last executing test programs: 7.675437552s ago: executing program 3 (id=1086): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) userfaultfd(0x80801) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x2}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x64842, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x3}}, 0x26) getsockopt$bt_BT_SECURITY(r4, 0x111, 0x4, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) 7.603228218s ago: executing program 4 (id=1088): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x1, &(0x7f00000001c0)=[{0x6, 0x1, 0x8, 0x7fffffff}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000000002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x2a) close(r2) timerfd_create(0x8, 0x800) syz_fuse_handle_req(r2, &(0x7f00000083c0)="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", 0x2000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r3, 0x0, 0x29, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth0_to_team\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r4 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) ftruncate(r4, 0x51a9497) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000200)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000340)={r7, 0x1, 0x4}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={0x9}, 0x26) faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x9534e2261c2cac6f) close(r6) 6.65566178s ago: executing program 4 (id=1092): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x1df67, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000440), &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, &(0x7f00000004c0)}) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) io_uring_enter(r3, 0x3f70, 0x0, 0x0, 0x0, 0x0) 6.232541166s ago: executing program 3 (id=1094): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xc, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 5.95118539s ago: executing program 3 (id=1097): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000100)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/99, 0x0}) socket$inet(0x2, 0x2, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x3d}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 5.099371783s ago: executing program 1 (id=1098): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYRES32], 0xff2e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0x0, 0xfffffffd, 0x100000}}]}]}}}]}, 0x68}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = syz_open_pts(r0, 0x0) dup3(r5, r0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x129101) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x40485404, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r6, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r6, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x104) 4.962598985s ago: executing program 0 (id=1099): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) userfaultfd(0x80801) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r0, 0x14, 0x67}}, 0x1c}}, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_DQEVENT(r3, 0x80785659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) socket$xdp(0x2c, 0x3, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x140e, 0x400, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x800) 4.644222322s ago: executing program 3 (id=1100): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0xa503, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 4.245094956s ago: executing program 1 (id=1101): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYRES32], 0xff2e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0x0, 0xfffffffd, 0x100000}}]}]}}}]}, 0x68}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = syz_open_pts(r0, 0x0) r6 = dup3(r5, r0, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x12) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r7, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r7, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x104) 4.179656962s ago: executing program 0 (id=1102): rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_clone(0x81a800, 0x0, 0x0, 0x0, 0x0, 0x0) setfsuid(0x0) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400, 0x200, 0x0) getgroups(0x1, &(0x7f0000002200)=[0xffffffffffffffff]) dup(0xffffffffffffffff) socket(0xa, 0x2, 0x0) setresgid(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000002340)) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) 4.147200655s ago: executing program 3 (id=1103): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='sys_enter\x00', r0, 0x0, 0x4}, 0x18) mq_unlink(0x0) 4.092430359s ago: executing program 0 (id=1104): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002000000b7080000000000007b8af8ff00000000b70800000002000037e4f0ff00000000bfa100ffbfa40000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xc, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000340)=[{0x4, 0x2, 0x6, 0x8}, {0x0, 0x1, 0xb, 0x8}, {0x0, 0x2, 0x9, 0x5}, {0x1, 0x2, 0xf, 0x7}, {0x5, 0x2, 0xf, 0x2}, {0x5, 0x5, 0x3, 0x9}], 0x10, 0xfffffffb, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) inotify_init1(0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) 3.747661099s ago: executing program 3 (id=1105): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0xa}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x8b9, 0x80981) r5 = memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), r5, 0x0, 0x1, 0x4}}, 0x20) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x8}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r7 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,:', 0x0) 3.277084719s ago: executing program 1 (id=1107): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="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"], 0x1c8}}, 0x0) 3.106084354s ago: executing program 1 (id=1108): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, 0x0) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000100)=0x1, 0x4) listen(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)='w', 0x1, 0x8051, 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, 0x0) sendto$inet6(r3, &(0x7f0000000280)="03", 0x100000, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, 0x0, 0x2, 0x0) 3.061047118s ago: executing program 4 (id=1109): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002000000b7080000000000007b8af8ff00000000b70800000002000037e4f0ff00000000bfa100ffbfa40000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xc, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000340)=[{0x4, 0x2, 0x6, 0x8}, {0x0, 0x1, 0xb, 0x8}, {0x0, 0x2, 0x9, 0x5}, {0x1, 0x2, 0xf, 0x7}, {0x5, 0x2, 0xf, 0x2}, {0x5, 0x5, 0x3, 0x9}], 0x10, 0xfffffffb, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x800}, 0x18) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = inotify_init1(0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) close_range(r3, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) dup2(0xffffffffffffffff, 0xffffffffffffffff) 2.707587978s ago: executing program 2 (id=1111): socket(0x10, 0x803, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x20, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf7}]}]}, 0x20}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.016595977s ago: executing program 1 (id=1112): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYRES32], 0xff2e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0x0, 0xfffffffd, 0x100000}}]}]}}}]}, 0x68}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = syz_open_pts(r0, 0x0) dup3(r5, r0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x129101) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x40485404, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r6, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r6, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x104) 1.919795885s ago: executing program 4 (id=1113): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0xc9303000) r0 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000007b80)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1.612874982s ago: executing program 2 (id=1114): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) 1.469911774s ago: executing program 2 (id=1115): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r4, 0x3, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}}, 0x802) 1.28481699s ago: executing program 0 (id=1116): syz_open_procfs(0x0, &(0x7f0000000300)='fd\x00') syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x682e}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x4008800) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000000)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000045c0)={0x2020}, 0x2020) 1.199709367s ago: executing program 2 (id=1117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}}, 0x0) 706.80478ms ago: executing program 1 (id=1118): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYRES32], 0xff2e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0x0, 0xfffffffd, 0x100000}}]}]}}}]}, 0x68}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = syz_open_pts(r0, 0x0) r6 = dup3(r5, r0, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x12) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r7, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r7, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x104) 671.753432ms ago: executing program 0 (id=1119): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="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"], 0x1c8}}, 0x0) 603.814528ms ago: executing program 2 (id=1120): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) unshare(0x68060200) 603.313728ms ago: executing program 4 (id=1121): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r2, 0x20000005) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x1) sendmmsg$inet(r3, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2721, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x70, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_batadv\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}], {0x14, 0x10}}, 0xb8}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000490}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 574.768101ms ago: executing program 0 (id=1122): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0xffffffff, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x101081, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'bridge_slave_0\x00', 0x0}) r1 = gettid() ioprio_get$pid(0x1, r1) r2 = gettid() r3 = getpgid(r2) sched_setaffinity(r3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2618f5c910d7f4eb) r4 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x4000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) shmctl$IPC_RMID(0x0, 0x0) 0s ago: executing program 2 (id=1123): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002000000b7080000000000007b8af8ff00000000b70800000002000037e4f0ff00000000bfa100ffbfa40000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xc, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000340)=[{0x4, 0x2, 0x6, 0x8}, {0x0, 0x1, 0xb, 0x8}, {0x0, 0x2, 0x9, 0x5}, {0x1, 0x2, 0xf, 0x7}, {0x5, 0x2, 0xf, 0x2}, {0x5, 0x5, 0x3, 0x9}], 0x10, 0xfffffffb, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x800}, 0x18) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = inotify_init1(0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) close_range(r3, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) dup2(0xffffffffffffffff, 0xffffffffffffffff) kernel console output (not intermixed with test programs): 03490][ T3744] loop0: detected capacity change from 0 to 32768 [ 61.955130][ T3767] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.974825][ T3744] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.25 (3744) [ 61.977756][ T3765] loop4: detected capacity change from 0 to 4096 [ 62.050379][ T3765] ntfs: (device loop4): parse_options(): Unrecognized mount option € . [ 62.168117][ T3744] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 62.206882][ T3775] syz.1.30 (3775): drop_caches: 2 [ 62.250977][ T3744] BTRFS info (device loop0): using free space tree [ 62.288855][ T3744] BTRFS info (device loop0): has skinny extents [ 62.383763][ T3769] loop3: detected capacity change from 0 to 32768 [ 62.393523][ T3764] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 62.419505][ T3764] XFS (loop4): SB validate failed with error -5. [ 62.511261][ T3769] JBD2: Ignoring recovery information on journal [ 62.572625][ T3769] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 62.792627][ T3771] loop2: detected capacity change from 0 to 32768 [ 62.823325][ T3744] BTRFS info (device loop0): enabling ssd optimizations [ 62.870010][ T3771] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 62.885780][ T3771] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 62.971532][ T3805] OCFS2: ERROR (device loop3): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total [ 63.003669][ T3805] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 63.014236][ T3805] OCFS2: Returning error to the calling process. [ 63.024250][ T3805] (syz.3.31,3805,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -5 [ 63.032872][ T3805] (syz.3.31,3805,0):__ocfs2_claim_clusters:2355 ERROR: status = -5 [ 63.055153][ T3805] (syz.3.31,3805,0):__ocfs2_claim_clusters:2363 ERROR: status = -5 [ 63.073369][ T3805] (syz.3.31,3805,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -5 [ 63.091573][ T3805] (syz.3.31,3805,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -5 [ 63.103771][ T3805] (syz.3.31,3805,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -5 [ 63.128625][ T3771] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 63.168006][ T3683] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 63.180047][ T3683] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 63.193052][ T3805] (syz.3.31,3805,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -5 [ 63.244605][ T3805] (syz.3.31,3805,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -5 [ 63.301817][ T3805] (syz.3.31,3805,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -5 [ 63.350249][ T3805] (syz.3.31,3805,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -5 [ 63.374791][ T3683] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 194ms [ 63.377418][ T3805] (syz.3.31,3805,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -5 [ 63.444289][ T3805] (syz.3.31,3805,0):ocfs2_lock_allocators:2672 ERROR: status = -5 [ 63.444362][ T3683] gfs2: fsid=syz:syz.0: jid=0: Done [ 63.486697][ T3805] (syz.3.31,3805,0):ocfs2_write_begin_nolock:1746 ERROR: status = -5 [ 63.506233][ T3805] (syz.3.31,3805,0):__ocfs2_page_mkwrite:97 ERROR: status = -5 [ 63.517259][ T3771] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 63.538151][ T3805] OCFS2: ERROR (device loop3): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total [ 63.631155][ T3805] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 