last executing test programs: 2m21.037736417s ago: executing program 3 (id=1148): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) open(&(0x7f0000000280)='./cgroup.cpu/cgroup.procs\x00', 0x18d03e, 0x51) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) prlimit64(0x0, 0xc, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x41102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socket$packet(0x11, 0x3, 0x300) connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(0xffffffffffffffff, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r3, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/132, 0x84}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) 2m20.703668315s ago: executing program 3 (id=1153): openat$binderfs_log(0xffffffffffffff9c, &(0x7f00000020c0)='./binderfs/binder_logs/stats\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x30, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 2m18.844253018s ago: executing program 3 (id=1158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 2m15.857367798s ago: executing program 3 (id=1162): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x1, 0x0, 0x0, 0x400000) r4 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r4, 0x8800000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) r7 = dup3(r6, r5, 0x0) sendfile(r7, r4, 0x0, 0x1000009) syz_open_dev$sndpcmp(0x0, 0x0, 0x2) 2m8.666173086s ago: executing program 3 (id=1174): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$inet6_mptcp(0xa, 0x1, 0x106) wait4(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$OTPGETREGIONCOUNT(0xffffffffffffffff, 0x40044d0e, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x14, 0x2025, 0x1, 0x2, 0x25dfdbfe, "", [@nested={0x4, 0x0, 0x0, 0x0}]}, 0x14}], 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r5, 0x30b, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20000004) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000700), 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r4) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x1) fchdir(0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x400, 0x124) 2m5.798042583s ago: executing program 3 (id=1178): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x5) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x7000000) keyctl$session_to_parent(0x12) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x200000, 0x62) fsetxattr$security_evm(r2, &(0x7f0000000080), 0x0, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, 0x0, 0x20048840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(0xffffffffffffffff, 0x1) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x31, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r5 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m50.399987232s ago: executing program 32 (id=1178): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x5) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x7000000) keyctl$session_to_parent(0x12) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x200000, 0x62) fsetxattr$security_evm(r2, &(0x7f0000000080), 0x0, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, 0x0, 0x20048840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(0xffffffffffffffff, 0x1) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x31, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r5 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.84238581s ago: executing program 4 (id=1416): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) syz_emit_ethernet(0x36, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000910000000000000000000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000000908000140000000090900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r6, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2006c00030100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba4", 0x5b) 15.714834443s ago: executing program 0 (id=1419): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r0, &(0x7f0000000040), 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 15.517153058s ago: executing program 2 (id=1421): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x400000007ff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x101480) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x600000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', 0x100}) write$tun(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffffffffffaa1b8e0d07bb08004500452c001e0000002f9078ac1e0001600000010000655800189078040000000000000065"], 0xfdef) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$update(0x2, r6, 0x0, 0x0) ioctl$XFS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000100)) 13.044733776s ago: executing program 4 (id=1423): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/watchdog\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 13.034011255s ago: executing program 1 (id=1424): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) read$FUSE(r1, &(0x7f00000024c0)={0x2020}, 0x2020) 12.827107651s ago: executing program 4 (id=1426): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1b6) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000002c0)={'pcl812\x00', [0x140, 0x3, 0x7, 0xffffffff, 0x1, 0xfffffc00, 0x8002, 0x2725d640, 0x8, 0xc72e, 0x9, 0xffffffff, 0x4, 0x400008, 0xfffffffe, 0x80000000, 0xff, 0xed, 0x2, 0x8, 0x4, 0x1fffffe, 0x80, 0x4000b, 0x954, 0x2, 0xaf, 0x581, 0x9, 0x80, 0x4]}) ioctl$COMEDI_DEVINFO(r1, 0x80b06401, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xac, 0x24, 0x601, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1], [0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xac}}, 0x0) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)='12', 0x2, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) flistxattr(0xffffffffffffffff, &(0x7f0000000380)=""/250, 0xfa) 12.826886111s ago: executing program 1 (id=1427): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000180)={{0x7e, @rand_addr=0x64010101, 0x4e24, 0x2, 'lblc\x00', 0x4, 0xf, 0x5b}, {@broadcast, 0x4e24, 0x1, 0x101, 0x5}}, 0x44) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b0043"], 0x97) 12.785927402s ago: executing program 2 (id=1428): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x8, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x9, &(0x7f0000000200)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x1}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, 0x9, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100030010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000500)={0x308, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x57, 0x3, "27efa290a70d4d75a60e4fb600daed68b059b6d977799fe3dbc97830ad52cd1e4cf99677c8af195b8d5e599e0f0683432bd55608d3f81984deb20faf7182d8a4895a35cdfcd5f5b5eb435e0541e98e52df75c5"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0xfffffffffffffdb3, 0x6, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd3}]}, @TIPC_NLA_NODE={0x25c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0x85, 0x3, "a65cca147c2743732da5e00f490692ae928fa02231b2921fac5b0198f39adaa04c4a2556a76d037a6b731fb49e56157beda761336a0f5b3c9c37742d33ee9c1e9720ff475caaca461292c9ef352dac983955d2fc2e9a1839c79dd63c0dee49aebc6c5e25df6352ac922a33cce9934d9e317aadba176c2a78461a5711c653b06caa"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0xb9, 0x3, "bf9389c6dffaa6d5460e26d6628787ed8434d7720868ad8454b453c8d19848c366c6283b80030c29fc314ccf6f8e28a66d72c44ac490916452356d51ea8ec0043ffcbaf6963b3081b4ad67c7bd871a53de6631aa7d6a65e0041e13d5b0618bba12fe6aeeb188004bd6a477f65a97fdd87d4c53017b2ea42b7ee6b09a2f86fa46c5bbdfedc4937ce823d9e426d9833bee03b070e7c34203e636459d9e7b0a189e7985b4d39955be00b2e85c25066fcd96eb03f408ae"}, @TIPC_NLA_NODE_ID={0xe9, 0x3, "a844499f6e1f3d68da5e8899dd0985bd7fcc0af2f3dc8a26490bc6e93d51b15b59710f6a4fc9d267636dafd0728614418a2a63f2be8b112b03509b89d83a1a0996d92f48edf54db12a727dd44b30214233a98aa1805af5d3d749b7ec9a53bd6fcb1074eb9d4400e369739845810b02087ab77328efd0b33bcf4ad0ba0d03e999fc282668a01f0d559f133cc13eb71f54b94a810588b358574855efda408738f1929c148fed4cf7ea0f5c8d1ad662ddc29c30e62e879008b455320f8d413465f6566b20fa923fc3022d13015974668c26a8b0a9c6c006b9ead20a3e304af56b287be1b9a86d"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) mkdirat(0xffffffffffffff9c, 0x0, 0x187) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) clock_gettime(0x600, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x60}}, 0x4840) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) 12.770298072s ago: executing program 0 (id=1429): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x804000, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") 8.631949318s ago: executing program 4 (id=1434): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)=""/80}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000780)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 8.536462321s ago: executing program 0 (id=1436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.501535481s ago: executing program 2 (id=1437): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/watchdog\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 8.436770723s ago: executing program 1 (id=1439): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) read$FUSE(r1, &(0x7f00000024c0)={0x2020}, 0x2020) 8.288303506s ago: executing program 2 (id=1440): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', 0x0, 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x2904c, 0x58, 0x10003, '\x00', [{0x0, 0x5, 0xcd, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x8001}]}) 7.465417026s ago: executing program 1 (id=1441): bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) read$FUSE(r1, &(0x7f00000024c0)={0x2020}, 0x2020) read(r1, 0x0, 0x0) 7.410147217s ago: executing program 4 (id=1443): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$inet6_mptcp(0xa, 0x1, 0x106) wait4(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$OTPGETREGIONCOUNT(0xffffffffffffffff, 0x40044d0e, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x14, 0x2025, 0x1, 0x2, 0x25dfdbfe, "", [@nested={0x4, 0x0, 0x0, 0x0}]}, 0x14}], 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000"], 0x7c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r5, 0x30b, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20000004) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000700), 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r4) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x1) fchdir(0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x400, 0x124) 7.401269197s ago: executing program 0 (id=1444): semop(0x0, &(0x7f00000000c0)=[{0x1, 0xff80, 0x1400}], 0x1) 5.97891784s ago: executing program 5 (id=1446): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x3, 0x815, 0x13, 0xfffffffd, 0x4}) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, 0x0) inotify_init() 5.408176704s ago: executing program 1 (id=1447): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x8, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x9, &(0x7f0000000200)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x1}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, 0x9, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100030010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000500)={0x308, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x57, 0x3, "27efa290a70d4d75a60e4fb600daed68b059b6d977799fe3dbc97830ad52cd1e4cf99677c8af195b8d5e599e0f0683432bd55608d3f81984deb20faf7182d8a4895a35cdfcd5f5b5eb435e0541e98e52df75c5"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0xfffffffffffffdb3, 0x6, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd3}]}, @TIPC_NLA_NODE={0x25c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0x85, 0x3, "a65cca147c2743732da5e00f490692ae928fa02231b2921fac5b0198f39adaa04c4a2556a76d037a6b731fb49e56157beda761336a0f5b3c9c37742d33ee9c1e9720ff475caaca461292c9ef352dac983955d2fc2e9a1839c79dd63c0dee49aebc6c5e25df6352ac922a33cce9934d9e317aadba176c2a78461a5711c653b06caa"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0xb9, 0x3, "bf9389c6dffaa6d5460e26d6628787ed8434d7720868ad8454b453c8d19848c366c6283b80030c29fc314ccf6f8e28a66d72c44ac490916452356d51ea8ec0043ffcbaf6963b3081b4ad67c7bd871a53de6631aa7d6a65e0041e13d5b0618bba12fe6aeeb188004bd6a477f65a97fdd87d4c53017b2ea42b7ee6b09a2f86fa46c5bbdfedc4937ce823d9e426d9833bee03b070e7c34203e636459d9e7b0a189e7985b4d39955be00b2e85c25066fcd96eb03f408ae"}, @TIPC_NLA_NODE_ID={0xe9, 0x3, "a844499f6e1f3d68da5e8899dd0985bd7fcc0af2f3dc8a26490bc6e93d51b15b59710f6a4fc9d267636dafd0728614418a2a63f2be8b112b03509b89d83a1a0996d92f48edf54db12a727dd44b30214233a98aa1805af5d3d749b7ec9a53bd6fcb1074eb9d4400e369739845810b02087ab77328efd0b33bcf4ad0ba0d03e999fc282668a01f0d559f133cc13eb71f54b94a810588b358574855efda408738f1929c148fed4cf7ea0f5c8d1ad662ddc29c30e62e879008b455320f8d413465f6566b20fa923fc3022d13015974668c26a8b0a9c6c006b9ead20a3e304af56b287be1b9a86d"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) mkdirat(0xffffffffffffff9c, 0x0, 0x187) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) clock_gettime(0x600, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x60}}, 0x4840) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) 5.379410465s ago: executing program 5 (id=1448): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0/dev0/enable\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)="a1a73940", 0x4) close(r0) 4.449693876s ago: executing program 5 (id=1449): syz_open_procfs(0x0, &(0x7f0000000940)='net/igmp\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="d4010000100033062cbd7000000000007f0000010000000000000000000000000000000000000000000000000000000000000000000000400200000088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001fffffffd320000007f000001000000000000000000e4ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000100000002000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009c0008"], 0x1d4}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) 3.901865689s ago: executing program 0 (id=1450): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/watchdog\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 3.901341189s ago: executing program 2 (id=1451): bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) read$FUSE(r1, &(0x7f00000024c0)={0x2020}, 0x2020) 3.85229993s ago: executing program 5 (id=1452): setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 3.583754576s ago: executing program 5 (id=1453): r0 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f00000020c0)='./binderfs/binder_logs/stats\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) read(r0, &(0x7f0000002100)=""/4096, 0x1000) 2.525195041s ago: executing program 5 (id=1454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x1, 0x0, 0x0, 0x400000) r4 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r4, 