last executing test programs: 6m54.954285617s ago: executing program 4 (id=2566): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000b}, 0x1c) connect(0xffffffffffffffff, &(0x7f00000003c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) ioctl(r3, 0xc138fd03, &(0x7f0000000300)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000063") ioctl(r3, 0xc138fd0a, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 6m54.356093631s ago: executing program 4 (id=2567): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000100)=0x4, 0xcf) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000b}, 0x1c) connect(0xffffffffffffffff, &(0x7f00000003c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) ioctl(r3, 0xc138fd03, &(0x7f0000000300)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000063") ioctl(r3, 0xc138fd0a, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 6m52.888474037s ago: executing program 4 (id=2568): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000100)=0x4, 0xcf) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000b}, 0x1c) connect(0xffffffffffffffff, &(0x7f00000003c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000300)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000063") ioctl(0xffffffffffffffff, 0xc138fd0a, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 6m47.43541776s ago: executing program 4 (id=2575): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000b}, 0x1c) connect(0xffffffffffffffff, &(0x7f00000003c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) ioctl(r3, 0xc138fd03, &(0x7f0000000300)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000063") ioctl(r3, 0xc138fd0a, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 6m44.604003539s ago: executing program 4 (id=2581): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000100)=0x4, 0xcf) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000b}, 0x1c) connect(0xffffffffffffffff, &(0x7f00000003c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) ioctl(r3, 0xc138fd03, &(0x7f0000000300)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000063") ioctl(r3, 0xc138fd0a, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 6m42.755047844s ago: executing program 4 (id=2582): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000b}, 0x1c) connect(0xffffffffffffffff, &(0x7f00000003c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) ioctl(r3, 0xc138fd03, &(0x7f0000000300)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000063") ioctl(r3, 0xc138fd0a, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 6m26.225580487s ago: executing program 32 (id=2582): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000b}, 0x1c) connect(0xffffffffffffffff, &(0x7f00000003c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) ioctl(r3, 0xc138fd03, &(0x7f0000000300)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000063") ioctl(r3, 0xc138fd0a, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 2m15.268858043s ago: executing program 5 (id=3125): socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='-29496729', 0x9) 2m15.111996946s ago: executing program 5 (id=3127): r0 = socket$inet6(0xa, 0x40000080806, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000380)=@raw=[@generic={0xb7, 0x7}, @generic={0x7b, 0xa, 0x7, 0xfff0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x5}, @generic={0xb7, 0x4}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x63}, @generic={0x15, 0x0, 0x0, 0x2}, @generic={0xbf, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x56}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvfrom$inet6(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, 0x0, &(0x7f0000000000)=0x46) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000080)=""/222, 0xde}], 0x1, 0x0, 0x0) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000240)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000180)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x0, 0x9, 0x8000, 0xfffffffffffffff9, 0x5]}, &(0x7f0000000200)=0x78) 2m13.173830113s ago: executing program 5 (id=3138): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private2, 0x9, 0x0, 0x3, 0x1, 0xe, 0x1124}, 0x17) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) (fail_nth: 1) 2m12.548161618s ago: executing program 5 (id=3140): r0 = syz_open_procfs(0x0, &(0x7f0000000a00)='net/ip_mr_vif\x00') preadv(r0, &(0x7f0000000b00)=[{&(0x7f0000000b40)=""/240, 0xf0}], 0x1, 0x47, 0x0) r1 = syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x400, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6c733d63703934392c747970653d98acdea62c706172743d3078303030303030303030303030303030392c706172743d3078303030303030303030303030303030392c006aab960ff871157ad9829d78441dcbd74703f7f4f183f37a71d1e3a5b29b97b292de7757e5d96bbd95b8305d44fb13c3420e95005c4f0367d7ab52950985d1ef83269831a9ea85ca252cd0e597f438bc31b28b17847cb2d5d946a9c21f2a33033aa7e6d4a817af24af2b8104650892379f1d6cb67d4e95612b4cfe4451478fd67df42bfb7598445cddbd373bed54add16a23caecd95604d90bb5247a814b6648217199817126"], 0x1, 0x5f1, &(0x7f00000003c0)="$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") r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000a80)='connect aa:aa:aa:aa:aa:11 1', 0x1b) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x28, r4, 0x5d79819b546232f1, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000011}, 0x4008010) r5 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./file1\x00', 0x2c41, 0x0) flock(r5, 0x5) unlinkat(r1, &(0x7f0000000ac0)='./file0\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountstats\x00') lseek(r6, 0x400, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000) socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/rdma_cm/syz0\x00', 0x1ff) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000140)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f00000000c0)={{@any, 0xffffffff}, 0x0, 0x1, 0x10001}) 2m12.305692834s ago: executing program 5 (id=3142): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (fail_nth: 1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)={0x2, 0x0, [{0x58000, 0xb0, &(0x7f0000000600)=""/176}, {0x0, 0x0, 0x0}]}) 2m11.872283734s ago: executing program 5 (id=3143): setns(0xc9, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x2, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x400000000920, 0x12) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000100)={0x3, 0x1, 0x0}) (async) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000100)={0x3, 0x1, 0x0}) r2 = syz_clone3(&(0x7f00000001c0)={0x12b303180, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, {r1}}, 0xfffffffffffffec2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) (async) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x561002, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x561002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x2, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0x2, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000300)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x143102) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2) (async) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) chdir(&(0x7f0000000480)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlink(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x103042, 0x0) r4 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000222000/0x1000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmctl$SHM_UNLOCK(r4, 0xc) r5 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x1001000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r2, 0x0, 0x0, &(0x7f0000000700)) (async) waitid(0x0, r2, 0x0, 0x0, &(0x7f0000000700)) connect$inet(r5, &(0x7f00000007c0)={0x2, 0x4e20, @loopback}, 0x10) (async) connect$inet(r5, &(0x7f00000007c0)={0x2, 0x4e20, @loopback}, 0x10) 2m11.61821065s ago: executing program 33 (id=3143): setns(0xc9, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x2, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x400000000920, 0x12) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000100)={0x3, 0x1, 0x0}) (async) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000100)={0x3, 0x1, 0x0}) r2 = syz_clone3(&(0x7f00000001c0)={0x12b303180, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, {r1}}, 0xfffffffffffffec2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) (async) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x561002, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x561002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x2, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0x2, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000300)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x143102) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2) (async) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) chdir(&(0x7f0000000480)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlink(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x103042, 0x0) r4 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000222000/0x1000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmctl$SHM_UNLOCK(r4, 0xc) r5 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x1001000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r2, 0x0, 0x0, &(0x7f0000000700)) (async) waitid(0x0, r2, 0x0, 0x0, &(0x7f0000000700)) connect$inet(r5, &(0x7f00000007c0)={0x2, 0x4e20, @loopback}, 0x10) (async) connect$inet(r5, &(0x7f00000007c0)={0x2, 0x4e20, @loopback}, 0x10) 29.690052938s ago: executing program 2 (id=3505): syz_ublk_setup_io_uring(0x4c5b, &(0x7f00000024c0)={0x0, 0x3e07, 0x0, 0x3, 0x2a8}, 0x0, &(0x7f0000000280), &(0x7f0000000140)) fsopen(0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000480)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000b00)={0x2, 0x0, {&(0x7f0000000b80)=""/82, 0xfffffffffffffdb1, 0x0, 0x1, 0x2}}, 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103"], 0x0) syz_open_dev$evdev(&(0x7f0000000400), 0x4, 0x6443) 28.990029095s ago: executing program 2 (id=3510): setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000040)=[0xee00]) setregid(r0, r0) r1 = fsopen(&(0x7f00000010c0)='configfs\x00', 0x0) capset(&(0x7f00000011c0)={0x20071026}, &(0x7f0000001200)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001240), 0x0, 0x840) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001300)="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", 0x266}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000001580)="120000001200e7ef007b00000000230000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002c00)=ANY=[@ANYBLOB="140064b8f56ae52e2988fff5000000000a00000a20000000000a01080000000000000000010000090900010073797a310000000054000000030a030000000000000000000100000a0900010073797a31000000000900030073797a300000000028000480080002401501ad7d14000300090000000000000072745f7769666900080001"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000002d40)=ANY=[@ANYBLOB="1400000010000100fefffff5000000000a00000a20000000000a01080000000000000000010000090900010073797a310008000070000000030a010400000000000000000100000a0900010073797a31000000000900030073797a300000000028000480080002401501ad7d140004"], 0xb8}, 0x1, 0x0, 0x0, 0x200009c4}, 0x340040c1) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000001140)={0x9, 0xfffffffe}, 0x10) 27.807633704s ago: executing program 2 (id=3515): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) pwritev(r2, &(0x7f0000000180)=[{0x0}, {&(0x7f00000001c0)="6ff15058c7", 0x5}], 0x2, 0x8, 0x7ff) ioctl$COMEDI_SETWSUBD(r2, 0x6411) ioctl$I2C_SLAVE_FORCE(r0, 0x706, 0x278) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) recvmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)=""/121, 0x79}, {&(0x7f00000006c0)=""/4103, 0x1007}, {&(0x7f0000001700)=""/191, 0xbf}, {&(0x7f00000017c0)=""/87, 0x57}, {&(0x7f0000001840)=""/131, 0x83}, {&(0x7f0000001900)=""/107, 0x6b}, {&(0x7f0000001980)=""/80, 0x50}, {&(0x7f0000001a00)=""/176, 0xb0}], 0x8}}], 0x1, 0x100a0, 0x0) (async) recvmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)=""/121, 0x79}, {&(0x7f00000006c0)=""/4103, 0x1007}, {&(0x7f0000001700)=""/191, 0xbf}, {&(0x7f00000017c0)=""/87, 0x57}, {&(0x7f0000001840)=""/131, 0x83}, {&(0x7f0000001900)=""/107, 0x6b}, {&(0x7f0000001980)=""/80, 0x50}, {&(0x7f0000001a00)=""/176, 0xb0}], 0x8}}], 0x1, 0x100a0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b40)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x44000) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c0016800800", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c0016800800", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESHEX=r1, @ANYRESHEX=r5, @ANYRESDEC=r5], 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4000084) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 27.344152705s ago: executing program 2 (id=3519): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x9, &(0x7f00000000c0)=[{0x401, 0x8, 0x8, 0x6}, {0x2000, 0x7, 0x0, 0x3}, {0x401, 0x9, 0x4}, {0x800, 0x8, 0x7, 0x7}, {0x5, 0x0, 0x40, 0xffffffff}, {0x4, 0x6, 0x47, 0x8}, {0x4, 0x8, 0x6, 0x8}, {0x3, 0x80, 0xb0, 0x5}, {0x2, 0x45, 0xd6, 0x8}]}) setsockopt$inet_int(r0, 0x0, 0x33, 0x0, 0x0) r1 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f00000001c0)) syz_mount_image$ext4(&(0x7f0000001300)='ext4\x00', &(0x7f0000001340)='./bus\x00', 0x200000, &(0x7f0000001380)={[{@test_dummy_encryption_v1}, {@init_itable}, {@dioread_lock}]}, 0x3, 0x46a, &(0x7f00000013c0)="$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") r4 = syz_open_dev$evdev(&(0x7f00000018c0), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f00000019c0)={0xf5, 0x1, 0xfff6, 0x5, "b71a5dc6edac9d0aeec241b2d9b0a66dcf03f39339fc86ff7374bfecbf3d3d82"}) syz_mount_image$vfat(&(0x7f0000001840), &(0x7f0000001880)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f00000018c0)) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x5) chdir(&(0x7f0000001900)='./bus\x00') syz_mount_image$hfsplus(&(0x7f0000001940), &(0x7f0000001980)='./file1\x00', 0x3200014, &(0x7f00000019c0)=ANY=[], 0x1, 0x625, &(0x7f0000001a00)="$eJzs3U9oHNcdB/DvrFay5IKjJHZiSqAihrRU1NYflFa92C2l6BBKSA+9VthyLLxWgqQUJYdW/X/tIddCetCtp0Lvhvbc3HLVMVDoJSdBDyozO7ta2autLNvSKvl8zNv33r437735zcyudhczAb6ylqbTfJgiS9NvbZX1n+/Mt3Z35i/Uza0kZbmRNNtZirWk+efkVtopoz3DFUfN8/Hq4juffbH7ebvWrFPVv3F4iJPYrlOmkozUebJ/4XC3AdPs7x853u3ueCdVdCNTBuxamW8/1YDwbOw/pnNm/vc4mx95vQPnR9F+33zMZHIxyXj9d0DqV4fG6a7u2fP+CwAAwFfBC3vZy1YunfU6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Dyp7/9f1KnRKU+l6Nz/f6x+LnX5nCkO1R6e2ToAAAAAAAAA4Nn5xl72spVLnfp+Uf3m/3pVuVw9fi0fZCMrWc/1bGU5m9nMemaTTPYMNLa1vLm5PnuMLef6bjl3OvsLAAAAAAAAAOfHzSfp/JssHfz+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw6BIRtpZlS53ypNpNJOMJxkr+20nn3bK59nDs14AAAAAnIIX9rKXrVzq1PeL6jP/K9Xn/vF8kLVsZjWbaWUld6rvAtqf+hu7O/Ot3Z35B2V6fNwf/OeJllGNmPZ3D/1nvlr1mMjdrFbPXM/tvJdW7qRRbVm62llP/3X9ulxTcbOtOObK7tR52f9PdT4cJquIjHYjMlOvrYzGi4Mj8YRH59GZZtPofvNz+dGZRg5teijmN48538U6L/fnD0Md87n67Pu0vGYGxzz55t//+rN7rbX79+5uTA/PLp1QHYntZh2J+Z7r8NVzGonRE201U0XiSre+lB/np5nOVN7e/1WSX2Q5m1nJVH5UlZZTdM/oycGRunWo9vb/W8lYfVzal+ARa8p6Vvus6fVq20tZzU/yXu5kJW9W/+Yym+9mIQtZ7DnCV47xStt4sqv+2rfqwkSSP9b5MBit4vpiT1x7X3Mnq7beZw6i9NLRUSpO+NrY/HpdKOf4bZ0Ph0cjMdsTiZcHny9/2S8fN1pr99fvLb9/zPneqPMylL8fqneJ8nx5qTxYVe3w2VG2vdy3bbZqu9xtazzWdqXb1vdKXe/Mv1j1fqXvSHNV26t92+artqs9bf3+3gJg6F389sWxiX9P/Gvik4nfTdybeGv8hxe+d+G1sYz+c/T7zZmRNxqvFX/LJ/nlwed/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg5DY+/Oj+cqu1sj6g0LnBzqA+T1so6hv5PMcpFIaskPGhWMbzLDQzFMs40dEBvuRubD54/8bGhx99Z/XB8rsr766sjS4sLM4sLrw5f+Puamtlpv141qsEnoeDN/2zXgkAAAAAAAAAAABwXKfx3wnOeh8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA821pOs2HKTI7c32mrO/uzLfK1Ckf9GwmaSTjZbn4R3Ir7ZTJnuGKo+b5eHXxnc++2P38YKxmp39j0HZ9jT76xHadMpVkpM6fwqHxbj/1eEV3D8uAXesEDs7a/wIAAP//XHoJeA==") syz_mount_image$vfat(&(0x7f0000002040), &(0x7f0000002080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1216815, 0x0, 0x60, 0x0, &(0x7f0000002180)) syz_mount_image$vfat(&(0x7f00000021c0), &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000002300)) open(&(0x7f0000002340)='./bus\x00', 0x14507e, 0x0) mkdir(&(0x7f0000002380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xd0939199c36b4d28) syz_mount_image$vfat(&(0x7f0000002480), &(0x7f00000026c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x286000c, 0x0, 0xd8, 0x0, &(0x7f00000025c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./file1\x00', 0x143041, 0x181) pwritev2(r5, &(0x7f0000002640), 0x0, 0xe7b, 0x92c9, 0x0) r6 = open(&(0x7f0000002680)='./file1\x00', 0x105142, 0x100) sendfile(r6, r6, 0x0, 0x7a680000) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000200)={0x0, 0x0, 0x10001, 0xb0c}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000240)={{}, {0x0, 0x989680}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x1, &(0x7f00000012c0)=0x3, 0x4) read(r2, &(0x7f0000000280)=""/4106, 0x100a) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000080)={0x29, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x1, 'sed\x00', 0xa, 0x5, 0x3d}, 0x2c) 26.219154273s ago: executing program 2 (id=3521): r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) syz_usb_connect(0x5, 0x777, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001ae0cf020bf0a7033c89a010203010902650703040520010904"], 0x0) write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x420c03, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x802, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000240)={@broadcast, @random="80cc03df2bac", @void, {@ipv4={0x8906, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x64, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c0214201001100005efefd7f1afca8f60ffc0e896f38da00", "0b3d22b336984ffb47476e10c3ae64b1", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc660b8cd26e095f24ab642591"}}}}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) 25.90810024s ago: executing program 3 (id=3522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xf92b}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c040}, 0x8004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) getsockopt$inet_sctp_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000180)={0x2, 0x1}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={r4, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x6, @mcast1, 0x6}]}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000300)={0x1, [0x0]}, &(0x7f0000000340)=0x8) syz_open_dev$sndmidi(&(0x7f0000000440), 0x6, 0x20000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000380)={r6, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x83}, 0x90) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x8850) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000600)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000640)={r6, @in6={{0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x21}}, 0x400, 0x9}, &(0x7f0000000700)=0x90) 25.541464749s ago: executing program 2 (id=3523): fsopen(&(0x7f00000000c0)='exfat\x00', 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000005c0)={'syzkaller1\x00', 0xc201}) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/igmp\x00') pread64(r2, &(0x7f0000000640)=""/43, 0xfd8a, 0x3c) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000006c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000002000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 