63.666653][ T3805] OCFS2: Returning error to the calling process. [ 63.685028][ T3805] (syz.3.31,3805,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -5 [ 63.695123][ T3805] (syz.3.31,3805,0):__ocfs2_claim_clusters:2355 ERROR: status = -5 [ 63.795886][ T3805] (syz.3.31,3805,0):__ocfs2_claim_clusters:2363 ERROR: status = -5 [ 63.859286][ T3805] (syz.3.31,3805,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -5 [ 63.879813][ T3801] loop1: detected capacity change from 0 to 32768 [ 63.907113][ T3805] (syz.3.31,3805,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -5 [ 63.961965][ T3801] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.33 (3801) [ 63.965137][ T3805] (syz.3.31,3805,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -5 [ 64.021181][ T3805] (syz.3.31,3805,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -5 [ 64.032283][ T3805] (syz.3.31,3805,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -5 [ 64.043331][ T3805] (syz.3.31,3805,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -5 [ 64.054051][ T3805] (syz.3.31,3805,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -5 [ 64.073998][ T3801] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 64.087956][ T3801] BTRFS info (device loop1): using free space tree [ 64.094863][ T3805] (syz.3.31,3805,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -5 [ 64.128280][ T3801] BTRFS info (device loop1): has skinny extents [ 64.184649][ T3805] (syz.3.31,3805,0):ocfs2_lock_allocators:2672 ERROR: status = -5 [ 64.206018][ T3805] (syz.3.31,3805,1):ocfs2_write_begin_nolock:1746 ERROR: status = -5 [ 64.223601][ T3805] (syz.3.31,3805,1):__ocfs2_page_mkwrite:97 ERROR: status = -5 [ 64.508214][ T3801] BTRFS info (device loop1): enabling ssd optimizations [ 64.756864][ T3853] BTRFS info (device loop1): scrub: started on devid 1 [ 64.985673][ T3853] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0 [ 65.143210][ T3860] loop0: detected capacity change from 0 to 1024 [ 65.257388][ T3860] ======================================================= [ 65.257388][ T3860] WARNING: The mand mount option has been deprecated and [ 65.257388][ T3860] and is ignored by this kernel. Remove the mand [ 65.257388][ T3860] option from the mount to silence this warning. [ 65.257388][ T3860] ======================================================= [ 65.572328][ T3771] syz.2.32 (3771): drop_caches: 2 [ 65.645449][ T3860] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.40: Invalid block bitmap block 0 in block_group 0 [ 65.707842][ T3860] Quota error (device loop0): write_blk: dquota write failed [ 65.718970][ T3860] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 65.732760][ T3860] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.40: Failed to acquire dquot type 0 [ 65.767113][ T3860] EXT4-fs error (device loop0): ext4_free_blocks:6225: comm syz.0.40: Freeing blocks not in datazone - block = 0, count = 4096 [ 65.828669][ T3860] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.40: Invalid inode bitmap blk 0 in block_group 0 [ 65.853438][ T3860] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 65.875293][ T3860] EXT4-fs (loop0): 1 orphan inode deleted [ 65.887842][ T3860] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 65.984763][ T1104] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 66.030204][ T1104] EXT4-fs error (device loop0): ext4_release_dquot:6219: comm kworker/u4:3: Failed to release dquot type 0 [ 66.129466][ T3584] ocfs2: Unmounting device (7,3) on (node local) [ 68.382137][ T3885] netlink: 60 bytes leftover after parsing attributes in process `syz.2.44'. [ 68.516529][ T3870] loop1: detected capacity change from 0 to 32768 [ 68.674854][ T3870] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.41 (3870) [ 69.378496][ T3895] REISERFS warning (device nullb0): reiserfs_fill_super: Cannot allocate commit workqueue [ 69.383519][ T3870] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 69.484636][ T3870] BTRFS info (device loop1): using free space tree [ 69.503993][ T3870] BTRFS info (device loop1): has skinny extents [ 69.520198][ T3899] loop3: detected capacity change from 0 to 512 [ 69.625179][ T3899] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 69.656408][ T3899] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 69.757144][ T3870] BTRFS error (device loop1): open_ctree failed [ 69.769194][ T3899] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 69.866124][ T3899] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.993600][ T3899] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 69.998433][ T3899] Quota error (device loop3): write_blk: dquota write failed [ 70.017696][ T3899] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 70.027450][ T3899] Quota error (device loop3): write_blk: dquota write failed [ 70.034929][ T3899] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 70.045971][ T3899] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.51: Failed to acquire dquot type 1 [ 70.064298][ T3934] loop1: detected capacity change from 0 to 128 [ 70.103296][ T3899] EXT4-fs (loop3): 1 truncate cleaned up [ 70.124363][ T3899] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,mblk_io_submit,jqfmt=vfsold,noinit_itable,nomblk_io_submit,noauto_da_alloc,minixdf,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 70.310215][ T3940] attempt to access beyond end of device [ 70.310215][ T3940] loop1: rw=2049, want=313, limit=128 [ 70.474126][ T3933] attempt to access beyond end of device [ 70.474126][ T3933] loop1: rw=524288, want=313, limit=128 [ 70.509891][ T3934] attempt to access beyond end of device [ 70.509891][ T3934] loop1: rw=2049, want=745, limit=128 [ 70.985250][ T3891] loop0: detected capacity change from 0 to 65536 [ 71.056324][ T3891] XFS: ikeep mount option is deprecated. [ 71.082709][ T3891] XFS: ikeep mount option is deprecated. [ 71.088478][ T3937] loop4: detected capacity change from 0 to 32768 [ 71.172775][ T3937] XFS (loop4): Mounting V5 Filesystem [ 71.257587][ T3945] loop3: detected capacity change from 0 to 32768 [ 71.278220][ T3945] (syz.3.57,3945,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "localalloc=>0000000000000001" or missing value [ 71.292097][ T3891] XFS (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 71.302714][ T3937] XFS (loop4): Ending clean mount [ 71.329808][ T3945] (syz.3.57,3945,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 71.356106][ T3891] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 71.374441][ T3891] XFS (loop0): Mounting V5 Filesystem [ 71.411177][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.446023][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.537128][ T3581] XFS (loop4): Unmounting Filesystem [ 71.579324][ T3891] XFS (loop0): Ending clean mount [ 71.677906][ T3575] XFS (loop0): Unmounting Filesystem [ 71.818939][ T3924] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 72.245834][ T3924] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 72.266396][ T3924] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 72.297784][ T3924] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 72.330993][ T3947] loop1: detected capacity change from 0 to 65536 [ 72.345667][ T3924] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.385663][ T3924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.404754][ T3924] usb 4-1: config 0 descriptor?? [ 72.565650][ T3976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.62'. [ 72.604424][ T3976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.62'. [ 72.648637][ T3947] XFS (loop1): Mounting V5 Filesystem [ 72.716625][ T3924] usb 4-1: string descriptor 0 read error: -71 [ 73.349423][ T3924] usb 4-1: USB disconnect, device number 3 [ 73.418376][ T3947] XFS (loop1): Ending clean mount [ 73.480550][ T3947] XFS (loop1): Quotacheck needed: Please wait. [ 73.617616][ T3993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.677313][ T1104] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x33d/0xce0, inode 0x25 dinode [ 73.739640][ T1104] XFS (loop1): Unmount and run xfs_repair [ 73.745459][ T1104] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 73.773961][ T1104] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 73.810530][ T1104] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 73.834076][ T1104] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM [ 73.873447][ T1104] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......' [ 73.900212][ T1104] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 73.921596][ T1104] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI. [ 73.939903][ T1104] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................ [ 73.958500][ T1104] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 74.016743][ T3947] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 74.096623][ T3573] XFS (loop1): Unmounting Filesystem [ 74.351017][ T3980] loop4: detected capacity change from 0 to 32768 [ 74.388053][ T3991] loop0: detected capacity change from 0 to 32768 [ 74.501698][ T3980] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.62 (3980) [ 74.568699][ T3980] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 74.591418][ T3991] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.64 (3991) [ 74.667172][ T3980] BTRFS info (device loop4): force zlib compression, level 3 [ 74.674967][ T3980] BTRFS info (device loop4): force clearing of disk cache [ 74.719176][ T3980] BTRFS info (device loop4): setting nodatasum [ 74.772046][ T3980] BTRFS info (device loop4): use zlib compression, level 3 [ 74.792602][ T3991] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 74.811682][ T3980] BTRFS info (device loop4): allowing degraded mounts [ 74.848767][ T3980] BTRFS info (device loop4): enabling disk space caching [ 74.859983][ T3991] BTRFS info (device loop0): using free space tree [ 74.886356][ T3980] BTRFS info (device loop4): disk space caching is enabled [ 74.907613][ T3991] BTRFS info (device loop0): has skinny extents [ 74.939250][ T3980] BTRFS info (device loop4): has skinny extents [ 75.329157][ T3980] BTRFS info (device loop4): enabling ssd optimizations [ 75.392263][ T3980] BTRFS info (device loop4): clearing free space tree [ 75.426953][ T3980] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 75.476055][ T3980] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 75.536692][ T3991] BTRFS info (device loop0): enabling ssd optimizations [ 75.660165][ T4051] loop1: detected capacity change from 0 to 512 [ 75.667535][ T4055] netlink: 36 bytes leftover after parsing attributes in process `syz.3.74'. [ 75.754559][ T4051] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 75.771742][ T4051] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 75.812139][ T4051] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 75.826773][ T4051] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 75.982289][ T4051] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 76.016423][ T4051] Quota error (device loop1): write_blk: dquota write failed [ 76.024092][ T4051] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 76.106475][ T4051] Quota error (device loop1): write_blk: dquota write failed [ 76.116210][ T4051] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 76.171654][ T4051] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.68: Failed to acquire dquot type 1 [ 76.242620][ T4051] EXT4-fs (loop1): 1 truncate cleaned up [ 76.258330][ T4051] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,mblk_io_submit,jqfmt=vfsold,noinit_itable,nomblk_io_submit,noauto_da_alloc,minixdf,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 76.519226][ T1074] cfg80211: failed to load regulatory.db [ 77.083420][ T4091] netlink: 36 bytes leftover after parsing attributes in process `syz.4.87'. [ 77.501741][ T4098] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 77.562057][ T4102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'. [ 77.757850][ T4102] device hsr_slave_1 left promiscuous mode [ 77.958552][ T26] audit: type=1326 audit(1728564302.703:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4113 comm="syz.1.98" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f579d343ff9 code=0x0 [ 78.132485][ T4121] netlink: 36 bytes leftover after parsing attributes in process `syz.3.100'. [ 78.246889][ T4125] fuse: Unknown parameter '00000000000000000000' [ 79.209489][ T4150] Zero length message leads to an empty skb [ 79.219599][ T4149] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 79.426673][ T4149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.108'. [ 79.493324][ T4150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'. [ 79.987367][ T4173] netlink: 36 bytes leftover after parsing attributes in process `syz.3.115'. [ 80.238739][ T4177] fuse: Bad value for 'user_id' [ 80.421891][ T4182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.119'. [ 80.452770][ T4182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.119'. [ 80.715129][ T4189] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 80.747071][ T4189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.122'. [ 80.907481][ T4202] loop2: detected capacity change from 0 to 512 [ 80.949614][ T4202] EXT4-fs (loop2): Ignoring removed nobh option [ 80.956142][ T4202] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 81.060000][ T4202] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 81.080409][ T4202] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038 (0x7fffffff) [ 81.815748][ T4224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.133'. [ 81.824751][ T4224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.133'. [ 81.968756][ T4230] netlink: 36 bytes leftover after parsing attributes in process `syz.4.137'. [ 82.204542][ T4237] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 82.263250][ T4241] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 82.372414][ T4241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.140'. [ 82.442456][ T4246] netlink: 52 bytes leftover after parsing attributes in process `syz.1.142'. [ 82.813863][ T4260] loop2: detected capacity change from 0 to 256 [ 82.866373][ T4260] exfat: Unknown parameter '_utimeg†aÑ\÷' [ 83.650188][ T4273] fuse: Bad value for 'fd' [ 83.920715][ T4308] netlink: 36 bytes leftover after parsing attributes in process `syz.4.151'. [ 84.236183][ T4344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.154'. [ 84.397806][ T4354] loop2: detected capacity change from 0 to 128 [ 84.547926][ T4358] loop0: detected capacity change from 0 to 256 [ 84.576259][ T4358] exfat: Unknown parameter '_utimeg†aÑ\÷' [ 84.624965][ T4362] attempt to access beyond end of device [ 84.624965][ T4362] loop2: rw=2049, want=585, limit=128 [ 84.817143][ T4366] attempt to access beyond end of device [ 84.817143][ T4366] loop2: rw=2049, want=873, limit=128 [ 85.804674][ T4375] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 