last executing test programs: 13.351622515s ago: executing program 4 (id=659): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xc8948000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000000)=""/106, &(0x7f0000000340)="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", &(0x7f00000004c0), 0x80, r5, 0x0, 0x7}, 0x38) 12.252499741s ago: executing program 4 (id=661): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000001c0)=0xa, 0x4) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 10.947877961s ago: executing program 0 (id=667): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {}, 0x22, [0x0, 0x0, 0x0, 0x10001, 0x8, 0x0, 0xffffff80, 0x0, 0x4, 0x0, 0xfffffff9, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5], [0x800, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x400003, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x5, 0x800, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x55f8, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x7, 0x2, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x800002], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x4, 0xffc, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000006480)) mount(0x0, 0x0, 0x0, 0x4, 0x0) fchdir(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) 10.791695135s ago: executing program 4 (id=670): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f0000000080)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r4, &(0x7f0000000380)='loop', 0x4) close(r4) symlinkat(&(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r5, &(0x7f0000000580)='transport=loop,nqn=testsubsys', 0x1d) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/class/nvme/nvme0/rescan_controller\x00', 0x1, 0x0) write(r6, 0x0, 0x0) close(r6) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8405d22596f37403}, 0x4054) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) 9.377231289s ago: executing program 4 (id=676): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000001c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f00000000c0)={@hyper, 0x2}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 9.3035093s ago: executing program 0 (id=677): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0) syz_socket_connect_nvme_tcp() bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003010000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x3630c1) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2) write(r3, &(0x7f00000000c0)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)="3100f3a70c57aab9346531b3f6ad5b6ec75a0fc0a6c0bbd4b2d8ee9d3c891dff36500980fc1652c71193785d5ff7f83552ca2dbca8aee1c26bb0337897ace4fb85cc40c273cd67ec01764ee2f7de0223a5bea506f5f997938cd33aef9a85636fc36ff70c271acf61ee46e26a03f28d69b6984f1566f8723ce521f13befd4587ee75f16112448319c529a78dab79c6cae7238c0", 0x93) 7.992102751s ago: executing program 1 (id=679): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) fallocate(r0, 0x14, 0xa7, 0x4db) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) bind$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x4}}, 0x10) r1 = semget$private(0x0, 0x4, 0x381) semctl$GETVAL(r1, 0x1, 0xc, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) close(r3) write(0xffffffffffffffff, &(0x7f00000001c0)='4\n', 0x2) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='1\n', 0x2) 6.263486842s ago: executing program 1 (id=682): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/11], 0x0, 0x2, 0xc4, &(0x7f00000002c0)=""/196, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) syz_usb_connect$uac1(0x0, 0x99, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x3, 0x1, 0xe, 0x10, 0x4d, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x23}, [@processing_unit={0x9, 0x24, 0x7, 0x6, 0x1, 0x1, "bc61"}, @processing_unit={0x7, 0x24, 0x7, 0x4, 0x2}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x5, 0x1, [0x4], 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x1, 0x3, {0x7, 0x25, 0x1, 0x4, 0x6, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x40, 0x4, 0x6, 0xfa, "d90969b4327d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0x9, 0x5, {0x7, 0x25, 0x1, 0x0, 0x4, 0xb7}}}}}}}}]}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000300)={{0x1, 0x3, 0x88a}, 0x5, 0x1000}) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000040)={0x80000000, 0xffffffffffffffff, 'id0\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x20c101, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000240)=""/71}, 0x20) 6.263228532s ago: executing program 0 (id=683): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000004c0)='FROZEN\x00', 0x7) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='THAWED\x00', 0x7) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x39000, 0x0) r5 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1) splice(r3, 0x0, r5, 0x0, 0x2, 0x5) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffe3e) r6 = fsmount(0xffffffffffffffff, 0x0, 0x1) fchdir(r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) 6.142507985s ago: executing program 4 (id=684): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x0, 0x4, 0x0, 0x0, 0xfffffffd) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000180)={0x1, 0x0, 0xfff, 0x59}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x39000, 0x0) r4 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1) splice(r2, 0x0, r4, 0x0, 0x2, 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) 5.871297661s ago: executing program 3 (id=687): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='ip_vti0\x00') 5.373199353s ago: executing program 3 (id=689): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xc8948000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000000)=""/106, &(0x7f0000000340)="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", &(0x7f00000004c0), 0x80, r5, 0x0, 0x7}, 0x38) 4.25735139s ago: executing program 3 (id=691): mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x82b440, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) 4.141226752s ago: executing program 3 (id=692): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000001100)={0x44, &(0x7f0000000e80)={0x40, 0x12, 0x6, "c00cb7410a69"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)={0x20, 0x84, 0x1, "97"}, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000a00)={0x14, &(0x7f00000008c0)={0x0, 0x8, 0xfa, {0xfa, 0x30, "37296947f0a9745bd727226f3aec8ccbae3b2a229cb787f9ce8926413187771b225e1cb7e1dddbf55e0bf6fe67d67feb9e3a197e57c4183a4302a994816fb5153fc92ce99d6a94d243a72807cce61e60b625277aabe09739cc240095d16fcfef2c099737406fecdb34bf3fadb34e62bc38bdf8725a5c925feed413e310312a412154c1a5147d0eaf722218818e5cef281d4e8d06ac87113a82adf7c124b724c9eb1a652aadc1a602a71508b439d6b0be943f37c8cdc85838d47bdaeef7ad60a2a3c4cdfe6c4b535a4fcdd533322573d4bee56f242bfc54646b906ae2df59d1b2dcab1709c4436ef9423922c946ee7202455734b622ba78be"}}, &(0x7f00000009c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c80)={0x44, &(0x7f0000000a40)={0x40, 0x16, 0x40, "7232b99ae017aee872cdc6aa03b6d02d51db19991e66ace1c4d7da667450a3d72583ca36d5df87e8fcf6da86f3459fb06a4ac627e043d43f3272578e6b09d756"}, 0x0, 0x0, 0x0, &(0x7f0000000b80)={0x20, 0x85, 0x4, 0x8001}, &(0x7f0000000bc0)={0x20, 0x83, 0x2}, &(0x7f0000000c00)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000c40)={0x20, 0x89, 0x2, 0x1}}) syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file2\x00', 0x1600008, &(0x7f0000000100)={[{@nodecompose}, {}, {@umask={'umask', 0x3d, 0x3}}, {@uid}, {@nobarrier}, {@type={'type', 0x3d, "05f2875e"}}, {@type={'type', 0x3d, "21f2071a"}}]}, 0x3, 0x63d, &(0x7f0000000200)="$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") 4.086941034s ago: executing program 1 (id=694): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) write$vhost_msg_v2(r1, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 3.903434728s ago: executing program 2 (id=695): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000001c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f00000000c0)={@hyper, 0x2}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.334089075s ago: executing program 1 (id=696): openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x102, 0x0) 2.295104046s ago: executing program 1 (id=697): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) 2.252657487s ago: executing program 2 (id=698): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='ip_vti0\x00') 2.251803297s ago: executing program 4 (id=699): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0x17, 0x0, &(0x7f0000000540)="004364d93facbdb966070000000000924ef3604c25c9d2", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x210000, &(0x7f0000000080)={[{@nouser_xattr}, {@errors_remount}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) lseek(0xffffffffffffffff, 0x3ff, 0x3) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000080)) 2.249486387s ago: executing program 0 (id=700): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000001c0)=0xa, 0x4) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 2.206403628s ago: executing program 2 (id=701): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2, 0x14032, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, 0x0) 2.172298679s ago: executing program 2 (id=702): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xc8948000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000000)=""/106, &(0x7f0000000340)="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", &(0x7f00000004c0), 0x80, r5, 0x0, 0x7}, 0x38) 1.170045343s ago: executing program 1 (id=703): mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x82b440, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) 1.093597104s ago: executing program 0 (id=704): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x62080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x38}}, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 1.091545044s ago: executing program 2 (id=705): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) fallocate(r0, 0x14, 0xa7, 0x4db) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) bind$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x4}}, 0x10) r1 = semget$private(0x0, 0x4, 0x381) semctl$GETVAL(r1, 0x1, 0xc, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) close(r3) write(0xffffffffffffffff, &(0x7f00000001c0)='4\n', 0x2) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='1\n', 0x2) 979.472427ms ago: executing program 3 (id=706): r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000019080)={0x0, 0x0, "2734fd0396f1820c0dad7f222ce140f5f2724f8a424a586f443cb62d01000080ff5a483676cb5edeb06c9500cfbf27b503fb56f886d7ddb0172c647d97d957e53885ba7394ccf32ea2024e726436025758fd796ad6f5971a64e69ef431ead7fbcb45eb4e8e0a442e0048e8d6eca35ee858e0a562078252f3ac1a820df4948845455ab082544c93f2d5173b1770080012f165fddaf20cd03f6c66fda6ef37e1a3df106e346a90e052c3cab743dbb1b604e69c6f7c8b504ea5eadb60695c296afc02a77b26ed66c954de07cccaf090fd14410100000031d05e0d33060d2e9595085c60fff54ae872d9360a4200", "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"}) socket$inet6(0xa, 0x80003, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 977.986157ms ago: executing program 0 (id=707): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) write$vhost_msg_v2(r1, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 48.138989ms ago: executing program 2 (id=708): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000001c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f00000000c0)={@hyper, 0x2}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=709): openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x102, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.180' (ED25519) to the list of known hosts. [ 57.858841][ T4172] cgroup: Unknown subsys name 'net' [ 58.020487][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.491982][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.919438][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 60.947949][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 61.021163][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 61.037504][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 61.146104][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.153527][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.161715][ T4186] device bridge_slave_0 entered promiscuous mode [ 61.170935][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.178152][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.186542][ T4187] device bridge_slave_0 entered promiscuous mode [ 61.199047][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 61.235344][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.242441][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.250969][ T4186] device bridge_slave_1 entered promiscuous mode [ 61.258666][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.266253][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.274056][ T4187] device bridge_slave_1 entered promiscuous mode [ 61.296137][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.303225][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.311123][ T4194] device bridge_slave_0 entered promiscuous mode [ 61.347101][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.363640][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.370882][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.379491][ T4194] device bridge_slave_1 entered promiscuous mode [ 61.388392][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.407064][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.429575][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.461034][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.468309][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.476550][ T4193] device bridge_slave_0 entered promiscuous mode [ 61.490269][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.497526][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.505720][ T4193] device bridge_slave_1 entered promiscuous mode [ 61.525528][ T4186] team0: Port device team_slave_0 added [ 61.538321][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.556882][ T4186] team0: Port device team_slave_1 added [ 61.571715][ T4187] team0: Port device team_slave_0 added [ 61.585480][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.608438][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.620187][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.630729][ T4187] team0: Port device team_slave_1 added [ 61.649577][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.656860][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.664912][ T4185] device bridge_slave_0 entered promiscuous mode [ 61.700753][ T4194] team0: Port device team_slave_0 added [ 61.707048][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.714215][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.722216][ T4185] device bridge_slave_1 entered promiscuous mode [ 61.729843][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.737337][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.764342][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.778506][ T4193] team0: Port device team_slave_0 added [ 61.793735][ T4193] team0: Port device team_slave_1 added [ 61.801215][ T4194] team0: Port device team_slave_1 added [ 