last executing test programs: 12.771150174s ago: executing program 2 (id=1175): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r3}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) 10.274364208s ago: executing program 4 (id=1185): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040041}, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ff3000/0xa000)=nil, 0xa000}, 0x1}) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) inotify_init1(0x0) epoll_create1(0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.192113092s ago: executing program 4 (id=1187): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kexec_load(0xff0f, 0x0, 0x0, 0x0) setrlimit(0x7, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80, 0x4}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x0, 0x4, 0x40, 0xfffffc01, 0x0, 0x1, 0x25}) 9.560667559s ago: executing program 2 (id=1189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$peekuser(0x3, r0, 0x8) capget(&(0x7f00000000c0)={0x20071026, r0}, &(0x7f0000000100)={0x8, 0x7, 0x771, 0x1, 0xb, 0x3ff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000ffdbdf250e0000000c00028004"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cpuset.memory_migrate\x00', 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) sendfile(r5, r5, 0x0, 0x1) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) 7.439868951s ago: executing program 3 (id=1194): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000001240), &(0x7f0000000200)='./file0\x00', 0x2800080, &(0x7f0000001280)=ANY=[], 0xff, 0x212, &(0x7f0000000240)="$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") mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 7.395966593s ago: executing program 4 (id=1195): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r3}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, 0x0, &(0x7f0000000240)}, 0x20) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8) socket$inet6(0xa, 0x2, 0x0) 7.023561775s ago: executing program 2 (id=1197): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_getscheduler(r0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x8) 6.943912359s ago: executing program 1 (id=1198): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040041}, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ff3000/0xa000)=nil, 0xa000}, 0x1}) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) inotify_init1(0x0) epoll_create1(0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.814677997s ago: executing program 1 (id=1199): pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b00"], 0x38}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000001c0)={0x0, 0x0}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x4e, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 6.080056899s ago: executing program 2 (id=1200): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x4, 0x7, 0x5}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000440)={r2, 0x63, "6b75336aade043bc89002c1871ee0fe95c8e9ec786adcdf213e3ce4fbc222ace1f2f24a51b1f4bb53f847a953db17c74a43249739163066b921e73bd1b3f31c34335635aa7c25258d0878bbb3b4f97bea526c12ac87f9939f17f33ec22848900baa5c5"}, &(0x7f0000000500)=0x6b) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) write$tun(r4, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x3) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x7) 5.732564859s ago: executing program 3 (id=1201): socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sysinfo(0x0) 5.107669095s ago: executing program 2 (id=1202): r0 = syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) 4.31996041s ago: executing program 1 (id=1204): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004015) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c000000090601020000000000000000030000000900020073797a31000000000500010007000000440007801800018014000240fec000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000"], 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 4.15750715s ago: executing program 3 (id=1206): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) madvise(&(0x7f000019f000/0x4000)=nil, 0x4000, 0x9) copy_file_range(r0, &(0x7f0000000200)=0x2ddb, 0xffffffffffffffff, &(0x7f0000000300)=0x7, 0x1, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x1b0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[]) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x4, 0x7f, 0x1, 0x4, 0x40, @empty, @mcast2, 0x700, 0x80, 0xfffffffa, 0x8}}) socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) read$char_usb(r2, &(0x7f0000000100)=""/240, 0xf0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) ptrace(0x10, r3) ptrace(0xffffffffffffffff, r3) ptrace(0x4208, r3) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x41, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0xff, 0x217, &(0x7f0000000240)="$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") 4.068669995s ago: executing program 1 (id=1207): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) madvise(&(0x7f000019f000/0x4000)=nil, 0x4000, 0x9) copy_file_range(r0, &(0x7f0000000200)=0x2ddb, 0xffffffffffffffff, &(0x7f0000000300)=0x7, 0x1, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x1b0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[]) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x4, 0x7f, 0x1, 0x4, 0x40, @empty, @mcast2, 0x700, 0x80, 0xfffffffa, 0x8}}) socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) read$char_usb(r2, &(0x7f0000000100)=""/240, 0xf0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) ptrace(0x10, r3) ptrace(0xffffffffffffffff, r3) ptrace(0x4208, r3) 3.927985863s ago: executing program 2 (id=1208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) clock_adjtime(0x0, &(0x7f00000002c0)={0x19b1, 0xc1bdf10000000000, 0x0, 0x0, 0x0, 0xa9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r2}, 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3.759137893s ago: executing program 3 (id=1210): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000100)={0xa, 0x7, 0x3, 0x6, 0x3}) 3.700580016s ago: executing program 1 (id=1212): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) 3.551432715s ago: executing program 4 (id=1213): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1c}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x1, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 3.495352898s ago: executing program 1 (id=1214): pipe2(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b00"], 0x38}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000001c0)={0x0, 0x0}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x4e, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.397924082s ago: executing program 0 (id=1215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="b805000000b9812000000f01c10f060f01c8b9c80b0000b800680000ba000000000f30b8005000000f23d00f21f835300000060f23f8c744240000800000c744240263015e9cc7442406000000000f011c24f30f93470166ba420066b8d18766ef66bad004b000eef30f09", 0x6b}], 0x1, 0x63, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x3}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0xd7, 0x6, 0x4}]}}) 1.392073909s ago: executing program 3 (id=1216): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 1.391479859s ago: executing program 0 (id=1217): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004015) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c000000090601020000000000000000030000000900020073797a31000000000500010007000000440007801800018014000240fec000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000"], 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.390292089s ago: executing program 4 (id=1218): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.272605226s ago: executing program 0 (id=1219): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kexec_load(0xff0f, 0x0, 0x0, 0x0) setrlimit(0x7, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80, 0x4}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x0, 0x4, 0x40, 0xfffffc01, 0x0, 0x1, 0x25}) 1.272310436s ago: executing program 3 (id=1220): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) madvise(&(0x7f000019f000/0x4000)=nil, 0x4000, 0x9) copy_file_range(r0, &(0x7f0000000200)=0x2ddb, 0xffffffffffffffff, &(0x7f0000000300)=0x7, 0x1, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x1b0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[]) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x4, 0x7f, 0x1, 0x4, 0x40, @empty, @mcast2, 0x700, 0x80, 0xfffffffa, 0x8}}) socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) read$char_usb(r2, &(0x7f0000000100)=""/240, 0xf0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) ptrace(0x10, r3) ptrace(0xffffffffffffffff, r3) ptrace(0x4208, r3) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x41, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0xff, 0x217, &(0x7f0000000240)="$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") 279.808704ms ago: executing program 0 (id=1221): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040041}, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ff3000/0xa000)=nil, 0xa000}, 0x1}) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) inotify_init1(0x0) epoll_create1(0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) gettid() timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 270.084324ms ago: executing program 0 (id=1222): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x400000c, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4e}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) 175.871369ms ago: executing program 4 (id=1223): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r3}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, 0x0, &(0x7f0000000240)}, 0x20) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8) socket$inet6(0xa, 0x2, 0x0) 0s ago: executing program 0 (id=1224): socket$packet(0x11, 0x3, 0x300) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000040000100fcff07000400000001000000040048801400018010"], 0x34}, 0x1, 0x0, 0x0, 0x400c811}, 0x4008094) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1a0d"], 0x1d) kernel console output (not intermixed with test programs): [ 54.301742][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.310810][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.319676][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.328225][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.335871][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.347737][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.355858][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.363936][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.374527][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.383092][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.390177][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.409899][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.423067][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.433101][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.442754][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.452204][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.463068][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.472655][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.481554][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.494270][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.503011][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.511788][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.518892][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.527040][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.536031][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.544678][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.551761][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.560381][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.573674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.583677][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.592800][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.605539][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.623745][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.633509][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.642520][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.651601][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.661358][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.689178][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.698900][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.709543][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.719165][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.729894][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.738778][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.747411][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.756215][ T1449] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.763341][ T1449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.771777][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.780613][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.790164][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.800073][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.812871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.822417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.831046][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.838116][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.863610][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.879972][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.895675][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.906212][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.921131][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.930326][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.938849][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.950591][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.981168][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.991582][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.999970][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.010256][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.019714][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.030471][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.038831][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.047289][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.055907][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.064906][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.099769][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.120283][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.142197][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.160367][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.177606][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.200822][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.209382][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.243572][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.281901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.292519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.319659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.331946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.354100][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.367760][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.375710][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.388558][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.396804][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.428611][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.445762][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.454245][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.463385][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.472411][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.480274][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.487714][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.496283][ T4264] Bluetooth: hci3: command 0x041b tx timeout [ 55.496862][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.511546][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.518651][ T4279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.526335][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.535610][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.544319][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.551411][ T4279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.562117][ T4184] device veth0_vlan entered promiscuous mode [ 55.575593][ T4184] device veth1_vlan entered promiscuous mode [ 55.585086][ T4264] Bluetooth: hci2: command 0x041b tx timeout [ 55.586615][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.592119][ T4264] Bluetooth: hci4: command 0x041b tx timeout [ 55.601817][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.610465][ T4264] Bluetooth: hci0: command 0x041b tx timeout [ 55.614340][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.623700][ T4264] Bluetooth: hci1: command 0x041b tx timeout [ 55.644733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.654912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.664861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.674353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.683368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.692240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.700977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.709789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.746944][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.760162][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.773448][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.782347][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.791205][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.800781][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.808411][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.815803][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.824312][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.833081][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.841516][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.850497][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.887250][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.896784][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.907294][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.915994][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.925061][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.933618][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.942458][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.950548][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.958444][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.966106][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.975839][ T4188] device veth0_vlan entered promiscuous mode [ 55.990792][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.006883][ T4187] device veth0_vlan entered promiscuous mode [ 56.019886][ T4184] device veth0_macvtap entered promiscuous mode [ 56.029442][ T4188] device veth1_vlan entered promiscuous mode [ 56.052835][ T4187] device veth1_vlan entered promiscuous mode [ 56.067844][ T4184] device veth1_macvtap entered promiscuous mode [ 56.093307][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.105944][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.116514][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.125837][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.135620][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.143707][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.152577][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.176629][ T4188] device veth0_macvtap entered promiscuous mode [ 56.193589][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.201889][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.211569][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.221311][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.243498][ T4185] device veth0_vlan entered promiscuous mode [ 56.255797][ T4188] device veth1_macvtap entered promiscuous mode [ 56.268337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.276404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.285682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.295028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.303719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.324915][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.336250][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.352756][ T4187] device veth0_macvtap entered promiscuous mode [ 56.364903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.374179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.383542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.392472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.403658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.412222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.422381][ T4185] device veth1_vlan entered promiscuous mode [ 56.433198][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.442525][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.451809][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.461097][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.472330][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.483290][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.494897][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.508096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.516193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.524790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.533765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.559587][ T4187] device veth1_macvtap entered promiscuous mode [ 56.573532][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.585228][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.596738][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.615135][ T4185] device veth0_macvtap entered promiscuous mode [ 56.627714][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.636407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.650604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.661322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.672761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.684839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.694439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.702437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.711234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.730585][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.739490][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.749911][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.758905][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.771740][ T4185] device veth1_macvtap entered promiscuous mode [ 56.780423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.790465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.817583][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.833758][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.852828][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.863594][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.875398][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.897176][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.913498][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.925728][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.936871][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.946957][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.957538][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.969300][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.977642][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.988247][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.997103][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.006279][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.020420][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.032086][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.042319][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.052937][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.064325][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.087121][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.097746][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.106763][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.117491][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.131712][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.141320][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.178366][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.188981][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.199309][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.209930][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.219811][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.230757][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.242139][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.274591][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.283278][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.292618][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.301566][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.321680][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.335930][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.345024][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.354038][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.372000][ T4186] device veth0_vlan entered promiscuous mode [ 57.393282][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.402167][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.407046][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.412167][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.434930][ T4186] device veth1_vlan entered promiscuous mode [ 57.460584][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.472517][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.481150][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.491679][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.523881][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.536854][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.560935][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.564106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.576782][ T4173] Bluetooth: hci3: command 0x040f tx timeout [ 57.579560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.590270][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.590843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.606653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.615403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.634858][ T4186] device veth0_macvtap entered promiscuous mode [ 57.651142][ T4186] device veth1_macvtap entered promiscuous mode [ 57.658259][ T4173] Bluetooth: hci1: command 0x040f tx timeout [ 57.664444][ T4173] Bluetooth: hci0: command 0x040f tx timeout [ 57.678791][ T4173] Bluetooth: hci4: command 0x040f tx timeout [ 57.695913][ T4173] Bluetooth: hci2: command 0x040f tx timeout [ 57.730143][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.740429][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.751502][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.759532][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.773700][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.793005][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.810489][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.821496][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.831598][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.847206][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.857729][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.868713][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.882119][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.897276][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.908777][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.916733][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.926013][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.934174][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.943225][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.953797][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.965514][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.989553][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.051571][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.073023][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.084298][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.094600][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.105450][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.134382][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.145134][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.157160][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.181218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.195853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.234963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.266808][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.276843][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.276926][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.292603][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.304452][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.308532][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.325402][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.342385][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.389320][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.418006][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.562223][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.588554][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.606786][ T4319] loop5: detected capacity change from 0 to 4095 [ 58.620530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.629901][ T4228] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 58.653275][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.672892][ C1] blk_update_request: I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 58.685718][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.687252][ C0] blk_update_request: I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.704472][ C0] Buffer I/O error on dev loop5, logical block 480, async page read [ 58.807955][ T4242] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 58.898770][ T4228] usb 3-1: Using ep0 maxpacket: 32 [ 58.931974][ T4315] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.940151][ T4315] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.978158][ T4263] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 