0x8800000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) r7 = dup3(r6, r5, 0x0) sendfile(r7, r4, 0x0, 0x1000009) syz_open_dev$sndpcmp(0x0, 0x0, 0x2) 826.854001ms ago: executing program 4 (id=1455): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x400000007ff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x101480) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x600000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', 0x100}) write$tun(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffffffffffaa1b8e0d07bb08004500452c001e0000002f9078ac1e000160000001000065580018907804"], 0xfdef) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$update(0x2, r6, 0x0, 0x0) ioctl$XFS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000100)) 71.314398ms ago: executing program 1 (id=1456): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) 312.03µs ago: executing program 2 (id=1457): socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0x4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) write(r2, &(0x7f0000000040)="240000001e005f02", 0x8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000020000100000000000000000002000000000000020000000008000400fbffff"], 0x40}}, 0x0) 0s ago: executing program 0 (id=1458): syz_open_dev$video4linux(&(0x7f0000000080), 0x100000000, 0x183d40) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x49, &(0x7f0000000400)=[{&(0x7f0000000080)="944cf7", 0x3}], 0x1}, 0x20000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.203089][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.212548][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.221743][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.228979][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.236827][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.245915][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.254533][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.263343][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.275934][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.284719][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.295218][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.303799][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.316903][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.329515][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.344122][ T1179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.353150][ T1179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.379201][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.392570][ T1179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.403502][ T1179] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.412612][ T1179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.421333][ T1179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.431186][ T1179] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.444577][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.463461][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.471899][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.482657][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.491702][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.500842][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.509377][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.516983][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.524881][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.533518][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.543475][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.555677][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.570668][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.581600][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.593826][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.601006][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.625020][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.653805][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.673910][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.688135][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.696908][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.705722][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.712826][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.725026][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.733572][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.741641][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.750468][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.759724][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.769289][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.778494][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.785585][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.793545][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.808114][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.828399][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.848470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.858862][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.866002][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.874497][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.883675][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.893152][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.938695][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.960676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.973282][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.980505][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.994796][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.004440][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.019511][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.026600][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.040939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.052407][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.063228][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.072297][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.081563][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.090884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.099837][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.109328][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.118210][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.143945][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.155149][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.167534][ T4290] Bluetooth: hci0: command 0x041b tx timeout [ 67.184685][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.199007][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.206962][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.216285][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.225275][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.234903][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.243736][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.252486][ T4290] Bluetooth: hci4: command 0x041b tx timeout [ 67.258642][ T4286] Bluetooth: hci1: command 0x041b tx timeout [ 67.258660][ T4291] Bluetooth: hci2: command 0x041b tx timeout [ 67.264626][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 67.287869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.302415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.311090][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.325670][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.334725][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.343269][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.352257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.361166][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.370659][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.395970][ T4283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.414446][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.455478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.465043][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.474116][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.486163][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.495557][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.505146][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.514475][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.523086][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.531947][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.541469][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.552271][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.569653][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.579145][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.629144][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.659248][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.696790][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.729317][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.790843][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.817988][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.861972][ T4274] device veth0_vlan entered promiscuous mode [ 67.878261][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.886179][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.896854][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.905780][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.914351][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.922399][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.938071][ T4277] device veth0_vlan entered promiscuous mode [ 67.949815][ T4274] device veth1_vlan entered promiscuous mode [ 67.973819][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.991326][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.018115][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.030077][ T4277] device veth1_vlan entered promiscuous mode [ 68.056293][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.093999][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.102931][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.113042][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.128758][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.143476][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.168401][ T4274] device veth0_macvtap entered promiscuous mode [ 68.181279][ T4274] device veth1_macvtap entered promiscuous mode [ 68.196794][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.206079][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.215343][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.224787][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.253305][ T4277] device veth0_macvtap entered promiscuous mode [ 68.266160][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.279125][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.289124][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.298451][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.306875][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.315464][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.324053][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.332067][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.344022][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.354320][ T4277] device veth1_macvtap entered promiscuous mode [ 68.369808][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.376836][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.389613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.402749][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.420525][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.443473][ T4272] device veth0_vlan entered promiscuous mode [ 68.452053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.469702][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.482191][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.493407][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.510050][ T4274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.519487][ T4274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.529860][ T4274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.540184][ T4274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.554652][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.566866][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.580894][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.593919][ T4272] device veth1_vlan entered promiscuous mode [ 68.605224][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.618252][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.630082][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.641766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.664228][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.675096][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.689755][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.727988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.736718][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.751513][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.761819][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.824445][ T4277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.840324][ T4277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.851061][ T4277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.859894][ T4277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.870979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.881034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.929228][ T4272] device veth0_macvtap entered promiscuous mode [ 68.940443][ T4283] device veth0_vlan entered promiscuous mode [ 68.948878][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.962126][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.972183][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.009514][ T4272] device veth1_macvtap entered promiscuous mode [ 69.022258][ T4283] device veth1_vlan entered promiscuous mode [ 69.034297][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.044321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.053903][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.062151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.101815][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.116070][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.127200][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.137846][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.149432][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.178988][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.188511][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.197003][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.210120][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.219332][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.231430][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.242327][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.252299][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 