85.929172][ T4375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.164'. [ 86.868289][ T4375] device hsr_slave_1 left promiscuous mode [ 87.140893][ T4401] loop2: detected capacity change from 0 to 256 [ 87.206379][ T4401] exfat: Unknown parameter '_utimeg†aÑ\÷' [ 87.220799][ T4408] loop3: detected capacity change from 0 to 128 [ 88.355009][ T4418] attempt to access beyond end of device [ 88.355009][ T4418] loop3: rw=2049, want=649, limit=128 [ 88.517635][ T4408] attempt to access beyond end of device [ 88.517635][ T4408] loop3: rw=2049, want=657, limit=128 [ 88.776023][ T4425] input: syz1 as /devices/virtual/input/input5 [ 89.134838][ T4440] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 89.199971][ T4443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.183'. [ 89.213109][ T26] audit: type=1804 audit(1728564313.953:3): pid=4441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.184" name="/newroot/35/bus/file1" dev="overlay" ino=208 res=1 errno=0 [ 89.262759][ T4443] netlink: 'syz.0.183': attribute type 7 has an invalid length. [ 89.291665][ T4443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 89.393247][ T4443] device gretap0 entered promiscuous mode [ 89.452293][ T4443] device batadv_slave_1 entered promiscuous mode [ 89.492545][ T4440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.181'. [ 89.497814][ T4061] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.527920][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 90.031908][ T4061] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.177924][ T4061] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.208436][ T4061] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 90.274090][ T4061] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.299023][ T4061] usb 5-1: config 0 descriptor?? [ 90.808512][ T4061] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 90.959360][ T4061] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 91.110141][ T4491] program syz.0.202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.173227][ T4061] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0001/input/input6 [ 91.641791][ T4061] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 92.758939][ T4527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.215'. [ 92.779106][ T4527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.215'. [ 93.232801][ T3683] usb 5-1: USB disconnect, device number 2 [ 93.266640][ T4545] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 93.279596][ T4547] loop1: detected capacity change from 0 to 128 [ 93.908488][ T3922] Bluetooth: hci4: command 0x0405 tx timeout [ 94.030920][ T4552] attempt to access beyond end of device [ 94.030920][ T4552] loop1: rw=2049, want=569, limit=128 [ 94.249418][ T2586] attempt to access beyond end of device [ 94.249418][ T2586] loop1: rw=1, want=1041, limit=128 [ 94.477014][ T4580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.232'. [ 94.590460][ T4580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 94.761309][ T4586] capability: warning: `syz.0.234' uses 32-bit capabilities (legacy support in use) [ 96.141939][ T4613] loop1: detected capacity change from 0 to 128 [ 96.155462][ T4611] fuse: Unknown parameter '00000000000000000000' [ 96.471227][ T4620] netlink: 44 bytes leftover after parsing attributes in process `syz.0.244'. [ 96.516977][ T4621] attempt to access beyond end of device [ 96.516977][ T4621] loop1: rw=2049, want=233, limit=128 [ 96.548650][ T4620] netlink: 59 bytes leftover after parsing attributes in process `syz.0.244'. [ 96.640027][ T4620] netlink: 59 bytes leftover after parsing attributes in process `syz.0.244'. [ 96.746683][ T4626] attempt to access beyond end of device [ 96.746683][ T4626] loop1: rw=2049, want=529, limit=128 [ 97.034525][ T2586] attempt to access beyond end of device [ 97.034525][ T2586] loop1: rw=1, want=721, limit=128 [ 97.266422][ T4639] netlink: 48 bytes leftover after parsing attributes in process `syz.3.251'. [ 98.640403][ T4673] loop4: detected capacity change from 0 to 128 [ 98.835476][ T4681] attempt to access beyond end of device [ 98.835476][ T4681] loop4: rw=2049, want=585, limit=128 [ 99.250613][ T4313] attempt to access beyond end of device [ 99.250613][ T4313] loop4: rw=1, want=897, limit=128 [ 99.986715][ T4671] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 100.838708][ T3924] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.094203][ T4752] netlink: 'syz.2.277': attribute type 10 has an invalid length. [ 101.135801][ T3924] usb 5-1: Using ep0 maxpacket: 32 [ 101.277226][ T3924] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 101.356177][ T4752] device syz_tun entered promiscuous mode [ 101.396837][ T4752] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 101.677278][ T3924] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 101.801790][ T3924] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 102.005638][ T3924] usb 5-1: Product: syz [ 102.009834][ T3924] usb 5-1: Manufacturer: syz [ 102.079044][ T3924] usb 5-1: SerialNumber: syz [ 102.162519][ T3924] usb 5-1: config 0 descriptor?? [ 102.196100][ T4708] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 102.375808][ T4775] netlink: 28 bytes leftover after parsing attributes in process `syz.1.284'. [ 102.408620][ T4775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'. [ 102.482619][ T3923] usb 5-1: USB disconnect, device number 3 [ 105.747004][ T26] audit: type=1326 audit(1728564330.493:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579d343ff9 code=0x7ffc0000 [ 105.823323][ T26] audit: type=1326 audit(1728564330.493:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f579d342990 code=0x7ffc0000 [ 105.928594][ T26] audit: type=1326 audit(1728564330.493:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f579d345827 code=0x7ffc0000 [ 106.060932][ T26] audit: type=1326 audit(1728564330.493:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f579d343ff9 code=0x7ffc0000 [ 106.072734][ T4849] fuse: Bad value for 'fd' [ 106.158524][ T26] audit: type=1326 audit(1728564330.493:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f579d345827 code=0x7ffc0000 [ 106.212437][ T26] audit: type=1326 audit(1728564330.493:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f579d342c8a code=0x7ffc0000 [ 106.308707][ T26] audit: type=1326 audit(1728564330.493:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579d343ff9 code=0x7ffc0000 [ 106.416412][ T26] audit: type=1326 audit(1728564330.493:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f579d343ff9 code=0x7ffc0000 [ 106.483229][ T26] audit: type=1326 audit(1728564330.493:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579d343ff9 code=0x7ffc0000 [ 106.524246][ T4869] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 106.531289][ T4869] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 106.548290][ T4869] vhci_hcd vhci_hcd.0: Device attached [ 106.655600][ T4873] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 106.662140][ T4873] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 106.837954][ T4873] vhci_hcd vhci_hcd.0: Device attached [ 108.296053][ T3924] usb 12-1: SetAddress Request (2) to port 0 [ 108.334223][ T3924] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 108.573672][ T4874] vhci_hcd: connection closed [ 108.580817][ T4139] vhci_hcd: stop threads [ 108.617278][ T4870] vhci_hcd: connection reset by peer [ 108.643144][ T4139] vhci_hcd: release socket [ 108.698407][ T4139] vhci_hcd: disconnect device [ 108.718498][ T4139] vhci_hcd: stop threads [ 108.722794][ T4139] vhci_hcd: release socket [ 108.878955][ T4139] vhci_hcd: disconnect device [ 109.853697][ T4917] Cannot find add_set index 0 as target [ 109.972919][ T3590] Bluetooth: Wrong link type (-71) [ 109.978945][ T3590] Bluetooth: hci0: link tx timeout [ 109.984449][ T3590] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.000326][ T4926] netlink: 'syz.0.321': attribute type 16 has an invalid length. [ 110.085763][ T4926] netlink: 'syz.0.321': attribute type 3 has an invalid length. [ 110.114710][ T4926] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.321'. [ 110.179275][ T4923] block nbd4: shutting down sockets [ 110.202602][ T4934] loop1: detected capacity change from 0 to 128 [ 112.035893][ T3923] Bluetooth: hci0: command 0x0406 tx timeout [ 112.421809][ T4949] chnl_net:caif_netlink_parms(): no params data found [ 113.690163][ T3924] usb 12-1: device descriptor read/8, error -110 [ 113.793535][ T3818] Bluetooth: hci5: command 0x0409 tx timeout [ 114.084301][ T4983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.339'. [ 114.145744][ T3924] usb usb12-port1: Cannot enable. Maybe the USB cable is bad? [ 114.195800][ T3924] usb usb12-port1: attempt power cycle [ 114.252825][ T4949] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.260195][ T3683] vhci_hcd: vhci_device speed not set [ 114.301516][ T4949] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.799279][ T4949] device bridge_slave_0 entered promiscuous mode [ 114.868480][ T4949] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.905931][ T4949] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.934519][ T4949] device bridge_slave_1 entered promiscuous mode [ 115.077719][ T4998] netlink: 'syz.1.344': attribute type 2 has an invalid length. [ 115.254755][ T4949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.336049][ T4949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.418390][ T3924] usb usb12-port1: Cannot enable. Maybe the USB cable is bad? [ 115.570178][ T4949] team0: Port device team_slave_0 added [ 115.746119][ T3924] usb usb12-port1: Cannot enable. Maybe the USB cable is bad? [ 115.756165][ T3924] usb usb12-port1: unable to enumerate USB device [ 115.781951][ T4949] team0: Port device team_slave_1 added [ 115.958444][ T1077] Bluetooth: hci5: command 0x041b tx timeout [ 115.977079][ T4949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.986054][ T4949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.340617][ T4949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.716667][ T4949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.723773][ T4949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.818012][ T4949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.964463][ T4949] device hsr_slave_0 entered promiscuous mode [ 116.976906][ T4949] device hsr_slave_1 entered promiscuous mode [ 116.983929][ T5035] SET target dimension over the limit! [ 116.991455][ T4949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.993974][ T5037] process 'syz.2.358' launched './file1' with NULL argv: empty string added [ 117.072088][ T4949] Cannot create hsr debugfs directory [ 117.275247][ T5041] block nbd1: shutting down sockets [ 117.284559][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.359'. [ 118.107883][ T4062] Bluetooth: hci5: command 0x040f tx timeout [ 118.953783][ T5067] Cannot find add_set index 0 as target [ 119.086993][ T3987] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.289112][ T3987] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.342189][ T3987] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.431309][ T3987] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.441948][ T3587] block nbd0: Receive control failed (result -32) [ 119.448881][ T3590] block nbd0: Receive control failed (result -32) [ 119.480205][ T5079] block nbd0: shutting down sockets [ 120.195863][ T13] Bluetooth: hci5: command 0x0419 tx timeout [ 121.413403][ T4949] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 121.434569][ T4949] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 121.454278][ T4949] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 121.483821][ T4949] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 122.661621][ T4949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.878652][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.887310][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.899796][ T4949] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.911121][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.244724][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.376873][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.383960][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.445368][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.468136][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.517051][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.531596][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.538733][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.706716][ T3987] device hsr_slave_0 left promiscuous mode [ 123.724678][ T3987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.742766][ T3987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.754329][ T3987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.793683][ T3987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.845386][ T3987] device bridge_slave_1 left promiscuous mode [ 123.884347][ T3987] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.962267][ T3987] device bridge_slave_0 left promiscuous mode [ 123.999957][ T3987] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.093980][ T3987] device veth1_macvtap left promiscuous mode [ 124.111028][ T3987] device veth0_macvtap left promiscuous mode [ 124.128084][ T3987] device veth1_vlan left promiscuous mode [ 124.144474][ T3987] device veth0_vlan left promiscuous mode [ 125.103057][ T3987] team0 (unregistering): Port device team_slave_1 removed [ 125.132224][ T3987] team0 (unregistering): Port device team_slave_0 removed [ 125.165143][ T3987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.180759][ T3987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.255328][ T3987] bond0 (unregistering): Released all slaves [ 125.370425][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.379808][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.390042][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.414247][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.424118][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.438932][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.448120][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.457988][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.466970][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.483893][ T5163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.386'. [ 125.523284][ T5163] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave [ 125.544464][ T5163] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1) [ 125.659950][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.680260][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.697219][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.218320][ T5197] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 127.282441][ T5200] block