59.048112][ T4228] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 59.056535][ T4228] usb 3-1: config 0 has no interface number 0 [ 59.065026][ T4228] usb 3-1: config 0 interface 230 altsetting 10 endpoint 0x82 has invalid wMaxPacketSize 0 [ 59.076141][ T4228] usb 3-1: config 0 interface 230 altsetting 10 bulk endpoint 0x82 has invalid maxpacket 0 [ 59.086245][ T4228] usb 3-1: config 0 interface 230 has no altsetting 0 [ 59.268128][ T4228] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 59.280149][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.288564][ T4228] usb 3-1: Product: syz [ 59.293072][ T4228] usb 3-1: Manufacturer: syz [ 59.297837][ T4228] usb 3-1: SerialNumber: syz [ 59.302080][ T4315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.317094][ T4228] usb 3-1: config 0 descriptor?? [ 59.335576][ C0] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 115 prio class 0 [ 59.348575][ C0] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 59.359515][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 59.372235][ T4242] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 59.373009][ T4228] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 59.381420][ T4242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.381463][ T4242] usb 1-1: Product: syz [ 59.381475][ T4242] usb 1-1: Manufacturer: syz [ 59.381489][ T4242] usb 1-1: SerialNumber: syz [ 59.397211][ T4242] usb 1-1: config 0 descriptor?? [ 59.420872][ T4315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.431747][ T4228] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 59.548131][ T4263] usb 4-1: no configurations [ 59.552773][ T4263] usb 4-1: can't read configurations, error -22 [ 59.666549][ T4264] Bluetooth: hci3: command 0x0419 tx timeout [ 59.737718][ T4264] Bluetooth: hci2: command 0x0419 tx timeout [ 59.744155][ T4264] Bluetooth: hci4: command 0x0419 tx timeout [ 59.750314][ T4264] Bluetooth: hci0: command 0x0419 tx timeout [ 59.756352][ T4264] Bluetooth: hci1: command 0x0419 tx timeout [ 59.774310][ T4315] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.783241][ T4315] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.792976][ T4315] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.802535][ T4315] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.885144][ T4315] syz.1.2 (4315) used greatest stack depth: 20336 bytes left [ 59.887824][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.908353][ T4242] usb 1-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32 [ 59.916435][ T4242] usb 1-1: Firmware version (0.0) predates our first public release. [ 59.943378][ T4242] usb 1-1: Please update to version 0.2 or newer [ 59.976447][ T4313] udc-core: couldn't find an available UDC or it's busy [ 59.985216][ T4313] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 59.997946][ T4242] usb 1-1: atusb_probe: initialization failed, error = -32 [ 60.015627][ T4242] atusb: probe of 1-1:0.0 failed with error -32 [ 60.309124][ T4335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 61.408243][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 61.545626][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 61.554000][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 61.687259][ T4350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 61.857863][ T4192] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 61.865505][ T4312] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 62.196446][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 62.208993][ T4312] usb 4-1: Using ep0 maxpacket: 16 [ 62.214076][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 62.223448][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 62.232649][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 62.250869][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 62.259949][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 62.268999][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 62.284107][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 62.293398][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 63.338328][ T4357] vivid-008: kernel_thread() failed [ 63.648843][ T4228] ums-usbat: probe of 3-1:0.230 failed with error 4 [ 63.699276][ T4312] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.722662][ T4228] usb 3-1: USB disconnect, device number 2 [ 63.751040][ T4312] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.862110][ T4312] usb 4-1: config 0 interface 0 has no altsetting 0 [ 63.888234][ T4192] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 63.917707][ T4192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.936307][ T4312] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 63.951076][ T4364] ======================================================= [ 63.951076][ T4364] WARNING: The mand mount option has been deprecated and [ 63.951076][ T4364] and is ignored by this kernel. Remove the mand [ 63.951076][ T4364] option from the mount to silence this warning. [ 63.951076][ T4364] ======================================================= [ 64.002243][ T4364] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 64.629928][ T4192] usb 5-1: Product: syz [ 64.634229][ T4192] usb 5-1: Manufacturer: syz [ 64.654243][ T4312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.663715][ T4192] usb 5-1: SerialNumber: syz [ 64.747043][ T4312] usb 4-1: config 0 descriptor?? [ 64.759939][ T4192] usb 5-1: config 0 descriptor?? [ 64.798815][ T23] usb 1-1: USB disconnect, device number 2 [ 64.807585][ T4312] usb 4-1: can't set config #0, error -71 [ 64.813959][ T4192] usb 5-1: can't set config #0, error -71 [ 64.834423][ T4312] usb 4-1: USB disconnect, device number 4 [ 64.841672][ T4192] usb 5-1: USB disconnect, device number 2 [ 65.170127][ T4366] loop0: detected capacity change from 0 to 32768 [ 65.401388][ T4366] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.20 (4366) [ 65.959242][ T4366] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 65.997924][ T4366] BTRFS info (device loop0): setting nodatacow, compression disabled [ 66.006109][ T4366] BTRFS info (device loop0): turning on flush-on-commit [ 66.008850][ T4377] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.058120][ T4366] BTRFS info (device loop0): using free space tree [ 66.064667][ T4366] BTRFS info (device loop0): has skinny extents [ 66.121749][ T4379] loop1: detected capacity change from 0 to 2048 [ 66.381693][ T4177] loop1: p3 < > p4 < > [ 66.386241][ T4177] loop1: partition table partially beyond EOD, truncated [ 67.209152][ T4177] loop1: p3 start 4284289 is beyond EOD, truncated [ 67.361608][ T4408] loop3: detected capacity change from 0 to 256 [ 67.409412][ T4411] loop4: detected capacity change from 0 to 16 [ 67.425156][ T4366] BTRFS error (device loop0): open_ctree failed: -12 [ 67.468447][ T4379] loop1: p3 < > p4 < > [ 67.508192][ T4379] loop1: partition table partially beyond EOD, truncated [ 67.515445][ T4379] loop1: p3 start 4284289 is beyond EOD, truncated [ 67.516943][ T4411] erofs: (device loop4): mounted with root inode @ nid 36. [ 67.575621][ T4408] FAT-fs (loop3): Directory bread(block 64) failed [ 67.582587][ T4408] FAT-fs (loop3): Directory bread(block 65) failed [ 67.658507][ T4408] FAT-fs (loop3): Directory bread(block 66) failed [ 67.665092][ T4408] FAT-fs (loop3): Directory bread(block 67) failed [ 67.671943][ T4408] FAT-fs (loop3): Directory bread(block 68) failed [ 67.678564][ T4408] FAT-fs (loop3): Directory bread(block 69) failed [ 67.685277][ T4408] FAT-fs (loop3): Directory bread(block 70) failed [ 67.693524][ T4408] FAT-fs (loop3): Directory bread(block 71) failed [ 67.713011][ T4408] FAT-fs (loop3): Directory bread(block 72) failed [ 67.721969][ T4408] FAT-fs (loop3): Directory bread(block 73) failed [ 68.459977][ T4411] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 68.591653][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 68.656241][ T4427] netlink: 63 bytes leftover after parsing attributes in process `syz.0.29'. [ 68.711879][ T4437] netlink: 168 bytes leftover after parsing attributes in process `syz.1.30'. [ 68.755649][ T4437] loop1: detected capacity change from 0 to 512 [ 69.588785][ T4437] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.678625][ T4174] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by udevd (4174) [ 69.745635][ T4440] udevd[4440]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 69.765025][ T4442] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 69.924084][ T4430] kvm: pic: non byte read [ 69.979495][ T4430] kvm: pic: level sensitive irq not supported [ 69.979611][ T4430] kvm: pic: non byte read [ 70.008914][ T4430] kvm: pic: level sensitive irq not supported [ 70.008998][ T4430] kvm: pic: non byte read [ 70.023576][ T4440] udevd[4440]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 70.322740][ T4453] capability: warning: `syz.1.33' uses deprecated v2 capabilities in a way that may be insecure [ 71.300133][ T4457] loop1: detected capacity change from 0 to 64 [ 71.331722][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.344072][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.290558][ T4457] hfs: invalid btree extent records (0 size) [ 72.297645][ T4457] hfs: unable to open catalog tree [ 72.369477][ T4457] hfs: can't find a HFS filesystem on dev loop1 [ 72.555664][ T4473] loop0: detected capacity change from 0 to 16 [ 72.968897][ T4473] erofs: (device loop0): mounted with root inode @ nid 36. [ 73.322336][ T4479] loop3: detected capacity change from 0 to 1024 [ 74.350016][ T4483] netlink: 28 bytes leftover after parsing attributes in process `syz.4.40'. [ 75.059616][ T4492] loop1: detected capacity change from 0 to 4096 [ 75.315046][ T4479] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 75.605619][ T4479] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.721639][ T4492] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 75.775100][ T4492] ntfs3: loop1: Failed to load $Extend. [ 75.786698][ T4479] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: block 3: comm syz.3.42: lblock 3 mapped to illegal pblock 3 (length 3) [ 75.816601][ T4479] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 75.846747][ T4479] EXT4-fs (loop3): This should not happen!! Data will be lost [ 75.846747][ T4479] [ 75.858875][ T4504] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: block 3: comm syz.3.42: lblock 3 mapped to illegal pblock 3 (length 1) [ 75.883660][ T4504] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: block 3: comm syz.3.42: lblock 3 mapped to illegal pblock 3 (length 1) [ 75.915993][ T4505] kvm: pic: non byte read [ 75.930222][ T4505] kvm: pic: non byte read [ 75.934814][ T4505] kvm: pic: non byte read [ 75.947986][ T4505] kvm: pic: non byte read [ 75.952455][ T4505] kvm: pic: non byte read [ 75.970067][ T4505] kvm: pic: non byte read [ 75.987529][ T4505] kvm: pic: non byte read [ 75.992350][ T4505] kvm: pic: non byte read [ 76.006275][ T4504] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: block 3: comm syz.3.42: lblock 3 mapped to illegal pblock 3 (length 1) [ 76.033849][ T4505] kvm: pic: non byte read [ 76.046855][ T4505] kvm: pic: non byte read [ 76.053975][ T4312] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 76.058581][ T4477] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: block 3: comm syz.3.42: lblock 3 mapped to illegal pblock 3 (length 1) [ 76.142642][ T4477] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: block 3: comm syz.3.42: lblock 3 mapped to illegal pblock 3 (length 1) [ 76.143883][ T4279] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 76.506236][ T4504] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: block 3: comm syz.3.42: lblock 3 mapped to illegal pblock 3 (length 1) [ 76.540896][ T4279] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 76.584525][ T4479] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: block 3: comm syz.3.42: lblock 3 mapped to illegal pblock 3 (length 1) [ 76.627880][ T4279] EXT4-fs (loop3): This should not happen!! Data will be lost [ 76.627880][ T4279] [ 76.644727][ T1107] cfg80211: failed to load regulatory.db [ 76.668965][ T4504] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: block 3: comm syz.3.42: lblock 3 mapped to illegal pblock 3 (length 1) [ 76.885382][ T1131] Bluetooth: hci5: Frame reassembly failed (-84) [ 76.918851][ T4312] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 76.928259][ T4312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.944763][ T4312] usb 1-1: config 0 descriptor?? [ 77.027947][ T4192] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.213926][ T4312] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 77.230407][ T4312] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 77.255100][ T4518] loop3: detected capacity change from 0 to 1024 [ 77.292935][ T4192] usb 2-1: Using ep0 maxpacket: 32 [ 77.346998][ T4518] EXT4-fs (loop3): Ignoring removed nobh option [ 77.364332][ T4518] EXT4-fs (loop3): Ignoring removed oldalloc option [ 77.441178][ T4518] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 77.448291][ T4312] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 77.461124][ T4192] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 77.470426][ T4192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.479719][ T4312] [drm] Initialized udl on minor 2 [ 77.490590][ T4192] usb 2-1: config 0 descriptor?? [ 77.517920][ T4518] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,bsdgroups,barrier=0x0000000000000003,dioread_lock,data_err=ignore,usrjquota=,data_err=ignore,grpquota,nobh,grpid,oldalloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 77.654465][ T4312] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 77.674942][ T4312] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 77.702941][ T1107] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 77.718050][ T4312] usb 1-1: USB disconnect, device number 3 [ 77.759842][ T4263] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 77.769119][ T4192] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 77.790723][ T4192] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 77.801059][ T4263] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 77.818663][ T4263] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 77.838588][ T4192] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 77.846039][ T4192] usb 2-1: media controller created [ 77.875744][ T4192] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 77.990277][ T4192] az6027: usb out operation failed. (-71) [ 78.022306][ T4192] az6027: usb out operation failed. (-71) [ 78.029618][ T4192] stb0899_attach: Driver disabled by Kconfig [ 78.035612][ T4192] az6027: no front-end attached [ 78.035612][ T4192] [ 78.071821][ T4192] az6027: usb out operation failed. (-71) [ 78.087858][ T4192] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 78.100060][ T4192] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 78.128176][ T1107] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 78.136289][ T1107] usb 3-1: config 0 has no interface number 0 [ 78.154599][ T4192] dvb-usb: schedule remote query interval to 400 msecs. [ 78.165931][ T1107] usb 3-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 78.178349][ T4192] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 78.194206][ T1107] usb 3-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.217238][ T4192] usb 2-1: USB disconnect, device number 2 [ 78.236375][ T1107] usb 3-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.251554][ T1107] usb 