25.352028514s ago: executing program 3 (id=3525): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/nexus\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='naa.', 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x3c, r1, 0x6ae3e61d32b8162b, 0xffffffff, 0x5, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x134, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x9d, 0xa9, @random="73f4ce2b575f64952a72a5cc2ab5065fb858c6ad708aaaa47e6924a52cbe8798b7441109586e8a566d0edc902649af2bc3cd86ba6ca3a99f89c995b1676f8d2a65e21377846ed5658786e3c5e8b97fd50acb9279dda5fc693d12f810c0224417cb23ae0a62c65555b2f90df58f5ccc2f752de8493724384e83379e68f93f28ec08f626c4d44e2c87038e47613cb50701ce69ee8f4e63ff683f"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xa82c}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x134}}, 0x24008000) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtfilter={0x484, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x454, 0x2, [@TCA_BASIC_POLICE={0xfffffffffffffdb9, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x29}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0x217, 0x1000, 0x99, 0x6, 0x6, 0x7, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x8092, 0x7, 0x4, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x2, 0x0, 0x3, 0x2, 0x4, 0x0, 0xd010, 0xffffff0b, 0x2, 0x1, 0x400, 0x8, 0x1, 0x3, 0x228, 0x29, 0x80000001, 0x7000000, 0x1, 0xffff, 0x7, 0xf, 0xd, 0x9, 0x9, 0x7, 0x7, 0x10, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x6, 0x7, 0x5, 0x4, 0x100, 0x0, 0x3, 0x9, 0x5, 0x80000001, 0x10, 0x2, 0x9, 0x9, 0x7ff, 0x401, 0x8, 0x8, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x5, 0x7fff, 0x100, 0x76, 0x9, 0xc, 0xf, 0x50, 0x0, 0xffffffff, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0x8, 0xd, 0x6, 0xffffffc0, 0x7, 0x101, 0x8, 0x3, 0x7066211e, 0x2, 0x6, 0x5, 0x3, 0x5, 0x8, 0x400, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x80000000, 0x3, 0x9, 0x8, 0x0, 0x40, 0x2, 0xfffff801, 0x6, 0x7, 0xcc0, 0xfffffff4, 0x8, 0x5, 0x9, 0x9, 0x5, 0x17, 0x1, 0x0, 0x400, 0x9, 0x5, 0x100, 0xffff8000, 0x2, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x5, 0xfffffffb, 0x8, 0x4, 0x24, 0x3, 0x0, 0x3ff, 0x4, 0xdd5, 0x7fffffff, 0x10000000, 0xffffffff, 0x1, 0xe0000000, 0x3, 0x8, 0x6, 0x4, 0x2, 0x80, 0x4, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x3b326896, 0x495, 0x52, 0x8, 0x3, 0x1, 0x101, 0x4, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x52b, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x4, 0xa4, 0x7, 0xd, 0x7f, 0x864, 0xfa, 0x0, 0x81, 0x0, 0x9, 0x1, 0x0, 0x3, 0x3, 0x6, 0xd, 0x1, 0x42, 0x81, 0x9, 0x101, 0x8, 0x7, 0x4, 0x3, 0x7, 0xfff, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0xffffffffffffffff, 0x1, 0x9, 0xef, {0x2, 0x1, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x1, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x484}}, 0x0) getpeername$packet(r0, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a80)=0x14) getsockname$packet(r0, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b00)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000b40)={@dev}, &(0x7f0000000b80)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000bc0)) 24.840660886s ago: executing program 3 (id=3529): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000100), 0x10) 24.66686282s ago: executing program 3 (id=3531): mkdir(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file7\x00', 0x0, &(0x7f0000000240), 0x1, 0x507, &(0x7f0000000280)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000007c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = syz_open_dev$evdev(&(0x7f0000000d40), 0x0, 0x40) ioctl$EVIOCGSND(r1, 0x8040451a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000800)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r2, 0x0) syz_mount_image$vfat(&(0x7f0000000840), &(0x7f0000000880)='./bus\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="73686f72746e3d312c696f636861727365743d6d616363656e746575726f2c757466383d312c757466383d312c696f636861727365743d63833934392c6e66732c756e695f786c6174653d302c756e695f786c6174653d302c757466383d302c726f6469722c757466383d312c757466383d302c73686f72746e616d653d6d697865642c696f636861727365743d6d6163677265656b2c00"/166], 0x0, 0x37c, &(0x7f0000000980)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000d00)='.\x00', 0x8880, 0x85) getdents64(r3, 0x0, 0x4f) mount(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140)='smb3\x00', 0x10000, &(0x7f0000000180)='nocase') syz_mount_image$ext4(&(0x7f0000000d80)='ext3\x00', &(0x7f0000000dc0)='./file0\x00', 0x2, &(0x7f0000000e00)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000e80)="$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") r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000001300)={'syz', 0x1}) prlimit64(0x0, 0xe, &(0x7f0000001340)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001380)=0x7) r5 = getpid() syz_clone3(&(0x7f0000001a00)={0x20000000, &(0x7f00000013c0), &(0x7f00000014c0)=0x0, &(0x7f0000001500), {0x1f}, &(0x7f00000017c0)=""/215, 0xd7, &(0x7f00000018c0)=""/243, &(0x7f00000019c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5, r5], 0xa, {r4}}, 0x58) sched_setscheduler(r6, 0x2, &(0x7f0000000080)=0x40007) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000001780)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000001600)="e6a724780f6f84adbf72233836b3aed840a534cd1910410ce9ec67a720b1a15945c82b5a842c9a09244a2d61d4fb10a2a18fb198473868f946652b8f9662679dfea829f7a44366b6b2d08a1e5d82ef070f8b5ac1fc34a0ec99a4282d96a82f8e9fae67761939c085906371864734c02f364fec8f69d54bc29a9ed6c5e368ff766540a635c3184d2a4634233868a2ba9fd1e535f1656fad4da8274f1a82618c04f0e01d8a307db5c43a77221655f7ee3cf7c2fc9e71b47ca93c3d1bcb47f7163d5ea58dd24e8fab12cb053d8716ca3cb3be0e14a885178e3e1396a8dca58e", 0xde}], 0x1, &(0x7f0000001740)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="02005887"], 0x20, 0x20001800}}], 0x1, 0x10) 22.952896712s ago: executing program 3 (id=3537): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={0x0}}, 0x4048890) 21.875716968s ago: executing program 3 (id=3538): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/nexus\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='naa.', 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x3c, r1, 0x6ae3e61d32b8162b, 0xffffffff, 0x5, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x134, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x9d, 0xa9, @random="73f4ce2b575f64952a72a5cc2ab5065fb858c6ad708aaaa47e6924a52cbe8798b7441109586e8a566d0edc902649af2bc3cd86ba6ca3a99f89c995b1676f8d2a65e21377846ed5658786e3c5e8b97fd50acb9279dda5fc693d12f810c0224417cb23ae0a62c65555b2f90df58f5ccc2f752de8493724384e83379e68f93f28ec08f626c4d44e2c87038e47613cb50701ce69ee8f4e63ff683f"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xa82c}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x134}}, 0x24008000) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtfilter={0x484, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x454, 0x2, [@TCA_BASIC_POLICE={0xfffffffffffffdb9, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x29}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0x217, 0x1000, 0x99, 0x6, 0x6, 0x7, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x8092, 0x7, 0x4, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x2, 0x0, 0x3, 0x2, 0x4, 0x0, 0xd010, 0xffffff0b, 0x2, 0x1, 0x400, 0x8, 0x1, 0x3, 0x228, 0x29, 0x80000001, 0x7000000, 0x1, 0xffff, 0x7, 0xf, 0xd, 0x9, 0x9, 0x7, 0x7, 0x10, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x6, 0x7, 0x5, 0x4, 0x100, 0x0, 0x3, 0x9, 0x5, 0x80000001, 0x10, 0x2, 0x9, 0x9, 0x7ff, 0x401, 0x8, 0x8, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x5, 0x7fff, 0x100, 0x76, 0x9, 0xc, 0xf, 0x50, 0x0, 0xffffffff, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0x8, 0xd, 0x6, 0xffffffc0, 0x7, 0x101, 0x8, 0x3, 0x7066211e, 0x2, 0x6, 0x5, 0x3, 0x5, 0x8, 0x400, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x80000000, 0x3, 0x9, 0x8, 0x0, 0x40, 0x2, 0xfffff801, 0x6, 0x7, 0xcc0, 0xfffffff4, 0x8, 0x5, 0x9, 0x9, 0x5, 0x17, 0x1, 0x0, 0x400, 0x9, 0x5, 0x100, 0xffff8000, 0x2, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x5, 0xfffffffb, 0x8, 0x4, 0x24, 0x3, 0x0, 0x3ff, 0x4, 0xdd5, 0x7fffffff, 0x10000000, 0xffffffff, 0x1, 0xe0000000, 0x3, 0x8, 0x6, 0x4, 0x2, 0x80, 0x4, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x3b326896, 0x495, 0x52, 0x8, 0x3, 0x1, 0x101, 0x4, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x52b, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x4, 0xa4, 0x7, 0xd, 0x7f, 0x864, 0xfa, 0x0, 0x81, 0x0, 0x9, 0x1, 0x0, 0x3, 0x3, 0x6, 0xd, 0x1, 0x42, 0x81, 0x9, 0x101, 0x8, 0x7, 0x4, 0x3, 0x7, 0xfff, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0xffffffffffffffff, 0x1, 0x9, 0xef, {0x2, 0x1, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x1, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x484}}, 0x0) getpeername$packet(r0, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a80)=0x14) getsockname$packet(r0, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b00)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000b40)={@dev}, &(0x7f0000000b80)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000bc0)) 21.596281965s ago: executing program 34 (id=3538): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/nexus\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='naa.', 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x3c, r1, 0x6ae3e61d32b8162b, 0xffffffff, 0x5, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x134, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x9d, 0xa9, @random="73f4ce2b575f64952a72a5cc2ab5065fb858c6ad708aaaa47e6924a52cbe8798b7441109586e8a566d0edc902649af2bc3cd86ba6ca3a99f89c995b1676f8d2a65e21377846ed5658786e3c5e8b97fd50acb9279dda5fc693d12f810c0224417cb23ae0a62c65555b2f90df58f5ccc2f752de8493724384e83379e68f93f28ec08f626c4d44e2c87038e47613cb50701ce69ee8f4e63ff683f"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xa82c}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x134}}, 0x24008000) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtfilter={0x484, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x454, 0x2, [@TCA_BASIC_POLICE={0xfffffffffffffdb9, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x29}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0x217, 0x1000, 0x99, 0x6, 0x6, 0x7, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x8092, 0x7, 0x4, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x2, 0x0, 0x3, 0x2, 0x4, 0x0, 0xd010, 0xffffff0b, 0x2, 0x1, 0x400, 0x8, 0x1, 0x3, 0x228, 0x29, 0x80000001, 0x7000000, 0x1, 0xffff, 0x7, 0xf, 0xd, 0x9, 0x9, 0x7, 0x7, 0x10, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x6, 0x7, 0x5, 0x4, 0x100, 0x0, 0x3, 0x9, 0x5, 0x80000001, 0x10, 0x2, 0x9, 0x9, 0x7ff, 0x401, 0x8, 0x8, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x5, 0x7fff, 0x100, 0x76, 0x9, 0xc, 0xf, 0x50, 0x0, 0xffffffff, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0x8, 0xd, 0x6, 0xffffffc0, 0x7, 0x101, 0x8, 0x3, 0x7066211e, 0x2, 0x6, 0x5, 0x3, 0x5, 0x8, 0x400, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x80000000, 0x3, 0x9, 0x8, 0x0, 0x40, 0x2, 0xfffff801, 0x6, 0x7, 0xcc0, 0xfffffff4, 0x8, 0x5, 0x9, 0x9, 0x5, 0x17, 0x1, 0x0, 0x400, 0x9, 0x5, 0x100, 0xffff8000, 0x2, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x5, 0xfffffffb, 0x8, 0x4, 0x24, 0x3, 0x0, 0x3ff, 0x4, 0xdd5, 0x7fffffff, 0x10000000, 0xffffffff, 0x1, 0xe0000000, 0x3, 0x8, 0x6, 0x4, 0x2, 0x80, 0x4, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x3b326896, 0x495, 0x52, 0x8, 0x3, 0x1, 0x101, 0x4, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x52b, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x4, 0xa4, 0x7, 0xd, 0x7f, 0x864, 0xfa, 0x0, 0x81, 0x0, 0x9, 0x1, 0x0, 0x3, 0x3, 0x6, 0xd, 0x1, 0x42, 0x81, 0x9, 0x101, 0x8, 0x7, 0x4, 0x3, 0x7, 0xfff, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0xffffffffffffffff, 0x1, 0x9, 0xef, {0x2, 0x1, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x1, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x484}}, 0x0) getpeername$packet(r0, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a80)=0x14) getsockname$packet(r0, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b00)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000b40)={@dev}, &(0x7f0000000b80)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000bc0)) 15.080723633s ago: executing program 6 (id=3567): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/disk\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='test_resume\n', 0xc) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/power/state\x00', 0x1, 0x0) close(r2) 14.726438812s ago: executing program 6 (id=3568): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/agpgart-amd64\x00', 0x0, 0x0) 14.41619334s ago: executing program 6 (id=3570): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='0\x00', 0x1) write(r0, &(0x7f0000000400)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/event_source/devices/cpu/freeze_on_smi\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='0\x00', 0x1) write(r1, &(0x7f0000000700)='1\x00', 0x1) 14.415802569s ago: executing program 1 (id=3571): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newsa={0x148, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0xffff, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x4d2, 0x32}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x58, 0x2, {{'cbc(serpent)\x00'}, 0x80, "000102030405060708090a0b0c0d0e0f"}}]}, 0x148}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0xffff, 0x0, 0x0, 0xa, 0x80, 0x80}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x32}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000200)={&(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="200000000000000029000000360000000001000000000000c00400000000010020"], 0x40}, 0x0) 13.835912704s ago: executing program 6 (id=3572): write(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1) 13.684183957s ago: executing program 6 (id=3573): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aria-aesni-avx\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aria-avx2\x00'}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'aria-aesni-avx\x00'}, 0x58) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'cipher\x00', 0x0, 0x0, 'aria-aesni-avx\x00'}, 0x58) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aria-aesni-avx)\x00'}, 0x58) 13.318590946s ago: executing program 1 (id=3575): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm_intel/parameters/enable_apicv\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/16, 0x10) 13.196356959s ago: executing program 6 (id=3576): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/page_tables/current_kernel\x00', 0x0, 0x0) read(r0, &(0x7f0000000600)=""/1, 0x1) close(r0) 13.105507432s ago: executing program 1 (id=3578): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@code={0xa, 0x1d, {"48c704250000c00011223344"}}, @uexit={0x0, 0x18, 0x1}], 0x35}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') write(r5, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) write(r6, &(0x7f0000000340)='0\x00', 0x1) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) sched_yield() 12.996400414s ago: executing program 0 (id=3579): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 12.927998065s ago: executing program 0 (id=3580): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) 12.859161897s ago: executing program 0 (id=3581): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0\x00', 0x1) 12.594441904s ago: executing program 0 (id=3582): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) 11.464877261s ago: executing program 0 (id=3583): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='devices', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='0', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/power/state\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='mem', 0x3) 11.346883164s ago: executing program 1 (id=3584): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000060)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='devtmpfs\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000e0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='on\n', 0x3) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000280)="ed7f000000000000", 0x8, 0x280) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='0\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)='1\n', 0x2) close(r4) 10.924649885s ago: executing program 1 (id=3585): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='0\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='devices\n', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='mem\n', 0x4) close(r2) 65.521168ms ago: executing program 1 (id=3586): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sysrq-trigger\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='0\x00', 0x1) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/kernel/parameters/panic_on_warn\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='0\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/module/phram/parameters/phram\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='test,0x8000000000000000,0x1000\x00', 0x1e) close(r2) 0s ago: executing program 0 (id=3587): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/kernel/kexec_crash_size\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/100, 0x64) kernel console output (not intermixed with test programs): : 00007fe0dac5b270 RCX: 00007fe0da9d3559 [ 1241.584151][T16762] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000003 [ 1241.592204][T16762] RBP: 00007fe0d8bc8090 R08: 0000000000000000 R09: 0000000000000000 [ 1241.600231][T16762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1241.608239][T16762] R13: 00007fe0dac5b308 R14: 00007fe0dac5b270 R15: 00007fffdc5fe288 [ 1241.616365][T16762] [ 1241.621882][ T4261] Bluetooth: hci1: command 0x040f tx timeout [ 1241.752668][T16753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3164'. [ 1241.772582][T16753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3164'. [ 1241.825221][T16760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3165'. [ 1241.841230][T16760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3165'. [ 1241.878117][T16647] chnl_net:caif_netlink_parms(): no params data found [ 1242.368084][ C0] net_ratelimit: 44 callbacks suppressed [ 1242.378626][T16647] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.385891][T16647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.394408][T16647] device bridge_slave_0 entered promiscuous mode [ 1242.411068][T16647] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.418380][T16647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.428189][T16647] device bridge_slave_1 entered promiscuous mode [ 1242.610174][T16647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1242.678705][T16647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1243.648173][ T4261] Bluetooth: hci1: command 0x0419 tx timeout [ 1243.854413][T16647] team0: Port device team_slave_0 added [ 1243.888252][ T4174] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1243.952164][T16647] team0: Port device team_slave_1 added [ 1244.157881][T16647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1244.207392][T16647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1244.321458][T16647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1244.383957][T16647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1244.437498][T16647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1244.474618][ T4174] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 1244.488347][ T4174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.510749][ T4174] usb 2-1: Product: syz [ 1244.524924][ T4174] usb 2-1: Manufacturer: syz [ 1244.537318][ T4174] usb 2-1: SerialNumber: syz [ 1244.556948][T16647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1244.639410][ T4174] usb 2-1: NFC: intf ffff888062440000 id ffffffff8d963720 [ 1244.706933][ T4174] nfcmrvl 2-1:1.0: NFC: registered with nci successfully [ 1244.894834][T16647] device hsr_slave_0 entered promiscuous mode [ 1244.918607][T16647] device hsr_slave_1 entered promiscuous mode [ 1244.969508][T16647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1244.977284][T16647] Cannot create hsr debugfs directory [ 1245.048251][ T4174] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 1245.298997][ T1276] nfcmrvl 2-1:1.0: NFC: send entry, len 4 [ 1245.318277][ C0] nfcmrvl 2-1:1.0: NFC: urb ffff88802011fa00 status 0 count 0 [ 1245.444345][ T4174] usb 4-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1245.499614][ T4174] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1245.506607][ T4174] usb 4-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 1245.590065][ T4174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.663257][ T4174] usb 4-1: config 0 descriptor?? [ 1246.174993][ T4174] waltop 0003:172F:0500.0001: unbalanced collection at end of report description [ 1246.194467][ T4174] waltop: probe of 0003:172F:0500.0001 failed with error -22 [ 1246.347308][T16792] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1246.459962][T16838] loop3: detected capacity change from 0 to 128 [ 1246.500330][T16647] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1246.645245][ T7] usb 2-1: USB disconnect, device number 127 [ 1246.660427][ T7] usb 2-1: NFC: intf ffff888062440000 [ 1246.669294][T16838] affs: Error parsing options [ 1246.712766][T16647] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1247.034895][T16647] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1247.166267][T16647] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1247.303588][T13770] usb 4-1: USB disconnect, device number 3 [ 1247.568224][ T9196] net_ratelimit: 31 callbacks suppressed [ 1248.024402][T16856] input: syz0 as /devices/virtual/input/input5 [ 1248.183924][T16647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1248.337759][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1248.369020][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1248.392438][T16647] 8021q: adding VLAN 0 to HW filter on device team0 [ 1248.464472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1248.495538][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1248.545788][T16879] loop3: detected capacity change from 0 to 164 [ 1248.567274][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.574440][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1248.670291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1248.906200][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1248.913322][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1248.985292][T16891] rock: directory entry would overflow storage [ 1248.992480][T16891] rock: sig=0x4f50, size=4, remaining=3 [ 1248.998235][T16891] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1249.204617][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1249.458224][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1249.544774][ T4398] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.552005][ T4398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1249.825665][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1249.835928][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1249.856503][T16872] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1249.908097][T16872] pimreg1: linktype set to 270 [ 1249.913274][ T7] usb 4-1: no configurations [ 1249.917937][ T7] usb 4-1: can't read configurations, error -22 [ 1249.938714][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1249.944468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1249.987385][T16872] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1250.015842][T16872] pimreg1: linktype set to 270 [ 1250.055537][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1250.072198][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1250.078349][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1250.124582][T16872] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1250.151322][T16872] pimreg1: linktype set to 270 [ 1250.177946][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1250.228201][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1250.298627][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1250.329242][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1250.338853][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1250.344621][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1250.358484][ T7] usb 4-1: no configurations [ 1250.363154][ T7] usb 4-1: can't read configurations, error -22 [ 1250.378455][ T7] usb usb4-port1: attempt power cycle [ 1250.388261][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1250.394272][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1250.406045][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1250.418514][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1250.427842][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1250.437511][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1250.456627][T16647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1250.482171][T16647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1250.498558][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1250.505041][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1250.524504][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1250.545579][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1250.574159][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1250.590967][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1250.628557][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1250.644011][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1250.674634][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1250.690946][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1250.715727][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1250.746182][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1250.764371][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1250.801857][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1250.824802][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1250.848425][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1250.858245][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1250.887858][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1250.908855][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1250.938732][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1250.944587][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1250.978578][ T7] usb 4-1: no configurations [ 1250.983314][ T7] usb 4-1: can't read configurations, error -22 [ 1251.038557][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1251.044348][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1251.058402][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1251.086354][T16869] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1251.096187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1251.114908][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1251.148204][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1251.204987][T16647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1251.288467][ T7] usb 4-1: no configurations [ 1251.293127][ T7] usb 4-1: can't read configurations, error -22 [ 1251.318795][ T7] usb usb4-port1: unable to enumerate USB device [ 1251.855760][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1251.878732][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1251.924894][T16947] loop3: detected capacity change from 0 to 64 [ 1252.020889][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1252.029908][T16947] MINIX-fs: bad superblock [ 1252.060660][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1252.099383][T16647] device veth0_vlan entered promiscuous mode [ 1252.118091][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1252.141748][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1252.215157][T16647] device veth1_vlan entered promiscuous mode [ 1252.256453][T16939] ubi16: attaching mtd0 [ 1252.289283][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1252.300202][T16939] ubi16: scanning is finished [ 1252.305677][T16939] ubi16: empty MTD device detected [ 1252.321719][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1252.335193][T16647] device veth0_macvtap entered promiscuous mode [ 1252.390688][T16647] device veth1_macvtap entered promiscuous mode [ 1252.462033][T16647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1252.474103][T16647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.486145][T16647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1252.528782][T16647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.574323][T16647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1252.621602][ T4398] net_ratelimit: 27 callbacks suppressed [ 1252.643057][T16647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.669238][T16939] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1252.689675][T16649] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 1252.699165][T16647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1252.757436][T16939] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1252.762018][T16647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.808132][T16939] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1252.833747][T16939] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 1252.877915][T16939] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1252.898490][T16647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1252.905903][T16939] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1252.927187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1252.937250][T16939] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2041561169 [ 1252.955022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1252.985143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1253.002775][T16939] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1253.029551][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1253.057986][T16963] ubi16: background thread "ubi_bgt16d" started, PID 16963 [ 1253.075623][T16647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1253.089708][T16649] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1253.118071][T16649] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1253.134969][T16647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.166890][T16649] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1253.177001][T16647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1253.203388][T16649] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1253.224881][T16647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.250324][T16647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1253.288341][T16647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.324884][T16647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1253.364768][T16647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.378149][T16649] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1253.399713][T16649] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1253.431296][T16647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1253.444471][T16649] usb 2-1: SerialNumber: syz [ 1253.490160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1253.521407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1253.568792][T16647] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.618283][T16647] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.627030][T16647] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.697201][T16647] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.791483][T16649] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 1253.834659][T16649] usb 2-1: USB disconnect, device number 2 [ 1254.195512][ T4398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1254.218657][ T4398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1254.273970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1254.847521][ T9196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1254.898809][ T9196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.074382][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1255.636626][T17026] loop3: detected capacity change from 0 to 128 [ 1255.719298][T17026] FAT-fs (loop3): bogus number of FAT sectors [ 1255.733955][T17026] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1256.685756][T17032] FAULT_INJECTION: forcing a failure. [ 1256.685756][T17032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1256.699623][T17032] CPU: 1 PID: 17032 Comm: syz.1.3216 Not tainted syzkaller #0 [ 1256.707365][T17032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1256.717495][T17032] Call Trace: [ 1256.720803][T17032] [ 1256.723756][T17032] dump_stack_lvl+0x188/0x250 [ 1256.728447][T17032] ? show_regs_print_info+0x20/0x20 [ 1256.733679][T17032] ? load_image+0x410/0x410 [ 1256.738220][T17032] ? __lock_acquire+0x7d40/0x7d40 [ 1256.743270][T17032] should_fail+0x383/0x4b0 [ 1256.747734][T17032] strncpy_from_user+0x32/0x350 [ 1256.752611][T17032] getname_flags+0xf2/0x4f0 [ 1256.757156][T17032] do_sys_openat2+0xdd/0x500 [ 1256.761758][T17032] ? __lock_acquire+0x7d40/0x7d40 [ 1256.766796][T17032] ? do_sys_open+0xe0/0xe0 [ 1256.771223][T17032] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1256.777232][T17032] ? lock_chain_count+0x20/0x20 [ 1256.782107][T17032] __x64_sys_openat+0x135/0x160 [ 1256.786968][T17032] do_syscall_64+0x4c/0xa0 [ 1256.791388][T17032] ? clear_bhb_loop+0x30/0x80 [ 1256.796075][T17032] ? clear_bhb_loop+0x30/0x80 [ 1256.800772][T17032] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1256.806678][T17032] RIP: 0033:0x7fe0da993d8e [ 1256.811113][T17032] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1256.831117][T17032] RSP: 002b:00007fe0d8c2ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1256.839593][T17032] RAX: ffffffffffffffda RBX: 00007fe0d8c2b6c0 RCX: 00007fe0da993d8e [ 1256.847615][T17032] RDX: 0000000000141102 RSI: 00007fe0d8c2ac00 RDI: ffffffffffffff9c [ 1256.855797][T17032] RBP: 00007fe0d8c2ac00 R08: 0000000000000000 R09: 0000000000000000 [ 1256.855822][T17032] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1256.855836][T17032] R13: 00007fe0dac5b038 R14: 00007fe0dac5afa0 R15: 00007fffdc5fe288 [ 1256.855867][T17032] [ 1257.728258][ C1] net_ratelimit: 62 callbacks suppressed [ 1258.809616][T17075] loop6: detected capacity change from 0 to 164 [ 1258.995583][T17077] overlayfs: unrecognized mount option "audit" or missing value [ 1259.216533][T17082] rock: directory entry would overflow storage [ 1259.223515][T17082] rock: sig=0x4f50, size=4, remaining=3 [ 1259.229743][T17082] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1259.699017][T13770] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1259.795826][T17085] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1260.639833][T13770] usb 7-1: no configurations [ 1260.644557][T13770] usb 7-1: can't read configurations, error -22 [ 1260.689572][T17089] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3229'. [ 1260.712851][T17089] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3229'. [ 1260.761411][T17089] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3229'. [ 1260.858287][T13770] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1260.952812][T17101] loop1: detected capacity change from 0 to 256 [ 1261.160356][T13770] usb 7-1: no configurations [ 1261.165231][T13770] usb 7-1: can't read configurations, error -22 [ 1261.181358][T13770] usb usb7-port1: attempt power cycle [ 1261.738707][T13770] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1261.918357][T13770] usb 7-1: device descriptor read/8, error -71 [ 1262.778161][ C1] net_ratelimit: 66 callbacks suppressed [ 1263.200149][T17122] loop6: detected capacity change from 0 to 4096 [ 1263.285693][T17122] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1263.392134][T17122] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1263.448222][T17122] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1263.493850][T17122] ntfs: (device loop6): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1263.596307][T17122] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1263.843933][T17122] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1264.040196][T17122] ntfs: volume version 3.1. [ 1264.151863][T17122] ntfs: (device loop6): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1264.198548][T17122] ntfs: (device loop6): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1264.318842][T17122] ntfs: (device loop6): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1264.368764][T17122] ntfs: (device loop6): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1264.718247][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1264.744540][T17148] loop3: detected capacity change from 0 to 256 [ 1265.855103][T17168] FAULT_INJECTION: forcing a failure. [ 1265.855103][T17168] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.898147][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 1265.948561][T17168] CPU: 1 PID: 17168 Comm: syz.6.3251 Not tainted syzkaller #0 [ 1265.957279][T17168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1265.957298][T17168] Call Trace: [ 1265.957309][T17168] [ 1265.957319][T17168] dump_stack_lvl+0x188/0x250 [ 1265.957352][T17168] ? show_regs_print_info+0x20/0x20 [ 1265.957376][T17168] ? load_image+0x410/0x410 [ 1265.957405][T17168] ? __might_sleep+0xf0/0xf0 [ 1265.957425][T17168] ? __lock_acquire+0x7d40/0x7d40 [ 1265.957454][T17168] should_fail+0x383/0x4b0 [ 1265.971948][T17168] should_failslab+0x5/0x20 [ 1265.979605][T17168] slab_pre_alloc_hook+0x51/0xc0 [ 1265.989772][T17168] ? shmem_match+0x160/0x160 [ 1265.999709][T17168] ? shmem_alloc_inode+0x16/0x30 [ 1265.999738][T17168] kmem_cache_alloc+0x3d/0x280 [ 1266.008915][T17168] ? shmem_match+0x160/0x160 [ 1266.008947][T17168] shmem_alloc_inode+0x16/0x30 [ 1266.019053][T17168] new_inode_pseudo+0x5f/0x210 [ 1266.019089][T17168] new_inode+0x25/0x1d0 [ 1266.019116][T17168] shmem_get_inode+0x304/0xa40 [ 1266.019157][T17168] __shmem_file_setup+0x10b/0x290 [ 1266.019181][T17168] ? shmem_file_setup+0x13/0x30 [ 1266.064761][T17168] __se_sys_memfd_create+0x290/0x450 [ 1266.070277][T17168] ? __x64_sys_memfd_create+0x60/0x60 [ 