69.259259][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.269818][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.281141][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.309208][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.317922][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.325908][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.327938][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 69.333621][ T4291] Bluetooth: hci4: command 0x040f tx timeout [ 69.339377][ T4286] Bluetooth: hci2: command 0x040f tx timeout [ 69.345242][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 69.366740][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.375619][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.387786][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.396225][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.405982][ T4283] device veth0_macvtap entered promiscuous mode [ 69.419482][ T4272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.428801][ T4272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.437728][ T4272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.446415][ T4272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.464891][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.464924][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.481703][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.489978][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.490666][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.512172][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.521496][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.531424][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.540452][ T4273] device veth0_vlan entered promiscuous mode [ 69.552788][ T4283] device veth1_macvtap entered promiscuous mode [ 69.593847][ T4273] device veth1_vlan entered promiscuous mode [ 69.647879][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.665348][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.677023][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.688200][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.699227][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.707029][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.724805][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.746896][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.757067][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.772130][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.782220][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.795592][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.807928][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.827937][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.839290][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.859879][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.876212][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.886276][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.898564][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.908538][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.919011][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.933371][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.957065][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.965987][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.986202][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.997710][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.008760][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.026156][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.036953][ T4283] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.051898][ T4283] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.061321][ T4283] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.070119][ T4283] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.717132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 70.727117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 70.737120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 70.747118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 70.757124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 70.827120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 70.837119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 70.847118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 70.857121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 70.867131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 71.390792][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 71.392724][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.405064][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.407963][ T4291] Bluetooth: hci2: command 0x0419 tx timeout [ 71.411867][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 71.417353][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 71.434856][ T4286] Bluetooth: hci4: command 0x0419 tx timeout [ 71.453940][ T4273] device veth0_macvtap entered promiscuous mode [ 71.473826][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.484286][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.497555][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 71.508491][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 71.518880][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 71.527967][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 71.535372][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 71.544498][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 71.551918][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 71.560469][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 71.569290][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 71.669875][ T4273] device veth1_macvtap entered promiscuous mode [ 71.691771][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.732893][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.734530][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.777143][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.794682][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.827394][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.847139][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.867270][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.887910][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.907141][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.928861][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.942005][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.979708][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.028959][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.227721][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.251415][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.267283][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.301775][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.333875][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.357326][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.377454][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.397145][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.428429][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.438198][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.446022][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.500158][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.522633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.546434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.815432][ T4273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.850705][ T4273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.860222][ T4273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.937209][ T4273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.416461][ T4379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.516459][ T4379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.626823][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.926517][ T4384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9'. [ 76.658454][ T4379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.666293][ T4379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.708991][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.729274][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.740954][ T4387] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.759806][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.782103][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.841752][ T4389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10'. [ 78.165177][ T4408] serio: Serial port ttyS3 [ 78.270423][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.278026][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.848355][ T4412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.091456][ T4422] syz.1.17 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 80.454516][ T4433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19'. [ 80.658287][ T4447] tipc: Enabling of bearer rejected, failed to enable media [ 81.280613][ T4457] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 81.538317][ T4453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'. [ 82.276717][ T4472] serio: Serial port ttyS3 [ 82.371236][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 82.379165][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 82.410855][ T4477] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.117170][ T26] audit: type=1800 audit(1791553105.820:2): pid=4492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.31" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 86.360784][ T4507] [U]  [ 86.609842][ T7] cfg80211: failed to load regulatory.db [ 86.776379][ T4519] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 86.785387][ T4522] Zero length message leads to an empty skb [ 86.796858][ T4522] device syzkaller0 entered promiscuous mode [ 86.823352][ T4522] tipc: Started in network mode [ 86.856276][ T4522] tipc: Node identity 52f2d51957ab, cluster identity 4711 [ 86.892208][ T4522] tipc: Enabled bearer , priority 0 [ 86.934326][ T4518] tipc: Resetting bearer [ 87.033649][ T4533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.37'. [ 87.269973][ T4518] tipc: Disabling bearer [ 87.837332][ T4532] tipc: Enabling of bearer rejected, failed to enable media [ 88.124152][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.783278][ T4548] serio: Serial port ttyS3 [ 88.791925][ T4546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 89.690857][ T4569] kernel profiling enabled (shift: 23) [ 89.981533][ T4560] [U]  [ 91.553221][ T4588] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 91.680207][ T4593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.52'. [ 92.792902][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 92.800453][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 92.812952][ T4597] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.019854][ T4603] serio: Serial port ttyS3 [ 95.479341][ T4619] tipc: Enabling of bearer rejected, failed to enable media [ 96.422024][ T4627] [U]  [ 96.610195][ T26] audit: type=1800 audit(1791553118.350:3): pid=4642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.61" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 96.936655][ T4654] netlink: 36 bytes leftover after parsing attributes in process `syz.2.62'. [ 96.965535][ T4653] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 98.367279][ T4661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.67'. [ 98.649696][ T4645] syz.4.61 (4645) used greatest stack depth: 19360 bytes left [ 98.818003][ T26] audit: type=1800 audit(1791553120.560:4): pid=4673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.69" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 99.745185][ T4686] tipc: Enabling of bearer rejected, failed to enable media [ 99.998357][ T4696] 9pnet_virtio: no channels available for device syz [ 100.360105][ T4708] device syzkaller0 entered promiscuous mode [ 100.393543][ T4708] tipc: Started in network mode [ 100.412540][ T4708] tipc: Node identity f6d357515bc4, cluster identity 4711 [ 100.433743][ T4708] tipc: Enabled bearer , priority 0 [ 100.444209][ T4706] tipc: Resetting bearer [ 100.513694][ T4706] tipc: Disabling bearer [ 100.566173][ T4712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.79'. [ 100.610318][ T4713] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 100.685543][ T4690] [U]  [ 100.851726][ T4719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.80'. [ 103.520063][ T26] audit: type=1800 audit(1791553125.260:5): pid=4743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.87" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 103.542782][ T4750] ip_tables: iptables: counters copy to user failed while replacing table [ 103.669603][ T4756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.90'. [ 103.721960][ T4759] tipc: Enabling of bearer rejected, failed to enable media [ 104.218938][ T4769] device syzkaller0 entered promiscuous mode [ 104.235534][ T4769] tipc: Started in network mode [ 104.240959][ T4769] tipc: Node identity 86b6039d7b68, cluster identity 4711 [ 104.267372][ T4769] tipc: Enabled bearer , priority 0 [ 104.300329][ T4765] tipc: Resetting bearer [ 104.376822][ T4765] tipc: Disabling bearer [ 104.796572][ T4779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.94'. [ 104.845160][ T4768] [U]  [ 107.114208][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 107.231395][ T4794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.716191][ T4805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.101'. [ 109.820181][ T4817] tipc: Enabling of bearer rejected, failed to enable media [ 110.587206][ T4838] tipc: Enabling of bearer rejected, failed to enable media [ 112.114473][ T4842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.108'. [ 112.351624][ T4855] netlink: 28 bytes leftover after parsing attributes in process `syz.3.111'. [ 113.436546][ T4861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.113'. [ 114.237247][ T4858] infiniband syz0: set active [ 114.286671][ T4858] infiniband syz0: added team_slave_0 [ 114.324197][ T4858] rdma_rxe: unable to create cq [ 114.347586][ T4858] infiniband syz0: Couldn't create ib_mad CQ [ 114.373124][ T26] audit: type=1800 audit(1791553136.110:6): pid=4868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.114" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 114.418322][ T4858] infiniband syz0: Couldn't open port 1 [ 114.491556][ T4858] RDS/IB: syz0: added [ 115.548942][ T4858] smc: adding ib device syz0 with port count 1 [ 115.576652][ T4858] smc: ib device syz0 port 1 has pnetid [ 117.170442][ T4895] tipc: Enabling of bearer rejected, failed to enable media [ 117.865757][ T4906] tipc: Started in network mode [ 117.872296][ T4906] tipc: Node identity 820f46ea358b, cluster identity 4711 [ 117.887382][ T4906] tipc: Enabled bearer , priority 0 [ 117.905086][ T4905] tipc: Disabling bearer [ 119.226771][ T4909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.122'. [ 119.350078][ T4926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.128'. [ 121.810630][ T4939] device syzkaller0 entered promiscuous mode [ 121.829194][ T4939] tipc: Enabled bearer , priority 0 [ 121.888418][ T4939] tipc: Resetting bearer [ 121.930126][ T4943] tipc: Enabled bearer , priority 0 [ 121.955433][ T4938] tipc: Resetting bearer [ 122.001453][ T4938] tipc: Disabling bearer [ 122.042363][ T4941] tipc: Disabling bearer [ 123.365857][ T4964] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 124.000668][ T26] audit: type=1800 audit(1791553145.740:7): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.140" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 124.318292][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 124.376337][ T4972] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.451370][ T4967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.142'. [ 125.651991][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 127.770252][ T4994] tipc: Enabled bearer , priority 0 [ 128.416511][ T4992] tipc: Disabling bearer [ 128.854580][ T5008] serio: Serial port ttyS3 [ 130.478930][ T5020] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 131.195928][ T5016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.155'. [ 131.283413][ T5024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.156'. [ 132.966755][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.973140][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.998642][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 136.010889][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 136.170772][ T5052] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.617269][ T26] audit: type=1800 audit(1791553158.340:8): pid=5056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.166" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 137.034881][ T5065] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 138.389513][ T5077] i2c i2c-0: delete_device: Can't parse I2C address [ 138.435795][ T5076] device syzkaller0 entered promiscuous mode [ 139.666026][ T5084] tipc: Enabled bearer , priority 0 [ 139.717873][ T5075] tipc: Resetting bearer [ 139.792921][ T5075] tipc: Disabling bearer [ 145.768581][ T5122] device syzkaller0 entered promiscuous mode [ 145.810326][ T5122] tipc: Enabled bearer , priority 0 [ 145.848019][ T5121] tipc: Resetting bearer [ 145.923062][ T5121] tipc: Disabling bearer [ 155.957397][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 155.969500][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 156.623777][ T5204] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.101125][ T5231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.214'. [ 160.388431][ T5241] device syzkaller0 entered promiscuous mode [ 160.454171][ T5241] tipc: Enabled bearer , priority 0 [ 160.525829][ T5241] tipc: Resetting bearer [ 160.548550][ T5240] tipc: Resetting bearer [ 160.649046][ T5243] 9pnet: Could not find request transport: fd0x0000000000000006 [ 160.683242][ T5240] tipc: Disabling bearer [ 160.820184][ T5247] netlink: 36 bytes leftover after parsing attributes in process `syz.3.215'. [ 161.373605][ T5254] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 161.386097][ T5254] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 161.402758][ T5254] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.221936][ T5279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.227'. [ 166.696095][ T5295] device syzkaller0 entered promiscuous mode [ 166.723945][ T5295] tipc: Enabled bearer , priority 0 [ 166.733192][ T26] audit: type=1800 audit(1791553188.410:9): pid=5296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.230" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 166.753889][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.754512][ T5295] tipc: Resetting bearer [ 166.856086][ T5294] tipc: Resetting bearer [ 166.953950][ T5294] tipc: Disabling bearer [ 167.319174][ T5301] netlink: 28 bytes leftover after parsing attributes in process `syz.4.233'. [ 167.512830][ T26] audit: type=1800 audit(1791553189.250:10): pid=5304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.234" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 170.020476][ T5328] i2c i2c-0: delete_device: Can't find device in list [ 171.301790][ T5326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.240'. [ 171.630986][ T4320] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 171.947310][ T4320] usb 3-1: Using ep0 maxpacket: 8 [ 171.969288][ T4320] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 172.032685][ T4320] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.095225][ T4320] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 172.124693][ T4320] usb 3-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 172.194403][ T4320] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.289748][ T4320] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 172.952315][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.980379][ T4320] usbtmc 3-1:16.0: bulk endpoints not found [ 173.206890][ T26] audit: type=1800 audit(1791553194.940:11): pid=5365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.248" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 174.611678][ T955] usb 3-1: USB disconnect, device number 2 [ 177.544839][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.552467][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.968817][ T5399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.969794][ T5423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.257'. [ 179.033746][ T5426] 9pnet_fd: Insufficient options for proto=fd [ 179.044425][ T5427] i2c i2c-0: delete_device: Can't find device in list [ 182.261862][ T5445] netlink: 28 bytes leftover after parsing attributes in process `syz.0.269'. [ 182.701666][ T26] audit: type=1800 audit(1791553204.440:12): pid=5460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.273" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 182.928414][ T5463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.274'. [ 182.978155][ T5465] 9pnet_fd: Insufficient options for proto=fd [ 183.382739][ T5477] device syzkaller0 entered promiscuous mode [ 183.441832][ T5479] tipc: Enabled bearer , priority 0 [ 183.458964][ T5475] tipc: Resetting bearer [ 184.736119][ T5475] tipc: Disabling bearer [ 184.747469][ T4320] tipc: Node number set to 3078899434 [ 185.057150][ T5492] netlink: 36 bytes leftover after parsing attributes in process `syz.4.278'. [ 188.109450][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 188.110192][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 188.116214][ T4290] Bluetooth: hci3: command 0x0406 tx timeout [ 188.121622][ T4288] Bluetooth: hci0: command 0x0406 tx timeout [ 188.128532][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 188.657514][ T5513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.287'. [ 188.973032][ T5519] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 189.662276][ T5523] device syzkaller0 entered promiscuous mode [ 189.671861][ T5523] tipc: Enabled bearer , priority 0 [ 189.679800][ T5522] tipc: Resetting bearer [ 189.758516][ T5522] tipc: Disabling bearer [ 190.101308][ T955] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 191.930768][ T5527] FAULT_INJECTION: forcing a failure. [ 191.930768][ T5527] name failslab, interval 1, probability 0, space 0, times 1 [ 191.947155][ T955] usb 3-1: unable to get BOS descriptor or descriptor too short [ 191.957459][ T5550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.299'. [ 193.378772][ T955] usb 3-1: no configurations [ 193.383388][ T955] usb 3-1: can't read configurations, error -22 [ 193.390413][ T5527] CPU: 1 PID: 5527 Comm: syz.2.285 Not tainted syzkaller #0 [ 193.397716][ T5527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 193.407794][ T5527] Call Trace: [ 193.411070][ T5527] [ 193.413995][ T5527] dump_stack_lvl+0x188/0x24e [ 193.418692][ T5527] ? show_regs_print_info+0x12/0x12 [ 193.423891][ T5527] ? load_image+0x410/0x410 [ 193.428390][ T5527] ? __might_sleep+0xd0/0xd0 [ 193.432974][ T5527] ? __lock_acquire+0x7ea0/0x7ea0 [ 193.438007][ T5527] should_fail_ex+0x390/0x4c0 [ 193.442689][ T5527] should_failslab+0x5/0x20 [ 193.447182][ T5527] slab_pre_alloc_hook+0x59/0x300 [ 193.452237][ T5527] ? kobject_get_path+0xac/0x220 [ 193.457204][ T5527] __kmem_cache_alloc_node+0x4f/0x270 [ 193.462598][ T5527] ? kobject_get_path+0xac/0x220 [ 193.467536][ T5527] __kmalloc+0xa3/0x240 [ 193.471705][ T5527] kobject_get_path+0xac/0x220 [ 193.476473][ T5527] kobject_uevent_env+0x28d/0x890 [ 193.481495][ T5527] ? gadget_unbind_driver+0x2c3/0x3d0 [ 193.486881][ T5527] ? gadget_bind_driver+0x760/0x760 [ 193.492072][ T5527] device_release_driver_internal+0x47d/0x7c0 [ 193.498141][ T5527] driver_detach+0x1ef/0x2d0 [ 193.502732][ T5527] bus_remove_driver+0x11c/0x230 [ 193.507664][ T5527] ? sysfs_remove_groups+0x8a/0xa0 [ 193.512773][ T5527] usb_gadget_unregister_driver+0x4a/0x70 [ 193.518496][ T5527] raw_release+0xd6/0x260 [ 193.522819][ T5527] ? raw_open+0x510/0x510 [ 193.527143][ T5527] __fput+0x20a/0x8b0 [ 193.531126][ T5527] task_work_run+0x1d0/0x260 [ 193.535715][ T5527] ? task_work_cancel+0x220/0x220 [ 193.540742][ T5527] ? exit_to_user_mode_loop+0x3b/0x110 [ 193.546205][ T5527] exit_to_user_mode_loop+0xe6/0x110 [ 193.551513][ T5527] exit_to_user_mode_prepare+0xee/0x180 [ 193.557066][ T5527] syscall_exit_to_user_mode+0x16/0x40 [ 193.562529][ T5527] do_syscall_64+0x58/0xa0 [ 193.566940][ T5527] ? clear_bhb_loop+0x60/0xb0 [ 193.571613][ T5527] ? clear_bhb_loop+0x60/0xb0 [ 193.576287][ T5527] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.582185][ T5527] RIP: 0033:0x7fe375b9e1d9 [ 193.586607][ T5527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.606234][ T5527] RSP: 002b:00007fe3769d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 193.614651][ T5527] RAX: 0000000000000000 RBX: 00007fe375e25fa0 RCX: 00007fe375b9e1d9 [ 193.622648][ T5527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 193.630614][ T5527] RBP: 00007fe375c35888 R08: 0000000000000000 R09: 0000000000000000 [ 193.638583][ T5527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.646562][ T5527] R13: 00007fe375e26038 R14: 00007fe375e25fa0 R15: 00007ffcfa6c4ed8 [ 193.654539][ T5527] [ 193.913524][ T26] audit: type=1400 audit(1791553215.650:13): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5555 comm="syz.4.301" [ 194.157488][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.163853][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.302040][ T5564] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 194.859272][ T5572] netlink: 36 bytes leftover after parsing attributes in process `syz.2.304'. [ 194.945826][ T5574] device syzkaller0 entered promiscuous mode [ 194.956983][ T5574] tipc: Enabled bearer , priority 0 [ 194.979706][ T5573] tipc: Resetting bearer [ 195.050685][ T5573] tipc: Disabling bearer [ 196.244861][ T5578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.308'. [ 196.349520][ T5588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.310'. [ 196.527705][ T5594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.312'. [ 199.487431][ T4351] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 199.697135][ T4351] usb 2-1: Using ep0 maxpacket: 32 [ 199.703735][ T4351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 199.932408][ T4351] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 199.964121][ T4351] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 199.973683][ T4351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.982930][ T4351] usb 2-1: Product: syz [ 199.988288][ T4351] usb 2-1: Manufacturer: syz [ 199.993104][ T4351] usb 2-1: SerialNumber: syz [ 200.001767][ T4351] usb 2-1: config 0 descriptor?? [ 200.008658][ T5606] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 200.226691][ T3600] usb 2-1: USB disconnect, device number 2 [ 200.664821][ T5633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.324'. [ 200.688496][ T5627] device syzkaller0 entered promiscuous mode [ 201.353923][ T5636] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 201.364482][ T5636] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.932140][ T5635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.325'. [ 203.123814][ T5646] serio: Serial port ttyS3 [ 204.937831][ T26] audit: type=1800 audit(1791553226.680:14): pid=5653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.331" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 206.796243][ T5650] netlink: 36 bytes leftover after parsing attributes in process `syz.2.330'. [ 207.085595][ T5682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.338'. [ 207.862138][ T5687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.341'. [ 208.003089][ T5693] device syzkaller0 entered promiscuous mode [ 208.036084][ T5693] tipc: Enabled bearer , priority 0 [ 208.054097][ T5692] tipc: Resetting bearer [ 208.122672][ T5692] tipc: Disabling bearer [ 208.347654][ T5697] serio: Serial port ttyS3 [ 209.545489][ T26] audit: type=1800 audit(1791553230.430:15): pid=5701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.344" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 210.615707][ T5724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.350'. [ 211.036869][ T5726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.352'. [ 211.270074][ T5729] netlink: 36 bytes leftover after parsing attributes in process `syz.1.353'. [ 211.741184][ T26] audit: type=1800 audit(1791553233.470:16): pid=5748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.357" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 212.778875][ T5760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.362'. [ 213.114794][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 213.122974][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 213.131096][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 213.138563][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 213.145990][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 213.153377][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 213.160723][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 