3-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 78.269079][ T1107] usb 3-1: config 0 interface 16 has no altsetting 0 [ 78.294369][ T1107] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 78.311754][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.335140][ T1107] usb 3-1: config 0 descriptor?? [ 78.433871][ T4192] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 78.447359][ T4534] loop3: detected capacity change from 0 to 256 [ 78.515708][ T4534] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf5596061, utbl_chksum : 0xe619d30d) [ 78.603664][ T4534] tipc: Failed to remove unknown binding: 66,0,0/0:362948266/362948267 [ 78.630245][ T4534] tipc: Failed to remove unknown binding: 66,0,0/0:362948266/362948267 [ 78.700070][ T4538] loop1: detected capacity change from 0 to 4096 [ 78.765645][ T4538] EXT4-fs (loop1): inline encryption not supported [ 78.822273][ T1107] uclogic 0003:5543:004D.0001: unknown main item tag 0x0 [ 78.848698][ T1107] uclogic 0003:5543:004D.0001: unknown main item tag 0x0 [ 78.883352][ T1107] uclogic 0003:5543:004D.0001: unknown main item tag 0x0 [ 78.918338][ T1107] uclogic 0003:5543:004D.0001: unknown main item tag 0x0 [ 78.937920][ T4419] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 78.945951][ T1107] uclogic 0003:5543:004D.0001: unknown main item tag 0x0 [ 78.962443][ T1107] uclogic 0003:5543:004D.0001: No inputs registered, leaving [ 78.987057][ T1107] uclogic 0003:5543:004D.0001: hidraw0: USB HID v0.00 Device [HID 5543:004d] on usb-dummy_hcd.2-1/input16 [ 79.026046][ T4538] EXT4-fs (loop1): Test dummy encryption mode enabled [ 79.039096][ T4312] Bluetooth: hci5: command 0x1003 tx timeout [ 79.045411][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 79.079200][ T4538] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 79.099986][ T4538] System zones: 0-5 [ 79.145762][ T4538] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 79.310876][ T4419] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 79.326732][ T4419] usb 4-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 79.351949][ T4419] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 79.361526][ T4419] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.437765][ T4560] loop1: detected capacity change from 0 to 1024 [ 79.459380][ T4560] hfsplus: unable to parse mount options [ 79.528213][ T4419] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 79.542416][ T4419] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 79.564917][ T4419] usb 4-1: Product: syz [ 79.596238][ T4419] usb 4-1: Manufacturer: syz [ 79.659382][ T4412] usb 3-1: USB disconnect, device number 3 [ 79.679132][ T4419] cdc_wdm 4-1:1.0: skipping garbage [ 79.690264][ T4419] cdc_wdm 4-1:1.0: skipping garbage [ 79.721305][ T4571] loop1: detected capacity change from 0 to 16 [ 79.729401][ T4419] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 79.763573][ T4571] erofs: (device loop1): mounted with root inode @ nid 36. [ 79.806890][ T4571] attempt to access beyond end of device [ 79.806890][ T4571] loop1: rw=524288, want=1342177304, limit=16 [ 79.855829][ T4571] attempt to access beyond end of device [ 79.855829][ T4571] loop1: rw=0, want=1342177280, limit=16 [ 79.894656][ T26] audit: type=1800 audit(1769633666.176:2): pid=4571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.67" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 79.950545][ T4412] usb 4-1: USB disconnect, device number 5 [ 79.995980][ T4574] attempt to access beyond end of device [ 79.995980][ T4574] loop1: rw=0, want=1342177280, limit=16 [ 80.028733][ T26] audit: type=1800 audit(1769633666.316:3): pid=4574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.67" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 80.031260][ T4571] attempt to access beyond end of device [ 80.031260][ T4571] loop1: rw=524288, want=1342178056, limit=16 [ 80.118192][ T4571] attempt to access beyond end of device [ 80.118192][ T4571] loop1: rw=0, want=1342178056, limit=16 [ 80.137641][ T4571] attempt to access beyond end of device [ 80.137641][ T4571] loop1: rw=0, want=1342178056, limit=16 [ 80.151117][ T4571] attempt to access beyond end of device [ 80.151117][ T4571] loop1: rw=0, want=1342178056, limit=16 [ 80.169713][ T4571] attempt to access beyond end of device [ 80.169713][ T4571] loop1: rw=0, want=1342178056, limit=16 [ 80.345793][ T4576] loop1: detected capacity change from 0 to 256 [ 80.707964][ T4584] ./file0: Can't open blockdev [ 80.873564][ T4593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.73'. [ 81.087945][ T4312] Bluetooth: hci5: command 0x1001 tx timeout [ 81.096558][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 81.950087][ T4606] fuse: Bad value for 'fd' [ 81.956430][ T4606] process 'syz.0.81' launched './file0' with NULL argv: empty string added [ 82.167960][ T4414] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 82.184744][ T4614] mmap: syz.0.84 (4614) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 82.708038][ T4414] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 82.720512][ T4414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.732257][ T4414] usb 4-1: Product: syz [ 82.740634][ T4414] usb 4-1: Manufacturer: syz [ 82.748167][ T4414] usb 4-1: SerialNumber: syz [ 82.763296][ T4414] usb 4-1: config 0 descriptor?? [ 83.028051][ T4414] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 83.170863][ T4623] syz.1.87 uses obsolete (PF_INET,SOCK_PACKET) [ 83.177990][ T4192] Bluetooth: hci5: command 0x1009 tx timeout [ 83.208653][ T4623] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.597204][ T4634] loop2: detected capacity change from 0 to 64 [ 83.688885][ T4634] attempt to access beyond end of device [ 83.688885][ T4634] loop2: rw=2049, want=162, limit=64 [ 83.700547][ T4634] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 83.709879][ T4634] attempt to access beyond end of device [ 83.709879][ T4634] loop2: rw=2049, want=163, limit=64 [ 83.721296][ T4634] Buffer I/O error on dev loop2, logical block 162, lost async page write [ 83.732115][ T4634] Buffer I/O error on dev loop2, logical block 163, lost async page write [ 83.741566][ T4634] Buffer I/O error on dev loop2, logical block 167, lost async page write [ 83.751135][ T4634] Buffer I/O error on dev loop2, logical block 169, lost async page write [ 83.764749][ T4634] Buffer I/O error on dev loop2, logical block 171, lost async page write [ 83.776133][ T4634] Buffer I/O error on dev loop2, logical block 172, lost async page write [ 84.072915][ T4639] loop2: detected capacity change from 0 to 1024 [ 84.198108][ T4414] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 84.211962][ T4639] Quota error (device loop2): find_tree_dqentry: Getting block too big (64 >= 6) [ 84.220716][ T4414] usb 4-1: USB disconnect, device number 6 [ 84.230578][ T4639] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 84.253758][ T4639] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.95: Failed to acquire dquot type 0 [ 84.321753][ T4639] EXT4-fs error (device loop2): mb_free_blocks:1876: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 84.373472][ T4639] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #13: comm syz.2.95: corrupted inode contents [ 84.393749][ T4639] EXT4-fs error (device loop2): ext4_dirty_inode:6058: inode #13: comm syz.2.95: mark_inode_dirty error [ 84.407164][ T4639] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #13: comm syz.2.95: corrupted inode contents [ 84.430029][ T4639] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #13: comm syz.2.95: mark_inode_dirty error [ 84.444782][ T4639] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #13: comm syz.2.95: corrupted inode contents [ 84.470353][ T4639] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 84.483669][ T4639] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #13: comm syz.2.95: corrupted inode contents [ 84.502732][ T4639] EXT4-fs error (device loop2): ext4_truncate:4279: inode #13: comm syz.2.95: mark_inode_dirty error [ 84.522614][ T4648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.97'. [ 84.534064][ T4639] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 84.561755][ T4639] EXT4-fs (loop2): 1 truncate cleaned up [ 84.569567][ T4639] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 84.626653][ T4648] team0 (unregistering): Port device team_slave_0 removed [ 84.658991][ T4639] Quota error (device loop2): find_tree_dqentry: Getting block too big (64 >= 6) [ 84.671296][ T4639] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 84.681113][ T4639] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.95: Failed to acquire dquot type 0 [ 84.682535][ T4648] team0 (unregistering): Port device team_slave_1 removed [ 84.711145][ T4639] Quota error (device loop2): find_tree_dqentry: Getting block too big (64 >= 6) [ 84.723602][ T4639] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 84.733578][ T4639] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.95: Failed to acquire dquot type 0 [ 85.239965][ T4665] loop3: detected capacity change from 0 to 16 [ 85.299978][ T4665] erofs: (device loop3): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 86.672822][ T4685] loop2: detected capacity change from 0 to 1024 [ 86.715310][ T4683] loop3: detected capacity change from 0 to 1024 [ 86.775709][ T4685] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 86.822130][ T4683] Quota error (device loop3): find_tree_dqentry: Getting block too big (64 >= 6) [ 86.839083][ T4685] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.850482][ T4683] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 86.986402][ T4683] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.110: Failed to acquire dquot type 0 [ 87.021123][ T4685] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #15: block 3: comm syz.2.109: lblock 3 mapped to illegal pblock 3 (length 3) [ 87.047766][ T4683] EXT4-fs error (device loop3): mb_free_blocks:1876: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 87.083757][ T4685] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 87.096446][ T4683] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #13: comm syz.3.110: corrupted inode contents [ 87.111180][ T4683] EXT4-fs error (device loop3): ext4_dirty_inode:6058: inode #13: comm syz.3.110: mark_inode_dirty error [ 87.143538][ T4683] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #13: comm syz.3.110: corrupted inode contents [ 87.143550][ T4685] EXT4-fs (loop2): This should not happen!! Data will be lost [ 87.143550][ T4685] [ 87.180523][ T4683] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #13: comm syz.3.110: mark_inode_dirty error [ 87.196445][ T4698] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #15: block 3: comm syz.2.109: lblock 3 mapped to illegal pblock 3 (length 1) [ 87.214235][ T4683] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #13: comm syz.3.110: corrupted inode contents [ 87.227233][ T4684] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #15: block 3: comm syz.2.109: lblock 3 mapped to illegal pblock 3 (length 1) [ 87.242799][ T4683] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 87.252009][ T4683] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #13: comm syz.3.110: corrupted inode contents [ 87.263996][ T4698] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #15: block 3: comm syz.2.109: lblock 3 mapped to illegal pblock 3 (length 1) [ 87.282146][ T4683] EXT4-fs error (device loop3): ext4_truncate:4279: inode #13: comm syz.3.110: mark_inode_dirty error [ 87.309976][ T4684] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #15: block 3: comm syz.2.109: lblock 3 mapped to illegal pblock 3 (length 1) [ 87.330166][ T4683] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 87.345850][ T4683] EXT4-fs (loop3): 1 truncate cleaned up [ 87.352640][ T4698] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #15: block 3: comm syz.2.109: lblock 3 mapped to illegal pblock 3 (length 1) [ 87.371833][ T4683] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 87.510607][ T4698] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #15: block 3: comm syz.2.109: lblock 3 mapped to illegal pblock 3 (length 1) [ 87.588254][ T4685] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #15: block 3: comm syz.2.109: lblock 3 mapped to illegal pblock 3 (length 1) [ 87.611050][ T4696] loop1: detected capacity change from 0 to 32768 [ 87.624444][ T4701] loop4: detected capacity change from 0 to 256 [ 87.625991][ T4683] Quota error (device loop3): find_tree_dqentry: Getting block too big (64 >= 6) [ 87.661427][ T4683] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 87.675466][ T4684] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #15: block 3: comm syz.2.109: lblock 3 mapped to illegal pblock 3 (length 1) [ 87.711399][ T4701] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf5596061, utbl_chksum : 0xe619d30d) [ 87.728976][ T4683] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.110: Failed to acquire dquot type 0 [ 87.775247][ T4696] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 87.808393][ T4702] Quota error (device loop3): find_tree_dqentry: Getting block too big (64 >= 6) [ 87.859418][ T4696] BTRFS info (device loop1): setting nodatacow, compression disabled [ 87.867737][ T4696] BTRFS info (device loop1): turning on flush-on-commit [ 87.872678][ T4684] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #15: block 3: comm syz.2.109: lblock 3 mapped to illegal pblock 3 (length 1) [ 87.875351][ T4696] BTRFS info (device loop1): using free space tree [ 87.905611][ T4702] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 87.906524][ T4701] tipc: Failed to remove unknown binding: 66,0,0/0:2068431041/2068431042 [ 87.923758][ T4696] BTRFS info (device loop1): has skinny extents [ 87.923855][ T4702] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.110: Failed to acquire dquot type 0 [ 88.004582][ T4707] tipc: Failed to remove unknown binding: 66,0,0/0:2068431041/2068431042 [ 88.306660][ T4360] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 88.416457][ T4414] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 88.990641][ T4360] EXT4-fs (loop2): This should not happen!! Data will be lost [ 88.990641][ T4360] [ 89.001701][ T4696] BTRFS info (device loop1): enabling ssd optimizations [ 89.297308][ T26] audit: type=1800 audit(1769633675.576:4): pid=4696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.114" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 89.323283][ T4736] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 89.331695][ T4414] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 89.344574][ T4414] usb 5-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 89.396037][ T4414] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 89.424895][ T4741] picdev_read: 77 callbacks suppressed [ 89.424912][ T4741] kvm: pic: non byte read [ 89.446276][ T4741] kvm: pic: level sensitive irq not supported [ 89.446345][ T4741] kvm: pic: non byte read [ 89.463548][ T4414] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.470297][ T26] audit: type=1800 audit(1769633675.746:5): pid=4696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.114" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 89.477532][ T4741] kvm: pic: level sensitive irq not supported [ 89.956043][ T4746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.121'. [ 90.652351][ T4741] kvm: pic: non byte read [ 90.667927][ T4414] usb 5-1: string descriptor 0 read error: -71 [ 90.674182][ T4414] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 