nbd4: shutting down sockets [ 127.365240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.375025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.389969][ T4949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.833484][ T13] Bluetooth: hci5: command 0x0405 tx timeout [ 128.078827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.154132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.210918][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.220006][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.346817][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.354770][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.687925][ T4949] device veth0_vlan entered promiscuous mode [ 129.858607][ T4949] device veth1_vlan entered promiscuous mode [ 129.867578][ T5236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.406'. [ 130.053760][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.078087][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.118193][ T4949] device veth0_macvtap entered promiscuous mode [ 130.234236][ T4949] device veth1_macvtap entered promiscuous mode [ 130.301290][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 130.336465][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 130.427574][ T4949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.571433][ T5253] 9pnet_virtio: no channels available for device syz [ 130.575977][ T4949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.611154][ T4949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.642083][ T4949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.906813][ T4949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.011146][ T4949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.039700][ T4949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.051747][ T4949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.081555][ T4949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.150514][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.294020][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.587105][ T26] audit: type=1804 audit(1728564356.323:13): pid=5268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.418" name="/newroot/102/bus/file1" dev="overlay" ino=555 res=1 errno=0 [ 131.822063][ T4949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.832908][ T4949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.842876][ T4949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.853563][ T4949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.864234][ T4949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.874975][ T4949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.894866][ T4949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.917258][ T4949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.934648][ T4949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.985434][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.014603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.063482][ T4949] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.094749][ T4949] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.141518][ T4949] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.193553][ T4949] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.472654][ T4313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.499671][ T4313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.581258][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.613931][ T2586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.658146][ T2586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.709196][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.836995][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.845034][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.451515][ T5299] mmap: syz.1.425 (5299) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 134.424660][ T26] audit: type=1804 audit(1728564359.163:14): pid=5308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.429" name="/newroot/105/bus/file1" dev="overlay" ino=580 res=1 errno=0 [ 135.702603][ T5334] netlink: 128 bytes leftover after parsing attributes in process `syz.2.433'. [ 135.806282][ T5326] block nbd1: shutting down sockets [ 135.835626][ T5332] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 135.855108][ T5329] block nbd1: Device being setup by another task [ 138.111878][ T5355] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 138.234262][ T5356] netlink: 'syz.0.442': attribute type 9 has an invalid length. [ 138.275971][ T5356] netlink: 399 bytes leftover after parsing attributes in process `syz.0.442'. [ 140.720717][ T5383] netlink: 1 bytes leftover after parsing attributes in process `syz.4.451'. [ 140.914025][ T26] audit: type=1804 audit(1728564365.653:15): pid=5395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.455" name="/newroot/107/bus/file1" dev="overlay" ino=600 res=1 errno=0 [ 141.203815][ T5401] Cannot find add_set index 0 as target [ 142.940534][ T5415] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 142.965085][ T5425] fuse: Bad value for 'fd' [ 142.991065][ T5402] block nbd2: shutting down sockets [ 143.468440][ T5440] NILFS (nullb0): couldn't find nilfs on the device [ 145.774743][ T5471] fuse: Bad value for 'fd' [ 153.907887][ T5516] fuse: Bad value for 'fd' [ 156.497491][ T5515] chnl_net:caif_netlink_parms(): no params data found [ 156.675909][ T4061] Bluetooth: hci4: command 0x0409 tx timeout [ 157.393215][ T5515] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.415007][ T5515] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.455921][ T5558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.502'. [ 157.484471][ T5561] fuse: Unknown parameter '0x0000000000000003' [ 157.490994][ T5515] device bridge_slave_0 entered promiscuous mode [ 157.592597][ T5401] bond0: (slave syz_tun): Releasing backup interface [ 157.675437][ T5515] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.682710][ T5515] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.709138][ T5515] device bridge_slave_1 entered promiscuous mode [ 157.854089][ T5515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.888625][ T5515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.213943][ T5570] tipc: Started in network mode [ 158.375618][ T5570] tipc: Node identity f7, cluster identity 4711 [ 158.532333][ T5570] tipc: Node number set to 247 [ 158.631878][ T5515] team0: Port device team_slave_0 added [ 158.726637][ T5515] team0: Port device team_slave_1 added [ 158.764916][ T1077] Bluetooth: hci4: command 0x041b tx timeout [ 158.855088][ T5515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.878656][ T5515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.917619][ T5515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.050654][ T5515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.068359][ T5515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.096137][ T5515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.625156][ T5515] device hsr_slave_0 entered promiscuous mode [ 159.632224][ T5515] device hsr_slave_1 entered promiscuous mode [ 159.639893][ T5515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.647865][ T5515] Cannot create hsr debugfs directory [ 160.199028][ T3623] Bluetooth: hci0: command 0x0409 tx timeout [ 160.390125][ T26] audit: type=1326 audit(1728564385.133:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5608 comm="syz.3.514" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e1a45dff9 code=0x0 [ 160.430544][ T5563] chnl_net:caif_netlink_parms(): no params data found [ 160.823023][ T5515] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.835778][ T3623] Bluetooth: hci4: command 0x040f tx timeout [ 160.959974][ T4322] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.122890][ T5515] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.229891][ T4322] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.254750][ T5617] fuse: Bad value for 'fd' [ 161.339876][ T5563] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.359123][ T5563] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.487140][ T5563] device bridge_slave_0 entered promiscuous mode [ 161.541149][ T5515] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.657118][ T5563] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.670335][ T5563] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.725853][ T5563] device bridge_slave_1 entered promiscuous mode [ 161.786264][ T5620] tipc: Started in network mode [ 161.791179][ T5620] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 161.798853][ T5620] tipc: Enabled bearer , priority 10 [ 161.812418][ T4322] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.881110][ T5621] tipc: Resetting bearer [ 161.940273][ T5621] tipc: Disabling bearer [ 162.045088][ T5515] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.123004][ T4322] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.177918][ T5563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.239460][ T5563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.276067][ T3924] Bluetooth: hci0: command 0x041b tx timeout [ 162.820895][ T5624] Cannot find add_set index 0 as target [ 162.890427][ T5563] team0: Port device team_slave_0 added [ 162.939117][ T5563] team0: Port device team_slave_1 added [ 162.956407][ T3623] Bluetooth: hci4: command 0x0419 tx timeout [ 163.008260][ T5634] netlink: 'syz.1.519': attribute type 1 has an invalid length. [ 163.065589][ T5634] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.519'. [ 163.161372][ T5563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.195247][ T5563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.266882][ T5637] block nbd3: shutting down sockets [ 163.312427][ T5563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.412418][ T5563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.428532][ T5563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.467417][ T5563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.355777][ T3623] Bluetooth: hci0: command 0x040f tx timeout [ 164.462892][ T5515] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 164.496957][ T5563] device hsr_slave_0 entered promiscuous mode [ 164.535125][ T5563] device hsr_slave_1 entered promiscuous mode [ 164.550477][ T5563] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.581188][ T5563] Cannot create hsr debugfs directory [ 164.601134][ T5515] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 164.646545][ T5515] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 164.665605][ T4061] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 164.685940][ T5515] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 165.135187][ T5670] fuse: Bad value for 'fd' [ 165.165694][ T4061] usb 2-1: Using ep0 maxpacket: 16 [ 165.264074][ T4322] device gretap0 left promiscuous mode [ 165.285937][ T4061] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 165.307406][ T4061] usb 2-1: config 0 has no interface number 0 [ 165.313755][ T4061] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 165.326788][ T4061] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 165.455666][ T4061] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 165.483123][ T4061] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 165.500580][ T5515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.536067][ T4061] usb 2-1: Product: syz [ 165.551669][ T4061] usb 2-1: SerialNumber: syz [ 165.564489][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.581795][ T4061] usb 2-1: config 0 descriptor?? [ 165.583106][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.628600][ T4061] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 165.639731][ T5515] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.660597][ T4061] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input8 [ 165.756777][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.772499][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.801510][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.808644][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.873691][ T5563] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 165.923086][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.937822][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.950349][ T3926] usb 2-1: USB disconnect, device number 3 [ 165.950990][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.956721][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 165.956971][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 165.990198][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.997378][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.013434][ T3926] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 166.022589][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.040567][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.076490][ T5563] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 166.153145][ T5563] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 166.185380][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.214141][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.321956][ T5563] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 166.344351][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.376242][ T5515] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.404939][ T5685] Cannot find add_set index 0 as target [ 166.425695][ T5515] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.445724][ T3623] Bluetooth: hci0: command 0x0419 tx timeout [ 166.461544][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.477466][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.501772][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.523227][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.546887][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.584463][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.607523][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.674215][ T4322] device batadv_slave_1 left promiscuous mode [ 166.690148][ T5690] block nbd4: shutting down sockets [ 166.836374][ T4322] device hsr_slave_0 left promiscuous mode [ 167.214784][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.260772][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.273356][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.286543][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.312044][ T4322] device bridge_slave_1 left promiscuous mode [ 167.325965][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.421137][ T4322] device bridge_slave_0 left promiscuous mode [ 168.207832][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.313013][ T4322] device veth1_macvtap left promiscuous mode [ 168.351354][ T4322] device veth0_macvtap left promiscuous mode [ 168.360022][ T4322] device veth1_vlan left promiscuous mode [ 168.372362][ T4322] device