213.168284][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 213.175941][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 213.183477][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 213.191094][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 213.198820][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 213.206407][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 213.214224][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 213.224518][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 213.232033][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 213.261280][ T5767] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.359174][ T5773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.364'. [ 213.594588][ T5775] netlink: 36 bytes leftover after parsing attributes in process `syz.4.366'. [ 215.377413][ T26] audit: type=1800 audit(1791553237.090:17): pid=5805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.375" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 215.643632][ T5804] netlink: 28 bytes leftover after parsing attributes in process `syz.0.374'. [ 215.732470][ T5813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.377'. [ 216.590167][ T5828] netlink: 36 bytes leftover after parsing attributes in process `syz.2.380'. [ 218.909332][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 219.229999][ T5851] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.942144][ T5866] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 220.747835][ T5860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.390'. [ 220.833347][ T5874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.392'. [ 221.210569][ T5883] netlink: 36 bytes leftover after parsing attributes in process `syz.0.394'. [ 222.617113][ T26] audit: type=1800 audit(1791553244.350:18): pid=5902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.402" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 222.856060][ T5909] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 223.401616][ T5906] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 223.782860][ T5906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.831588][ T26] audit: type=1800 audit(1791553245.550:19): pid=5916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.405" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 224.320965][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.407'. [ 224.923906][ T5942] netlink: 36 bytes leftover after parsing attributes in process `syz.0.410'. [ 226.224783][ T5956] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 227.423344][ T26] audit: type=1800 audit(1791553249.160:20): pid=5967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.419" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 227.510261][ T5969] netlink: 112 bytes leftover after parsing attributes in process `syz.3.422'. [ 227.648291][ T4317] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 227.837193][ T4317] usb 3-1: Using ep0 maxpacket: 8 [ 227.844602][ T4317] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 227.863099][ T4317] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 227.881513][ T4317] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 227.901997][ T4317] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 227.912249][ T4317] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.925498][ T4317] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 227.934815][ T4317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.110493][ T5977] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 228.177392][ T4317] usb 3-1: usb_control_msg returned -32 [ 228.186122][ T4317] usbtmc 3-1:16.0: can't read capabilities [ 228.271905][ T4317] usb 3-1: USB disconnect, device number 5 [ 229.809691][ T5985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.426'. [ 231.065641][ T5995] tipc: Enabled bearer , priority 0 [ 231.174059][ T5994] tipc: Disabling bearer [ 232.601665][ T6010] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 233.228530][ T6022] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 233.237120][ T27] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 234.000368][ T6024] serio: Serial port ttyS3 [ 235.067186][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 235.073867][ T27] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 235.103972][ T27] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 235.142283][ T27] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 235.172455][ T27] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 235.233548][ T27] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.267124][ T27] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 235.286412][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.511262][ T27] usb 3-1: usb_control_msg returned -32 [ 235.525302][ T27] usbtmc 3-1:16.0: can't read capabilities [ 235.568138][ T27] usb 3-1: USB disconnect, device number 6 [ 238.265597][ T6065] device syzkaller0 entered promiscuous mode [ 238.746936][ T6071] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 239.409853][ T6069] [U]  [ 240.677233][ T4323] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 240.717601][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 240.908932][ T6088] serio: Serial port ttyS3 [ 240.975084][ T4323] usb 1-1: device descriptor read/64, error -32 [ 241.257108][ T4323] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 242.251323][ T4323] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 242.267129][ T4323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.288081][ T4323] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 242.307111][ T4323] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 242.325452][ T4323] usb 1-1: Manufacturer: syz [ 242.339411][ T4323] usb 1-1: config 0 descriptor?? [ 242.377211][ T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 242.497128][ T4323] rc_core: IR keymap rc-hauppauge not found [ 242.503195][ T4323] Registered IR keymap rc-empty [ 242.528392][ T4323] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 242.567529][ T4323] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 242.653088][ T4323] usb 1-1: USB disconnect, device number 3 [ 243.981219][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 243.998409][ T7] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 244.006641][ T7] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 244.037965][ T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 244.053950][ T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 244.092324][ T7] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.115383][ T7] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 244.125271][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.514747][ T6119] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 245.321798][ T7] usb 3-1: usb_control_msg returned -71 [ 245.327472][ T7] usbtmc 3-1:16.0: can't read capabilities [ 245.378596][ T7] usb 3-1: USB disconnect, device number 7 [ 245.575654][ T6125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.462'. [ 248.788186][ T6136] device syzkaller0 entered promiscuous mode [ 249.046598][ T6154] serio: Serial port ttyS3 [ 250.584140][ T6169] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 250.609043][ T4717] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 250.807347][ T4717] usb 2-1: Using ep0 maxpacket: 8 [ 250.914907][ T4717] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 251.029551][ T4717] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 251.137250][ T4717] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 251.172543][ T4717] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 251.197132][ T4717] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.263597][ T4717] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 251.283157][ T6171] syz.3.475 uses obsolete (PF_INET,SOCK_PACKET) [ 251.305926][ T4717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.360896][ T6171] TC_ACT_REPEAT abuse ? [ 251.547929][ T4717] usb 2-1: usb_control_msg returned -32 [ 251.553660][ T4717] usbtmc 2-1:16.0: can't read capabilities [ 251.710642][ T4717] usb 2-1: USB disconnect, device number 3 [ 252.510310][ T6186] device syzkaller0 entered promiscuous mode [ 254.287381][ T6186] tipc: Started in network mode [ 254.292289][ T6186] tipc: Node identity 767351e39b82, cluster identity 4711 [ 254.367417][ T6186] tipc: Enabled bearer , priority 0 [ 254.428570][ T6183] tipc: Resetting bearer [ 254.507349][ T6201] serio: Serial port ttyS3 [ 254.737313][ T6202] Bluetooth: MGMT ver 1.22 [ 255.570388][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.581192][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.062970][ T6183] tipc: Disabling bearer [ 256.175188][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.485'. [ 256.237095][ T27] tipc: Node number set to 3992015331 [ 257.156530][ T6215] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 259.267189][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 259.421937][ T6235] device syzkaller0 entered promiscuous mode [ 259.477185][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 259.490324][ T27] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 259.515969][ T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 259.547643][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 259.588530][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 259.629381][ T27] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.667819][ T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 259.697901][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.939616][ T27] usb 2-1: GET_CAPABILITIES returned 0 [ 259.945178][ T27] usbtmc 2-1:16.0: can't read capabilities [ 260.152268][ T4319] usb 2-1: USB disconnect, device number 4 [ 260.235691][ T6250] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 260.263801][ T6250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.390850][ T6249] device syzkaller0 entered promiscuous mode [ 260.424930][ T6249] tipc: Enabled bearer , priority 0 [ 260.463354][ T6249] tipc: Resetting bearer [ 260.559720][ T6248] tipc: Resetting bearer [ 260.632853][ T6248] tipc: Disabling bearer [ 262.790279][ T26] audit: type=1800 audit(1791553284.500:21): pid=6273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.499" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 263.499118][ T26] audit: type=1800 audit(1791553285.220:22): pid=6281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.503" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 264.319080][ T6286] device syzkaller0 entered promiscuous mode [ 264.531637][ T6290] netlink: 28 bytes leftover after parsing attributes in process `syz.1.505'. [ 266.642321][ T6304] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 266.857158][ T27] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 267.067245][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 267.078345][ T27] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 267.121381][ T27] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 267.251132][ T27] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 267.273529][ T27] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 267.296009][ T27] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.383565][ T27] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 267.426614][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.743289][ T27] usb 3-1: GET_CAPABILITIES returned 0 [ 267.749547][ T27] usbtmc 3-1:16.0: can't read capabilities [ 267.996490][ T955] usb 3-1: USB disconnect, device number 8 [ 269.802779][ T6327] jffs2: notice: (6327) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 271.113418][ T6343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.521'. [ 272.727153][ T26] audit: type=1800 audit(1791553294.450:23): pid=6360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.514" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 274.701554][ T6378] TC_ACT_REPEAT abuse ? [ 274.768959][ T955] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 275.016757][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 275.096055][ T955] usb 3-1: Using ep0 maxpacket: 8 [ 275.103879][ T955] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 275.114462][ T955] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 275.124619][ T955] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 275.134637][ T955] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 275.144868][ T955] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.163864][ T955] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 275.185491][ T955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.303238][ T6384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.450367][ T955] usb 3-1: GET_CAPABILITIES returned 0 [ 276.455984][ T955] usbtmc 3-1:16.0: can't read capabilities [ 276.532617][ T6393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.533'. [ 276.654429][ T955] usb 3-1: USB disconnect, device number 9 [ 279.988569][ T6418] xt_hashlimit: size too large, truncated to 1048576 [ 281.831717][ T6430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.544'. [ 281.992818][ T6435] netlink: 28 bytes leftover after parsing attributes in process `syz.2.545'. [ 284.994069][ T6451] sched: RT throttling activated [ 287.562124][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 287.574210][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 287.622200][ T6472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.850607][ T6475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.556'. [ 289.254479][ T6487] netlink: 28 bytes leftover after parsing attributes in process `syz.3.560'. [ 296.478906][ T6540] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 296.554308][ T6540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 303.046465][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.588'. [ 303.180999][ T6606] netlink: 28 bytes leftover after parsing attributes in process `syz.4.586'. [ 306.711553][ T6636] capability: warning: `syz.3.597' uses deprecated v2 capabilities in a way that may be insecure [ 307.935916][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.600'. [ 307.947884][ T6657] device syzkaller0 entered promiscuous mode [ 308.496727][ T6671] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(9) [ 311.395177][ T6700] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 311.930301][ T6702] netlink: 28 bytes leftover after parsing attributes in process `syz.2.605'. [ 312.409845][ T6705] binder_alloc: 6704: binder_alloc_buf, no vma [ 312.429899][ T6709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.614'. [ 313.387237][ T6720] device syzkaller0 entered promiscuous mode [ 316.022563][ T6749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.609'. [ 316.210148][ T6749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.813372][ T6764] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 317.011317][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.025790][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.325236][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 317.501954][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 318.843035][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 318.883805][ T6782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.627'. [ 318.902364][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 318.989575][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 319.032471][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 319.101137][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 319.118960][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 319.141135][ T6769] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.563587][ T6820] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 323.131964][ T6819] netlink: 28 bytes leftover after parsing attributes in process `syz.2.628'. [ 324.838952][ T6832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.640'. [ 326.873216][ T6860] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 328.178497][ T6864] netlink: 28 bytes leftover after parsing attributes in process `syz.0.648'. [ 330.468393][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 330.754999][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 331.112575][ T6886] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 331.823184][ T6907] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 332.898423][ T6913] ======================================================= [ 332.898423][ T6913] WARNING: The mand mount option has been deprecated and [ 332.898423][ T6913] and is ignored by this kernel. Remove the mand [ 332.898423][ T6913] option from the mount to silence this warning. [ 332.898423][ T6913] ======================================================= [ 335.016121][ T6925] [U]  [ 339.328508][ T6986] [U]  [ 341.025244][ T7006] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 341.199104][ T7006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.124061][ T7022] kvm [7021]: vcpu0, guest rIP: 0x9143 Unhandled WRMSR(0x11e) = 0xbe702111 [ 344.664888][ T7035] [U]  [ 344.805490][ T7041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.694'. [ 344.875236][ T7041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 345.461580][ T7041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 345.476411][ T7041] bond1: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 345.513898][ T7041] bond1: (slave ip_vti0): Error -95 calling set_mac_address [ 345.578979][ T7051] bond1: (slave vlan2): Opening slave failed [ 347.095247][ T7076] ieee802154 phy0 wpan0: encryption failed: -22 [ 349.249293][ T7085] [U]  [ 350.169765][ T7101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.710'. [ 350.195590][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.709'. [ 350.480124][ T7101] 8021q: adding VLAN 0 to HW filter on device bond1 [ 351.449158][ T7107] 8021q: adding VLAN 0 to HW filter on device bond1 [ 351.486785][ T7107] bond1: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 351.534420][ T7107] bond1: (slave ip_vti0): Error -95 calling set_mac_address [ 351.555031][ T7111] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 351.568698][ T7111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 352.430061][ T7101] bond1: (slave vlan2): Opening slave failed [ 352.543404][ T7123] netlink: 28 bytes leftover after parsing attributes in process `syz.2.715'. [ 354.497907][ T7137] [U]  [ 355.869514][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 356.352413][ T7162] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 357.419708][ T7182] netlink: 28 bytes leftover after parsing attributes in process `syz.2.729'. [ 357.540763][ T7187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.730'. [ 357.599716][ T7187] 8021q: adding VLAN 0 to HW filter on device bond2 [ 357.765749][ T7187] 8021q: adding VLAN 0 to HW filter on device bond2 [ 357.823210][ T7187] bond2: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 358.531674][ T7187] bond2: (slave ip_vti0): Error -95 calling set_mac_address [ 358.704728][ T7200] [U]  [ 360.783779][ T7233] netlink: 28 bytes leftover after parsing attributes in process `syz.1.743'. [ 361.031530][ T7242] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 361.058526][ T7242] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 361.363260][ T7242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 361.400237][ T7232] sctp: failed to load transform for md5: -2 [ 363.050100][ T7270] device syzkaller0 entered promiscuous mode [ 363.058757][ T7269] binder: BINDER_SET_CONTEXT_MGR already set [ 363.076311][ T7269] binder: 7267:7269 ioctl 4018620d 200000004a80 returned -16 [ 363.219866][ T7275] device syzkaller0 entered promiscuous mode [ 365.575278][ T7296] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 365.584113][ T7296] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 365.591587][ T7296] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 365.598942][ T7296] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 365.606468][ T7296] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 365.614039][ T7296] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 365.621632][ T7296] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 365.630805][ T7296] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 366.198377][ T7296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 366.602665][ T7310] serio: Serial port ttyS3 [ 368.939144][ T7317] device syzkaller0 entered promiscuous mode [ 369.952239][ T7321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.767'. [ 370.108920][ T7323] device syzkaller0 entered promiscuous mode [ 370.823711][ T7324] [U]  [ 373.815482][ T7347] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 374.967290][ T7366] serio: Serial port ttyS3 [ 376.100437][ T7373] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 376.750784][ T7372] device syzkaller0 entered promiscuous mode [ 377.054271][ T7378] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 377.064337][ T7378] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 377.105833][ T7378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 377.280528][ T7384] netlink: 28 bytes leftover after parsing attributes in process `syz.1.782'. [ 378.449712][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.456043][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.470483][ T7385] [U]  [ 378.828329][ T7395] device syzkaller0 entered promiscuous mode [ 379.992518][ T7411] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 381.212613][ T7427] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 381.786465][ T7425] serio: Serial port ttyS3 [ 383.377503][ T7426] device syzkaller0 entered promiscuous mode [ 386.128760][ T7435] [U]  [ 388.075523][ T7465] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 389.183011][ T7478] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 390.865228][ T7489] netlink: 28 bytes leftover after parsing attributes in process `syz.3.799'. [ 391.674947][ T7483] serio: Serial port ttyS3 [ 391.728743][ T7488] device syzkaller0 entered promiscuous mode [ 394.066579][ T7506] [U]  [ 395.203725][ T7527] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 396.875242][ T7535] serio: Serial port ttyS3 [ 399.176835][ T7545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.822'. [ 400.156214][ T7553] device syzkaller0 entered promiscuous mode [ 400.824272][ T7560] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 403.167015][ T7568] device syzkaller0 entered promiscuous mode [ 405.564843][ T7590] serio: Serial port ttyS3 [ 405.850323][ T7600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.835'. [ 408.849830][ T7601] [U]  [ 408.952858][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.841'. [ 409.668407][ T7633] device syzkaller0 entered promiscuous mode [ 412.557065][ T7659] serio: Serial port ttyS3 [ 416.012144][ T7665] [U]  [ 416.081002][ T7676] netlink: 28 bytes leftover after parsing attributes in process `syz.1.853'. [ 416.412283][ T7681] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 416.424090][ T7681] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 416.561572][ T7681] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 416.720289][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.857'. [ 417.512736][ T7683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.856'. [ 420.993229][ T7708] device syzkaller0 entered promiscuous mode [ 423.053938][ T7728] serio: Serial port ttyS3 [ 426.657108][ T7741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.871'. [ 426.827035][ T7745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.870'. [ 431.238148][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 431.412941][ T7785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 431.667763][ T7774] [U]  [ 431.946266][ T7794] netlink: 28 bytes leftover after parsing attributes in process `syz.2.882'. [ 432.756800][ T7793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.883'. [ 436.742934][ T7818] serio: Serial port ttyS3 [ 440.346533][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.352894][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.402171][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.887'. [ 440.474630][ T7831] [U]  [ 440.716844][ T7848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.895'. [ 444.282441][ T7877] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 445.222794][ T7881] serio: Serial port ttyS3 [ 447.917676][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 447.931233][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 447.940764][ T7899] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 448.189644][ T7902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.909'. [ 450.305354][ T7921] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 453.926312][ T7933] serio: Serial port ttyS3 [ 454.913214][ T7948] netlink: 28 bytes leftover after parsing attributes in process `syz.2.920'. [ 456.115721][ T7953] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 456.130865][ T7953] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 457.195396][ T7959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.910'. [ 457.743902][ T7971] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 461.180273][ T7995] serio: Serial port ttyS3 [ 462.131490][ T8007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.934'. [ 463.276247][ T8016] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 463.288342][ T8016] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 463.300095][ T8016] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 463.562328][ T8024] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 464.177137][ T26] audit: type=1800 audit(1791553485.910:24): pid=8019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.935" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 464.868231][ T26] audit: type=1800 audit(1791553486.390:25): pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.940" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 467.555155][ T8053] device syzkaller0 entered promiscuous mode [ 467.793771][ T8057] serio: Serial port ttyS3 [ 467.893258][ T8061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.946'. [ 469.138544][ T8075] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 469.993681][ T26] audit: type=1800 audit(1791553491.720:26): pid=8086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.954" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 470.036237][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.956'. [ 472.474569][ T8117] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 473.695465][ T8111] serio: Serial port ttyS3 [ 475.446620][ T8143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.971'. [ 476.004231][ T8157] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 477.221243][ T8169] serio: Serial port ttyS3 [ 478.898136][ T8195] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 478.912276][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.987'. [ 479.543775][ T8196] CIFS: Attempting to mount \\127.0.0.1\share [ 479.635248][ T8205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.986'. [ 479.923613][ T8200] CIFS: VFS: smb2_get_data_area_len: invalid data area (off=24929 len=24929) [ 480.155721][ T8200] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1 [ 480.367986][ T8200] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0x61 [ 480.566900][ T8196] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)' [ 480.616143][ T8196] CIFS: VFS: cifs_mount failed w/return code = -112 [ 481.956234][ T8228] serio: Serial port ttyS3 [ 482.154703][ T8242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.999'. [ 482.185230][ T8242] 8021q: adding VLAN 0 to HW filter on device bond2 [ 482.221199][ T8242] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 482.429256][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 482.732333][ T8254] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 482.746160][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1000'. [ 482.914515][ T8255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1001'. [ 484.363195][ T8263] 9pnet_virtio: no channels available for device syz [ 484.638753][ T26] audit: type=1800 audit(1791553506.370:27): pid=8272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1004" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 484.659637][ C1] vkms_vblank_simulate: vblank timer overrun [ 486.136679][ T8287] serio: Serial port ttyS3 [ 487.039389][ T8297] sctp: failed to load transform for md5: -2 [ 487.384131][ T8308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1016'. [ 487.876201][ T8327] FAULT_INJECTION: forcing a failure. [ 487.876201][ T8327] name failslab, interval 1, probability 0, space 0, times 0 [ 487.942143][ T8327] CPU: 0 PID: 8327 Comm: syz.2.1022 Not tainted syzkaller #0 [ 487.949576][ T8327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 487.959671][ T8327] Call Trace: [ 487.962968][ T8327] [ 487.965918][ T8327] dump_stack_lvl+0x188/0x24e [ 487.970709][ T8327] ? show_regs_print_info+0x12/0x12 [ 487.975928][ T8327] ? load_image+0x410/0x410 [ 487.980449][ T8327] ? __lock_acquire+0x7ea0/0x7ea0 [ 487.985506][ T8327] should_fail_ex+0x390/0x4c0 [ 487.990216][ T8327] should_failslab+0x5/0x20 [ 487.994746][ T8327] slab_pre_alloc_hook+0x59/0x300 [ 487.999800][ T8327] ? lockdep_softirqs_off+0x430/0x430 [ 488.005205][ T8327] kmem_cache_alloc+0x56/0x2f0 [ 488.009988][ T8327] ? __alloc_file+0x25/0x230 [ 488.014598][ T8327] __alloc_file+0x25/0x230 [ 488.019028][ T8327] alloc_empty_file+0x90/0x180 [ 488.023803][ T8327] dentry_open+0x57/0x120 [ 488.028155][ T8327] __se_sys_fsmount+0x77a/0x9a0 [ 488.033033][ T8327] ? __x64_sys_fsmount+0x80/0x80 [ 488.037989][ T8327] ? lockdep_hardirqs_on+0x94/0x140 [ 488.043215][ T8327] do_syscall_64+0x4c/0xa0 [ 488.047652][ T8327] ? clear_bhb_loop+0x60/0xb0 [ 488.052347][ T8327] ? clear_bhb_loop+0x60/0xb0 [ 488.057043][ T8327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 488.062952][ T8327] RIP: 0033:0x7fe375b9e1d9 [ 488.067387][ T8327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.087009][ T8327] RSP: 002b:00007fe3769d1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 488.095442][ T8327] RAX: ffffffffffffffda RBX: 00007fe375e25fa0 RCX: 00007fe375b9e1d9 [ 488.103436][ T8327] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 488.111432][ T8327] RBP: 00007fe375c35888 R08: 0000000000000000 R09: 0000000000000000 [ 488.119428][ T8327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.127422][ T8327] R13: 00007fe375e26038 R14: 00007fe375e25fa0 R15: 00007ffcfa6c4ed8 [ 488.135441][ T8327] [ 489.803445][ T8343] serio: Serial port ttyS3 [ 491.069386][ T8354] device syzkaller0 entered promiscuous mode [ 491.079522][ T8354] tipc: Enabling of bearer rejected, failed to enable media [ 491.092372][ T8353] binder: BINDER_SET_CONTEXT_MGR already set [ 491.109724][ T8353] binder: 8352:8353 ioctl 4018620d 200000004a80 returned -16 [ 491.775429][ T8375] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 491.790129][ T8375] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1033'. [ 492.954643][ T8385] serio: Serial port ttyS3 [ 495.970344][ T26] audit: type=1800 audit(1791553517.700:28): pid=8416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1047" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 496.931951][ T8426] serio: Serial port ttyS3 [ 497.111090][ T8432] device syzkaller0 entered promiscuous mode [ 497.124636][ T8432] tipc: Enabling of bearer rejected, failed to enable media [ 498.739583][ T8447] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1055'. [ 500.257643][ T8461] binder_alloc: 8460: binder_alloc_buf, no vma [ 501.339100][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.349956][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.210674][ T8464] [U]  [ 502.278302][ T8470] serio: Serial port ttyS3 [ 502.545585][ T8483] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 502.560421][ T8483] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1064'. [ 503.931392][ T8482] device syzkaller0 entered promiscuous mode [ 503.969874][ T8482] tipc: Enabling of bearer rejected, failed to enable media [ 504.174362][ T8494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1071'. [ 504.259109][ T8494] 8021q: adding VLAN 0 to HW filter on device bond3 [ 504.330323][ T8497] 8021q: adding VLAN 0 to HW filter on device bond3 [ 504.341506][ T8497] bond3: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 504.353119][ T8497] bond3: (slave ip_vti0): Error -95 calling set_mac_address [ 506.382445][ T8521] serio: Serial port ttyS3 [ 506.664154][ T8524] device syzkaller0 entered promiscuous mode [ 506.689223][ T8524] tipc: Enabling of bearer rejected, failed to enable media [ 506.762283][ T8528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1080'. [ 509.632141][ T955] smpboot: CPU 1 is now offline [ 509.713625][ T8549] x86: Booting SMP configuration: [ 509.761392][ T8549] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 510.149677][ T8561] binder: BINDER_SET_CONTEXT_MGR already set [ 510.191264][ T8561] binder: 8560:8561 ioctl 4018620d 200000000040 returned -16 [ 510.386090][ T8568] device syzkaller0 entered promiscuous mode [ 510.415837][ T8569] serio: Serial port ttyS3 [ 510.443814][ T8568] tipc: Enabling of bearer rejected, failed to enable media [ 511.060526][ T8572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1095'. [ 516.004340][ T8613] serio: Serial port ttyS3 [ 516.087084][ T8621] device syzkaller0 entered promiscuous mode [ 516.262100][ T8625] tipc: Enabling of bearer rejected, failed to enable media [ 522.747937][ T8657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1119'. [ 522.835254][ T8657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 522.926218][ T8661] 8021q: adding VLAN 0 to HW filter on device bond1 [ 522.957426][ T8661] bond1: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 522.993874][ T8666] serio: Serial port ttyS3 [ 523.006149][ T8661] bond1: (slave ip_vti0): Error -95 calling set_mac_address [ 523.893075][ T8673] binder: BINDER_SET_CONTEXT_MGR already set [ 524.356382][ T8673] binder: 8671:8673 ioctl 4018620d 200000000040 returned -16 [ 525.332453][ T8687] device syzkaller0 entered promiscuous mode [ 525.370894][ T8687] tipc: Enabling of bearer rejected, failed to enable media [ 525.662106][ T8698] serio: Serial port ttyS3 [ 527.613281][ T8704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1136'. [ 529.161293][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 529.645760][ T8713] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 529.737938][ T8711] binder: BINDER_SET_CONTEXT_MGR already set [ 529.743938][ T8711] binder: 8709:8711 ioctl 4018620d 200000000040 returned -16 [ 530.024743][ T8724] device syzkaller0 entered promiscuous mode [ 530.110673][ T7] smpboot: CPU 1 is now offline [ 530.145247][ T8732] x86: Booting SMP configuration: [ 530.187786][ T8732] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 533.928640][ T8747] serio: Serial port ttyS3 [ 534.859487][ T8759] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 534.871593][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1150'. [ 535.257276][ T8761] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 535.269265][ T8761] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 535.714048][ T8761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 535.847654][ T8764] binder: BINDER_SET_CONTEXT_MGR already set [ 535.872453][ T8764] binder: 8763:8764 ioctl 4018620d 200000000040 returned -16 [ 536.042834][ T8774] Cannot find add_set index 0 as target [ 536.084000][ T8776] device syzkaller0 entered promiscuous mode [ 539.163150][ T8789] serio: Serial port ttyS3 [ 539.838245][ T8801] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 540.199262][ T8803] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 540.639388][ T8803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 546.151733][ T8818] device syzkaller0 entered promiscuous mode [ 546.159677][ T8817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1152'. [ 546.195095][ T8824] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1173'. [ 546.242105][ T8823] device syzkaller0 entered promiscuous mode [ 549.057176][ T8832] serio: Serial port ttyS3 [ 549.685977][ T8852] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 549.921954][ T8862] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 549.932138][ T8862] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 549.955164][ T8862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 555.912702][ T8873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1185'. [ 558.521386][ T8883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1187'. [ 558.948376][ T8888] device syzkaller0 entered promiscuous mode [ 559.049477][ T8890] device syzkaller0 entered promiscuous mode [ 559.334147][ T8902] smc: net device dummy0 applied user defined pnetid SYZ2 [ 562.126130][ T8908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1196'. [ 562.240684][ T26] audit: type=1800 audit(1791553583.980:29): pid=8913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1198" name="enable" dev="configfs" ino=50269 res=0 errno=0 [ 562.770330][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.779391][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.426553][ T8929] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 565.435773][ T8929] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 565.447493][ T8929] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 565.458908][ T8929] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 565.466334][ T8929] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 565.474426][ T8929] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 565.760208][ T8934] device syzkaller0 entered promiscuous mode [ 565.811088][ T8926] chnl_net:caif_netlink_parms(): no params data found [ 566.045073][ T8926] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.087236][ T8926] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.095420][ T8926] device bridge_slave_0 entered promiscuous mode [ 566.154550][ T8926] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.187026][ T8926] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.195920][ T8926] device bridge_slave_1 entered promiscuous mode [ 566.244892][ T8926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.256659][ T8926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.292204][ T8926] team0: Port device team_slave_0 added [ 566.308166][ T8926] team0: Port device team_slave_1 added [ 566.349544][ T8926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.356531][ T8926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.389278][ T8926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.405379][ T8926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.415852][ T8926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.451869][ T8926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.498334][ T8926] device hsr_slave_0 entered promiscuous mode [ 566.505253][ T8926] device hsr_slave_1 entered promiscuous mode [ 566.518870][ T8926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 566.526450][ T8926] Cannot create hsr debugfs directory [ 566.670417][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 567.103766][ T8959] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 567.251855][ T8926] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 567.269063][ T8926] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 567.279929][ T8926] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 567.319824][ T8926] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 567.462801][ T8926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.483938][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 567.491601][ T8929] Bluetooth: hci5: command 0x0409 tx timeout [ 567.509707][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 567.526592][ T8926] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.539153][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 567.555488][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 567.564819][ T4372] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.571980][ T4372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.603415][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 567.615662][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 567.635857][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 567.650892][ T4372] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.658064][ T4372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.670152][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 567.701146][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 567.719484][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 567.736296][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 567.745795][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 567.763247][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 567.783244][ T8926] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 567.801355][ T8926] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 567.827743][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 567.836419][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 567.851888][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 567.863866][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 567.878233][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 567.899993][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 567.970898][ T8970] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 569.577339][ T4286] Bluetooth: hci5: command 0x041b tx timeout [ 569.654871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 569.667432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 569.678130][ T8926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.427724][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 571.445098][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 571.475781][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 571.484915][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 571.510205][ T8926] device veth0_vlan entered promiscuous mode [ 571.522933][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 571.532486][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 571.552796][ T8926] device veth1_vlan entered promiscuous mode [ 571.606327][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 571.627577][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 571.635894][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 571.653508][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 571.662665][ T4286] Bluetooth: hci5: command 0x040f tx timeout [ 571.682055][ T8926] device veth0_macvtap entered promiscuous mode [ 571.705705][ T8926] device veth1_macvtap entered promiscuous mode [ 571.736929][ T8926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.750798][ T8926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.773169][ T8926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.788482][ T8926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.802613][ T8926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.813486][ T8926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.829698][ T8926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.844171][ T8926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.846492][ T8995] input: syz0 as /devices/virtual/input/input6 [ 571.902074][ T8926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.963154][ T8926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.989264][ T8926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.025958][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 572.047627][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 572.072170][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 572.101355][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 572.138688][ T8926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.163412][ T8926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.185353][ T8926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.201544][ T8926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.213831][ T8926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.230478][ T8926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.248104][ T8926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.265011][ T8926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.275139][ T8926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.292461][ T8926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.305334][ T8926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.324369][ T8926] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.336796][ T8926] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.347745][ T8926] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.356456][ T8926] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.356270][ T8999] device syzkaller0 entered promiscuous mode [ 573.364066][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 573.384302][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 573.410641][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 573.429863][ T9008] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 573.727378][ T4286] Bluetooth: hci5: command 0x0419 tx timeout [ 573.782775][ T4372] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.977950][ T4372] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.113372][ T4372] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.133486][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.168453][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.656689][ T4372] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.027894][ T4379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.044354][ T4379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.065773][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 577.073987][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 578.309030][ T9057] device syzkaller0 entered promiscuous mode [ 579.152866][ T9058] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 579.197091][ T9058] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 579.227396][ T4372] tipc: Left network mode [ 579.728903][ T9078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1239'. [ 580.048110][ T9078] 8021q: adding VLAN 0 to HW filter on device bond2 [ 584.589103][ T9151] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 584.937360][ T9151] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 585.677754][ T9161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1250'. [ 585.912620][ T9161] 8021q: adding VLAN 0 to HW filter on device bond4 [ 585.971650][ T9169] device syzkaller0 entered promiscuous mode [ 587.312583][ T4372] device hsr_slave_0 left promiscuous mode [ 587.363540][ T4372] device hsr_slave_1 left promiscuous mode [ 587.393322][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.440553][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.475051][ T9213] 9pnet_virtio: no channels available for device syz [ 587.483055][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.509890][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.580018][ T4372] device bridge_slave_1 left promiscuous mode [ 587.592483][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.818444][ T4372] device bridge_slave_0 left promiscuous mode [ 587.824708][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.958227][ T4372] device veth1_macvtap left promiscuous mode [ 588.964682][ T4372] device veth0_macvtap left promiscuous mode [ 589.013180][ T4372] device veth1_vlan left promiscuous mode [ 589.051131][ T4372] device veth0_vlan left promiscuous mode [ 590.301089][ T26] audit: type=1800 audit(1791553612.040:30): pid=9239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1266" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 592.520725][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1258'. [ 593.171630][ T4372] team0 (unregistering): Port device team_slave_1 removed [ 593.206723][ T4372] team0 (unregistering): Port device team_slave_0 removed [ 593.240599][ T4372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.275776][ T4372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 593.515593][ T4372] bond0 (unregistering): Released all slaves [ 593.562040][ T9228] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 593.573120][ T9228] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 593.586061][ T9228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 593.767069][ T9256] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1267'. [ 600.110537][ T9323] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 600.613401][ T9323] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 601.020119][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1280'. [ 607.112484][ T9420] binder: BINDER_SET_CONTEXT_MGR already set [ 607.120535][ T9420] binder: 9419:9420 ioctl 4018620d 200000004a80 returned -16 [ 607.236829][ T9425] device syzkaller0 entered promiscuous mode [ 607.303917][ T9429] IPVS: set_ctl: invalid protocol: 126 100.1.1.1:20004 [ 612.531778][ T9472] device syzkaller0 entered promiscuous mode [ 613.166998][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 613.674930][ T9494] binder: 9491:9494 ioctl c0306201 0 returned -14 [ 616.761052][ T26] audit: type=1800 audit(1791553638.500:31): pid=9518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1293" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 616.781894][ C1] vkms_vblank_simulate: vblank timer overrun [ 617.175901][ T9563] IPVS: set_ctl: invalid protocol: 126 100.1.1.1:20004 [ 617.454461][ T9570] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1320'. [ 617.514788][ T9570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 617.592924][ T9573] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 617.624061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 620.355926][ T9594] binder: 9592:9594 ioctl c0306201 0 returned -14 [ 621.739514][ T26] audit: type=1800 audit(1791553643.470:32): pid=9628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1332" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 625.050619][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.057290][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.908616][ T9678] binder: 9677:9678 ioctl c0306201 0 returned -14 [ 630.076401][ T9686] device syzkaller0 entered promiscuous mode [ 632.464025][ T26] audit: type=1800 audit(1791553654.200:33): pid=9696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1346" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 633.371632][ T9764] device syzkaller0 entered promiscuous mode [ 633.405552][ T9764] tipc: Enabling of bearer rejected, failed to enable media [ 637.640605][ T9800] binder: BINDER_SET_CONTEXT_MGR already set [ 637.673317][ T9800] binder: 9799:9800 ioctl 4018620d 200000000040 returned -16 [ 637.737611][ T9807] binder: BINDER_SET_CONTEXT_MGR already set [ 637.743659][ T9807] binder: 9806:9807 ioctl 4018620d 200000004a80 returned -16 [ 638.101778][ T9814] device syzkaller0 entered promiscuous mode [ 639.890446][ T26] audit: type=1800 audit(1791553661.630:34): pid=9839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1363" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 641.462209][ T9861] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 641.921195][ T26] audit: type=1800 audit(1791553663.660:35): pid=9856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1363" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 641.977829][ T9861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 643.637833][ T9873] [U]  [ 644.753191][ T9897] device syzkaller0 entered promiscuous mode [ 644.756936][ T14] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 645.036994][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 645.044469][ T14] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 645.060981][ T14] usb 2-1: config 0 has no interface number 0 [ 645.498193][ T9909] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 645.508686][ T9909] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 646.115869][ T14] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 646.172862][ T14] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 646.204722][ T14] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 646.239922][ T14] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 646.259654][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.472246][ T26] audit: type=1800 audit(1791553669.210:36): pid=9918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1381" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 647.493595][ T9909] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 647.613770][ T14] usb 2-1: config 0 descriptor?? [ 647.681681][ T14] usb 2-1: can't set config #0, error -71 [ 647.694157][ T14] usb 2-1: USB disconnect, device number 5 [ 647.727845][ T9924] device syzkaller0 entered promiscuous mode [ 647.807134][ T9924] tipc: Enabling of bearer rejected, failed to enable media [ 648.845549][ T9936] [U]  [ 651.048223][ T26] audit: type=1800 audit(1791553672.790:37): pid=9963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1377" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 651.540239][ T9978] IPVS: set_ctl: invalid protocol: 126 100.1.1.1:20004 [ 652.613960][ T9989] [U]  [ 652.825639][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 652.836252][ T4286] CPU: 1 PID: 4286 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 652.843839][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 652.853913][ T4286] Workqueue: hci3 hci_rx_work [ 652.858621][ T4286] Call Trace: [ 652.861910][ T4286] [ 652.864849][ T4286] dump_stack_lvl+0x188/0x24e [ 652.869550][ T4286] ? show_regs_print_info+0x12/0x12 [ 652.874768][ T4286] ? load_image+0x410/0x410 [ 652.879304][ T4286] sysfs_create_dir_ns+0x26a/0x290 [ 652.884436][ T4286] ? __lock_acquire+0x7ea0/0x7ea0 [ 652.889482][ T4286] ? sysfs_warn_dup+0xa0/0xa0 [ 652.894183][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 652.899400][ T4286] kobject_add_internal+0x617/0xca0 [ 652.904627][ T4286] kobject_add+0x160/0x230 [ 652.909075][ T4286] ? kobject_init+0x1c0/0x1c0 [ 652.913787][ T4286] ? __raw_spin_lock_init+0x41/0x100 [ 652.919099][ T4286] ? klist_children_get+0x50/0x50 [ 652.924142][ T4286] ? get_device_parent+0x121/0x3e0 [ 652.929284][ T4286] device_add+0x470/0x1050 [ 652.933731][ T4286] hci_conn_add_sysfs+0xd1/0x1e0 [ 652.938692][ T4286] le_conn_complete_evt+0xf93/0x15c0 [ 652.944005][ T4286] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 652.950274][ T4286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 652.955940][ T4286] ? mutex_unlock+0x10/0x10 [ 652.960462][ T4286] ? skb_pull_data+0xec/0x1f0 [ 652.965160][ T4286] hci_le_conn_complete_evt+0x183/0x440 [ 652.970730][ T4286] ? hci_remote_host_features_evt+0x230/0x230 [ 652.976820][ T4286] hci_event_packet+0x7b3/0x1290 [ 652.981780][ T4286] ? lock_chain_count+0x20/0x20 [ 652.986663][ T4286] ? bis_list+0x280/0x280 [ 652.991016][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 652.996914][ T4286] ? kcov_remote_start+0x50f/0x810 [ 653.002025][ T4286] ? lockdep_hardirqs_on+0x94/0x140 [ 653.007259][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 653.012456][ T4286] hci_rx_work+0x3eb/0xd40 [ 653.016874][ T4286] ? _raw_spin_unlock+0x40/0x40 [ 653.021725][ T4286] ? process_one_work+0x7b4/0x1160 [ 653.026836][ T4286] process_one_work+0x8ab/0x1160 [ 653.031787][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 653.037421][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 653.042437][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 653.047978][ T4286] ? wq_worker_running+0x97/0x190 [ 653.052997][ T4286] worker_thread+0xaf5/0x12a0 [ 653.057693][ T4286] kthread+0x29d/0x330 [ 653.061752][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 653.066770][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 653.071356][ T4286] ret_from_fork+0x1f/0x30 [ 653.075779][ T4286] [ 654.091706][ T4286] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 654.105014][ T4286] Bluetooth: hci3: failed to register connection device [ 654.117238][T10011] device syzkaller0 entered promiscuous mode [ 659.048925][T10057] fuse: Bad value for 'group_id' [ 659.724200][T10078] vivid-007: ================= START STATUS ================= [ 659.735340][T10078] vivid-007: Enable Output Cropping: true grabbed [ 659.744123][T10078] vivid-007: Enable Output Composing: true grabbed [ 659.751218][T10078] vivid-007: Enable Output Scaler: true grabbed [ 659.757948][T10078] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 659.765555][T10078] vivid-007: Transmit Mode: HDMI grabbed [ 659.890936][T10085] device syzkaller0 entered promiscuous mode [ 659.915736][T10085] tipc: Enabling of bearer rejected, failed to enable media [ 661.115599][T10078] vivid-007: Display Present: true inactive [ 661.123176][T10078] vivid-007: Hotplug Present: 0x00000001 [ 661.134862][T10058] [U]  [ 661.773005][ T26] audit: type=1800 audit(1791553683.510:38): pid=10082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1421" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 661.786619][T10078] vivid-007: RxSense Present: 0x00000001 [ 661.873595][T10078] vivid-007: EDID Present: 0x00000001 [ 661.883799][T10078] vivid-007: ================== END STATUS ================== [ 662.995323][T10108] fuse: Bad value for 'group_id' [ 663.884396][T10112] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1432'. [ 666.150355][T10119] [U]  [ 666.420499][T10131] device syzkaller0 entered promiscuous mode [ 667.454090][T10152] fuse: Bad value for 'group_id' [ 668.742396][T10162] [U]  [ 669.047431][T10171] capability: warning: `syz.5.1446' uses 32-bit capabilities (legacy support in use) [ 670.022945][ T26] audit: type=1800 audit(1791553691.760:39): pid=10176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1448" name="enable" dev="configfs" ino=53418 res=0 errno=0 [ 670.059664][T10176] For dev_enable ops, only valid value is "1" [ 670.433439][T10166] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1443'. [ 671.750154][T10189] binder: 10188:10189 ioctl 4018620d 0 returned -22 [ 675.937798][ T26] audit: type=1800 audit(1791553697.680:40): pid=10216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1455" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 675.980672][T10220] [ 675.983015][T10220] ================================================ [ 675.989503][T10220] WARNING: lock held when returning to user space! [ 675.996010][T10220] syzkaller #0 Not tainted [ 676.000425][T10220] ------------------------------------------------ [ 676.006918][T10220] syz.1.1456/10220 is leaving the kernel with locks still held! [ 676.014546][T10220] 1 lock held by syz.1.1456/10220: [ 676.019661][T10220] #0: ffff888028044d40 (&wdev->mtx){+.+.}-{3:3}, at: cfg80211_wext_siwgenie+0xd4/0x3f0 [ 677.101826][T10225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1457'. [ 685.648816][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.655152][ T1281] ieee802154 phy1 wpan1: encryption failed: -22