90.690050][ T4414] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 90.717982][ T4414] usb 5-1: can't set config #1, error -71 [ 90.728966][ T4414] usb 5-1: USB disconnect, device number 3 [ 92.178300][ T4782] loop3: detected capacity change from 0 to 16 [ 92.495681][ T4782] erofs: (device loop3): mounted with root inode @ nid 36. [ 92.535403][ T4782] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 92.863904][ T4792] netlink: 63 bytes leftover after parsing attributes in process `syz.4.137'. [ 92.934519][ T4792] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 92.972704][ T4792] kvm: pic: non byte read [ 92.986903][ T4792] kvm: pic: level sensitive irq not supported [ 92.986971][ T4792] kvm: pic: non byte read [ 93.016496][ T4792] kvm: pic: level sensitive irq not supported [ 93.016676][ T4792] kvm: pic: non byte read [ 93.197415][ T4779] loop1: detected capacity change from 0 to 40427 [ 93.282479][ T4779] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 93.891571][ T4779] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 93.978423][ T4779] F2FS-fs (loop1): invalid crc value [ 94.077030][ T4779] F2FS-fs (loop1): Found nat_bits in checkpoint [ 94.450567][ T4779] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 94.513038][ T4779] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 95.246465][ T4837] loop3: detected capacity change from 0 to 1024 [ 95.887626][ T4837] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 96.121504][ T26] audit: type=1804 audit(1769633682.406:6): pid=4847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.150" name="/newroot/28/bus/file1" dev="loop3" ino=15 res=1 errno=0 [ 96.374151][ T13] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 96.578352][ T26] audit: type=1804 audit(1769633682.436:7): pid=4837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.150" name="/newroot/28/bus/file1" dev="loop3" ino=15 res=1 errno=0 [ 96.663354][ T4857] loop4: detected capacity change from 0 to 1024 [ 96.738852][ T4861] loop1: detected capacity change from 0 to 16 [ 96.772060][ T4857] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.914741][ T13] usb 3-1: device descriptor read/64, error -71 [ 97.499240][ T4861] erofs: (device loop1): mounted with root inode @ nid 36. [ 97.594536][ T4861] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 97.651004][ T13] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 99.093669][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 99.102990][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.417242][ T4896] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.845438][ T4919] netlink: 36 bytes leftover after parsing attributes in process `syz.1.174'. [ 102.670680][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.679141][ T4937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.687047][ T4937] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.079450][ T4937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.271337][ T4943] loop3: detected capacity change from 0 to 1024 [ 104.073772][ T4963] netlink: 172 bytes leftover after parsing attributes in process `syz.0.182'. [ 105.500656][ T4322] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 106.914562][ T4986] Zero length message leads to an empty skb [ 107.593570][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 107.611624][ T4989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.989501][ T4993] loop2: detected capacity change from 0 to 512 [ 108.020252][ T4322] usb 3-1: device not accepting address 6, error -71 [ 108.121386][ T4993] EXT4-fs (loop2): 1 truncate cleaned up [ 108.229873][ T4993] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 108.692359][ T4997] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 108.900254][ T4997] EXT4-fs (loop2): Remounting filesystem read-only [ 113.646370][ T5029] ODEBUG: Out of memory. ODEBUG disabled [ 115.211821][ T5060] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 115.246940][ T5060] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 115.802459][ T5061] overlayfs: unrecognized mount option "subj_user=" or missing value [ 117.337355][ T5079] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 121.329616][ T5124] overlayfs: failed to clone upperpath [ 122.106563][ T5131] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 133.267086][ T5242] netlink: 28 bytes leftover after parsing attributes in process `syz.4.263'. [ 133.277005][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.283486][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.510601][ T5265] binder: 5260:5265 ioctl c0306201 0 returned -14 [ 134.630739][ T5265] binder: 5260:5265 ioctl c08c5332 0 returned -22 [ 135.109203][ T5271] loop1: detected capacity change from 0 to 16 [ 135.154559][ T5271] erofs: (device loop1): mounted with root inode @ nid 36. [ 135.764104][ T5275] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 135.910602][ T26] audit: type=1326 audit(1769633722.196:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5278 comm="syz.2.275" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff001f3ceb9 code=0x0 [ 136.150571][ T5287] device ip6gretap0 entered promiscuous mode [ 136.170582][ T5287] device vlan2 entered promiscuous mode [ 137.695093][ T5309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.271'. [ 138.816639][ T5314] netlink: 76 bytes leftover after parsing attributes in process `syz.3.284'. [ 142.342150][ T5340] device bridge0 entered promiscuous mode [ 142.418175][ T5340] device vlan2 entered promiscuous mode [ 142.464006][ C1] sched: RT throttling activated [ 143.982537][ T5357] netlink: 16 bytes leftover after parsing attributes in process `syz.4.297'. [ 144.091454][ T5357] device gtp0 entered promiscuous mode [ 145.659586][ T5379] netlink: 16 bytes leftover after parsing attributes in process `syz.4.304'. [ 148.243522][ T5414] netlink: 63 bytes leftover after parsing attributes in process `syz.1.312'. [ 151.154904][ T5442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.318'. [ 154.425995][ T4325] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 156.438953][ T4325] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 156.487926][ T4325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.496302][ T4325] usb 4-1: Product: syz [ 157.102933][ T5495] netlink: 28 bytes leftover after parsing attributes in process `syz.0.334'. [ 157.305907][ T4325] usb 4-1: Manufacturer: syz [ 157.323689][ T4325] usb 4-1: config 0 descriptor?? [ 157.365713][ T4325] usb 4-1: can't set config #0, error -71 [ 157.489134][ T4325] usb 4-1: USB disconnect, device number 7 [ 159.608741][ T5528] loop2: detected capacity change from 0 to 16 [ 160.394472][ T5528] erofs: (device loop2): mounted with root inode @ nid 36. [ 160.412023][ T5528] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 162.845371][ T1107] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 163.713740][ T1107] usb 2-1: device descriptor read/all, error -71 [ 163.906524][ T5564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.356'. [ 164.458347][ T5567] syz.0.357 (5567) used greatest stack depth: 16944 bytes left [ 173.049858][ T4325] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 173.795128][ T4325] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 173.882180][ T4325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.965826][ T4325] usb 4-1: Product: syz [ 173.970167][ T4325] usb 4-1: Manufacturer: syz [ 173.975121][ T4325] usb 4-1: SerialNumber: syz [ 174.011096][ T4325] usb 4-1: config 0 descriptor?? [ 174.283007][ T5669] loop2: detected capacity change from 0 to 16 [ 175.055106][ T4325] usb 4-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32 [ 175.064555][ T4325] usb 4-1: Firmware version (0.0) predates our first public release. [ 175.072860][ T4325] usb 4-1: Please update to version 0.2 or newer [ 175.087488][ T5669] erofs: (device loop2): mounted with root inode @ nid 36. [ 175.103918][ T5657] udc-core: couldn't find an available UDC or it's busy [ 175.113259][ T4325] usb 4-1: atusb_probe: initialization failed, error = -32 [ 175.120573][ T4325] atusb: probe of 4-1:0.0 failed with error -32 [ 175.253537][ T5657] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 175.908012][ T4325] Bluetooth: hci2: command 0x0406 tx timeout [ 176.010081][ T4325] Bluetooth: hci3: command 0x0406 tx timeout [ 176.870769][ T4325] Bluetooth: hci4: command 0x0406 tx timeout [ 176.877804][ T4325] Bluetooth: hci0: command 0x0406 tx timeout [ 176.883882][ T4325] Bluetooth: hci1: command 0x0406 tx timeout [ 176.902270][ T13] usb 4-1: USB disconnect, device number 8 [ 178.198255][ T5715] loop3: detected capacity change from 0 to 16 [ 178.261219][ T5715] erofs: (device loop3): mounted with root inode @ nid 36. [ 178.755147][ T13] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 179.006387][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 179.346525][ T13] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 179.405939][ T5737] netlink: 'syz.3.405': attribute type 15 has an invalid length. [ 179.735181][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.935450][ T13] usb 3-1: Product: syz [ 180.031604][ T5745] binder: BINDER_SET_CONTEXT_MGR already set [ 180.037967][ T5745] binder: 5741:5745 ioctl 4018620d 200000004a80 returned -16 [ 180.406434][ T13] usb 3-1: Manufacturer: syz [ 180.411298][ T13] usb 3-1: SerialNumber: syz [ 180.429507][ T13] usb 3-1: config 0 descriptor?? [ 180.707116][ T13] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 180.715204][ T13] dvb_usb_af9015: probe of 3-1:0.0 failed with error -22 [ 181.426688][ T13] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 181.535997][ T13] dvb_usb_af9035: probe of 3-1:0.0 failed with error -22 [ 181.559982][ T13] usb 3-1: USB disconnect, device number 8 [ 183.277833][ T5773] loop2: detected capacity change from 0 to 16 [ 183.287683][ T5773] erofs: (device loop2): mounted with root inode @ nid 36. [ 184.549042][ T5787] netlink: 'syz.0.418': attribute type 15 has an invalid length. [ 185.222224][ T5795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'. [ 188.403485][ T5820] loop1: detected capacity change from 0 to 4096 [ 189.138009][ T5824] netlink: 28 bytes leftover after parsing attributes in process `syz.2.431'. [ 189.183169][ T5820] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 189.280623][ T5820] ntfs3: loop1: Failed to load $Extend. [ 193.107483][ T5871] overlayfs: failed to clone upperpath [ 194.392326][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.408672][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.472893][ T5901] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 195.531104][ T5901] overlayfs: missing 'lowerdir' [ 197.931996][ T5927] tipc: Failed to remove unknown binding: 66,0,0/0:4031836711/4031836712 [ 197.946055][ T5919] loop1: detected capacity change from 0 to 4096 [ 197.968599][ T5919] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 197.976252][ T5919] ntfs3: loop1: Failed to load $Extend. [ 198.607288][ T5931] tipc: Failed to remove unknown binding: 66,0,0/0:4031836711/4031836712 [ 202.390766][ T5962] device lo entered promiscuous mode [ 202.490306][ T5961] device lo left promiscuous mode [ 202.983088][ C0] hrtimer: interrupt took 40362 ns [ 204.186153][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 204.557229][ T5987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.260369][ T6030] loop3: detected capacity change from 0 to 16 [ 208.353289][ T6030] erofs: (device loop3): mounted with root inode @ nid 36. [ 210.453905][ T6066] loop1: detected capacity change from 0 to 16 [ 210.567314][ T6066] erofs: (device loop1): mounted with root inode @ nid 36. [ 210.593353][ T6069] loop3: detected capacity change from 0 to 2048 [ 211.165296][ T6069] EXT4-fs (loop3): cluster size (2048) smaller than block size (4096) [ 211.424570][ T4322] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 211.439690][ T4322] Bluetooth: hci4: Injecting HCI hardware error event [ 212.478368][ T4199] Bluetooth: hci4: hardware error 0x00 [ 212.827595][ T6092] overlayfs: failed to clone upperpath [ 216.565331][ T6120] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 216.572857][ T6120] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 216.593897][ T6120] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.834915][ T6140] loop3: detected capacity change from 0 to 16 [ 217.898947][ T6136] loop2: detected capacity change from 0 to 4096 [ 218.026582][ T6140] erofs: (device loop3): mounted with root inode @ nid 36. [ 218.036000][ T6140] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 219.307853][ T6136] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 219.460080][ T6136] ntfs3: loop2: Failed to load $Extend. [ 220.450222][ T6179] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 220.595970][ T6180] tipc: Failed to remove unknown binding: 66,0,0/0:1984687404/1984687405 [ 220.883086][ T6179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.841310][ T6196] overlayfs: failed to set xattr on upper [ 221.916727][ T6196] overlayfs: ...falling back to index=off,metacopy=off. [ 223.579579][ T6230] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 223.594038][ T6230] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.661582][ T6233] loop2: detected capacity change from 0 to 256 [ 223.721376][ T6233] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf5596061, utbl_chksum : 0xe619d30d) [ 224.652722][ T13] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 225.207430][ T13] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 225.829713][ T13] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 225.840163][ T13] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 225.849373][ T13] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 226.232837][ T13] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 226.255438][ T13] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 226.292560][ T13] usb 3-1: Product: syz [ 226.296765][ T13] usb 3-1: Manufacturer: syz [ 226.374200][ T13] cdc_wdm 3-1:1.0: skipping garbage [ 226.379503][ T13] cdc_wdm 3-1:1.0: skipping garbage [ 226.402370][ T13] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 226.507424][ T13] usb 3-1: USB disconnect, device number 9 [ 227.299069][ T13] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 227.832733][ T13] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 227.844331][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.868233][ T13] usb 3-1: Product: syz [ 227.876653][ T13] usb 3-1: Manufacturer: syz [ 227.889733][ T13] usb 3-1: SerialNumber: syz [ 227.913140][ T13] usb 3-1: config 0 descriptor?? [ 228.406293][ T13] usb 3-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32 [ 228.425222][ T13] usb 3-1: Firmware version (0.0) predates our first public release. [ 228.993988][ T13] usb 3-1: Please update to version 0.2 or newer [ 229.005258][ T6300] udc-core: couldn't find an available UDC or it's busy [ 229.026026][ T6300] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 229.040370][ T13] usb 3-1: atusb_probe: initialization failed, error = -32 [ 229.124693][ T13] atusb: probe of 3-1:0.0 failed with error -32 [ 229.473495][ T6304] loop3: detected capacity change from 0 to 16 [ 229.517334][ T6304] erofs: (device loop3): mounted with root inode @ nid 36. [ 229.526445][ T6304] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 229.803702][ T6315] loop3: detected capacity change from 0 to 16 [ 229.967541][ T6315] erofs: (device loop3): mounted with root inode @ nid 36. [ 230.007590][ T6315] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 