxe: rxe_newlink: failed to add lo [ 107.488242][ T6371] overlayfs: failed to resolve './bus': -2 [ 107.899801][ T6383] loop0: detected capacity change from 0 to 1024 [ 107.932035][ T6376] loop1: detected capacity change from 0 to 32768 [ 107.939397][ T6376] XFS: noikeep mount option is deprecated. [ 107.945264][ T6376] XFS: attr2 mount option is deprecated. [ 107.967767][ T5852] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.988366][ T6376] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 108.077866][ T6376] XFS (loop1): Ending clean mount [ 108.087067][ T6376] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 108.187458][ T5852] usb 4-1: Using ep0 maxpacket: 16 [ 108.199795][ T1095] hfsplus: b-tree write err: -5, ino 4 [ 108.224656][ T5852] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.252224][ T5852] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.315854][ T5852] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.362558][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.403735][ T5852] usb 4-1: Product: syz [ 108.418863][ T5852] usb 4-1: Manufacturer: syz [ 108.430008][ T5852] usb 4-1: SerialNumber: syz [ 108.614376][ T6401] syzkaller0: entered promiscuous mode [ 108.625299][ T6401] syzkaller0: entered allmulticast mode [ 108.671619][ T5852] usb 4-1: 0:2 : does not exist [ 108.689748][ T5852] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 108.799714][ T5852] usb 4-1: USB disconnect, device number 3 [ 108.900777][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.190343][ T6411] overlayfs: failed to resolve './bus': -2 [ 109.293243][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'. [ 110.231858][ T6421] netlink: 'syz.1.192': attribute type 3 has an invalid length. [ 110.240005][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 110.508550][ T6429] syzkaller0: entered promiscuous mode [ 110.530699][ T6429] syzkaller0: entered allmulticast mode [ 112.060571][ T6431] loop2: detected capacity change from 0 to 32768 [ 112.067890][ T6431] XFS: noikeep mount option is deprecated. [ 112.073769][ T6431] XFS: attr2 mount option is deprecated. [ 112.144333][ T6431] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 112.272434][ T6431] XFS (loop2): Ending clean mount [ 112.281752][ T6431] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 112.766701][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 114.191103][ T6485] syzkaller0: entered promiscuous mode [ 114.204752][ T6485] syzkaller0: entered allmulticast mode [ 114.266208][ T6489] loop2: detected capacity change from 0 to 1024 [ 114.384782][ T1095] hfsplus: b-tree write err: -5, ino 4 [ 114.597221][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 115.086475][ T6515] syzkaller0: entered promiscuous mode [ 115.105348][ T6515] syzkaller0: entered allmulticast mode [ 115.292239][ T6521] loop3: detected capacity change from 0 to 1024 [ 116.554732][ T6560] nfs: Unknown parameter '¢8€' [ 116.936684][ T6579] netlink: 100 bytes leftover after parsing attributes in process `syz.2.249'. [ 117.629515][ T6604] loop3: detected capacity change from 0 to 2048 [ 117.662953][ T6604] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.742055][ T28] audit: type=1800 audit(1754166637.576:2): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.258" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 117.770292][ T6604] ------------[ cut here ]------------ [ 117.776150][ T6604] WARNING: CPU: 0 PID: 6604 at fs/udf/truncate.c:224 udf_truncate_extents+0xd46/0xeb0 [ 117.786715][ T6604] Modules linked in: [ 117.791192][ T6604] CPU: 0 PID: 6604 Comm: syz.3.258 Not tainted 6.6.101-syzkaller #0 [ 117.799621][ T6604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.809957][ T6604] RIP: 0010:udf_truncate_extents+0xd46/0xeb0 [ 117.816052][ T6604] Code: 65 48 8b 04 25 28 00 00 00 48 3b 84 24 80 01 00 00 75 70 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3a 4f 8e fe <0f> 0b eb 8e 44 89 e9 80 e1 07 38 c1 0f 8c ec f3 ff ff 4c 89 ef e8 [ 117.836914][ T6604] RSP: 0018:ffffc900191379a0 EFLAGS: 00010283 [ 117.843294][ T6604] RAX: ffffffff82f74656 RBX: 1ffff1100b6940d5 RCX: 0000000000080000 [ 117.851682][ T6604] RDX: ffffc9000d64d000 RSI: 0000000000011484 RDI: 0000000000011485 [ 117.859832][ T6604] RBP: ffffc90019137b68 R08: ffff88802c7f5a00 R09: 0000000000000002 [ 117.868020][ T6604] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 117.876053][ T6604] R13: 0000000000000000 R14: 000000000000000a R15: 000000000000000a [ 117.884312][ T6604] FS: 00007feedbe246c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 117.893363][ T6604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.900060][ T6604] CR2: 00007f9ae05812f8 CR3: 000000001bfde000 CR4: 00000000003506f0 [ 117.908147][ T6604] Call Trace: [ 117.911489][ T6604] [ 117.914537][ T6604] ? udf_discard_prealloc+0x570/0x570 [ 117.920039][ T6604] ? udf_write_failed+0x178/0x1b0 [ 117.926110][ T6604] ? __lock_acquire+0x7c80/0x7c80 [ 117.931452][ T6604] ? do_raw_spin_lock+0x121/0x2c0 [ 117.936555][ T6604] ? __rwlock_init+0x80/0x150 [ 117.941355][ T6604] ? do_raw_spin_unlock+0x121/0x230 [ 117.946653][ T6604] udf_write_failed+0x180/0x1b0 [ 117.951794][ T6604] udf_direct_IO+0x1c3/0x200 [ 117.956468][ T6604] generic_file_direct_write+0x1d4/0x3e0 [ 117.962595][ T6604] __generic_file_write_iter+0x11b/0x230 [ 117.968370][ T6604] ? udf_file_write_iter+0x2b1/0x620 [ 117.973738][ T6604] udf_file_write_iter+0x2c0/0x620 [ 117.979101][ T6604] vfs_write+0x43b/0x940 [ 117.983415][ T6604] ? file_end_write+0x250/0x250 [ 117.988429][ T6604] ? __fget_files+0x44a/0x4d0 [ 117.993189][ T6604] ? __fdget+0x180/0x210 [ 117.997623][ T6604] ? __x64_sys_pwrite64+0xf0/0x220 [ 118.002802][ T6604] __x64_sys_pwrite64+0x195/0x220 [ 118.007968][ T6604] ? ksys_pwrite64+0x1c0/0x1c0 [ 118.012838][ T6604] ? lockdep_hardirqs_on+0x98/0x150 [ 118.018188][ T6604] do_syscall_64+0x55/0xb0 [ 118.022667][ T6604] ? clear_bhb_loop+0x40/0x90 [ 118.028460][ T6604] ? clear_bhb_loop+0x40/0x90 [ 118.033540][ T6604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.039664][ T6604] RIP: 0033:0x7feedaf8eb69 [ 118.044149][ T6604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.063810][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.070026][ T6604] RSP: 002b:00007feedbe24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 118.078593][ T6604] RAX: ffffffffffffffda RBX: 00007feedb1b5fa0 RCX: 00007feedaf8eb69 [ 118.086632][ T6604] RDX: 000000000000004b RSI: 0000200000000100 RDI: 0000000000000004 [ 118.094737][ T6604] RBP: 00007feedb011df1 R08: 0000000000000000 R09: 0000000000000000 [ 118.102836][ T6604] R10: 0000000000007fff R11: 0000000000000246 R12: 0000000000000000 [ 118.110929][ T6604] R13: 0000000000000000 R14: 00007feedb1b5fa0 R15: 00007fff3385a628 [ 118.119261][ T6604] [ 118.122333][ T6604] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 118.129645][ T6604] CPU: 0 PID: 6604 Comm: syz.3.258 Not tainted 6.6.101-syzkaller #0 [ 118.137666][ T6604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 118.147774][ T6604] Call Trace: [ 118.151088][ T6604] [ 118.154046][ T6604] dump_stack_lvl+0x16c/0x230 [ 