1266.070312][T17168] ? lockdep_hardirqs_on+0x94/0x140 [ 1266.070342][T17168] do_syscall_64+0x4c/0xa0 [ 1266.070362][T17168] ? clear_bhb_loop+0x30/0x80 [ 1266.081979][T17168] ? clear_bhb_loop+0x30/0x80 [ 1266.082015][T17168] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1266.082040][T17168] RIP: 0033:0x7fdf82f16559 [ 1266.091684][T17168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1266.102812][T17168] RSP: 002b:00007fdf8116de08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1266.102846][T17168] RAX: ffffffffffffffda RBX: 000000000001f145 RCX: 00007fdf82f16559 [ 1266.102867][T17168] RDX: 00007fdf8116dee0 RSI: 0000000000000000 RDI: 00007fdf82fada90 [ 1266.102883][T17168] RBP: 000020000001f240 R08: 00000000ffffffff R09: 0000000000000000 [ 1266.127303][T17168] R10: 0000000000000001 R11: 0000000000000202 R12: 000020000001f1c0 [ 1266.127324][T17168] R13: 00007fdf8116dee0 R14: 00007fdf8116dea0 R15: 000020000001f200 [ 1266.127357][T17168] [ 1266.358358][T13720] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1266.366050][ T7] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1266.376136][ T7] usb 2-1: config 0 has no interface number 0 [ 1266.398778][ T7] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1266.562542][ T7] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 1266.581617][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.618165][T13720] usb 4-1: Using ep0 maxpacket: 16 [ 1266.625446][ T7] usb 2-1: Product: syz [ 1266.641133][ T7] usb 2-1: Manufacturer: syz [ 1266.657014][ T7] usb 2-1: SerialNumber: syz [ 1266.676572][ T7] usb 2-1: config 0 descriptor?? [ 1266.750816][T13720] usb 4-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 1266.790376][T13720] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1266.853067][T13720] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1266.878864][T13720] usb 4-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 1266.909037][T13720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.939404][ T7] i2c-cp2615: probe of 2-1:0.1 failed with error -22 [ 1266.973362][T13720] usb 4-1: config 0 descriptor?? [ 1267.978531][ C1] net_ratelimit: 36 callbacks suppressed [ 1268.034133][ T13] usb 2-1: USB disconnect, device number 3 [ 1268.458439][T13720] usbhid 4-1:0.0: can't add hid device: -71 [ 1268.464841][T13720] usbhid: probe of 4-1:0.0 failed with error -71 [ 1268.511783][T13720] usb 4-1: USB disconnect, device number 8 [ 1268.611734][T17232] loop6: detected capacity change from 0 to 512 [ 1268.622711][T17233] loop1: detected capacity change from 0 to 164 [ 1268.673178][T17232] FAT-fs (loop6): Unrecognized mount option "tots" or missing value [ 1269.033401][T17240] rock: directory entry would overflow storage [ 1269.039993][T17240] rock: sig=0x4f50, size=4, remaining=3 [ 1269.045637][T17240] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1269.548228][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1270.008547][ T7] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1270.029615][ T7] usb 2-1: can't read configurations, error -61 [ 1270.188116][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1270.237613][T17247] loop3: detected capacity change from 0 to 1024 [ 1270.316490][T17247] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1270.618447][ T7] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1271.394511][ T7] usb 2-1: can't read configurations, error -61 [ 1271.401423][ T7] usb usb2-port1: attempt power cycle [ 1271.519576][T17273] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1272.866140][T17301] loop6: detected capacity change from 0 to 512 [ 1273.008067][ C0] net_ratelimit: 42 callbacks suppressed [ 1273.812915][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 1273.812929][ T26] audit: type=1800 audit(1792170054.164:104): pid=17301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3287" name="bus" dev="loop6" ino=1049221 res=0 errno=0 [ 1273.959598][T17319] capability: warning: `syz.2.3293' uses deprecated v2 capabilities in a way that may be insecure [ 1274.049232][T17322] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3284'. [ 1274.130794][T17286] loop1: detected capacity change from 0 to 32768 [ 1274.199338][T17286] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 1274.241125][T17286] dlm: no local IP address has been set [ 1274.247252][T17286] dlm: cannot start dlm midcomms -107 [ 1274.312800][T17286] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 1274.620576][T17328] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3295'. [ 1274.668578][T17328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1274.933463][T17328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1276.348189][T13770] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1276.470530][T17362] netlink: 'syz.2.3306': attribute type 21 has an invalid length. [ 1276.562123][T17362] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3306'. [ 1276.614783][T17369] loop1: detected capacity change from 0 to 512 [ 1276.758733][T13770] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1276.797059][T13770] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1276.841255][T13770] usb 7-1: New USB device found, idVendor=08ca, idProduct=0001, bcdDevice= 1.00 [ 1276.876150][T13770] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.058375][T16649] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1277.403521][T17348] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1277.461340][T17388] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1277.503356][T17388] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1277.548780][T16649] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1277.607721][T17388] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1277.638917][T17388] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1277.660796][T16649] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 32 [ 1277.698592][T16649] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 32 [ 1277.730682][T17388] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1277.754560][T17388] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1277.796487][T17388] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1277.911931][T13770] aiptek 7-1:1.0: Aiptek using 400 ms programming speed [ 1277.928515][T16649] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 1277.944839][T13770] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input6 [ 1277.959308][T16649] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.967527][T16649] usb 4-1: Product: syz [ 1277.979234][T16649] usb 4-1: Manufacturer: syz [ 1277.984739][T16649] usb 4-1: SerialNumber: syz [ 1278.023233][T13770] input: failed to attach handler kbd to device input6, error: -5 [ 1278.032494][T17376] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1278.048644][T17376] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1278.087008][T13770] usb 7-1: USB disconnect, device number 6 [ 1278.304084][T15613] net_ratelimit: 48 callbacks suppressed [ 1278.408810][T16649] usb 4-1: MIDIStreaming interface descriptor not found [ 1278.650738][T16649] usb 4-1: USB disconnect, device number 9 [ 1278.917772][T15376] udevd[15376]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1279.125800][T17459] futex_wake_op: syz.2.3325 tries to shift op by 144; fix this program [ 1279.338931][T17459] rxe_eth0 speed is unknown, defaulting to 1000 [ 1280.208268][T16007] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1280.260692][T16649] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1280.452495][T16007] usb 7-1: Using ep0 maxpacket: 32 [ 1280.558584][T16649] usb 4-1: Using ep0 maxpacket: 32 [ 1280.578285][ T13] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1280.608627][T16007] usb 7-1: config 0 has an invalid interface number: 239 but max is 0 [ 1280.630608][T16007] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.688198][T16007] usb 7-1: config 0 has no interface number 0 [ 1280.699186][T16649] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1280.709440][T16649] usb 4-1: config 0 has no interface number 0 [ 1280.724673][T16007] usb 7-1: config 0 interface 239 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1280.774238][T16007] usb 7-1: config 0 interface 239 has no altsetting 0 [ 1280.833085][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 1280.908811][T16649] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1280.927475][T16649] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.959747][T16007] usb 7-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1280.960755][T16649] usb 4-1: Product: syz [ 1280.969212][ T13] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 1280.969238][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.969259][ T13] usb 2-1: config 0 has no interface number 0 [ 1281.015506][T16007] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.017354][T16649] usb 4-1: Manufacturer: syz [ 1281.060467][T16007] usb 7-1: Product: syz [ 1281.060651][T16649] usb 4-1: SerialNumber: syz [ 1281.064744][T16007] usb 7-1: Manufacturer: syz [ 1281.064764][T16007] usb 7-1: SerialNumber: syz [ 1281.095567][T17500] netlink: 'syz.2.3340': attribute type 2 has an invalid length. [ 1281.109428][ T13] usb 2-1: config 0 interface 239 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1281.125660][T16649] usb 4-1: config 0 descriptor?? [ 1281.175183][ T13] usb 2-1: config 0 interface 239 has no altsetting 0 [ 1281.200226][T16007] usb 7-1: config 0 descriptor?? [ 1281.205388][T16649] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1281.378317][ T13] usb 2-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1281.387403][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.429351][T17451] loop3: detected capacity change from 0 to 1024 [ 1281.481890][ T13] usb 2-1: Product: syz [ 1281.509316][ T13] usb 2-1: Manufacturer: syz [ 1281.513980][ T13] usb 2-1: SerialNumber: syz [ 1281.667160][ T13] usb 2-1: config 0 descriptor?? [ 1282.379395][ T13] usb 7-1: USB disconnect, device number 7 [ 1282.409854][T17451] EXT4-fs (loop3): failed to open journal device unknown-block(0,7) -6 [ 1282.593363][T17520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3344'. [ 1282.638557][T17520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3344'. [ 1282.648846][T16649] usb 4-1: qt2_attach - failed to power on unit: -71 [ 1282.656639][T16649] quatech2: probe of 4-1:0.51 failed with error -71 [ 1282.828931][T16649] usb 4-1: USB disconnect, device number 10 [ 1283.168113][ T13] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1283.255550][ T4261] usb 2-1: USB disconnect, device number 7 [ 1283.414124][ T9196] net_ratelimit: 33 callbacks suppressed [ 1283.498214][ T13] usb 7-1: not running at top speed; connect to a high speed hub [ 1283.578371][ T13] usb 7-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1283.618141][ T13] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12336, setting to 64 [ 1283.697093][ T13] usb 7-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1283.742001][ T13] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1283.754481][T17555] loop3: detected capacity change from 0 to 4096 [ 1283.795204][T17555] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1283.816482][ T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.888762][T17526] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1283.915187][ T13] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 1283.986346][T17555] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1284.018602][ T13] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1284.067090][T17555] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1284.081369][ T13] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 1284.142339][ T13] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 1284.174888][T17555] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1284.227895][ T13] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1284.258750][T17555] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1284.392275][T17555] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1284.454733][T17555] ntfs: volume version 3.1. [ 1284.478314][ T7] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 1284.519071][T17555] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1284.573872][T17555] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1284.630982][T17555] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1284.677075][T17555] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1284.838318][ T7] usb 2-1: not running at top speed; connect to a high speed hub [ 1284.857607][T17555] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1285.128419][ T7] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1285.162148][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.216261][ T7] usb 2-1: Product: syz [ 1285.247283][ T7] usb 2-1: Manufacturer: syz [ 1285.278537][ T7] usb 2-1: SerialNumber: syz [ 1285.361933][ T7] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 1285.440419][ T7] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1285.504890][ T7] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1285.566662][ T7] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB4 [ 1285.629683][ T7] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB5 [ 1285.765119][ T7] usb 7-1: USB disconnect, device number 8 [ 1285.835263][ T1111] usb 2-1: USB disconnect, device number 8 [ 1285.906448][ T7] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1285.920478][ T1111] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1285.998529][ T7] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1286.046261][ T7] keyspan 7-1:1.0: device disconnected [ 1286.178166][ T1111] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1286.193518][ T1111] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 1286.211973][ T1111] keyspan_4 ttyUSB5: Keyspan 4 port adapter converter now disconnected from ttyUSB5 [ 1286.237319][ T1111] keyspan 2-1:1.0: device disconnected [ 1286.438287][ T7] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 1286.798486][ T7] usb 7-1: not running at top speed; connect to a high speed hub [ 1287.118562][ T7] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1287.139346][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.169803][ T7] usb 7-1: Product: syz [ 1287.187929][ T7] usb 7-1: Manufacturer: syz [ 1287.208810][ T7] usb 7-1: SerialNumber: syz [ 1287.274233][ T7] keyspan 7-1:1.0: Keyspan 4 port adapter converter detected [ 1287.307906][ T7] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1287.355160][ T7] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1287.378238][T15238] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1287.420743][ T7] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1287.464921][ T7] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1287.648244][T15238] usb 4-1: Using ep0 maxpacket: 32 [ 1287.769175][T15238] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 1287.789298][T15238] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.830645][T15238] usb 4-1: config 0 has no interface number 0 [ 1287.913604][T17414] usb 7-1: USB disconnect, device number 9 [ 1287.949175][T15238] usb 4-1: config 0 interface 239 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1287.962382][T15238] usb 4-1: config 0 interface 239 has no altsetting 0 [ 1288.037715][T17414] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1288.059803][T17414] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1288.138469][T15238] usb 4-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1288.148752][T15238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.156963][T15238] usb 4-1: Product: syz [ 1288.161504][T15238] usb 4-1: Manufacturer: syz [ 1288.166223][T15238] usb 4-1: SerialNumber: syz [ 1288.173500][T15238] usb 4-1: config 0 descriptor?? [ 1288.308319][T17414] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1288.408638][T17414] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1288.513760][T17414] keyspan 7-1:1.0: device disconnected [ 1288.528333][ T4398] net_ratelimit: 40 callbacks suppressed [ 1288.692898][T17666] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3376'. [ 1288.775641][T17666] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3376'. [ 1289.027093][T17414] usb 4-1: USB disconnect, device number 11 [ 1289.678227][T17700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1290.650411][T17714] rxe_eth0 speed is unknown, defaulting to 1000 [ 1290.843828][T17734] loop6: detected capacity change from 0 to 512 [ 1290.922717][T17734] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1290.981228][T17734] FAT-fs (loop6): FAT read failed (blocknr 3360) [ 1291.444190][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.567814][T17764] loop6: detected capacity change from 0 to 164 [ 1291.661818][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.844379][T17764] rock: directory entry would overflow storage [ 1291.850707][T17764] rock: sig=0x4f50, size=4, remaining=3 [ 1291.856529][T17764] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1292.004953][ T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.202990][ T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.288101][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 1292.450197][T17714] chnl_net:caif_netlink_parms(): no params data found [ 1292.929002][T17714] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.979803][T17714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.005648][T17714] device bridge_slave_0 entered promiscuous mode [ 1293.099024][T17714] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.106150][T17714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.123741][T17714] device bridge_slave_1 entered promiscuous mode [ 1293.225261][T17714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1293.286400][T17714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1293.497221][T17714] team0: Port device team_slave_0 added [ 1293.543068][T17714] team0: Port device team_slave_1 added [ 1293.578106][ C1] net_ratelimit: 33 callbacks suppressed [ 1293.708563][T17714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1293.728978][T17714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1293.786168][T17714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.831460][T17714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1293.848912][T17714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1293.898130][T17714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1294.069086][T17714] device hsr_slave_0 entered promiscuous mode [ 1294.095244][T17714] device hsr_slave_1 entered promiscuous mode [ 1294.119034][T17714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1294.127789][T17714] Cannot create hsr debugfs directory [ 1294.375246][T13770] Bluetooth: hci5: command 0x041b tx timeout [ 1294.638364][ T154] device hsr_slave_0 left promiscuous mode [ 1294.647529][ T154] device hsr_slave_1 left promiscuous mode [ 1294.655625][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1294.663155][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1294.674549][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1294.686020][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1294.710146][ T154] device bridge_slave_1 left promiscuous mode [ 1294.716734][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.740046][ T154] device bridge_slave_0 left promiscuous mode [ 1294.746328][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.786734][ T154] device veth1_macvtap left promiscuous mode [ 1294.802220][ T154] device veth0_macvtap left promiscuous mode [ 1294.808463][ T154] device veth1_vlan left promiscuous mode [ 1294.814329][ T154] device veth0_vlan left promiscuous mode [ 1295.367435][ T154] team0 (unregistering): Port device team_slave_1 removed [ 1295.405283][ T154] team0 (unregistering): Port device team_slave_0 removed [ 1295.427438][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1295.462390][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1295.641737][ T154] bond0 (unregistering): Released all slaves [ 1296.449233][T17414] Bluetooth: hci5: command 0x040f tx timeout [ 1296.486649][T17714] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1296.528622][T17714] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1296.568845][T17714] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1296.602989][T17714] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1296.951333][T17714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1296.993250][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1297.008637][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1297.053360][T17714] 8021q: adding VLAN 0 to HW filter on device team0 [ 1297.111279][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1297.130647][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1297.140635][T10791] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.148627][T10791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1297.166404][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1297.177057][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1297.187004][T10791] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.194273][T10791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1297.235844][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1297.279300][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1297.323206][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1297.352711][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1297.370907][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1297.406954][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1297.433071][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1297.444451][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1297.466262][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1297.476408][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1297.485412][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1297.495110][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1297.507841][T17714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1297.831920][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1297.846924][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1297.871639][T17714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1297.916350][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1297.936457][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1297.974264][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1297.987061][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1297.999946][T17714] device veth0_vlan entered promiscuous mode [ 1298.013288][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1298.023190][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1298.041589][T17714] device veth1_vlan entered promiscuous mode [ 1298.083355][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1298.094994][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1298.109685][T17714] device veth0_macvtap entered promiscuous mode [ 1298.130774][T17714] device veth1_macvtap entered promiscuous mode [ 1298.164717][T17714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1298.176459][T17714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.187047][T17714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1298.199061][T17714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.214760][T17714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1298.225780][T17714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.245106][T17714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1298.256727][T17714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.276064][T17714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1298.286995][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1298.297600][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1298.306686][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1298.323342][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1298.337478][T17714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.352057][T17714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.363955][T17714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.375414][T17714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.385611][T17714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.396782][T17714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.409535][T17714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1298.421007][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1298.433269][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1298.465289][T17714] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.475485][T17714] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.498823][T17714] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.507641][T17714] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.528838][T13770] Bluetooth: hci5: command 0x0419 tx timeout [ 1298.589918][ C0] net_ratelimit: 78 callbacks suppressed [ 1298.700588][ T4398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1298.719452][ T4398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1298.727709][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1298.850493][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1298.863194][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1298.874288][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1299.278333][ T1111] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1299.639683][ T1111] usb 4-1: not running at top speed; connect to a high speed hub [ 1299.918879][ T1111] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1299.934543][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.942750][ T1111] usb 4-1: Product: syz [ 1299.946955][ T1111] usb 4-1: Manufacturer: syz [ 1299.957607][ T1111] usb 4-1: SerialNumber: syz [ 1300.021145][ T1111] keyspan 4-1:1.0: Keyspan 4 port adapter converter detected [ 1300.051934][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.058442][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.063866][ T1111] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1300.094708][ T1111] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1300.126199][ T1111] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1300.144436][ T1111] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1300.429998][ T7] usb 4-1: USB disconnect, device number 12 [ 1300.462031][ T7] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1300.482056][ T7] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1300.503096][ T7] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1300.524923][ T7] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1300.543829][ T7] keyspan 4-1:1.0: device disconnected [ 1303.728151][ C1] net_ratelimit: 48 callbacks suppressed [ 1304.490803][T17945] loop6: detected capacity change from 0 to 2048 [ 1304.572621][T17945] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1304.698111][T17414] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1305.508136][T17414] usb 4-1: Using ep0 maxpacket: 16 [ 1305.547680][T17952] team0: Device wg0 is of different type [ 1305.628424][T17414] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1305.645163][T17962] loop6: detected capacity change from 0 to 512 [ 1305.716911][T17960] team0: Device wg0 is of different type [ 1305.788382][T17414] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1305.812877][T17414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.855884][T17414] usb 4-1: Product: syz [ 1305.874088][T17414] usb 4-1: Manufacturer: syz [ 1305.893445][T17414] usb 4-1: SerialNumber: syz [ 1305.915816][T17414] r8152-cfgselector 4-1: config 0 descriptor?? [ 1306.164575][T17964] rxe_eth0 speed is unknown, defaulting to 1000 [ 1306.278665][ T1111] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1306.628561][ T1111] usb 2-1: Using ep0 maxpacket: 32 [ 1306.811069][ T1111] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 1307.053507][ T1111] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.196660][ T1111] usb 2-1: config 0 has no interface number 0 [ 1307.222473][ T1111] usb 2-1: config 0 interface 239 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1307.257486][ T1111] usb 2-1: config 0 interface 239 has no altsetting 0 [ 1307.360982][T17986] loop6: detected capacity change from 0 to 164 [ 1307.425795][T17986] rock: directory entry would overflow storage [ 1307.432296][T17986] rock: sig=0x4f50, size=4, remaining=3 [ 1307.437960][T17986] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1307.478645][ T1111] usb 2-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1307.498938][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.515190][ T1111] usb 2-1: Product: syz [ 1307.528986][ T1111] usb 2-1: Manufacturer: syz [ 1307.538982][ T1111] usb 2-1: SerialNumber: syz [ 1307.559269][ T1111] usb 2-1: config 0 descriptor?? [ 1307.808806][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 1308.199444][T17414] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1308.207917][ T4261] usb 2-1: USB disconnect, device number 9 [ 1308.232687][T17414] r8152-cfgselector 4-1: USB disconnect, device number 13 [ 1308.523459][T17964] chnl_net:caif_netlink_parms(): no params data found [ 1308.848230][ C0] net_ratelimit: 69 callbacks suppressed [ 1309.000990][T17964] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.009137][T17964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.017781][T17964] device bridge_slave_0 entered promiscuous mode [ 1309.049891][T17964] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.056996][T17964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.093794][T17964] device bridge_slave_1 entered promiscuous mode [ 1309.268088][T17964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1309.301342][T17964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1309.456521][T17964] team0: Port device team_slave_0 added [ 1309.481002][T17964] team0: Port device team_slave_1 added [ 1309.564325][T17964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1309.596768][T17964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1309.624410][T17964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1309.643568][T17964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1309.655722][T17964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1309.685222][T17964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1309.780395][T17964] device hsr_slave_0 entered promiscuous mode [ 1309.787674][T17964] device hsr_slave_1 entered promiscuous mode [ 1309.796151][T17964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1309.804150][T17964] Cannot create hsr debugfs directory [ 1309.888143][T16649] Bluetooth: hci3: command 0x041b tx timeout [ 1310.062134][T17964] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.164358][T17964] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.261484][T17964] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.365799][T17964] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.531134][T17964] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1310.553073][T17964] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1310.573221][T17964] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1310.591525][T17964] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1310.723603][T17964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1310.741676][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1310.755669][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1310.767840][T17964] 8021q: adding VLAN 0 to HW filter on device team0 [ 1310.783387][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1310.796982][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1310.806154][T15613] bridge0: port 1(bridge_slave_0) entered blocking state [ 1310.813269][T15613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1310.825790][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1310.845907][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1310.856229][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1310.865378][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 1310.872515][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1310.885624][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1310.901124][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1310.914797][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1310.932971][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1310.944438][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1310.962406][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1310.972496][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1310.985260][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1310.996010][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1311.011502][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1311.024237][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1311.036419][T17964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1311.153730][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1311.170228][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1311.187340][T17964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1311.213736][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1311.223418][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1311.248953][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1311.257978][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1311.270651][T17964] device veth0_vlan entered promiscuous mode [ 1311.282172][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1311.292131][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1311.306239][T17964] device veth1_vlan entered promiscuous mode [ 1311.335453][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1311.350138][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1311.360726][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1311.370648][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1311.384248][T17964] device veth0_macvtap entered promiscuous mode [ 1311.399365][T17964] device veth1_macvtap entered promiscuous mode [ 1311.424559][T17964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1311.436044][T17964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.446246][T17964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1311.457295][T17964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.468246][T17964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1311.481063][T17964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.491003][T17964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1311.504392][T17964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.514969][T17964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1311.525590][T17964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.537579][T17964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1311.547629][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1311.561943][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1311.576170][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1311.585593][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1311.597657][T17964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1311.612118][T17964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.622215][T17964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1311.633063][T17964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.643478][T17964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1311.660204][T17964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.673168][T17964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1311.684165][T17964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.696587][T17964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1311.708403][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1311.721102][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1311.740803][T17964] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.751808][T17964] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.761128][T17964] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.773826][T17964] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.875506][ T9196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1311.890137][ T9196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1311.917819][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1311.966087][T15613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1311.975257][T17414] Bluetooth: hci3: command 0x040f tx timeout [ 1311.982933][T15613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1311.992354][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1312.066252][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 1312.066266][ T26] audit: type=1326 audit(1792170092.414:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18011 comm="syz.0.3398" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d1c29b559 code=0x0 [ 1312.787808][T18013] loop0: detected capacity change from 0 to 131072 [ 1312.855702][T18013] F2FS-fs (loop0): invalid crc value [ 1312.884908][T18013] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1312.947387][T18013] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 1312.960372][T18013] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 1313.888152][ C1] net_ratelimit: 73 callbacks suppressed [ 1314.048191][ T1111] Bluetooth: hci3: command 0x0419 tx timeout [ 1314.150659][T18025] netlink: 'syz.2.3415': attribute type 16 has an invalid length. [ 1314.169293][T18024] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3416'. [ 1314.206305][T18025] netlink: 'syz.2.3415': attribute type 17 has an invalid length. [ 1314.372347][T18029] loop3: detected capacity change from 0 to 4096 [ 1314.431475][T18029] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1314.492797][T18025] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1314.545033][T18025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1314.585404][T18029] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1314.615971][T18029] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1314.682308][T18029] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1314.738675][T18029] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1314.752403][T18029] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1314.766997][T18029] ntfs: volume version 3.1. [ 