230.154935][ T4264] usb 3-1: USB disconnect, device number 10 [ 230.349005][ T6330] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 230.374130][ T6330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.658376][ T6344] loop1: detected capacity change from 0 to 16 [ 232.827171][ T6344] erofs: (device loop1): mounted with root inode @ nid 36. [ 232.909380][ T6344] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 233.672723][ T4264] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 235.911727][ T4264] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 235.928150][ T4264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.936665][ T4264] usb 4-1: Product: syz [ 235.942886][ T4264] usb 4-1: Manufacturer: syz [ 235.947639][ T4264] usb 4-1: SerialNumber: syz [ 236.025983][ T4264] usb 4-1: config 0 descriptor?? [ 236.796680][ T4264] usb 4-1: atusb_control_msg: req 0x10 val 0x0 idx 0x0, error -71 [ 236.812105][ T4264] usb 4-1: Firmware version (0.0) predates our first public release. [ 236.987764][ T4264] usb 4-1: Please update to version 0.2 or newer [ 237.266457][ T6419] netlink: 168 bytes leftover after parsing attributes in process `syz.2.609'. [ 238.123732][ T4264] usb 4-1: atusb_probe: initialization failed, error = -71 [ 238.131216][ T4264] atusb: probe of 4-1:0.0 failed with error -71 [ 238.143085][ T4264] usb 4-1: USB disconnect, device number 9 [ 240.760239][ T4264] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 240.912870][ T6468] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 240.961386][ T6468] loop2: detected capacity change from 0 to 1024 [ 240.969767][ T4465] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 241.004031][ T4465] Bluetooth: hci5: Frame reassembly failed (-84) [ 241.027332][ T6468] EXT4-fs (loop2): Test dummy encryption mode enabled [ 241.100970][ T6468] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #4: comm syz.2.616: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 241.119104][ T6468] EXT4-fs error (device loop2): ext4_quota_enable:6445: comm syz.2.616: Bad quota inode: 4, type: 1 [ 241.130691][ T6468] EXT4-fs warning (device loop2): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 241.147632][ T6468] EXT4-fs (loop2): mount failed [ 241.372306][ T4264] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 241.386161][ T4264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.414699][ T4264] usb 4-1: Product: syz [ 241.435332][ T4264] usb 4-1: Manufacturer: syz [ 241.575686][ T4264] usb 4-1: SerialNumber: syz [ 241.616495][ T4264] usb 4-1: config 0 descriptor?? [ 242.299178][ T4264] usb 4-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32 [ 242.317678][ T4264] usb 4-1: Firmware version (0.0) predates our first public release. [ 242.337118][ T4264] usb 4-1: Please update to version 0.2 or newer [ 242.372644][ T6439] udc-core: couldn't find an available UDC or it's busy [ 242.389927][ T4264] usb 4-1: atusb_probe: initialization failed, error = -32 [ 242.407329][ T6439] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 242.420111][ T4264] atusb: probe of 4-1:0.0 failed with error -32 [ 243.867222][ T4776] Bluetooth: hci5: command 0x1003 tx timeout [ 243.873479][ T4202] Bluetooth: hci5: sending frame failed (-49) [ 243.919785][ T4776] usb 4-1: USB disconnect, device number 10 [ 244.171705][ T6507] netlink: 63 bytes leftover after parsing attributes in process `syz.1.633'. [ 246.154476][ T4776] Bluetooth: hci5: command 0x1001 tx timeout [ 246.161611][ T4202] Bluetooth: hci5: sending frame failed (-49) [ 247.324134][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 247.564467][ T6539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 248.477567][ T4776] Bluetooth: hci5: command 0x1009 tx timeout [ 251.101964][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 251.262846][ T6584] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.896756][ T6593] netlink: 28 bytes leftover after parsing attributes in process `syz.4.660'. [ 255.044804][ T6621] loop3: detected capacity change from 0 to 4096 [ 255.128157][ T6627] netlink: 168 bytes leftover after parsing attributes in process `syz.1.672'. [ 256.000529][ T6621] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 256.011606][ T6621] ntfs3: loop3: Failed to load $Extend. [ 256.126780][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.133226][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.465414][ T6633] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 256.584945][ T6633] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.718269][ T6638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.675'. [ 260.047931][ T6668] netlink: 168 bytes leftover after parsing attributes in process `syz.0.683'. [ 262.944463][ T6685] netlink: 28 bytes leftover after parsing attributes in process `syz.1.687'. [ 264.427039][ T6698] overlayfs: failed to clone upperpath [ 266.078479][ T6723] loop3: detected capacity change from 0 to 256 [ 266.188394][ T6723] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 266.731589][ T1107] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 266.824738][ T6737] loop3: detected capacity change from 256 to 0 [ 267.233468][ T1107] usb 3-1: not running at top speed; connect to a high speed hub [ 267.545742][ T1107] usb 3-1: config 14 has an invalid interface number: 29 but max is 0 [ 267.560002][ T1107] usb 3-1: config 14 has no interface number 0 [ 267.580656][ T1107] usb 3-1: config 14 interface 29 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 267.614085][ T1107] usb 3-1: config 14 interface 29 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 267.637414][ T1107] usb 3-1: config 14 interface 29 has no altsetting 0 [ 267.827592][ T1107] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=c1.97 [ 267.847028][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.852553][ T6750] loop3: detected capacity change from 0 to 4096 [ 267.898035][ T1107] usb 3-1: Product: ᠁ [ 267.902945][ T1107] usb 3-1: Manufacturer: 《 [ 267.907557][ T1107] usb 3-1: SerialNumber: syz [ 267.996592][ T6750] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 268.031598][ T6750] ntfs3: loop3: Failed to load $Extend. [ 268.226864][ T6728] udc-core: couldn't find an available UDC or it's busy [ 268.252681][ T6728] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 268.485596][ T1107] asix: probe of 3-1:14.29 failed with error -22 [ 268.501506][ T1107] usb 3-1: USB disconnect, device number 11 [ 269.265849][ T6768] loop2: detected capacity change from 0 to 16 [ 269.348443][ T6772] netlink: 168 bytes leftover after parsing attributes in process `syz.0.714'. [ 269.549260][ T6768] erofs: (device loop2): mounted with root inode @ nid 36. [ 269.569825][ T4192] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 270.275988][ T4192] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 270.299212][ T4192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.493411][ T4192] usb 4-1: Product: syz [ 270.499329][ T4192] usb 4-1: Manufacturer: syz [ 270.504169][ T4192] usb 4-1: SerialNumber: syz [ 270.517242][ T6785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.721'. [ 270.519530][ T4192] usb 4-1: config 0 descriptor?? [ 271.140693][ T4192] usb 4-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32 [ 271.190828][ T4192] usb 4-1: Firmware version (0.0) predates our first public release. [ 271.244625][ T4192] usb 4-1: Please update to version 0.2 or newer [ 271.439524][ T6770] udc-core: couldn't find an available UDC or it's busy [ 271.456791][ T6770] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 271.465628][ T4192] usb 4-1: atusb_probe: initialization failed, error = -32 [ 272.390390][ T4192] atusb: probe of 4-1:0.0 failed with error -32 [ 273.359502][ T13] usb 4-1: USB disconnect, device number 11 [ 275.356025][ T6864] loop3: detected capacity change from 0 to 16 [ 275.372141][ T6863] loop2: detected capacity change from 0 to 4096 [ 275.383106][ T6864] erofs: (device loop3): mounted with root inode @ nid 36. [ 275.732144][ T6863] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 275.772930][ T6863] ntfs3: loop2: Failed to load $Extend. [ 276.356719][ T6871] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 281.195211][ T6927] netlink: 168 bytes leftover after parsing attributes in process `syz.2.771'. [ 284.145475][ T6973] netlink: 28 bytes leftover after parsing attributes in process `syz.1.774'. [ 288.325214][ T7020] netlink: 28 bytes leftover after parsing attributes in process `syz.4.788'. [ 288.342738][ T7029] loop2: detected capacity change from 0 to 256 [ 288.368500][ T7029] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 289.154867][ T7037] loop2: detected capacity change from 256 to 0 [ 289.617652][ T4776] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 289.650503][ T7036] loop1: detected capacity change from 0 to 32768 [ 289.664811][ T7046] overlayfs: failed to clone upperpath [ 289.732121][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.800'. [ 289.757821][ T7036] (syz.1.795,7036,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 289.795762][ T7036] (syz.1.795,7036,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 291.214769][ T7056] netlink: 168 bytes leftover after parsing attributes in process `syz.4.801'. [ 292.195357][ T7036] (syz.1.795,7036,0):ocfs2_initialize_super:2313 ERROR: status = -12 [ 292.288808][ T7036] (syz.1.795,7036,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 293.981836][ T4776] usb 4-1: device not accepting address 12, error -71 [ 294.288271][ T7070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.805'. [ 295.609458][ T7104] netlink: 168 bytes leftover after parsing attributes in process `syz.2.813'. [ 295.708715][ T4312] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 296.297526][ T4312] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 296.309107][ T4312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.331141][ T4312] usb 2-1: Product: syz [ 296.339800][ T4312] usb 2-1: Manufacturer: syz [ 296.362912][ T4312] usb 2-1: SerialNumber: syz [ 296.394656][ T4312] usb 2-1: config 0 descriptor?? [ 297.049626][ T4312] usb 2-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32 [ 297.115709][ T4312] usb 2-1: Firmware version (0.0) predates our first public release. [ 297.297058][ T4312] usb 2-1: Please update to version 0.2 or newer [ 297.402772][ T7120] udc-core: couldn't find an available UDC or it's busy [ 297.566942][ T7120] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 297.574987][ T4312] usb 2-1: atusb_probe: initialization failed, error = -32 [ 297.590978][ T4312] atusb: probe of 2-1:0.0 failed with error -32 [ 297.801654][ T7123] overlayfs: failed to clone upperpath [ 298.826689][ T4263] usb 2-1: USB disconnect, device number 5 [ 299.166845][ T7125] loop3: detected capacity change from 0 to 32768 [ 299.281467][ T7125] (syz.3.821,7125,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 299.339434][ T7125] (syz.3.821,7125,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 300.062888][ T7125] JBD2: Ignoring recovery information on journal [ 300.180347][ T7125] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 301.365668][ T7127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.822'. [ 301.518250][ T4187] ocfs2: Unmounting device (7,3) on (node local) [ 301.874521][ T7161] loop2: detected capacity change from 0 to 256 [ 301.927469][ T7161] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf5596061, utbl_chksum : 0xe619d30d) [ 302.106724][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.835'. [ 302.338134][ T7171] netlink: 63 bytes leftover after parsing attributes in process `syz.3.832'. [ 302.396665][ T4263] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 302.426850][ T4776] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 303.652481][ T26] audit: type=1326 audit(1769633895.133:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.4.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f9945eb9 code=0x7ffc0000 [ 303.841769][ T26] audit: type=1326 audit(1769633895.133:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.4.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f9945eb9 code=0x7ffc0000 [ 303.947045][ T26] audit: type=1326 audit(1769633895.153:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.4.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f36f9945eb9 code=0x7ffc0000 [ 303.969753][ T26] audit: type=1326 audit(1769633895.153:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.4.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f9945eb9 code=0x7ffc0000 [ 303.993100][ T26] audit: type=1326 audit(1769633895.153:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.4.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f9945eb9 code=0x7ffc0000 [ 304.068820][ T26] audit: type=1326 audit(1769633895.153:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.4.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36f9945eb9 code=0x7ffc0000 [ 304.098959][ T4776] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 304.116150][ T4776] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 304.231146][ T4776] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 304.259432][ T4776] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.268819][ T26] audit: type=1326 audit(1769633895.153:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.4.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f9945eb9 code=0x7ffc0000 [ 304.314534][ T4263] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 304.401190][ T4263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.491227][ T4263] usb 2-1: Product: syz [ 304.539031][ T4263] usb 2-1: Manufacturer: syz [ 304.585785][ T4263] usb 2-1: SerialNumber: syz [ 304.619663][ T26] audit: type=1326 audit(1769633895.163:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.4.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f9945eb9 code=0x7ffc0000 [ 304.687188][ T4263] usb 2-1: config 0 descriptor?? [ 304.940010][ T26] audit: type=1326 audit(1769633895.163:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.4.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f36f9945eb9 code=0x7ffc0000 [ 304.985104][ T26] audit: type=1326 audit(1769633895.163:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.4.