veth0_vlan left promiscuous mode [ 169.250819][ T5719] fuse: Bad value for 'fd' [ 169.843689][ T4322] team0 (unregistering): Port device team_slave_1 removed [ 169.864731][ T4322] team0 (unregistering): Port device team_slave_0 removed [ 169.892179][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.926268][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.060451][ T4322] bond0 (unregistering): Released all slaves [ 170.511683][ T5733] Cannot find add_set index 0 as target [ 170.544919][ T5515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.578939][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.590554][ T5734] omfs: Invalid superblock (0) [ 170.600463][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.649230][ T5563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.712960][ T5563] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.748422][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.759336][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.765948][ T3923] Bluetooth: hci1: command 0x0406 tx timeout [ 170.769273][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.783770][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.786288][ T3923] Bluetooth: hci2: command 0x0406 tx timeout [ 170.800489][ T5735] block nbd4: shutting down sockets [ 170.816515][ T5739] fuse: Invalid rootmode [ 170.822406][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.847004][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.870836][ T5515] device veth0_vlan entered promiscuous mode [ 170.892720][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.930883][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.939501][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.956727][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.987596][ T2586] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.994687][ T2586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.003757][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.029716][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.039361][ T2586] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.046449][ T2586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.059332][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.100444][ T5515] device veth1_vlan entered promiscuous mode [ 171.133200][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 171.153429][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.186418][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.220736][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.243428][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.275037][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 171.297007][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.339025][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.375264][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.398556][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.438415][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.456290][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.475088][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.587391][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.297654][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.361067][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.399102][ T5515] device veth0_macvtap entered promiscuous mode [ 172.424706][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.444957][ T5515] device veth1_macvtap entered promiscuous mode [ 172.547577][ T5515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.585647][ T5515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.649110][ T5515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.660684][ T5515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.770923][ T5515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.789069][ T5515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.803617][ T5515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.875173][ T5515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.898538][ T5515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.910941][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.920353][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.957694][ T5515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.989031][ T5515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.042908][ T5515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.065856][ T5515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.079979][ T5515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.095651][ T5515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.106197][ T5515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.120467][ T5515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.146998][ T5515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.158022][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.179430][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.230737][ T5515] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.251384][ T5515] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.262237][ T5515] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.271343][ T5515] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.296426][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.312292][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.356944][ T5563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.435755][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.448778][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.495391][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 173.590431][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.644710][ T5764] loop1: detected capacity change from 0 to 512 [ 173.693146][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.700328][ T5764] EXT4-fs (loop1): Ignoring removed nobh option [ 173.706835][ T5764] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 173.824225][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.855160][ T4306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.859052][ T5563] device veth0_vlan entered promiscuous mode [ 173.886507][ T5764] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 173.905960][ T5764] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038 (0x7fffffff) [ 174.023082][ T4306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.048361][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 174.528769][ T5563] device veth1_vlan entered promiscuous mode [ 174.547286][ T5772] fuse: Unknown parameter '0x0000000000000003' [ 174.624711][ T3987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.655214][ T3987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.701685][ T5768] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 224: padding at end of block bitmap is not set [ 174.760567][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 174.783708][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.808351][ T5768] EXT4-fs (loop1): Remounting filesystem read-only [ 174.818402][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.861774][ T5563] device veth0_macvtap entered promiscuous mode [ 174.919290][ T5774] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 175.000799][ T5775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.546'. [ 175.118233][ T5775] device hsr_slave_1 left promiscuous mode [ 175.227247][ T5563] device veth1_macvtap entered promiscuous mode [ 175.557143][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 175.573448][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.366910][ T5563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.378368][ T5563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.393589][ T5563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.435311][ T5563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.471308][ T5563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.501012][ T5563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.260523][ T5563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.276119][ T5563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.293743][ T5563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.308055][ T5563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.375414][ T5563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.436682][ T5800] SET target dimension over the limit! [ 177.465669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.488054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.510025][ T5563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.526548][ T5563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.545927][ T5563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.571091][ T5563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.595576][ T5563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.619702][ T5563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.632988][ T5563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.672519][ T5563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.717890][ T5563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.754288][ T5563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.809323][ T5563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.836736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.851883][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.875754][ T5806] block nbd1: Device being setup by another task [ 177.886619][ T5563] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.895341][ T5563] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.906264][ T5563] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.943332][ T5806] block nbd1: shutting down sockets [ 177.958729][ T5563] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.974438][ T5809] fuse: Unknown parameter 'fd0x0000000000000003' [ 178.394608][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.404793][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.418102][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.427129][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.464791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 178.473600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 179.842385][ T5833] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 179.848905][ T5833] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 179.930071][ T5833] vhci_hcd vhci_hcd.0: Device attached [ 180.287908][ T3923] usb 16-1: SetAddress Request (2) to port 0 [ 180.763680][ T3923] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd [ 180.784256][ T5834] vhci_hcd: connection closed [ 180.784563][ T4306] vhci_hcd: stop threads [ 180.803631][ T4306] vhci_hcd: release socket [ 180.935738][ T4306] vhci_hcd: disconnect device [ 180.994753][ T5847] fuse: Unknown parameter 'fd0x0000000000000003' [ 181.088626][ T5852] Cannot find add_set index 0 as target [ 181.100714][ T5854] loop1: detected capacity change from 0 to 512 [ 181.169466][ T5854] EXT4-fs (loop1): Ignoring removed nobh option [ 181.175944][ T5854] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 181.327023][ T5854] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 181.346312][ T5854] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038 (0x7fffffff) [ 182.165372][ T5869] block nbd0: Device being setup by another task [ 183.278207][ T3590] block nbd0: Receive control failed (result -32) [ 183.303133][ T5863] block nbd0: shutting down sockets [ 183.948582][ T5884] fuse: Bad value for 'fd' [ 184.184953][ T5897] fuse: Unknown parameter 'fd0x0000000000000003' [ 184.217240][ T5893] bridge0: port 3(syz_tun) entered disabled state [ 184.224163][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.232397][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.464172][ T5900] device syz_tun left promiscuous mode [ 184.484497][ T5900] bridge0: port 3(syz_tun) entered disabled state [ 185.095301][ T5900] device bridge_slave_1 left promiscuous mode [ 185.123841][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.178861][ T5900] device bridge_slave_0 left promiscuous mode [ 185.185079][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.287750][ T5913] tmpfs: Unknown parameter 'usrquota' [ 185.580837][ T5907] lo speed is unknown, defaulting to 1000 [ 185.875875][ T3923] usb 16-1: device descriptor read/8, error -110 [ 186.354648][ T5923] SET target dimension over the limit! [ 186.379147][ T5907] lo speed is unknown, defaulting to 1000 [ 186.459956][ T5907] lo speed is unknown, defaulting to 1000 [ 186.507481][ T5907] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 186.662809][ T5907] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 186.666663][ T3923] usb usb16-port1: Cannot enable. Maybe the USB cable is bad? [ 186.732716][ T3923] usb usb16-port1: attempt power cycle [ 186.812800][ T5928] block nbd1: shutting down sockets [ 186.894338][ T5907] lo speed is unknown, defaulting to 1000 [ 186.910761][ T5907] lo speed is unknown, defaulting to 1000 [ 186.932082][ T5907] lo speed is unknown, defaulting to 1000 [ 186.949124][ T5907] lo speed is unknown, defaulting to 1000 [ 186.962922][ T5907] lo speed is unknown, defaulting to 1000 [ 186.971603][ T5907] lo speed is unknown, defaulting to 1000 [ 187.185673][ T3923] usb usb16-port1: Cannot enable. Maybe the USB cable is bad? [ 187.347382][ T5935] hub 2-0:1.0: USB hub found [ 187.447186][ T5935] hub 2-0:1.0: 1 port detected [ 187.504854][ T26] audit: type=1804 audit(1728564412.243:17): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.589" name="/newroot/49/bus/file1" dev="overlay" ino=286 res=1 errno=0 [ 187.536348][ T3923] usb usb16-port1: Cannot enable. Maybe the USB cable is bad? [ 187.605731][ T3923] usb usb16-port1: unable to enumerate USB device [ 187.760323][ T5944] loop3: detected capacity change from 0 to 512 [ 187.809684][ T5944] EXT4-fs (loop3): Ignoring removed nobh option [ 187.816059][ T5944] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 187.972697][ T5944] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 187.992255][ T5944] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038 (0x7fffffff) [ 189.723437][ T5958] netlink: 28 bytes leftover after parsing attributes in process `syz.2.593'. [ 189.761555][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 190.140020][ T5967] loop2: detected capacity change from 0 to 128 [ 191.882065][ T5985] loop4: detected capacity change from 0 to 512 [ 191.922215][ T5985] EXT4-fs (loop4): Ignoring removed nobh option [ 191.928666][ T5985] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 192.013520][ T5995] SET target dimension over the limit! [ 192.020793][ T5985] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 192.040422][ T5985] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038 (0x7fffffff) [ 192.162474][ T5983] block nbd3: shutting down sockets [ 192.273327][ T3821] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 