1314.783817][T18029] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1314.844505][T18029] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1314.902284][T18029] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1315.157229][T18045] loop6: detected capacity change from 0 to 4096 [ 1315.211550][T18029] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1315.357052][T18045] ntfs: volume version 3.1. [ 1315.440930][T18040] rxe_eth0 speed is unknown, defaulting to 1000 [ 1316.191113][T18055] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1316.239844][T18045] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1316.863888][T18068] loop3: detected capacity change from 0 to 2048 [ 1316.996684][T18068] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1317.008413][T17414] Bluetooth: hci4: command 0x0409 tx timeout [ 1317.683504][T18090] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3434'. [ 1319.088462][T16649] Bluetooth: hci4: command 0x041b tx timeout [ 1319.106071][ T9196] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.328080][ C1] net_ratelimit: 42 callbacks suppressed [ 1319.473879][T18102] loop0: detected capacity change from 0 to 8192 [ 1319.507481][ T9196] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.615606][T18102] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1319.710666][ T9196] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.828222][ T9196] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.928233][ T7] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 1320.114720][T18040] chnl_net:caif_netlink_parms(): no params data found [ 1320.328528][ T7] usb 4-1: not running at top speed; connect to a high speed hub [ 1320.574324][T18040] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.582349][T18040] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.592155][T18040] device bridge_slave_0 entered promiscuous mode [ 1320.599081][ T7] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1320.631379][T18040] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.638968][T18040] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.647527][T18040] device bridge_slave_1 entered promiscuous mode [ 1320.779232][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.788265][ T7] usb 4-1: Product: syz [ 1320.793181][ T7] usb 4-1: Manufacturer: syz [ 1320.798549][ T7] usb 4-1: SerialNumber: syz [ 1320.859842][ T7] keyspan 4-1:1.0: Keyspan 4 port adapter converter detected [ 1320.877948][ T7] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1320.895061][ T7] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1320.906960][ T7] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1320.932542][ T7] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1321.169127][T16649] Bluetooth: hci4: command 0x040f tx timeout [ 1321.279376][T18040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1321.362898][T18040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1321.376252][ T4261] usb 4-1: USB disconnect, device number 14 [ 1321.409392][T18161] process 'syz.6.3450' launched '/dev/fd/-1/./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1321.498454][ C1] vkms_vblank_simulate: vblank timer overrun [ 1321.742324][ T4261] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1321.809801][ T4261] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1321.834054][T18161] device ip6gre1 entered promiscuous mode [ 1321.841992][T18148] ceph: No mds server is up or the cluster is laggy [ 1321.927306][ T4261] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1322.022327][ T4261] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1322.099703][ T4261] keyspan 4-1:1.0: device disconnected [ 1322.121141][T18170] FAULT_INJECTION: forcing a failure. [ 1322.121141][T18170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1322.247912][T18170] CPU: 1 PID: 18170 Comm: syz.6.3452 Not tainted syzkaller #0 [ 1322.255445][T18170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1322.265538][T18170] Call Trace: [ 1322.269172][T18170] [ 1322.272164][T18170] dump_stack_lvl+0x188/0x250 [ 1322.272196][T18170] ? show_regs_print_info+0x20/0x20 [ 1322.272219][T18170] ? load_image+0x410/0x410 [ 1322.272247][T18170] ? __lock_acquire+0x7d40/0x7d40 [ 1322.272275][T18170] should_fail+0x383/0x4b0 [ 1322.296419][T18170] _copy_to_user+0x2e/0x130 [ 1322.300969][T18170] simple_read_from_buffer+0xe3/0x150 [ 1322.306420][T18170] proc_fail_nth_read+0x1a6/0x220 [ 1322.306455][T18170] ? proc_fault_inject_write+0x310/0x310 [ 1322.317131][T18170] ? fsnotify_perm+0x254/0x560 [ 1322.321926][T18170] ? proc_fault_inject_write+0x310/0x310 [ 1322.321957][T18170] vfs_read+0x2ff/0xd50 [ 1322.331770][T18170] ? __lock_acquire+0x7d40/0x7d40 [ 1322.336857][T18170] ? kernel_read+0x1e0/0x1e0 [ 1322.341492][T18170] ? mutex_lock_nested+0x17/0x20 [ 1322.346468][T18170] ? __fdget_pos+0x2bf/0x370 [ 1322.351100][T18170] ? ksys_read+0x70/0x260 [ 1322.355480][T18170] ksys_read+0x153/0x260 [ 1322.359749][T18170] ? vfs_write+0xd70/0xd70 [ 1322.364191][T18170] ? lockdep_hardirqs_on+0x94/0x140 [ 1322.369450][T18170] do_syscall_64+0x4c/0xa0 [ 1322.373894][T18170] ? clear_bhb_loop+0x30/0x80 [ 1322.378609][T18170] ? clear_bhb_loop+0x30/0x80 [ 1322.383323][T18170] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1322.389273][T18170] RIP: 0033:0x7fdf82ed6d8e [ 1322.393719][T18170] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1322.413371][T18170] RSP: 002b:00007fdf8116dfe8 EFLAGS: 00000246 [ 1322.419459][T18170] ORIG_RAX: 0000000000000000 [ 1322.424160][T18170] RAX: ffffffffffffffda RBX: 00007fdf8116e6c0 RCX: 00007fdf82ed6d8e [ 1322.432156][T18170] RDX: 000000000000000f RSI: 00007fdf8116e0a0 RDI: 0000000000000004 [ 1322.432173][T18170] RBP: 00007fdf8116e090 R08: 0000000000000000 R09: 0000000000000000 [ 1322.432188][T18170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1322.432201][T18170] R13: 00007fdf8319e038 R14: 00007fdf8319dfa0 R15: 00007fff71a8aa18 [ 1322.464238][T18170] [ 1322.464316][ C1] vkms_vblank_simulate: vblank timer overrun [ 1322.516369][T18040] team0: Port device team_slave_0 added [ 1322.590897][T18040] team0: Port device team_slave_1 added [ 1322.920942][T18040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1322.927939][T18040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1323.131073][T18040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1323.194073][T18040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1323.239669][T18040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1323.266044][T16649] Bluetooth: hci4: command 0x0419 tx timeout [ 1323.375777][ T1111] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1323.378233][T18040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1323.726008][T18040] device hsr_slave_0 entered promiscuous mode [ 1323.787402][T18040] device hsr_slave_1 entered promiscuous mode [ 1323.891662][ T1111] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1323.918215][ T1111] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1323.948199][T18040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1323.956687][T18040] Cannot create hsr debugfs directory [ 1323.983789][ T1111] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1324.029423][ T1111] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1324.212264][ T1111] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1324.243055][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1324.277460][ T1111] usb 4-1: SerialNumber: syz [ 1324.373751][ C1] net_ratelimit: 49 callbacks suppressed [ 1324.401913][T18181] loop6: detected capacity change from 0 to 40427 [ 1324.476590][T18200] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3460'. [ 1324.543959][T18181] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 1324.567233][T18181] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1324.591276][T18181] F2FS-fs (loop6): build fault injection attr: rate: 2, type: 0x1ffff [ 1324.624998][ T1111] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 1324.627757][T18211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1324.679997][T18181] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x1f8 [ 1324.692660][ T1111] usb 4-1: USB disconnect, device number 15 [ 1324.823711][T18181] F2FS-fs (loop6): invalid crc value [ 1324.919624][T18181] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1325.079171][T18219] loop0: detected capacity change from 0 to 16 [ 1325.265908][T18219] erofs: (device loop0): mounted with root inode @ nid 36. [ 1325.285672][T18181] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1325.338129][T18181] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1325.756369][ T1111] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1325.998209][ T4261] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1326.133961][T18235] loop3: detected capacity change from 0 to 4096 [ 1326.251687][ T9196] device hsr_slave_0 left promiscuous mode [ 1326.274815][ T9196] device hsr_slave_1 left promiscuous mode [ 1326.313359][ T9196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1326.336029][ T1111] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.354735][ T1111] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1326.370295][ T9196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1326.404812][ T9196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1326.418444][ T4261] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1326.460426][ T9196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1326.496977][ T9196] device bridge_slave_1 left promiscuous mode [ 1326.518130][ T1111] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice=67.13 [ 1326.527223][ T1111] usb 1-1: New USB device strings: Mfr=40, Product=175, SerialNumber=0 [ 1326.543753][ T9196] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.563111][ T1111] usb 1-1: Product: syz [ 1326.567359][ T1111] usb 1-1: Manufacturer: syz [ 1326.587056][ T9196] device bridge_slave_0 left promiscuous mode [ 1326.608957][ T1111] usb 1-1: config 0 descriptor?? [ 1326.613716][ T9196] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.650464][ T4261] usb 7-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 1326.688359][ T4261] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.712744][ T4261] usb 7-1: Product: syz [ 1326.745183][ T4261] usb 7-1: Manufacturer: syz [ 1326.780115][ T4261] usb 7-1: SerialNumber: syz [ 1326.851199][ T9196] device veth1_macvtap left promiscuous mode [ 1326.858399][ T9196] device veth0_macvtap left promiscuous mode [ 1326.864524][ T9196] device veth1_vlan left promiscuous mode [ 1326.878660][ T4261] usb 7-1: can't set config #1, error -71 [ 1326.916202][ T4261] usb 7-1: USB disconnect, device number 10 [ 1326.936843][T18219] loop0: detected capacity change from 0 to 512 [ 1326.948548][ T9196] device veth0_vlan left promiscuous mode [ 1327.428203][T18219] EXT4-fs (loop0): 1 orphan inode deleted [ 1327.455756][T18219] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 1327.538480][T18219] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1328.035167][T18219] udc-core: couldn't find an available UDC or it's busy [ 1328.090494][T18219] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1328.153714][T17414] usb 1-1: USB disconnect, device number 2 [ 1328.336407][T18253] loop3: detected capacity change from 0 to 32768 [ 1328.585619][T18253] ea_get: invalid extended attribute [ 1328.606162][T18253] ffff888074743170: 04 00 00 00 .... [ 1329.134736][ T9196] team0 (unregistering): Port device team_slave_1 removed [ 1329.236688][ T9196] team0 (unregistering): Port device team_slave_0 removed [ 1329.336913][ T9196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1329.436107][ T9196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1329.938513][ T9196] bond0 (unregistering): Released all slaves [ 1329.973257][ C1] net_ratelimit: 53 callbacks suppressed [ 1330.384316][T18289] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1330.414806][T18293] loop6: detected capacity change from 0 to 128 [ 1331.765342][T18289] loop0: detected capacity change from 0 to 4096 [ 1331.873399][T18308] netlink: 'syz.2.3485': attribute type 1 has an invalid length. [ 1331.936114][T18289] __ntfs_warning: 21 callbacks suppressed [ 1331.936129][T18289] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1331.985418][T18308] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3485'. [ 1332.073758][T18314] loop6: detected capacity change from 0 to 512 [ 1332.158105][T15238] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1332.191995][T18289] ntfs: (device loop0): parse_options(): Unrecognized mount option . [ 1332.312952][T18040] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1332.419005][T18314] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1332.460148][T18040] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1332.513138][T18324] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1332.696817][T15238] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.707823][T15238] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1332.716859][T15238] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1332.725967][T15238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.749199][T15238] usb 4-1: config 0 descriptor?? [ 1333.469328][T18040] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1333.558671][T18040] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1334.044053][T18357] loop6: detected capacity change from 0 to 512 [ 1334.191430][T18040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1334.296004][T18357] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1334.308847][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1334.345267][T18357] ext4 filesystem being mounted at /57/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 1334.370013][T18353] loop0: detected capacity change from 0 to 4096 [ 1334.393327][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1334.469343][T18040] 8021q: adding VLAN 0 to HW filter on device team0 [ 1334.537599][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1334.581645][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1334.633255][T15613] bridge0: port 1(bridge_slave_0) entered blocking state [ 1334.640439][T15613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1334.794404][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1334.813300][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1334.871893][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1334.915119][T15613] bridge0: port 2(bridge_slave_1) entered blocking state [ 1334.922308][T15613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1334.983065][T18381] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1335.088414][T15238] Bluetooth: Can't get version to change to load ram patch err [ 1335.098676][T15238] Bluetooth: Loading sysconfig file failed [ 1335.104557][T15238] ath3k: probe of 4-1:0.0 failed with error -71 [ 1335.173179][T15238] usb 4-1: USB disconnect, device number 16 [ 1335.184961][T18384] FAULT_INJECTION: forcing a failure. [ 1335.184961][T18384] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1335.233383][ C1] net_ratelimit: 38 callbacks suppressed [ 1335.258496][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1335.506955][T18384] CPU: 0 PID: 18384 Comm: syz.3.3498 Not tainted syzkaller #0 [ 1335.514512][T18384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1335.524600][T18384] Call Trace: [ 1335.527918][T18384] [ 1335.530878][T18384] dump_stack_lvl+0x188/0x250 [ 1335.535595][T18384] ? show_regs_print_info+0x20/0x20 [ 1335.540821][T18384] ? load_image+0x410/0x410 [ 1335.545370][T18384] should_fail+0x383/0x4b0 [ 1335.549819][T18384] prepare_alloc_pages+0x1e3/0x5b0 [ 1335.555025][T18384] __alloc_pages+0x11b/0x480 [ 1335.559648][T18384] ? zone_statistics+0x170/0x170 [ 1335.564723][T18384] ? alloc_pages+0x452/0x560 [ 1335.569419][T18384] skb_page_frag_refill+0x225/0x4c0 [ 1335.574683][T18384] tun_get_user+0x1907/0x3b10 [ 1335.579477][T18384] ? tun_ring_recv+0xc90/0xc90 [ 1335.584279][T18384] ? rcu_lock_release+0x5/0x20 [ 1335.589109][T18384] ? __lock_acquire+0x7d40/0x7d40 [ 1335.594182][T18384] tun_chr_write_iter+0x112/0x1e0 [ 1335.599257][T18384] vfs_write+0x748/0xd70 [ 1335.603546][T18384] ? file_end_write+0x250/0x250 [ 1335.608432][T18384] ? __fget_files+0x402/0x470 [ 1335.613143][T18384] ? __fdget_pos+0x1e2/0x370 [ 1335.617751][T18384] ? ksys_write+0x70/0x260 [ 1335.622192][T18384] ksys_write+0x153/0x260 [ 1335.626547][T18384] ? __ia32_sys_read+0x80/0x80 [ 1335.631341][T18384] ? lockdep_hardirqs_on+0x94/0x140 [ 1335.636571][T18384] do_syscall_64+0x4c/0xa0 [ 1335.641018][T18384] ? clear_bhb_loop+0x30/0x80 [ 1335.645721][T18384] ? clear_bhb_loop+0x30/0x80 [ 1335.650431][T18384] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1335.656349][T18384] RIP: 0033:0x7f47bb0bed8e [ 1335.660802][T18384] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1335.680457][T18384] RSP: 002b:00007f47b9355fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1335.688920][T18384] RAX: ffffffffffffffda RBX: 00007f47b93566c0 RCX: 00007f47bb0bed8e [ 1335.696936][T18384] RDX: 000000000000002e RSI: 0000200000000280 RDI: 00000000000000c8 [ 1335.704936][T18384] RBP: 00007f47b9356090 R08: 0000000000000000 R09: 0000000000000000 [ 1335.712929][T18384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1335.720925][T18384] R13: 00007f47bb386038 R14: 00007f47bb385fa0 R15: 00007ffe290c3328 [ 1335.728951][T18384] [ 1335.993530][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1336.167719][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1336.207109][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1336.305600][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1336.362321][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1336.443346][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1336.501947][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1336.572924][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1336.623558][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1336.671996][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1336.724929][T18040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1336.864374][T18410] loop6: detected capacity change from 0 to 256 [ 1337.269614][T18427] loop3: detected capacity change from 0 to 22 [ 1337.352579][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1337.374327][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1337.427932][T18040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1337.511249][T18427] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1337.808461][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1337.860093][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1337.910310][T18444] binder: 18437:18444 ioctl c00c620f 0 returned -14 [ 1338.080692][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1338.286493][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1338.460777][T18040] device veth0_vlan entered promiscuous mode [ 1338.474945][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1338.510779][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1338.571332][T18040] device veth1_vlan entered promiscuous mode [ 