118.158761][ T6604] ? show_regs_print_info+0x20/0x20 [ 118.163994][ T6604] ? load_image+0x3b0/0x3b0 [ 118.168550][ T6604] panic+0x2c0/0x710 [ 118.172500][ T6604] ? bpf_jit_dump+0xd0/0xd0 [ 118.177081][ T6604] __warn+0x2e0/0x470 [ 118.181107][ T6604] ? udf_truncate_extents+0xd46/0xeb0 [ 118.186507][ T6604] ? udf_truncate_extents+0xd46/0xeb0 [ 118.191909][ T6604] report_bug+0x2be/0x4f0 [ 118.196259][ T6604] ? udf_truncate_extents+0xd46/0xeb0 [ 118.201654][ T6604] ? udf_truncate_extents+0xd46/0xeb0 [ 118.207042][ T6604] ? udf_truncate_extents+0xd48/0xeb0 [ 118.212430][ T6604] handle_bug+0xcf/0x120 [ 118.216709][ T6604] exc_invalid_op+0x1a/0x50 [ 118.221231][ T6604] asm_exc_invalid_op+0x1a/0x20 [ 118.226147][ T6604] RIP: 0010:udf_truncate_extents+0xd46/0xeb0 [ 118.232156][ T6604] Code: 65 48 8b 04 25 28 00 00 00 48 3b 84 24 80 01 00 00 75 70 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3a 4f 8e fe <0f> 0b eb 8e 44 89 e9 80 e1 07 38 c1 0f 8c ec f3 ff ff 4c 89 ef e8 [ 118.251814][ T6604] RSP: 0018:ffffc900191379a0 EFLAGS: 00010283 [ 118.257993][ T6604] RAX: ffffffff82f74656 RBX: 1ffff1100b6940d5 RCX: 0000000000080000 [ 118.266068][ T6604] RDX: ffffc9000d64d000 RSI: 0000000000011484 RDI: 0000000000011485 [ 118.274055][ T6604] RBP: ffffc90019137b68 R08: ffff88802c7f5a00 R09: 0000000000000002 [ 118.282042][ T6604] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 118.290030][ T6604] R13: 0000000000000000 R14: 000000000000000a R15: 000000000000000a [ 118.298027][ T6604] ? udf_truncate_extents+0xd46/0xeb0 [ 118.303436][ T6604] ? udf_discard_prealloc+0x570/0x570 [ 118.308827][ T6604] ? udf_write_failed+0x178/0x1b0 [ 118.313877][ T6604] ? __lock_acquire+0x7c80/0x7c80 [ 118.319003][ T6604] ? do_raw_spin_lock+0x121/0x2c0 [ 118.324047][ T6604] ? __rwlock_init+0x80/0x150 [ 118.328757][ T6604] ? do_raw_spin_unlock+0x121/0x230 [ 118.333983][ T6604] udf_write_failed+0x180/0x1b0 [ 118.338880][ T6604] udf_direct_IO+0x1c3/0x200 [ 118.343525][ T6604] generic_file_direct_write+0x1d4/0x3e0 [ 118.349198][ T6604] __generic_file_write_iter+0x11b/0x230 [ 118.354859][ T6604] ? udf_file_write_iter+0x2b1/0x620 [ 118.360178][ T6604] udf_file_write_iter+0x2c0/0x620 [ 118.365325][ T6604] vfs_write+0x43b/0x940 [ 118.369602][ T6604] ? file_end_write+0x250/0x250 [ 118.374481][ T6604] ? __fget_files+0x44a/0x4d0 [ 118.379188][ T6604] ? __fdget+0x180/0x210 [ 118.383448][ T6604] ? __x64_sys_pwrite64+0xf0/0x220 [ 118.388591][ T6604] __x64_sys_pwrite64+0x195/0x220 [ 118.393638][ T6604] ? ksys_pwrite64+0x1c0/0x1c0 [ 118.398524][ T6604] ? lockdep_hardirqs_on+0x98/0x150 [ 118.403748][ T6604] do_syscall_64+0x55/0xb0 [ 118.408179][ T6604] ? clear_bhb_loop+0x40/0x90 [ 118.412877][ T6604] ? clear_bhb_loop+0x40/0x90 [ 118.417565][ T6604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.423487][ T6604] RIP: 0033:0x7feedaf8eb69 [ 118.427916][ T6604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.447634][ T6604] RSP: 002b:00007feedbe24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 118.456087][ T6604] RAX: ffffffffffffffda RBX: 00007feedb1b5fa0 RCX: 00007feedaf8eb69 [ 118.464089][ T6604] RDX: 000000000000004b RSI: 0000200000000100 RDI: 0000000000000004 [ 118.472087][ T6604] RBP: 00007feedb011df1 R08: 0000000000000000 R09: 0000000000000000 [ 118.480193][ T6604] R10: 0000000000007fff R11: 0000000000000246 R12: 0000000000000000 [ 118.488182][ T6604] R13: 0000000000000000 R14: 00007feedb1b5fa0 R15: 00007fff3385a628 [ 118.496181][ T6604] [ 118.499508][ T6604] Kernel Offset: disabled [ 118.504008][ T6604] Rebooting in 86400 seconds..