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f9945eb9 code=0x7ffc0000 [ 305.035535][ T4776] usb 3-1: string descriptor 0 read error: -71 [ 305.041777][ T4776] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 305.108061][ T4263] usb 2-1: atusb_control_msg: req 0x10 val 0x0 idx 0x0, error -71 [ 305.126097][ T4263] usb 2-1: Firmware version (0.0) predates our first public release. [ 305.134209][ T4263] usb 2-1: Please update to version 0.2 or newer [ 305.174296][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 305.181757][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 305.196643][ T4776] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 305.212652][ T7185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.229496][ T4263] usb 2-1: atusb_probe: initialization failed, error = -71 [ 305.263605][ T4263] atusb: probe of 2-1:0.0 failed with error -71 [ 305.293979][ T4263] usb 2-1: USB disconnect, device number 6 [ 305.297236][ T4776] usb 3-1: can't set config #1, error -71 [ 305.354225][ T4776] usb 3-1: USB disconnect, device number 12 [ 305.907020][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'. [ 306.166049][ T7206] loop3: detected capacity change from 0 to 16 [ 307.246981][ T7206] erofs: (device loop3): mounted with root inode @ nid 36. [ 307.377827][ T7206] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 307.612832][ T7197] loop2: detected capacity change from 0 to 32768 [ 307.707952][ T7197] (syz.2.845,7197,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 307.792574][ T7197] (syz.2.845,7197,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 307.884186][ T7197] JBD2: Ignoring recovery information on journal [ 308.021070][ T7197] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 309.248404][ T7229] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.379621][ T7236] netlink: 63 bytes leftover after parsing attributes in process `syz.1.860'. [ 309.435622][ T4188] ocfs2: Unmounting device (7,2) on (node local) [ 309.523677][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.861'. [ 310.460533][ T7249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.863'. [ 310.661081][ T7255] loop1: detected capacity change from 0 to 4096 [ 310.723968][ T7254] team0 (unregistering): Port device team_slave_0 removed [ 310.818441][ T7255] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 310.868984][ T7254] team0 (unregistering): Failed to send options change via netlink (err -105) [ 310.916163][ T7255] ntfs3: loop1: Failed to load $Extend. [ 310.942501][ T7254] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 311.169180][ T7254] team0 (unregistering): Port device team_slave_1 removed [ 311.219513][ T7262] overlayfs: './file0' not a directory [ 311.529635][ T4185] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 311.630087][ T7264] loop3: detected capacity change from 0 to 16 [ 311.648288][ T7268] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 311.657797][ T7268] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 311.792710][ T7270] netlink: 63 bytes leftover after parsing attributes in process `syz.4.872'. [ 311.851123][ T4417] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 312.579734][ T7264] erofs: (device loop3): mounted with root inode @ nid 36. [ 312.876439][ T7264] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 313.015163][ T4417] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 313.035770][ T4417] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.115063][ T4417] usb 2-1: Product: syz [ 313.138278][ T4417] usb 2-1: Manufacturer: syz [ 313.152963][ T4417] usb 2-1: SerialNumber: syz [ 313.166813][ T4417] usb 2-1: config 0 descriptor?? [ 313.966360][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 313.966392][ T26] audit: type=1326 audit(1769633905.360:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.0.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7e068eb9 code=0x7ffc0000 [ 314.255263][ T7290] udc-core: couldn't find an available UDC or it's busy [ 314.269316][ T4417] usb 2-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32 [ 314.297899][ T4417] usb 2-1: Firmware version (0.0) predates our first public release. [ 314.310063][ T7290] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 314.329592][ T26] audit: type=1326 audit(1769633905.370:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.0.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7e068eb9 code=0x7ffc0000 [ 314.390028][ T26] audit: type=1326 audit(1769633905.370:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.0.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0e7e068eb9 code=0x7ffc0000 [ 314.401637][ T4417] usb 2-1: Please update to version 0.2 or newer [ 314.486807][ T26] audit: type=1326 audit(1769633905.370:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.0.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7e068eb9 code=0x7ffc0000 [ 314.513725][ T4417] usb 2-1: atusb_probe: initialization failed, error = -32 [ 314.540223][ T4417] atusb: probe of 2-1:0.0 failed with error -32 [ 314.591330][ T4417] usb 2-1: USB disconnect, device number 7 [ 314.620610][ T26] audit: type=1326 audit(1769633905.370:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.0.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7e068eb9 code=0x7ffc0000 [ 314.660134][ T7296] loop2: detected capacity change from 0 to 16 [ 314.730255][ T26] audit: type=1326 audit(1769633905.380:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.0.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e7e068eb9 code=0x7ffc0000 [ 314.899640][ T7296] erofs: (device loop2): mounted with root inode @ nid 36. [ 315.056857][ T26] audit: type=1326 audit(1769633905.380:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.0.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7e068eb9 code=0x7ffc0000 [ 315.245462][ T7296] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 315.261278][ T26] audit: type=1326 audit(1769633905.380:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.0.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7e068eb9 code=0x7ffc0000 [ 315.308034][ T7302] loop1: detected capacity change from 0 to 4096 [ 315.369868][ T7302] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 315.413856][ T7302] ntfs3: loop1: Failed to load $Extend. [ 315.428110][ T26] audit: type=1326 audit(1769633905.380:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.0.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0e7e068eb9 code=0x7ffc0000 [ 315.596525][ T7303] overlayfs: './file0' not a directory [ 315.647853][ T26] audit: type=1326 audit(1769633905.380:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.0.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7e068eb9 code=0x7ffc0000 [ 316.089649][ T4185] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 316.920381][ T7313] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 317.025110][ T7313] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.992265][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.998764][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.759938][ T7338] loop2: detected capacity change from 0 to 16 [ 318.835503][ T7338] erofs: (device loop2): mounted with root inode @ nid 36. [ 318.917171][ T7338] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 319.289868][ T7347] overlayfs: failed to clone upperpath [ 320.649780][ T7363] loop1: detected capacity change from 0 to 256 [ 320.684334][ T7363] exfat: Deprecated parameter 'utf8' [ 320.689924][ T7363] exfat: Unknown parameter 'keep_last_dots' [ 321.179688][ T7376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.558388][ T7391] loop2: detected capacity change from 0 to 4096 [ 322.617160][ T7391] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 322.640594][ T7391] ntfs3: loop2: Failed to load $Extend. [ 322.895032][ T7394] overlayfs: './file0' not a directory [ 323.372750][ T4188] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 324.875778][ T7431] netlink: 168 bytes leftover after parsing attributes in process `syz.2.924'. [ 325.154870][ T7425] loop1: detected capacity change from 0 to 4096 [ 325.688644][ T7425] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 325.808239][ T7425] ntfs3: loop1: Failed to load $Extend. [ 325.828965][ T7436] loop3: detected capacity change from 0 to 16 [ 325.976339][ T7436] erofs: (device loop3): mounted with root inode @ nid 36. [ 326.092567][ T7436] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 327.109151][ T7456] loop1: detected capacity change from 0 to 256 [ 327.248169][ T7456] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf5596061, utbl_chksum : 0xe619d30d) [ 327.714385][ T13] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 328.924054][ T13] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 328.938091][ T13] usb 2-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 329.280581][ T13] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 330.461351][ T13] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 330.868687][ T13] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 330.888602][ T13] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 332.612495][ T13] usb 2-1: Product: syz [ 332.641723][ T13] usb 2-1: can't set config #1, error -71 [ 332.803989][ T13] usb 2-1: USB disconnect, device number 8 [ 333.946195][ T7521] loop3: detected capacity change from 0 to 2048 [ 334.047745][ T7521] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 334.554582][ T7532] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 334.822453][ T7535] loop2: detected capacity change from 0 to 256 [ 334.931863][ T7535] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf5596061, utbl_chksum : 0xe619d30d) [ 335.300572][ T13] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 335.804190][ T13] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 335.816155][ T13] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 335.827683][ T13] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 335.837143][ T13] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 335.912692][ T7552] loop1: detected capacity change from 0 to 16 [ 335.946968][ T7552] erofs: (device loop1): mounted with root inode @ nid 36. [ 335.964431][ T7552] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 335.965449][ T13] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 335.985392][ T13] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 335.993528][ T13] usb 3-1: Product: syz [ 335.997861][ T13] usb 3-1: Manufacturer: syz [ 336.046669][ T13] cdc_wdm 3-1:1.0: skipping garbage [ 336.052307][ T13] cdc_wdm 3-1:1.0: skipping garbage [ 336.058069][ T13] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 336.317616][ T13] usb 3-1: USB disconnect, device number 13 [ 340.285487][ T7651] loop1: detected capacity change from 0 to 256 [ 340.880981][ T7651] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf5596061, utbl_chksum : 0xe619d30d) [ 341.929445][ T4417] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 342.801218][ T7693] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 343.003185][ T4417] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 343.011894][ T4417] usb 2-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 343.022218][ T4417] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 343.022266][ T4417] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 343.119337][ T7693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.158724][ T4417] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 343.184449][ T4417] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 343.206937][ T4417] usb 2-1: Product: syz [ 343.216813][ T4417] usb 2-1: Manufacturer: syz [ 343.268978][ T4417] cdc_wdm 2-1:1.0: skipping garbage [ 343.293244][ T4417] cdc_wdm 2-1:1.0: skipping garbage [ 343.300078][ T4417] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 343.318201][ T4417] usb 2-1: USB disconnect, device number 9 [ 344.115696][ T7721] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 344.192128][ T7721] overlayfs: failed to look up (tracing) for ino (-66) [ 344.502111][ T7729] loop2: detected capacity change from 0 to 16 [ 344.600118][ T7729] erofs: (device loop2): mounted with root inode @ nid 36. [ 344.761392][ T7732] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1000'. [ 345.451841][ T7742] loop1: detected capacity change from 0 to 2048 [ 345.556127][ T7742] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 346.100012][ T7757] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 346.356082][ T7757] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 348.745113][ T7797] loop1: detected capacity change from 0 to 256 [ 348.995322][ T7797] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf5596061, utbl_chksum : 0xe619d30d) [ 349.875581][ T4263] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 350.005677][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 350.115122][ T7809] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 350.370002][ T4264] hid-generic 0003:0000:0020.0002: unknown main item tag 0x0 [ 350.417709][ T4264] hid-generic 0003:0000:0020.0002: unknown main item tag 0x0 [ 350.425151][ T4264] hid-generic 0003:0000:0020.0002: unknown main item tag 0x0 [ 350.440938][ T7816] loop2: detected capacity change from 0 to 2048 [ 350.463640][ T4264] hid-generic 0003:0000:0020.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 350.557635][ T4263] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 350.601740][ T4263] usb 2-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 350.635895][ T7816] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 350.649835][ T4263] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 350.660912][ T4263] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 350.898533][ T4263] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 350.911650][ T7820] fido_id[7820]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 350.927685][ T4263] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 350.945744][ T4263] usb 2-1: Product: syz [ 350.968066][ T4263] usb 2-1: Manufacturer: syz [ 351.019696][ T4263] cdc_wdm 2-1:1.0: skipping garbage [ 351.024905][ T4263] cdc_wdm 2-1:1.0: skipping garbage [ 351.044331][ T4263] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 351.177638][ T7824] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 351.310504][ T4263] usb 2-1: USB disconnect, device number 10 [ 351.469762][ T7814] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1025'. [ 354.508913][ T7858] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 354.626807][ T7858] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 357.335450][ T7879] loop3: detected capacity change from 0 to 256 [ 357.586014][ T7879] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf5596061, utbl_chksum : 0xe619d30d) [ 358.252465][ T21] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 358.726077][ T21] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 358.749210][ T21] usb 4-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 358.806907][ T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 358.865176][ T21] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 359.159430][ T21] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 359.210449][ T21] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 359.246900][ T21] usb 4-1: Product: syz [ 359.312643][ T21] usb 4-1: Manufacturer: syz [ 359.502615][ T21] cdc_wdm 4-1:1.0: skipping garbage [ 359.513225][ T21] cdc_wdm 4-1:1.0: skipping garbage [ 359.518480][ T21] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 359.549218][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 359.557537][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 359.565494][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 359.573992][ T7906] device bridge_slave_0 left promiscuous mode [ 359.580771][ T7906] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.595450][ T7906] device bridge_slave_1 left promiscuous mode [ 359.601661][ T7906] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.615809][ T7906] bond0: (slave bond_slave_0): Releasing backup interface [ 359.629408][ T7906] bond0: (slave bond_slave_1): Releasing backup interface [ 359.657088][ T7906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.664750][ T7906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.676975][ T7906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.684649][ T7906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.704960][ T21] usb 4-1: USB disconnect, device number 14 [ 359.745608][ T7896] loop2: detected capacity change from 0 to 32768 [ 359.817601][ T7896] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.1050 (7896) [ 359.903364][ T7896] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 359.924526][ T7911] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1055'. [ 359.940859][ T7896] BTRFS info (device loop2): setting nodatacow, compression disabled [ 359.957665][ T7911] netlink: 87 bytes leftover after parsing attributes in process `syz.0.1055'. [ 359.997471][ T7896] BTRFS info (device loop2): turning on flush-on-commit [ 360.043075][ T7896] BTRFS info (device loop2): using free space tree [ 360.100960][ T7896] BTRFS info (device loop2): has skinny extents [ 360.190204][ T7914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1046'. [ 360.692318][ T7896] BTRFS info (device loop2): enabling ssd optimizations [ 360.773010][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 360.773023][ T26] audit: type=1800 audit(1769633951.874:31): pid=7896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1050" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 362.694259][ T7968] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1066'. [ 362.878716][ T7968] netlink: 87 bytes leftover after parsing attributes in process `syz.3.1066'. [ 363.109314][ T7977] loop1: detected capacity change from 0 to 4096 [ 363.165181][ T7977] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 363.186565][ T7977] ntfs3: loop1: Failed to load $Extend. [ 365.653929][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 365.665771][ T8010] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 366.022513][ T8016] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1080'. [ 366.032809][ T8016] netlink: 87 bytes leftover after parsing attributes in process `syz.4.1080'. [ 368.779961][ T8052] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1090'. [ 369.551008][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 370.461025][ T8064] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 372.708145][ T8086] loop3: detected capacity change from 0 to 4096 [ 372.802627][ T8086] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 372.828503][ T8086] ntfs3: loop3: Failed to load $Extend. [ 373.136753][ T8098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1103'. [ 376.206949][ T8138] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1115'. [ 379.306491][ T8183] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 379.920683][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.927069][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.635316][ T8181] loop3: detected capacity change from 0 to 32768 [ 380.725459][ T8181] JBD2: Ignoring recovery information on journal [ 380.841011][ T8181] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 381.151337][ T4187] ocfs2: Unmounting device (7,3) on (node local) [ 381.585065][ T8212] loop3: detected capacity change from 0 to 16 [ 381.674372][ T8212] erofs: (device loop3): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 384.201018][ T8234] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1144'. [ 384.838242][ T8247] loop2: detected capacity change from 0 to 256 [ 385.167509][ T8247] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf5596061, utbl_chksum : 0xe619d30d) [ 385.576377][ T4417] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 385.674376][ T8263] loop1: detected capacity change from 0 to 16 [ 385.784763][ T8263] erofs: (device loop1): mounted with root inode @ nid 36. [ 386.149409][ T4417] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 386.169377][ T4417] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 386.219574][ T4417] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 386.228580][ T4417] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 387.212186][ T8276] loop3: detected capacity change from 0 to 16 [ 387.239873][ T4417] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 387.253409][ T4417] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 387.268359][ T4417] usb 3-1: Product: syz [ 387.272559][ T4417] usb 3-1: Manufacturer: syz [ 387.315980][ T4417] cdc_wdm 3-1:1.0: skipping garbage [ 387.321224][ T4417] cdc_wdm 3-1:1.0: skipping garbage [ 387.335163][ T4417] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 387.350957][ T8276] erofs: (device loop3): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 387.546638][ T4417] usb 3-1: USB disconnect, device number 14 [ 388.035629][ T8294] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 388.769468][ T8296] loop3: detected capacity change from 0 to 16 [ 388.870918][ T8296] erofs: (device loop3): mounted with root inode @ nid 36. [ 389.279348][ T8309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1168'. [ 389.294063][ T8309] bridge: RTM_NEWNEIGH with invalid ether address [ 389.302593][ T8309] netlink: 75 bytes leftover after parsing attributes in process `syz.3.1168'. [ 389.312371][ T8309] bridge: RTM_NEWNEIGH with invalid ether address [ 391.810639][ T8338] loop1: detected capacity change from 0 to 256 [ 391.877481][ T8338] exfat: Deprecated parameter 'namecase' [ 392.082881][ T8338] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 392.745070][ T8349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1182'. [ 392.796114][ T8349] bridge: RTM_NEWNEIGH with invalid ether address [ 392.817940][ T8350] netlink: 75 bytes leftover after parsing attributes in process `syz.1.1182'. [ 392.878768][ T8350] bridge: RTM_NEWNEIGH with invalid ether address [ 393.331967][ T7957] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 393.921560][ T7957] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 393.951080][ T7957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.037678][ T7957] usb 2-1: Product: syz [ 394.041886][ T7957] usb 2-1: Manufacturer: syz [ 394.052801][ T7957] usb 2-1: SerialNumber: syz [ 394.059914][ T7957] usb 2-1: config 0 descriptor?? [ 394.538774][ T8359] udc-core: couldn't find an available UDC or it's busy [ 394.562763][ T8359] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 395.480225][ T7957] usb 2-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -71 [ 395.490347][ T7957] usb 2-1: Firmware version (0.0) predates our first public release. [ 395.498510][ T7957] usb 2-1: Please update to version 0.2 or newer [ 395.540629][ T7957] usb 2-1: atusb_probe: initialization failed, error = -71 [ 395.555558][ T8373] device vlan2 entered promiscuous mode [ 395.561166][ T8373] device bridge0 entered promiscuous mode [ 395.567438][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 395.575200][ T7610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 395.583918][ T7957] atusb: probe of 2-1:0.0 failed with error -71 [ 395.601459][ T7957] usb 2-1: USB disconnect, device number 11 [ 396.569360][ T8403] loop3: detected capacity change from 0 to 16 [ 396.693442][ T8403] erofs: (device loop3): mounted with root inode @ nid 36. [ 396.782066][ T8403] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 399.156295][ T8422] loop3: detected capacity change from 0 to 16 [ 399.224207][ T8422] erofs: (device loop3): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 399.544773][ T8442] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 402.896120][ T8467] loop3: detected capacity change from 0 to 16 [ 402.969609][ T8467] erofs: (device loop3): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 403.232303][ T4199] Bluetooth: hci0: Unknown advertising packet type: 0x100 [ 403.232572][ T4199] ================================================================== [ 403.248216][ T4199] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x1324/0x3c90 [ 403.256061][ T4199] Read of size 1 at addr ffff88805d415e0a by task kworker/u5:5/4199 [ 403.264046][ T4199] [ 403.266398][ T4199] CPU: 0 PID: 4199 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 403.273946][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 403.284011][ T4199] Workqueue: hci0 hci_rx_work [ 403.288727][ T4199] Call Trace: [ 403.292013][ T4199] [ 403.294955][ T4199] dump_stack_lvl+0x188/0x250 [ 403.299653][ T4199] ? show_regs_print_info+0x20/0x20 [ 403.304871][ T4199] ? load_image+0x400/0x400 [ 403.309396][ T4199] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 403.314877][ T4199] print_address_description+0x60/0x2d0 [ 403.320438][ T4199] ? hci_le_meta_evt+0x1324/0x3c90 [ 403.325562][ T4199] kasan_report+0xdf/0x130 [ 403.329991][ T4199] ? hci_le_meta_evt+0x1324/0x3c90 [ 403.335117][ T4199] hci_le_meta_evt+0x1324/0x3c90 [ 403.340088][ T4199] ? hci_remote_host_features_evt+0x280/0x280 [ 403.346169][ T4199] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 403.351822][ T4199] ? mark_lock+0x94/0x320 [ 403.356166][ T4199] ? mutex_unlock+0x10/0x10 [ 403.360683][ T4199] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 403.366668][ T4199] ? lock_chain_count+0x20/0x20 [ 403.371530][ T4199] ? __rwlock_init+0x140/0x140 [ 403.376317][ T4199] hci_event_packet+0xe48/0x1370 [ 403.381274][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 403.386496][ T4199] ? rcu_lock_release+0x20/0x20 [ 403.391416][ T4199] ? hci_send_to_monitor+0x9c/0x4a0 [ 403.396626][ T4199] hci_rx_work+0x255/0xa10 [ 403.401064][ T4199] process_one_work+0x85f/0x1010 [ 403.406030][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 403.411674][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 403.416980][ T4199] ? _raw_spin_lock_irq+0xb7/0xf0 [ 403.422019][ T4199] ? _raw_spin_lock_irqsave+0x100/0x100 [ 403.427580][ T4199] ? wq_worker_running+0x97/0x170 [ 403.432626][ T4199] worker_thread+0xaa6/0x1290 [ 403.437349][ T4199] kthread+0x436/0x520 [ 403.441430][ T4199] ? rcu_lock_release+0x20/0x20 [ 403.446291][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 403.450888][ T4199] ret_from_fork+0x1f/0x30 [ 403.455322][ T4199] [ 403.458350][ T4199] [ 403.460666][ T4199] Allocated by task 8480: [ 403.464988][ T4199] __kasan_kmalloc+0xb5/0xf0 [ 403.469580][ T4199] __alloc_skb+0x22c/0x750 [ 403.473999][ T4199] vhci_write+0xbc/0x450 [ 403.478242][ T4199] vfs_write+0x745/0xd60 [ 403.482481][ T4199] ksys_write+0x152/0x260 [ 403.486814][ T4199] do_syscall_64+0x4c/0xa0 [ 403.491232][ T4199] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 403.497125][ T4199] [ 403.499450][ T4199] The buggy address belongs to the object at ffff88805d415c00 [ 403.499450][ T4199] which belongs to the cache kmalloc-512 of size 512 [ 403.513500][ T4199] The buggy address is located 10 bytes to the right of [ 403.513500][ T4199] 512-byte region [ffff88805d415c00, ffff88805d415e00) [ 403.527213][ T4199] The buggy address belongs to the page: [ 403.532870][ T4199] page:ffffea0001750500 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805d414000 pfn:0x5d414 [ 403.544361][ T4199] head:ffffea0001750500 order:2 compound_mapcount:0 compound_pincount:0 [ 403.552692][ T4199] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 403.560697][ T4199] raw: 00fff00000010200 ffffea0001e63c00 0000000300000003 ffff888016c41c80 [ 403.569290][ T4199] raw: ffff88805d414000 000000008010000d 00000001ffffffff 0000000000000000 [ 403.577874][ T4199] page dumped because: kasan: bad access detected [ 403.584298][ T4199] page_owner tracks the page as allocated [ 403.590015][ T4199] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4315, ts 59200844084, free_ts 11928054210 [ 403.609919][ T4199] get_page_from_freelist+0x1bbd/0x1ca0 [ 403.615485][ T4199] __alloc_pages+0x1ee/0x480 [ 403.620082][ T4199] new_slab+0xc0/0x4b0 [ 403.624156][ T4199] ___slab_alloc+0x80a/0xdd0 [ 403.628752][ T4199] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 403.634555][ T4199] __alloc_skb+0x22c/0x750 [ 403.638969][ T4199] __ipv6_ifa_notify+0x203/0xe60 [ 403.643906][ T4199] addrconf_ifdown+0xdff/0x19c0 [ 403.648759][ T4199] addrconf_notify+0x445/0xf00 [ 403.653521][ T4199] raw_notifier_call_chain+0xcb/0x160 [ 403.658889][ T4199] __dev_notify_flags+0x158/0x300 [ 403.663908][ T4199] dev_change_flags+0xe3/0x1a0 [ 403.668669][ T4199] do_setlink+0xcdb/0x3d60 [ 403.673086][ T4199] rtnl_newlink+0xf8d/0x1a50 [ 403.677670][ T4199] rtnetlink_rcv_msg+0x844/0xf30 [ 403.682609][ T4199] netlink_rcv_skb+0x1f5/0x440 [ 403.687368][ T4199] page last free stack trace: [ 403.692035][ T4199] free_unref_page_prepare+0x637/0x6c0 [ 403.697496][ T4199] free_unref_page+0x8f/0x2a0 [ 403.702165][ T4199] free_contig_range+0x96/0xf0 [ 403.706929][ T4199] destroy_args+0xf0/0xa00 [ 403.711347][ T4199] debug_vm_pgtable+0x321/0x380 [ 403.716194][ T4199] do_one_initcall+0x272/0x730 [ 403.720961][ T4199] do_initcall_level+0x137/0x1f0 [ 403.725896][ T4199] do_initcalls+0x4b/0x90 [ 403.730223][ T4199] kernel_init_freeable+0x3e9/0x570 [ 403.735420][ T4199] kernel_init+0x19/0x1b0 [ 403.739748][ T4199] ret_from_fork+0x1f/0x30 [ 403.744166][ T4199] [ 403.746487][ T4199] Memory state around the buggy address: [ 403.752155][ T4199] ffff88805d415d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.760216][ T4199] ffff88805d415d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.768273][ T4199] >ffff88805d415e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 403.776339][ T4199] ^ [ 403.780659][ T4199] ffff88805d415e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 403.788718][ T4199] ffff88805d415f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 403.796775][ T4199] ================================================================== [ 403.804829][ T4199] Disabling lock debugging due to kernel taint [ 403.845547][ T4199] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 403.852767][ T4199] CPU: 0 PID: 4199 Comm: kworker/u5:5 Tainted: G B syzkaller #0 [ 403.861702][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 403.871756][ T4199] Workqueue: hci0 hci_rx_work [ 403.876442][ T4199] Call Trace: [ 403.879719][ T4199] [ 403.882642][ T4199] dump_stack_lvl+0x188/0x250 [ 403.887325][ T4199] ? show_regs_print_info+0x20/0x20 [ 403.892522][ T4199] ? load_image+0x400/0x400 [ 403.897023][ T4199] panic+0x2e5/0x810 [ 403.900914][ T4199] ? bpf_jit_dump+0xd0/0xd0 [ 403.905413][ T4199] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 403.911397][ T4199] ? _raw_spin_unlock+0x40/0x40 [ 403.916256][ T4199] ? hci_le_meta_evt+0x1324/0x3c90 [ 403.921377][ T4199] check_panic_on_warn+0x80/0xa0 [ 403.926323][ T4199] ? hci_le_meta_evt+0x1324/0x3c90 [ 403.931439][ T4199] end_report+0x6d/0xf0 [ 403.935605][ T4199] kasan_report+0x102/0x130 [ 403.940115][ T4199] ? hci_le_meta_evt+0x1324/0x3c90 [ 403.945233][ T4199] hci_le_meta_evt+0x1324/0x3c90 [ 403.950172][ T4199] ? hci_remote_host_features_evt+0x280/0x280 [ 403.956242][ T4199] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 403.961872][ T4199] ? mark_lock+0x94/0x320 [ 403.966204][ T4199] ? mutex_unlock+0x10/0x10 [ 403.970707][ T4199] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 403.976691][ T4199] ? lock_chain_count+0x20/0x20 [ 403.981553][ T4199] ? __rwlock_init+0x140/0x140 [ 403.986326][ T4199] hci_event_packet+0xe48/0x1370 [ 403.991268][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 403.996473][ T4199] ? rcu_lock_release+0x20/0x20 [ 404.001328][ T4199] ? hci_send_to_monitor+0x9c/0x4a0 [ 404.006527][ T4199] hci_rx_work+0x255/0xa10 [ 404.010950][ T4199] process_one_work+0x85f/0x1010 [ 404.015895][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 404.021526][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 404.026813][ T4199] ? _raw_spin_lock_irq+0xb7/0xf0 [ 404.031844][ T4199] ? _raw_spin_lock_irqsave+0x100/0x100 [ 404.037397][ T4199] ? wq_worker_running+0x97/0x170 [ 404.042509][ T4199] worker_thread+0xaa6/0x1290 [ 404.047214][ T4199] kthread+0x436/0x520 [ 404.051294][ T4199] ? rcu_lock_release+0x20/0x20 [ 404.056154][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 404.060749][ T4199] ret_from_fork+0x1f/0x30 [ 404.065167][ T4199] [ 404.068520][ T4199] Kernel Offset: disabled [ 404.072838][ T4199] Rebooting in 86400 seconds..