1338.652625][T18427] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1338.779196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1338.819009][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1338.859126][T18040] device veth0_macvtap entered promiscuous mode [ 1338.899310][T18040] device veth1_macvtap entered promiscuous mode [ 1339.027101][T18040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1339.085147][T18040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.111261][T18040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1339.157177][T18040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.238040][T18040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1339.289738][T13770] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1339.315910][T18040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.335306][T18474] loop3: detected capacity change from 0 to 512 [ 1339.374908][T18040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1339.458584][T18040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.509050][T18040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1339.558033][T18040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.570287][T18474] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1339.581560][T18474] ext4 filesystem being mounted at /27/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 1339.635236][T18040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1339.649022][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1339.661144][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1339.670103][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1339.679402][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1339.692035][T18040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1339.705903][T18040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.719095][T18040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1339.755386][T18040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.772261][T13770] usb 7-1: Using ep0 maxpacket: 32 [ 1339.796157][T18477] loop0: detected capacity change from 0 to 4096 [ 1339.840325][T18040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1339.878128][T18040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.946559][T18040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1340.008694][T18040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.020395][T13770] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1340.038026][T13770] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1340.086653][T18040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1340.104088][T13770] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1340.127372][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1340.168308][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1340.190674][T18477] ntfs3: loop0: Failed to load $Extend. [ 1340.265163][T18040] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.291473][ C1] net_ratelimit: 36 callbacks suppressed [ 1340.325282][T18040] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.364956][T18040] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.394717][T18040] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.569704][T13770] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1340.641940][T13770] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1340.708743][T13770] usb 7-1: Product: syz [ 1340.712970][T13770] usb 7-1: Manufacturer: syz [ 1340.712989][T13770] usb 7-1: SerialNumber: syz [ 1340.786072][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1340.801971][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1340.885131][T13770] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input9 [ 1340.932327][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1341.007143][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1341.036369][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1341.130939][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1341.177482][ T1111] usb 7-1: USB disconnect, device number 11 [ 1341.209712][ T1111] appletouch 7-1:1.0: input: appletouch disconnected [ 1341.699402][T18534] loop1: detected capacity change from 0 to 8 [ 1341.718127][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1341.881283][T18540] loop3: detected capacity change from 0 to 512 [ 1342.110941][T18547] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3532'. [ 1342.148479][ T13] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1342.178079][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 1342.222335][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1342.290116][ T13] usb 1-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 1342.310061][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.410570][ T13] usb 1-1: config 0 descriptor?? [ 1342.665797][T18549] rxe_eth0 speed is unknown, defaulting to 1000 [ 1342.748565][T18540] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1342.858650][T18540] ext4 filesystem being mounted at /31/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 1343.521055][T17714] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1343.586710][T18575] loop1: detected capacity change from 0 to 512 [ 1343.689681][T17714] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1343.766061][T18575] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3536: invalid indirect mapped block 256 (level 0) [ 1343.970818][T18575] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.3536: attempt to clear invalid blocks 1024 len 1 [ 1344.031387][T18575] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1344.101723][T18575] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3536: invalid indirect mapped block 1819239214 (level 0) [ 1344.191667][T18575] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3536: invalid indirect mapped block 33554432 (level 2) [ 1344.303227][T18575] EXT4-fs (loop1): 1 truncate cleaned up [ 1344.309731][T18575] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x000000000000000e,commit=0x0000000000000005,nodelalloc,block_validity,block_validity,nodiscard,,errors=continue. Quota mode: none. [ 1344.378324][ T4261] Bluetooth: hci0: command 0x0409 tx timeout [ 1344.391178][ T9196] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.583016][ T9196] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.725181][ T9196] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.811952][T18549] chnl_net:caif_netlink_parms(): no params data found [ 1344.902438][ T9196] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.118419][ T13] usbhid 1-1:0.0: can't add hid device: -71 [ 1345.124563][ T13] usbhid: probe of 1-1:0.0 failed with error -71 [ 1345.134623][T18586] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3542'. [ 1345.165437][ T13] usb 1-1: USB disconnect, device number 3 [ 1345.408116][ C0] net_ratelimit: 79 callbacks suppressed [ 1345.478176][T18592] loop1: detected capacity change from 0 to 512 [ 1345.522955][T18592] FAT-fs (loop1): Unrecognized mount option "xœìÝ=k[" or missing value [ 1346.448757][ T4261] Bluetooth: hci0: command 0x041b tx timeout [ 1346.612160][T18549] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.621817][T18549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.638649][T16007] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1346.682971][T18549] device bridge_slave_0 entered promiscuous mode [ 1346.743679][T18549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.763722][T18549] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.803663][T18549] device bridge_slave_1 entered promiscuous mode [ 1346.898193][T16007] usb 1-1: Using ep0 maxpacket: 32 [ 1347.028645][T16007] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 1347.036926][T16007] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1347.077158][T16007] usb 1-1: config 0 has no interface number 0 [ 1347.099388][T16007] usb 1-1: config 0 interface 239 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1347.152974][T16007] usb 1-1: config 0 interface 239 has no altsetting 0 [ 1347.191727][T18595] rxe_eth0 speed is unknown, defaulting to 1000 [ 1347.247628][T18549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1347.346039][T18549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1347.356653][T16007] usb 1-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1347.379906][T16007] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.439209][T16007] usb 1-1: Product: syz [ 1347.443519][T16007] usb 1-1: Manufacturer: syz [ 1347.471165][T16007] usb 1-1: SerialNumber: syz [ 1347.537224][T16007] usb 1-1: config 0 descriptor?? [ 1348.186505][T13770] usb 1-1: USB disconnect, device number 4 [ 1348.269121][T18549] team0: Port device team_slave_0 added [ 1348.346567][T18549] team0: Port device team_slave_1 added [ 1348.471677][T18627] syz.6.3548 (18627): drop_caches: 0 [ 1348.528320][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 1348.528679][T16397] Bluetooth: hci0: command 0x040f tx timeout [ 1348.542744][T18549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1348.558593][T18627] loop6: detected capacity change from 0 to 1024 [ 1348.578016][T18549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1348.621663][T18627] EXT4-fs (loop6): required journal recovery suppressed and not mounted read-only [ 1348.677311][T18633] loop1: detected capacity change from 0 to 2048 [ 1348.692313][T18549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1348.769924][T18639] syz.6.3548 (18639): drop_caches: 0 [ 1348.802725][T18549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1348.841374][T18549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1348.939046][T18549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1349.011605][T18641] loop6: detected capacity change from 0 to 1024 [ 1349.031862][T18652] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3551'. [ 1349.415812][T18549] device hsr_slave_0 entered promiscuous mode [ 1349.437794][T18549] device hsr_slave_1 entered promiscuous mode [ 1349.505540][T18664] smpboot: CPU 1 is now offline [ 1349.908441][T18659] loop6: detected capacity change from 0 to 4096 [ 1349.978830][T18659] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 1350.366978][T18659] Context (ID=0x0) not attached to queue pair (handle=0x0:0x2) [ 1350.528073][ C0] net_ratelimit: 50 callbacks suppressed [ 1350.607329][T18595] chnl_net:caif_netlink_parms(): no params data found [ 1350.617871][T16007] Bluetooth: hci2: command 0x041b tx timeout [ 1350.767673][T16397] Bluetooth: hci0: command 0x0419 tx timeout [ 1351.169576][T18705] x86: Booting SMP configuration: [ 1351.175269][T18705] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1351.355588][ T9196] device hsr_slave_0 left promiscuous mode [ 1351.427689][ T0] kvm-clock: cpu 1, msr ff0a041, secondary cpu clock [ 1351.431058][ T9196] device hsr_slave_1 left promiscuous mode [ 1351.470188][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 1351.549476][ T9196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1351.604175][ T9196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1351.697764][ T9196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1351.730808][ T9196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1351.770742][ T9196] device bridge_slave_1 left promiscuous mode [ 1351.808244][ T9196] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.820142][ T9196] device bridge_slave_0 left promiscuous mode [ 1351.826396][ T9196] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.957911][ T9196] device veth1_macvtap left promiscuous mode [ 1351.968210][ T9196] device veth0_macvtap left promiscuous mode [ 1351.974380][ T9196] device veth1_vlan left promiscuous mode [ 1352.039626][ T9196] device veth0_vlan left promiscuous mode [ 1352.236369][ T19] IRQ fixup: irq 34 move in progress, old vector 51 [ 1352.248890][T18756] smpboot: CPU 1 is now offline [ 1352.376950][T18762] x86: Booting SMP configuration: [ 1352.442434][T18762] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1352.479212][T18766] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1352.499326][ T0] kvm-clock: cpu 1, msr ff0a041, secondary cpu clock [ 1352.510165][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 1352.660668][T18766] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1352.688541][T16397] Bluetooth: hci2: command 0x040f tx timeout [ 1352.994466][T18759] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 1353.716844][T18815] smpboot: CPU 1 is now offline [ 1353.877494][ T9196] team0 (unregistering): Port device team_slave_1 removed [ 1354.016927][ T9196] team0 (unregistering): Port device team_slave_0 removed [ 1354.120209][ T9196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1354.269206][ T9196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1354.768517][T16397] Bluetooth: hci2: command 0x0419 tx timeout [ 1354.933975][ T9196] bond0 (unregistering): Released all slaves [ 1355.097136][T18821] PM: suspend entry (deep) [ 1355.455501][T18821] Filesystems sync: 0.325 seconds [ 1355.568087][ C0] net_ratelimit: 58 callbacks suppressed [ 1355.731290][T18831] PM: suspend entry (deep) [ 1355.755862][T18831] PM: suspend exit [ 1355.762737][T18595] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.794573][T18595] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.852300][T18595] device bridge_slave_0 entered promiscuous mode [ 1356.169691][T18595] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.202336][T18595] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.254488][T18595] device bridge_slave_1 entered promiscuous mode [ 1356.775973][T18595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1356.861626][T18595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1357.259968][T18595] team0: Port device team_slave_0 added [ 1357.359403][T18595] team0: Port device team_slave_1 added [ 1357.613892][T18549] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1357.648569][T18821] Bluetooth: hci1: Timed out waiting for suspend events [ 1357.656170][T16007] Bluetooth: hci1: command 0x0c1a tx timeout [ 1357.707191][T18821] Bluetooth: hci1: Suspend timeout bit: 4 [ 1357.734585][T18595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1357.755098][T18821] Bluetooth: hci1: Suspend timeout bit: 6 [ 1357.778855][T18595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1357.836474][T18821] Bluetooth: hci1: Suspend notifier action (3) failed: -110 [ 1358.000389][T18595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1358.069227][T18549] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1358.143189][T18595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1358.190217][T18595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1358.422985][T18595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1358.496383][T18549] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1358.609207][T18549] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1358.907687][T18595] device hsr_slave_0 entered promiscuous mode [ 1358.984472][T18595] device hsr_slave_1 entered promiscuous mode [ 1359.029310][T18595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1359.036906][T18595] Cannot create hsr debugfs directory [ 1359.519686][T18549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1359.656697][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1359.701758][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1359.728354][T16007] Bluetooth: hci1: command 0x0406 tx timeout [ 1359.766721][T18549] 8021q: adding VLAN 0 to HW filter on device team0 [ 1359.874196][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1359.909954][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1359.968294][T16007] Bluetooth: hci3: command 0x0c1a tx timeout [ 1359.974522][T18821] Bluetooth: hci3: Timed out waiting for suspend events [ 1359.988840][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 1359.996000][ T4318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1360.037544][T18821] Bluetooth: hci3: Suspend timeout bit: 4 [ 1360.075115][T18821] Bluetooth: hci3: Suspend timeout bit: 6 [ 1360.108713][T18821] Bluetooth: hci3: Suspend notifier action (3) failed: -110 [ 1360.199659][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1360.259670][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1360.308887][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1360.361348][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 1360.368549][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1360.437051][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1360.477834][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1360.594555][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1360.680857][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1360.739088][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1360.779691][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1360.825153][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1360.852442][ T4318] net_ratelimit: 51 callbacks suppressed [ 1360.868670][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1360.916197][T18549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1360.974055][T18549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1361.007158][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1361.059137][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1361.118625][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1361.492314][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.499102][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.562034][T18595] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1361.675955][T18595] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1361.785080][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1361.808395][ T4261] Bluetooth: hci1: command 0x0406 tx timeout [ 1361.818975][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1361.826514][T18595] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1361.893330][T18549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1361.975759][T18595] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1362.048874][T16007] Bluetooth: hci3: command 0x0406 tx timeout [ 1362.223921][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1362.258925][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1362.288775][T16007] Bluetooth: hci4: command 0x0c1a tx timeout [ 1362.295022][T18821] Bluetooth: hci4: Timed out waiting for suspend events [ 1362.341197][T18821] Bluetooth: hci4: Suspend timeout bit: 4 [ 1362.346958][T18821] Bluetooth: hci4: Suspend timeout bit: 6 [ 1362.426912][T18549] device veth0_vlan entered promiscuous mode [ 1362.438748][T18821] Bluetooth: hci4: Suspend notifier action (3) failed: -110 [ 1362.478945][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1362.506765][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1362.553057][T18549] device veth1_vlan entered promiscuous mode [ 1362.611065][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1362.644803][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1362.669911][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1362.765358][ T9196] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.920134][ T9196] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.049813][T18595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1363.086272][ T9196] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.158585][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1363.198795][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1363.239313][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1363.282531][T18549] device veth0_macvtap entered promiscuous mode [ 1363.325687][ T9196] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.423241][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1363.466899][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1363.499121][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1363.526299][T18549] device veth1_macvtap entered promiscuous mode [ 1363.566177][T18595] 8021q: adding VLAN 0 to HW filter on device team0 [ 1363.634705][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1363.679511][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1363.715317][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.722753][ T4318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1363.841493][T18549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.882249][T18549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.933080][T18549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.980990][T18549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.033122][T18549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1364.074581][T18549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.123365][T18549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1364.134672][T16397] Bluetooth: hci3: command 0x0406 tx timeout [ 1364.176632][T18549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.225395][T18549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1364.278358][T18549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.315547][T18549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1364.363181][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1364.372831][T16397] Bluetooth: hci4: command 0x0406 tx timeout [ 1364.400724][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1364.436028][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1364.473071][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 1364.480173][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1364.506499][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1364.528453][ T4261] Bluetooth: hci2: command 0x0c1a tx timeout [ 1364.534632][T18821] Bluetooth: hci2: Timed out waiting for suspend events [ 1364.551273][T18821] Bluetooth: hci2: Suspend timeout bit: 4 [ 1364.557031][T18821] Bluetooth: hci2: Suspend timeout bit: 6 [ 1364.564690][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1364.594169][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1364.602911][T18821] Bluetooth: hci2: Suspend notifier action (3) failed: -110 [ 1364.635262][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1364.646543][T18821] Freezing user space processes ... [ 1364.748957][T18821] [ 1364.751336][T18821] Freezing of tasks failed after 0.102 seconds (1 tasks refusing to freeze, wq_busy=0): [ 1364.807369][T18821] task:syz.6.3576 state:R running task stack:26128 pid:18803 ppid: 16647 flags:0x00004006 [ 1364.819757][T18821] Call Trace: [ 1364.823071][T18821] [ 1364.826022][T18821] __schedule+0x11c3/0x4350 [ 1364.830803][T18821] ? finish_lock_switch+0x12d/0x290 [ 1364.836031][T18821] ? finish_task_switch+0x1e4/0x650 [ 1364.841400][T18821] ? release_firmware_map_entry+0x190/0x190 [ 1364.847332][T18821] ? preempt_schedule_irq+0xb0/0x160 [ 1364.853247][T18821] preempt_schedule_irq+0xbb/0x160 [ 1364.858485][T18821] ? __cond_resched+0xd0/0xd0 [ 1364.863192][T18821] ? rcu_is_watching+0x11/0xa0 [ 1364.868098][T18821] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 1364.873925][T18821] irqentry_exit+0x63/0x70 [ 1364.878370][T18821] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1364.884361][T18821] RIP: 0010:__sanitizer_cov_trace_pc+0x2c/0x60 [ 1364.890627][T18821] Code: 04 24 65 48 8b 0d 54 4c 89 7e 65 8b 15 55 4c 89 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 34 16 00 00 00 74 2c <8b> 91 10 16 00 00 83 fa 02 75 21 48 8b 91 18 16 00 00 48 8b 32 48 [ 1364.910587][T18821] RSP: 0018:ffffc90003d2f4f8 EFLAGS: 00000246 [ 1364.916690][T18821] RAX: ffffffff81373c49 RBX: ffffc90003d2f8f0 RCX: ffff888024cfbb80 [ 1364.924709][T18821] RDX: 0000000000000000 RSI: ffffffff80000000 RDI: ffffff0507720000 [ 1364.932712][T18821] RBP: 0000000000000004 R08: ffffc90003d2f477 R09: ffffc90003d2f460 [ 1364.940729][T18821] R10: dffffc0000000000 R11: fffff520007a5e8f R12: 0000000000000000 [ 1364.948726][T18821] R13: dffffc0000000000 R14: ffffff0507720000 R15: ffffffff80000000 [ 1364.956723][T18821] ? note_page+0x1e9/0x13f0 [ 1364.961350][T18821] note_page+0x1e9/0x13f0 [ 1364.965878][T18821] ? note_page+0x13f0/0x13f0 [ 1364.970544][T18821] ptdump_pte_entry+0xc0/0xd0 [ 1364.975246][T18821] walk_pgd_range+0xf31/0x1370 [ 1364.980088][T18821] walk_page_range_novma+0x27b/0x360 [ 1364.985412][T18821] ? __walk_page_range+0x590/0x590 [ 1364.990559][T18821] ? rwsem_write_trylock+0x135/0x1c0 [ 1364.995867][T18821] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 1365.001215][T18821] ptdump_walk_pgd+0x187/0x2c0 [ 1365.005989][T18821] ptdump_walk_pgd_level_debugfs+0x1a4/0x230 [ 1365.012016][T18821] ? ptdump_walk_pgd_level+0x250/0x250 [ 1365.017485][T18821] ? ptdump_walk_user_pgd_level_checkwx+0x10/0x10 [ 1365.023984][T18821] ? note_page+0x13f0/0x13f0 [ 1365.028630][T18821] ? rcu_is_watching+0x11/0xa0 [ 1365.033417][T18821] ? trace_kmalloc_node+0x1f/0xa0 [ 1365.038495][T18821] ? __kmalloc_node+0x261/0x3a0 [ 1365.043374][T18821] ptdump_curknl_show+0x73/0x90 [ 1365.048280][T18821] seq_read_iter+0x460/0xc50 [ 1365.052894][T18821] seq_read+0x3dc/0x4f0 [ 1365.057061][T18821] ? seq_open+0x130/0x130 [ 1365.061428][T18821] ? debugfs_file_get+0x368/0x460 [ 1365.066539][T18821] ? debugfs_real_fops+0xa0/0xa0 [ 1365.071517][T18821] ? end_current_label_crit_section+0x14b/0x170 [ 1365.077862][T18821] full_proxy_read+0x109/0x1c0 [ 1365.082799][T18821] ? full_proxy_llseek+0x1b0/0x1b0 [ 1365.087998][T18821] vfs_read+0x2ff/0xd50 [ 1365.092165][T18821] ? __lock_acquire+0x7d40/0x7d40 [ 1365.097199][T18821] ? kernel_read+0x1e0/0x1e0 [ 1365.101839][T18821] ? mutex_lock_nested+0x17/0x20 [ 1365.106799][T18821] ? __fdget_pos+0x2bf/0x370 [ 1365.111423][T18821] ? ksys_read+0x70/0x260 [ 1365.115757][T18821] ksys_read+0x153/0x260 [ 1365.120027][T18821] ? vfs_write+0xd70/0xd70 [ 1365.124443][T18821] ? lockdep_hardirqs_on+0x94/0x140 [ 1365.129669][T18821] do_syscall_64+0x4c/0xa0 [ 1365.134154][T18821] ? clear_bhb_loop+0x30/0x80 [ 1365.138858][T18821] ? clear_bhb_loop+0x30/0x80 [ 1365.143538][T18821] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1365.149481][T18821] RIP: 0033:0x7fdf82f16559 [ 1365.153911][T18821] RSP: 002b:00007fdf8116e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1365.162368][T18821] RAX: ffffffffffffffda RBX: 00007fdf8319dfa0 RCX: 00007fdf82f16559 [ 1365.170367][T18821] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000003 [ 1365.178366][T18821] RBP: 00007fdf82fad8b0 R08: 0000000000000000 R09: 0000000000000000 [ 1365.186436][T18821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1365.194498][T18821] R13: 00007fdf8319e038 R14: 00007fdf8319dfa0 R15: 00007fff71a8aa18 [ 1365.202543][T18821] [ 1365.968969][T15613] net_ratelimit: 45 callbacks suppressed [ 1366.142697][ T9196] device hsr_slave_0 left promiscuous mode [ 1366.158952][ T9196] device hsr_slave_1 left promiscuous mode [ 1366.178273][ T9196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1366.185927][ T9196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1366.212974][T18821] [ 1366.215435][T18821] OOM killer enabled. [ 1366.233916][ T9196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1366.244145][T18821] Restarting tasks ... [ 1366.279061][T18821] done. [ 1366.298971][ T9196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1366.347239][T18821] PM: suspend exit [ 1366.379739][ T9196] device bridge_slave_1 left promiscuous mode [ 1366.386396][ T9196] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.448355][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 1366.511196][ T9196] device bridge_slave_0 left promiscuous mode [ 1366.523149][T18922] ioremap: invalid physical address 8000000000000000 [ 1366.562775][ T9196] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.592410][T18922] ------------[ cut here ]------------ [ 1366.610328][ T4261] Bluetooth: hci2: command 0x0406 tx timeout [ 1366.650748][T18922] WARNING: CPU: 0 PID: 18922 at arch/x86/mm/ioremap.c:200 __ioremap_caller+0x4f8/0x620 [ 1366.674937][ T9196] device veth1_macvtap left promiscuous mode [ 1366.715192][ T9196] device veth0_macvtap left promiscuous mode [ 1366.729604][T18922] Modules linked in: [ 1366.753568][T18922] CPU: 0 PID: 18922 Comm: syz.1.3586 Tainted: G S syzkaller #0 [ 1366.771296][ T9196] device veth1_vlan left promiscuous mode [ 1366.805373][ T9196] device veth0_vlan left promiscuous mode [ 1366.821885][T18922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1366.892178][T18922] RIP: 0010:__ioremap_caller+0x4f8/0x620 [ 1366.931777][T18922] Code: 85 ff 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 69 43 00 48 8b 74 24 60 48 c7 c7 20 bc 28 8a e8 c8 b8 81 08 <0f> 0b eb 8d 4c 8b 74 24 28 41 81 e6 ff 0f 00 00 4d 01 ee 48 8b 7c [ 1367.030180][T18927] x86: Booting SMP configuration: [ 1367.048513][T18927] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1367.074608][T18922] RSP: 0018:ffffc900041df900 EFLAGS: 00010246 [ 1367.098539][ T0] kvm-clock: cpu 1, msr ff0a041, secondary cpu clock [ 1367.110245][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 1367.118394][T18922] RAX: 0000000000000032 RBX: 1ffff9200083bf00 RCX: 84d36a802bbe1800 [ 1367.133813][T18922] RDX: ffffc9000e9ca000 RSI: 000000000000793f RDI: 0000000000007940 [ 1367.192348][T18922] RBP: ffffc900041dfa10 R08: ffffc900041df427 R09: 1ffff9200083be84 [ 1367.218414][T18922] R10: dffffc0000000000 R11: fffff5200083be85 R12: 000000000000002e [ 1367.236497][T18922] R13: 8000000000000000 R14: 0000000000020000 R15: dffffc0000000000 [ 1367.256513][T18922] FS: 00007f693573c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1367.267110][T18922] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1367.288238][T18922] CR2: 00007f6d1c4ed158 CR3: 0000000061771000 CR4: 00000000003506f0 [ 1367.314919][T18922] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1367.338537][T18922] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1367.346592][T18922] Call Trace: [ 1367.364477][T18922] [ 1367.367475][T18922] ? phram_setup+0x87c/0xdf0 [ 1367.396038][T18922] ? ioremap+0x30/0x30 [ 1367.400829][T18922] phram_setup+0x87c/0xdf0 [ 1367.405334][T18922] ? __mutex_lock_common+0x435/0x2400 [ 1367.438237][T18922] ? phram_param_call+0x70/0x70 [ 1367.443195][T18922] ? mutex_lock_io_nested+0x60/0x60 [ 1367.451475][T18922] ? read_lock_is_recursive+0x10/0x10 [ 1367.456931][T18922] param_attr_store+0x20a/0x300 [ 1367.475970][T18922] ? param_attr_show+0x170/0x170 [ 1367.498290][T18922] ? sysfs_kf_read+0x350/0x350 [ 1367.503206][T18922] module_attr_store+0x5b/0x80 [ 1367.516665][T18922] kernfs_fop_write_iter+0x3a8/0x500 [ 1367.523234][T18922] vfs_write+0x748/0xd70 [ 1367.533800][T18922] ? file_end_write+0x250/0x250 [ 1367.543309][T18922] ? mutex_lock_nested+0x17/0x20 [ 1367.558424][T18922] ? __fdget_pos+0x2bf/0x370 [ 1367.563084][T18922] ? ksys_write+0x70/0x260 [ 1367.567544][T18922] ksys_write+0x153/0x260 [ 1367.598915][T18922] ? __ia32_sys_read+0x80/0x80 [ 1367.603766][T18922] ? lockdep_hardirqs_on+0x94/0x140 [ 1367.618125][T18922] do_syscall_64+0x4c/0xa0 [ 1367.622616][T18922] ? clear_bhb_loop+0x30/0x80 [ 1367.627338][T18922] ? clear_bhb_loop+0x30/0x80 [ 1367.645592][T18922] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1367.658490][T18922] RIP: 0033:0x7f69374e4559 [ 1367.662975][T18922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1367.718173][T18922] RSP: 002b:00007f693573c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1367.726676][T18922] RAX: ffffffffffffffda RBX: 00007f693776bfa0 RCX: 00007f69374e4559 [ 1367.758271][T18922] RDX: 000000000000001e RSI: 0000200000000900 RDI: 0000000000000003 [ 1367.766414][T18922] RBP: 00007f693757b8b0 R08: 0000000000000000 R09: 0000000000000000 [ 1367.791367][T18922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1367.820534][T18922] R13: 00007f693776c038 R14: 00007f693776bfa0 R15: 00007ffcc780a6d8 [ 1367.836374][T18922] [ 1367.846509][T18922] irq event stamp: 5457 [ 1367.855125][T18922] hardirqs last enabled at (5563): [] finish_lock_switch+0x12d/0x290 [ 1367.871807][ T9196] team0 (unregistering): Port device team_slave_1 removed [ 1367.880446][T18922] hardirqs last disabled at (5596): [] __schedule+0x2fc/0x4350 [ 1367.919149][T18922] softirqs last enabled at (6418): [] __irq_exit_rcu+0x13b/0x230 [ 1367.932459][T18922] softirqs last disabled at (6433): [] __irq_exit_rcu+0x13b/0x230 [ 1367.943339][ T9196] team0 (unregistering): Port device team_slave_0 removed [ 1367.957458][T18922] ---[ end trace 78733a699cafd4f0 ]--- [ 1367.967584][T18922] phram: ioremap failed [ 1367.979927][ T9196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1368.035739][ T9196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1368.254210][ T9196] bond0 (unregistering): Released all slaves [ 1368.319587][T18549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1368.330384][T18549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.343427][T18549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1368.355506][T18549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.366348][T18549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1368.379423][T18549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.391413][T18549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1368.410739][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1368.422260][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1368.432573][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1368.446353][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1368.481290][T18549] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.491694][T18549] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.503814][T18549] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.512880][T18549] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.524747][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1368.537520][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1368.547009][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1368.556423][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1368.571027][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1368.591664][T18595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1368.651983][T18595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1368.682572][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1368.703753][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1368.729504][T16397] Bluetooth: hci2: command 0x0406 tx timeout [ 1368.970981][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1368.989025][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1368.997197][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1369.096580][T10791] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1369.113846][T10791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1369.131227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1369.190451][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1369.223775][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1369.283119][T18595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1369.766470][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1369.783569][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1369.871485][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1369.887489][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1369.906182][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1369.914932][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1369.933961][T18595] device veth0_vlan entered promiscuous mode [ 1369.976404][T18595] device veth1_vlan entered promiscuous mode [ 1370.056013][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1370.070976][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1370.103672][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1370.141783][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1370.190383][T18595] device veth0_macvtap entered promiscuous mode [ 1370.213047][T18595] device veth1_macvtap entered promiscuous mode [ 1370.275946][T18595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1370.307653][T18595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.329567][T18595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1370.347322][T18595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.368474][T18595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1370.388100][T18595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.418496][T18595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1370.439121][T18595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.468082][T18595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1370.488347][T18595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.514909][T18595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1370.530994][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1370.541690][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1370.553206][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1370.562642][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1370.577437][T18595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1370.594566][T18595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.613761][T18595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1370.636022][T18595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.654475][T18595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1370.666894][T18595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.684059][T18595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1370.713721][T18595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.734531][T18595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1370.758462][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1370.779395][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1370.800972][T18595] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.817441][T18595] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.827397][T18595] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.843691][T18595] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.984576][T18595] net_ratelimit: 92 callbacks suppressed [ 1371.104649][T15613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1371.118017][T15613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1371.141053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1371.219641][T15613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1371.227596][T15613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1371.244939][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1376.128473][ T4318] net_ratelimit: 100 callbacks suppressed