193.880557][ T6009] netlink: 28 bytes leftover after parsing attributes in process `syz.0.606'. [ 193.889867][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.606'. [ 193.899488][ T3821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.912682][ T3821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.946427][ T6007] block nbd1: shutting down sockets [ 193.983364][ T3821] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 194.009535][ T3821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.056657][ T3821] usb 3-1: config 0 descriptor?? [ 194.280100][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.549624][ T3821] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 194.561918][ T3821] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 194.590549][ T3821] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0002/input/input9 [ 194.675922][ T3821] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 196.465679][ T3818] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 197.116502][ T6033] fuse: Bad value for 'fd' [ 197.294844][ T6041] loop4: detected capacity change from 0 to 512 [ 197.730387][ T6041] EXT4-fs (loop4): Ignoring removed nobh option [ 197.736909][ T6041] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 197.848695][ T6041] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 197.868263][ T6041] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038 (0x7fffffff) [ 197.878850][ T6047] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 198.762746][ T6052] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 224: padding at end of block bitmap is not set [ 198.793241][ T1077] usb 3-1: USB disconnect, device number 2 [ 198.902219][ T6052] EXT4-fs (loop4): Remounting filesystem read-only [ 198.969530][ T6058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.619'. [ 198.978861][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.619'. [ 200.411211][ T6061] sched: RT throttling activated [ 201.634801][ T6078] lo speed is unknown, defaulting to 1000 [ 202.432250][ T6087] loop2: detected capacity change from 0 to 512 [ 202.649315][ T6087] EXT4-fs (loop2): Ignoring removed nobh option [ 202.656476][ T6087] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 202.657981][ T4306] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.510739][ T6107] netlink: 28 bytes leftover after parsing attributes in process `syz.4.630'. [ 203.522239][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.630'. [ 203.666941][ T3926] Bluetooth: hci3: command 0x0409 tx timeout [ 203.696638][ T6087] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 203.716530][ T6087] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff) [ 203.739230][ T3923] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 203.765159][ T26] audit: type=1804 audit(1728564428.503:18): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.632" name="/newroot/14/bus/file1" dev="overlay" ino=98 res=1 errno=0 [ 205.242535][ T6106] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 224: padding at end of block bitmap is not set [ 205.249736][ T4306] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.286899][ T6106] EXT4-fs (loop2): Remounting filesystem read-only [ 205.348645][ T6078] chnl_net:caif_netlink_parms(): no params data found [ 205.465890][ T3923] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 205.473482][ T3923] usb 2-1: can't read configurations, error -71 [ 205.516185][ T6125] Cannot find add_set index 0 as target [ 205.548118][ T4306] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.728845][ T4306] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.745073][ T3623] Bluetooth: hci3: command 0x041b tx timeout [ 205.844067][ T6138] block nbd2: shutting down sockets [ 205.933424][ T6078] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.953844][ T6078] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.981706][ T6078] device bridge_slave_0 entered promiscuous mode [ 206.051378][ T6078] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.096496][ T6078] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.132676][ T6078] device bridge_slave_1 entered promiscuous mode [ 207.535227][ T4306] tipc: Left network mode [ 207.546886][ T6078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.913793][ T3923] Bluetooth: hci3: command 0x040f tx timeout [ 208.097326][ T26] audit: type=1804 audit(1728564432.843:19): pid=6161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.643" name="/newroot/147/bus/file1" dev="overlay" ino=798 res=1 errno=0 [ 208.117182][ T6078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.967607][ T1077] Bluetooth: hci3: command 0x0419 tx timeout [ 210.395039][ T6078] team0: Port device team_slave_0 added [ 210.425029][ T6177] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 210.472972][ T6078] team0: Port device team_slave_1 added [ 210.611855][ T6078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.635684][ T6078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.677203][ T6078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.743274][ T6078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.752098][ T6078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.809428][ T6078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.896690][ T6078] device hsr_slave_0 entered promiscuous mode [ 210.903865][ T6078] device hsr_slave_1 entered promiscuous mode [ 210.912061][ T6078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.922123][ T6078] Cannot create hsr debugfs directory [ 213.065320][ T26] audit: type=1804 audit(1728564437.803:20): pid=6225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.653" name="/newroot/147/bus/file1" dev="overlay" ino=805 res=1 errno=0 [ 213.943918][ T6078] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 214.314459][ T6078] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 214.362057][ T6078] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 214.436219][ T6246] fuse: Bad value for 'fd' [ 214.461042][ T4306] device hsr_slave_0 left promiscuous mode [ 214.480376][ T4306] device hsr_slave_1 left promiscuous mode [ 214.492645][ T4306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.510820][ T4306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.535269][ T4306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.543280][ T4306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.648482][ T4306] device bridge_slave_1 left promiscuous mode [ 214.654662][ T4306] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.669094][ T4306] device bridge_slave_0 left promiscuous mode [ 214.683474][ T4306] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.784724][ T4306] device veth1_macvtap left promiscuous mode [ 214.834311][ T4306] device veth0_macvtap left promiscuous mode [ 214.868599][ T4306] device veth1_vlan left promiscuous mode [ 214.874387][ T4306] device veth0_vlan left promiscuous mode [ 215.998654][ T26] audit: type=1804 audit(1728564440.743:21): pid=6276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.664" name="/newroot/152/bus/file1" dev="overlay" ino=841 res=1 errno=0 [ 216.321984][ T4306] team0 (unregistering): Port device team_slave_1 removed [ 216.355153][ T4306] team0 (unregistering): Port device team_slave_0 removed [ 216.394130][ T4306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.472656][ T4306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.714095][ T4306] bond0 (unregistering): Released all slaves [ 216.879359][ T6078] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 218.270793][ T6297] fuse: Bad value for 'fd' [ 218.321931][ T6078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.373294][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 218.399697][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.422960][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.533737][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.669'. [ 219.079819][ T6302] device hsr_slave_1 left promiscuous mode [ 219.088563][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.096988][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.108444][ T6078] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.685699][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.707353][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.741298][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.748439][ T4322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.897189][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.963969][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.982423][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.989514][ T4322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.024697][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.073389][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.117295][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.167003][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.195559][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.221644][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.253542][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.285023][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.333827][ T6078] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 220.590899][ T6078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.642913][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.716187][ T6359] fuse: Bad value for 'fd' [ 220.736621][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.888574][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.047862][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.122226][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.299236][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.308174][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.335761][ T3821] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 221.357094][ T6078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.457061][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 221.483107][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.501647][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 221.512343][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.522098][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.531171][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.551566][ T6078] device veth0_vlan entered promiscuous mode [ 221.704062][ T6078] device veth1_vlan entered promiscuous mode [ 221.710599][ T3821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.726509][ T3821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.765603][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 221.779485][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 221.788397][ T3821] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 221.807189][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 221.824112][ T3821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.833430][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.855078][ T3821] usb 2-1: config 0 descriptor?? [ 221.867256][ T6078] device veth0_macvtap entered promiscuous mode [ 221.957841][ T6078] device veth1_macvtap entered promiscuous mode [ 222.013338][ T6078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.025937][ T6078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.037342][ T6078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.051194][ T6078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.061692][ T6078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.072679][ T6078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.084143][ T6078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.095546][ T6078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.107667][ T6078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.143024][ T6078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.160245][ T6078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.170705][ T6078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.182860][ T6078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.193154][ T6078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.204177][ T6078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.243626][ T6078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.254670][ T6078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.271974][ T6078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.284743][ T6078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.301609][ T6078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.312512][ T6078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.333961][ T6078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.342416][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 222.357956][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 222.370501][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 222.382332][ T3821] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 222.397769][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 222.399124][ T3821] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 222.422603][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 222.434951][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 222.443113][ T3821] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0003/input/input10 [ 222.481751][ T3821] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 222.542572][ T6078] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.559790][ T6078] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.570596][ T6078] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.583684][ T6078] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.862885][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.875374][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.890366][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 222.954049][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.963972][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.986751][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 223.695973][ T3818] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 223.738702][ T6411] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 223.828673][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.687'. [ 224.741158][ T6422] fuse: Bad value for 'fd' [ 224.841772][ T6428] loop4: detected capacity change from 0 to 512 [ 224.880498][ T6428] EXT4-fs (loop4): Ignoring removed nobh option [ 224.886916][ T6428] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 224.967813][ T6428] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 224.987310][ T6428] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038 (0x7fffffff) [ 226.167511][ T1077] usb 2-1: USB disconnect, device number 6 [ 226.809140][ T6473] fuse: Bad value for 'fd' [ 226.815814][ T3924] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 226.975844][ T26] audit: type=1804 audit(1728564451.723:22): pid=6476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.707" name="/newroot/6/bus/file1" dev="overlay" ino=58 res=1 errno=0 [ 227.136322][ T6483] tipc: Started in network mode [ 227.145299][ T6483] tipc: Node identity ffffffff, cluster identity 4711 [ 227.167291][ T6483] tipc: Node number set to 4294967295 [ 227.179437][ T6485] loop1: detected capacity change from 0 to 512 [ 227.220729][ T6485] EXT4-fs (loop1): Ignoring removed nobh option [ 227.227173][ T6485] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 227.255858][ T3924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.348054][ T3924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.358661][ T3924] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 227.368082][ T3924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.377604][ T6485] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 227.396957][ T6485] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038 (0x7fffffff) [ 227.532871][ T3924] usb 3-1: config 0 descriptor?? [ 228.130428][ T6499] fuse: Invalid rootmode [ 228.412728][ T6507] tmpfs: Unknown parameter 'usrquota' [ 229.325620][ T3924] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 229.362974][ T3924] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 229.407165][ T3924] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0004/input/input11 [ 229.496421][ T6517] fuse: Bad value for 'fd' [ 229.573283][ T3924] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 229.741195][ T26] audit: type=1804 audit(1728564454.483:23): pid=6522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.721" name="/newroot/12/bus/file1" dev="overlay" ino=101 res=1 errno=0 [ 230.615645][ T3623] usb 3-1: USB disconnect, device number 3 [ 231.642504][ T26] audit: type=1804 audit(1728564456.383:24): pid=6557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.733" name="/newroot/172/bus/file1" dev="overlay" ino=939 res=1 errno=0 [ 232.006196][ T6563] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 232.015034][ T6563] vhci_hcd: invalid port number 255 [ 232.024121][ T6563] vhci_hcd: default hub control req: ffff vffff i00ff l0 [ 232.627933][ T6575] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 232.645822][ T1077] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 232.654455][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.739'. [ 232.770913][ T6575] device hsr_slave_1 left promiscuous mode [ 233.175718][ T1077] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 233.198859][ T1077] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.212090][ T1077] usb 3-1: Product: syz [ 233.218985][ T1077] usb 3-1: Manufacturer: syz [ 233.223866][ T1077] usb 3-1: SerialNumber: syz [ 233.251458][ T1077] usb 3-1: config 0 descriptor?? [ 233.530838][ T4062] usb 3-1: USB disconnect, device number 4 [ 234.219154][ T3712] udevd[3712]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.049544][ T6612] fuse: Bad value for 'fd' [ 235.582375][ T6621] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 236.803668][ T6648] capability: warning: `syz.3.764' uses deprecated v2 capabilities in a way that may be insecure [ 236.845392][ T6645] Cannot find add_set index 0 as target [ 237.191006][ T6653] block nbd4: shutting down sockets [ 238.701315][ T6665] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 238.730752][ T6665] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 238.786494][ T6672] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 239.414922][ T6681] tipc: Started in network mode [ 239.422647][ T6681] tipc: Node identity f7, cluster identity 4711 [ 239.434460][ T6681] tipc: Node number set to 247 [ 239.875666][ T1077] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 240.125641][ T1077] usb 4-1: Using ep0 maxpacket: 8 [ 240.245754][ T1077] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 240.270649][ T1077] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 240.291977][ T1077] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 240.315305][ T1077] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.349217][ T1077] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 240.375108][ T1077] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.665657][ T1077] usb 4-1: GET_CAPABILITIES returned 0 [ 240.671132][ T1077] usbtmc 4-1:16.0: can't read capabilities [ 240.895546][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.905639][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.914732][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.923813][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.932891][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.941962][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.951030][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.960103][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.969168][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.978209][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.987237][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.996272][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.005300][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.014365][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.023408][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.032440][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.056449][ T1077] usb 4-1: USB disconnect, device number 4 [ 242.125478][ T6718] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 242.288587][ T6720] fuse: Bad value for 'fd' [ 242.790627][ T6729] SET target dimension over the limit! [ 242.820124][ T6726] tipc: Started in network mode [ 242.825157][ T6726] tipc: Node identity f7, cluster identity 4711 [ 242.858487][ T6726] tipc: Node number set to 247 [ 243.043980][ T6731] block nbd1: shutting down sockets [ 245.626047][ T6766] fuse: Bad value for 'fd' [ 246.471356][ T6789] Cannot find add_set index 0 as target [ 247.656817][ T6799] block nbd3: Device being setup by another task [ 251.112421][ T6789] block nbd3: shutting down sockets [ 251.678350][ T6846] netlink: 172 bytes leftover after parsing attributes in process `syz.3.818'. [ 253.953713][ T6880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.827'. [ 254.041657][ T6883] netlink: 28 bytes leftover after parsing attributes in process `syz.2.828'. [ 254.258317][ T6887] Cannot find add_set index 0 as target [ 255.141160][ T3590] block nbd4: Receive control failed (result -32) [ 255.148255][ T3592] block nbd4: Receive control failed (result -32) [ 255.256526][ T6896] block nbd4: shutting down sockets [ 255.726844][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.402140][ T6926] netlink: 28 bytes leftover after parsing attributes in process `syz.4.840'. [ 257.957008][ T6951] Cannot find add_set index 0 as target [ 258.100434][ T6949] netlink: 3 bytes leftover after parsing attributes in process `syz.4.847'. [ 258.424491][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.849'. [ 258.670403][ T3590] block nbd0: Receive control failed (result -32) [ 258.670447][ T3592] block nbd0: Receive control failed (result -32) [ 258.685028][ T6961] block nbd0: shutting down sockets [ 259.353592][ T6971] netlink: 28 bytes leftover after parsing attributes in process `syz.3.852'. [ 259.464724][ T6979] netlink: 28 bytes leftover after parsing attributes in process `syz.4.855'. [ 259.503786][ T6979] netlink: 32 bytes leftover after parsing attributes in process `syz.4.855'. [ 259.689574][ T6986] fuse: Bad value for 'fd' [ 260.841546][ T7003] netlink: 40 bytes leftover after parsing attributes in process `syz.1.862'. [ 261.179866][ T7011] netlink: 28 bytes leftover after parsing attributes in process `syz.1.867'. [ 262.254456][ T7032] netlink: 'syz.1.872': attribute type 10 has an invalid length. [ 262.325874][ T7032] device syz_tun entered promiscuous mode [ 262.400889][ T7032] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 264.245884][ T7050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.879'. [ 265.307170][ T7076] netlink: 'syz.2.886': attribute type 10 has an invalid length. [ 265.316111][ T7076] device syz_tun entered promiscuous mode [ 265.405100][ T7076] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 265.805086][ T7082] netlink: 165 bytes leftover after parsing attributes in process `syz.2.888'. [ 266.112020][ T7090] SET target dimension over the limit! [ 266.170221][ T7092] netlink: 28 bytes leftover after parsing attributes in process `syz.0.892'. [ 266.464174][ T7097] block nbd1: shutting down sockets [ 266.510643][ T7100] Cannot find add_set index 0 as target [ 266.687543][ T7103] block nbd0: shutting down sockets [ 267.446556][ T7107] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 269.399247][ T7121] netlink: 'syz.2.899': attribute type 10 has an invalid length. [ 270.096311][ T7131] fuse: Unknown parameter 'group_id00000000000000000000' [ 270.265029][ T7135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.904'. [ 272.214775][ T7162] fuse: Bad value for 'user_id' [ 272.800117][ T7180] overlayfs: failed to resolve './file1': -2 [ 273.617944][ T7188] netlink: 'syz.2.922': attribute type 10 has an invalid length. [ 273.971120][ T7194] fuse: Bad value for 'user_id' [ 274.440280][ T7213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.931'. [ 274.529135][ T7213] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 275.121802][ T7223] overlayfs: failed to resolve './file1': -2 [ 275.309118][ T7233] loop4: detected capacity change from 0 to 512 [ 275.399124][ T7237] fuse: Bad value for 'user_id' [ 275.407050][ T7233] EXT4-fs (loop4): Ignoring removed nobh option [ 275.413459][ T7233] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 275.535867][ T7233] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 275.555236][ T7233] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038 (0x7fffffff) [ 275.825602][ T3623] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 276.075595][ T7240] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 224: padding at end of block bitmap is not set [ 276.352644][ T7240] EXT4-fs (loop4): Remounting filesystem read-only [ 276.575648][ T3623] usb 3-1: Using ep0 maxpacket: 8 [ 276.805645][ T3623] usb 3-1: config 0 has no interfaces? [ 276.811649][ T3623] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 276.934820][ T3623] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.962254][ T3623] usb 3-1: config 0 descriptor?? [ 277.255769][ T4062] usb 3-1: USB disconnect, device number 5 [ 277.449374][ T7270] overlayfs: failed to resolve './file0': -2 [ 277.739918][ T7267] ceph: No mds server is up or the cluster is laggy [ 277.919400][ T7274] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 278.145159][ T7284] fuse: Bad value for 'fd' [ 278.295712][ T3926] Bluetooth: hci4: command 0x0406 tx timeout [ 278.321199][ T7293] loop4: detected capacity change from 0 to 512 [ 278.360549][ T7293] EXT4-fs (loop4): Ignoring removed nobh option [ 278.367262][ T7293] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 278.438560][ T7293] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 278.457909][ T7293] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038 (0x7fffffff) [ 280.020538][ T7315] overlayfs: failed to resolve './file0': -2 [ 280.347922][ T7320] netlink: 'syz.3.961': attribute type 10 has an invalid length. [ 280.359608][ T7320] device syz_tun entered promiscuous mode [ 280.395115][ T7320] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 280.761260][ T7326] fuse: Bad value for 'fd' [ 281.061989][ T7332] SET target dimension over the limit! [ 281.130221][ T7339] loop2: detected capacity change from 0 to 512 [ 281.165608][ T7339] EXT4-fs (loop2): Ignoring removed nobh option [ 281.171948][ T7339] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 281.243230][ T7339] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 281.263142][ T7339] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038 (0x7fffffff) [ 282.051971][ T7344] block nbd1: shutting down sockets [ 282.212634][ T7346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.475625][ T7346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.491294][ T7346] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 282.603140][ T7346] bond0 (unregistering): Released all slaves [ 282.948297][ T7356] overlayfs: failed to resolve './file0': -2 [ 283.436224][ T3924] Bluetooth: hci0: command 0x0406 tx timeout [ 284.259740][ T7364] netlink: 1 bytes leftover after parsing attributes in process `syz.2.973'. [ 284.707639][ T7369] netlink: 'syz.3.974': attribute type 10 has an invalid length. [ 284.812268][ T7371] fuse: Bad value for 'fd' [ 285.890681][ T7389] Cannot find add_set index 0 as target [ 286.060830][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.978'. [ 286.151171][ T7393] block nbd3: shutting down sockets [ 286.384079][ T7398] netlink: 28 bytes leftover after parsing attributes in process `syz.4.982'. [ 286.426232][ T7398] netlink: 16 bytes leftover after parsing attributes in process `syz.4.982'. [ 286.658547][ T7402] fuse: Bad value for 'fd' [ 286.714752][ T7404] Cannot find add_set index 0 as target [ 287.504245][ T7417] block nbd2: shutting down sockets [ 288.186279][ T7425] overlayfs: failed to resolve './file0': -2 [ 289.231792][ T7437] netlink: 'syz.3.993': attribute type 10 has an invalid length. [ 289.684696][ T7439] loop3: detected capacity change from 0 to 512 [ 289.750257][ T7439] EXT4-fs (loop3): Ignoring removed nobh option [ 289.756642][ T7439] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 289.773325][ T7442] netlink: 28 bytes leftover after parsing attributes in process `syz.4.995'. [ 289.802934][ T7442] netlink: 16 bytes leftover after parsing attributes in process `syz.4.995'. [ 289.878303][ T7439] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 289.899980][ T7439] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038 (0x7fffffff) [ 290.071727][ T3924] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 290.082821][ T3924] Bluetooth: hci2: Injecting HCI hardware error event [ 290.092480][ T3590] Bluetooth: hci2: hardware error 0x00 [ 290.311388][ T7452] fuse: Bad value for 'fd' [ 291.450064][ T7461] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 291.493856][ T7461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 291.503412][ T7461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 291.514589][ T7461] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 291.552404][ T7469] Cannot find add_set index 0 as target [ 291.655600][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.999'. [ 292.150454][ T7467] device hsr_slave_1 left promiscuous mode [ 292.390073][ T7484] fuse: Bad value for 'fd' [ 292.403061][ T7489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1007'. [ 292.472884][ T7489] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1007'. [ 292.490616][ T7487] block nbd4: shutting down sockets [ 292.748581][ T7495] Cannot find add_set index 0 as target [ 292.785764][ T7496] fuse: Bad value for 'fd' [ 292.940325][ T7502] block nbd3: shutting down sockets [ 293.022081][ T7504] loop0: detected capacity change from 0 to 512 [ 293.099132][ T7504] EXT4-fs (loop0): Ignoring removed nobh option [ 293.105548][ T7504] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 293.225714][ T7504] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 293.245146][ T7504] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038 (0x7fffffff) [ 294.995660][ T7507] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 224: padding at end of block bitmap is not set [ 295.089177][ T7507] EXT4-fs (loop0): Remounting filesystem read-only [ 296.347505][ T7533] fuse: Bad value for 'fd' [ 296.353720][ T7532] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 296.370019][ T7532] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 296.398560][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1018'. [ 296.509068][ T7538] fuse: Invalid rootmode [ 296.566991][ T7532] device hsr_slave_1 left promiscuous mode [ 296.597382][ T7540] loop0: detected capacity change from 0 to 512 [ 296.606309][ T7536] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1020'. [ 296.621081][ T7536] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1020'. [ 296.688275][ T7540] EXT4-fs (loop0): Ignoring removed nobh option [ 296.694696][ T7540] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 296.982750][ T7540] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 297.002186][ T7540] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038 (0x7fffffff) [ 299.319646][ T7570] Cannot find add_set index 0 as target [ 299.466155][ T7573] fuse: Bad value for 'fd' [ 299.576539][ T7575] block nbd0: Device being setup by another task [ 299.794680][ T7581] fuse: Invalid rootmode [ 299.836875][ T7572] block nbd0: shutting down sockets [ 300.841412][ T7595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1035'. [ 300.862741][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1035'. [ 300.878810][ T7595] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 300.900565][ T7594] loop3: detected capacity change from 0 to 512 [ 300.959768][ T7594] EXT4-fs (loop3): Ignoring removed nobh option [ 300.966283][ T7594] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 301.320258][ T7594] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 301.339855][ T7594] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038 (0x7fffffff) [ 302.249590][ T7615] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1041'. [ 302.423753][ T7616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.695529][ T4061] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 302.953232][ T26] audit: type=1326 audit(1728564527.693:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7617 comm="syz.2.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec0cdbcff9 code=0x7ffc0000 [ 302.961730][ T4061] usb 5-1: Using ep0 maxpacket: 8 [ 303.102195][ T26] audit: type=1326 audit(1728564527.733:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7617 comm="syz.2.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fec0cdbcff9 code=0x7ffc0000 [ 303.156246][ T4061] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 303.169348][ T4061] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 303.178810][ T4061] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 303.190356][ T4061] usb 5-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping [ 303.201255][ T4061] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 303.217067][ T4061] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 303.230708][ T26] audit: type=1326 audit(1728564527.733:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7617 comm="syz.2.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec0cdbcff9 code=0x7ffc0000 [ 303.267289][ T7625] fuse: Invalid rootmode [ 303.295194][ T26] audit: type=1326 audit(1728564527.733:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7617 comm="syz.2.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec0cdbcff9 code=0x7ffc0000 [ 303.321672][ T4061] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 303.376109][ T4061] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 303.435082][ T4061] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 303.461546][ T4061] usb 5-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping [ 303.476501][ T26] audit: type=1326 audit(1728564527.733:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7617 comm="syz.2.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec0cdbcff9 code=0x7ffc0000 [ 303.476696][ T4061] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 303.515746][ T4061] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 303.620287][ T4061] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 303.655288][ T4061] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 303.679313][ T4061] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 303.697166][ T26] audit: type=1326 audit(1728564527.743:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7617 comm="syz.2.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fec0cdbcff9 code=0x7ffc0000 [ 303.725532][ T4061] usb 5-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping [ 303.729294][ T7635] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1050'. [ 303.742918][ T4061] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 303.760501][ T26] audit: type=1326 audit(1728564527.743:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7617 comm="syz.2.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec0cdbcff9 code=0x7ffc0000 [ 303.870331][ T4061] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 303.880507][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1050'. [ 304.154623][ T7644] bond0 speed is unknown, defaulting to 1000 [ 304.635606][ T4061] usb 5-1: string descriptor 0 read error: -22 [ 304.645305][ T4061] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 304.686539][ T7644] bond0 speed is unknown, defaulting to 1000 [ 304.690311][ T4061] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.692966][ T7644] bond0 speed is unknown, defaulting to 1000 [ 304.757726][ T4061] adutux 5-1:246.0: interrupt endpoints not found [ 304.947494][ T7644] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 304.994951][ T7644] bond0 speed is unknown, defaulting to 1000 [ 305.067012][ T7644] bond0 speed is unknown, defaulting to 1000 [ 305.296995][ T7644] bond0 speed is unknown, defaulting to 1000 [ 305.355693][ T7644] bond0 speed is unknown, defaulting to 1000 [ 305.369838][ T7644] bond0 speed is unknown, defaulting to 1000 [ 305.379193][ T7644] bond0 speed is unknown, defaulting to 1000 [ 305.535047][ T7666] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 307.438232][ T7693] Cannot find add_set index 0 as target [ 307.475058][ T3683] usb 5-1: USB disconnect, device number 4 [ 307.786665][ T7698] block nbd3: server does not support multiple connections per device. [ 307.913086][ T7693] block nbd3: shutting down sockets [ 309.470311][ T7709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.162287][ T7732] ceph: No mds server is up or the cluster is laggy [ 310.255542][ T3922] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 310.454832][ T7739] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 310.525630][ T3922] usb 3-1: Using ep0 maxpacket: 8 [ 310.670550][ T3922] usb 3-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 310.689999][ T3922] usb 3-1: config 246 descriptor has 1 excess byte, ignoring [ 310.714294][ T3922] usb 3-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 310.850947][ T3922] usb 3-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping [ 310.862395][ T3922] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 310.874246][ T3922] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 311.014265][ T3922] usb 3-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 311.072303][ T3922] usb 3-1: config 246 descriptor has 1 excess byte, ignoring [ 311.210214][ T3922] usb 3-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 311.253132][ T3922] usb 3-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping [ 311.466584][ T3922] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 311.526309][ T3922] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 311.636158][ T3922] usb 3-1: unable to read config index 2 descriptor/start: -71 [ 311.650866][ T3922] usb 3-1: can't read configurations, error -71 [ 313.193992][ T7779] 9pnet_virtio: no channels available for device syz [ 313.418476][ T7776] overlayfs: overlapping lowerdir path [ 313.594949][ T7785] fuse: Bad value for 'fd' [ 315.352811][ T7812] fuse: Unknown parameter 'use00000000000000000000' [ 316.648869][ T7835] fuse: Bad value for 'fd' [ 317.166027][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.300049][ T7883] bond0 speed is unknown, defaulting to 1000 [ 425.045389][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 425.052476][ C0] (detected by 0, t=10502 jiffies, g=31653, q=30) [ 425.058981][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294979621-4294969119), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 425.072343][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g31653 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 425.083533][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 425.093502][ C0] rcu: RCU grace-period kthread stack dump: [ 425.099398][ C0] task:rcu_preempt state:R running task stack:25112 pid: 15 ppid: 2 flags:0x00004000 [ 425.110194][ C0] Call Trace: [ 425.113471][ C0] [ 425.116403][ C0] __schedule+0x12c4/0x45b0 [ 425.120913][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 425.126901][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 425.132807][ C0] ? __mod_timer+0xa8e/0xeb0 [ 425.137402][ C0] ? release_firmware_map_entry+0x190/0x190 [ 425.143296][ C0] ? mod_timer_pending+0x20/0x20 [ 425.148244][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 425.153629][ C0] schedule+0x11b/0x1f0 [ 425.157787][ C0] schedule_timeout+0x1b9/0x300 [ 425.162638][ C0] ? console_conditional_schedule+0x40/0x40 [ 425.168533][ C0] ? update_process_times+0x200/0x200 [ 425.173914][ C0] ? prepare_to_swait_event+0x321/0x340 [ 425.179464][ C0] rcu_gp_fqs_loop+0x2bf/0x1080 [ 425.184324][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 425.189519][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 425.194718][ C0] ? rcu_gp_init+0xdae/0x1140 [ 425.199395][ C0] ? rcu_gp_init+0x1140/0x1140 [ 425.204158][ C0] ? finish_swait+0xc5/0x1d0 [ 425.208747][ C0] rcu_gp_kthread+0xa4/0x360 [ 425.213435][ C0] ? _raw_spin_unlock+0x40/0x40 [ 425.218303][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 425.223414][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 425.229310][ C0] ? __kthread_parkme+0x15c/0x1c0 [ 425.234356][ C0] kthread+0x3f6/0x4f0 [ 425.238441][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 425.243559][ C0] ? kthread_blkcg+0xd0/0xd0 [ 425.248148][ C0] ret_from_fork+0x1f/0x30 [ 425.252576][ C0] [ 425.255592][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 425.261907][ C0] NMI backtrace for cpu 0 [ 425.266228][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.15.167-syzkaller #0 [ 425.274138][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 425.284192][ C0] Call Trace: [ 425.287470][ C0] [ 425.290314][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 425.295012][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 425.300651][ C0] ? panic+0x860/0x860 [ 425.304730][ C0] nmi_cpu_backtrace+0x46a/0x4a0 [ 425.309675][ C0] ? __wake_up_klogd+0xd5/0x100 [ 425.314534][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 425.320701][ C0] ? _printk+0xd1/0x120 [ 425.324860][ C0] ? cpu_online+0x1f/0x40 [ 425.329189][ C0] ? panic+0x860/0x860 [ 425.333263][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 425.339363][ C0] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 425.345346][ C0] rcu_check_gp_kthread_starvation+0x1d2/0x240 [ 425.351505][ C0] print_other_cpu_stall+0x137a/0x14d0 [ 425.356978][ C0] ? print_cpu_stall+0x600/0x600 [ 425.361921][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 425.366949][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 425.372160][ C0] rcu_sched_clock_irq+0xa38/0x1150 [ 425.377365][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 425.382220][ C0] ? hrtimer_run_queues+0x163/0x450 [ 425.387419][ C0] ? account_process_tick+0x232/0x3a0 [ 425.392796][ C0] update_process_times+0x196/0x200 [ 425.398002][ C0] tick_sched_timer+0x386/0x550 [ 425.402853][ C0] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 425.408399][ C0] __hrtimer_run_queues+0x55b/0xcf0 [ 425.413613][ C0] ? hrtimer_interrupt+0x980/0x980 [ 425.418724][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 425.424919][ C0] hrtimer_interrupt+0x392/0x980 [ 425.429904][ C0] __sysvec_apic_timer_interrupt+0x139/0x470 [ 425.435987][ C0] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 425.441622][ C0] [ 425.444550][ C0] [ 425.447489][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 425.453471][ C0] RIP: 0010:acpi_idle_do_entry+0x10f/0x340 [ 425.459282][ C0] Code: 82 42 f7 48 83 e3 08 0f 85 0a 01 00 00 4c 8d 74 24 20 e8 c4 fe 48 f7 0f 1f 44 00 00 e8 0a 7e 42 f7 0f 00 2d 73 5c a5 00 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 8b 48 8c f7 [ 425.478902][ C0] RSP: 0018:ffffffff8c607b80 EFLAGS: 000002d3 [ 425.484973][ C0] RAX: ffffffff8a3ddc66 RBX: 0000000000000000 RCX: ffffffff8c6bd5c0 [ 425.492941][ C0] RDX: 0000000000000000 RSI: ffffffff8a8b2b00 RDI: ffffffff8ad904c0 [ 425.501003][ C0] RBP: ffffffff8c607c10 R08: ffffffff8186db50 R09: fffffbfff18d7ab9 [ 425.508977][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff18c0f70 [ 425.516949][ C0] R13: ffff8881468be804 R14: ffffffff8c607ba0 R15: dffffc0000000000 [ 425.524941][ C0] ? trace_hardirqs_on+0x30/0x80 [ 425.529893][ C0] ? acpi_idle_do_entry+0x106/0x340 [ 425.535101][ C0] ? acpi_idle_enter_bm+0x5c0/0x5c0 [ 425.540328][ C0] ? rcu_preempt_deferred_qs+0x6b/0x190 [ 425.545873][ C0] ? rcu_qs+0x190/0x190 [ 425.550039][ C0] acpi_idle_enter+0x352/0x4f0 [ 425.554831][ C0] cpuidle_enter_state+0x521/0xef0 [ 425.559967][ C0] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 425.565341][ C0] ? can_stop_idle_tick+0x20d/0x2b0 [ 425.570543][ C0] ? tick_nohz_idle_stop_tick+0x354/0xa70 [ 425.576265][ C0] cpuidle_enter+0x59/0x90 [ 425.580683][ C0] do_idle+0x3e4/0x670 [ 425.584767][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 425.589967][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 425.595615][ C0] ? schedule_idle+0x57/0x90 [ 425.600207][ C0] cpu_startup_entry+0x14/0x20 [ 425.604978][ C0] ? time_init+0x40/0x40 [ 425.609226][ C0] start_kernel+0x48c/0x540 [ 425.613759][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 425.619676][ C0]