61.814454][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.821673][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.848379][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.860503][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.867836][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.893984][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.912947][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.920175][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.946483][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.000438][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.009191][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.036214][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.049406][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.067109][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.074209][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.100398][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.120061][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.127069][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.153656][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.170341][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.200555][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.207599][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.234037][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.267288][ T4186] device hsr_slave_0 entered promiscuous mode [ 62.274578][ T4186] device hsr_slave_1 entered promiscuous mode [ 62.283315][ T4185] team0: Port device team_slave_0 added [ 62.293780][ T4187] device hsr_slave_0 entered promiscuous mode [ 62.300950][ T4187] device hsr_slave_1 entered promiscuous mode [ 62.307830][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.316343][ T4187] Cannot create hsr debugfs directory [ 62.339002][ T4194] device hsr_slave_0 entered promiscuous mode [ 62.346440][ T4194] device hsr_slave_1 entered promiscuous mode [ 62.353421][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.361084][ T4194] Cannot create hsr debugfs directory [ 62.367948][ T4185] team0: Port device team_slave_1 added [ 62.430918][ T4193] device hsr_slave_0 entered promiscuous mode [ 62.438170][ T4193] device hsr_slave_1 entered promiscuous mode [ 62.445285][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.452883][ T4193] Cannot create hsr debugfs directory [ 62.471122][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.478321][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.504593][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.542181][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.549728][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.576634][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.645178][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 62.645178][ T2284] Bluetooth: hci4: command 0x0409 tx timeout [ 62.645604][ T2284] Bluetooth: hci1: command 0x0409 tx timeout [ 62.651427][ T1107] Bluetooth: hci0: command 0x0409 tx timeout [ 62.663000][ T2284] Bluetooth: hci2: command 0x0409 tx timeout [ 62.696716][ T4185] device hsr_slave_0 entered promiscuous mode [ 62.703425][ T4185] device hsr_slave_1 entered promiscuous mode [ 62.710322][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.718033][ T4185] Cannot create hsr debugfs directory [ 62.927274][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.941413][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.951786][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.971699][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.007330][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.025489][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.034233][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.051840][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.091525][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.100460][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.115830][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.136559][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.197525][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.209956][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.220237][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.232910][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.275665][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.311999][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.322748][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.338123][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.359267][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.375581][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.389956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.400239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.410907][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.418331][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.428186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.439260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.448243][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.455376][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.466583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.475118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.492196][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.503168][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.518888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.534010][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.549065][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.557691][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.569759][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.579844][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.592381][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.606864][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.639422][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.649961][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.658800][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.667747][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.697497][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.707109][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.716174][ T1309] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.723533][ T1309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.731686][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.742298][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.751455][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.758627][ T1309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.767938][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.776613][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.785552][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.803823][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.818988][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.830983][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.839663][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.882865][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.890923][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.901430][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.912713][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.923241][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.938990][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.965029][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.972959][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.984015][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.993238][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.002193][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.011681][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.020095][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.032558][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.045512][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.058945][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.073781][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.083287][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.093492][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.103695][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.113247][ T1309] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.120388][ T1309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.129732][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.139559][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.148851][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.156213][ T1309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.165375][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.196484][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.217521][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.232580][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.244005][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.253813][ T1309] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.260949][ T1309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.269523][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.279396][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.288297][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.295413][ T1309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.303025][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.312842][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.321687][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.330439][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.339826][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.348591][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.356693][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.384403][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.399646][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.412473][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.428783][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.438546][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.447759][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.455648][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.464087][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.477173][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.486409][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.497591][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.507492][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.517756][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.533410][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.551305][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.563532][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.578126][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.586431][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.595987][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.604907][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.613439][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.623985][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.633003][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.642278][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.655409][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.669835][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.685558][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.701249][ T1309] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.708413][ T1309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.723441][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.724586][ T4228] Bluetooth: hci2: command 0x041b tx timeout [ 64.732004][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 64.743006][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.743796][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 64.753551][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.764425][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 64.764951][ T1309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.770942][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 64.786735][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.827698][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.845969][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.872853][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.882856][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.892486][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.903392][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.913040][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.922455][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.931148][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.948900][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.961609][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.973501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.983916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.991868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.000811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.017244][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.065056][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.072824][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.111204][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.144750][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.161076][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.192297][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.213439][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.270117][ T4186] device veth0_vlan entered promiscuous mode [ 65.281340][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.291331][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.307443][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.315150][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.322716][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.331974][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.353598][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.373541][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.399026][ T4187] device veth0_vlan entered promiscuous mode [ 65.406404][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.413919][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.423453][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.432570][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.450914][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.459345][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.471292][ T4186] device veth1_vlan entered promiscuous mode [ 65.484191][ T4187] device veth1_vlan entered promiscuous mode [ 65.525746][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.535745][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.543768][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.552225][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.561229][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.569949][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.578711][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.589387][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.600178][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.609692][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.631998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.640776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.660085][ T4185] device veth0_vlan entered promiscuous mode [ 65.673892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.682904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.692543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.701680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.711375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.720540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.733500][ T4186] device veth0_macvtap entered promiscuous mode [ 65.743982][ T4187] device veth0_macvtap entered promiscuous mode [ 65.768785][ T4186] device veth1_macvtap entered promiscuous mode [ 65.782451][ T4193] device veth0_vlan entered promiscuous mode [ 65.793227][ T4187] device veth1_macvtap entered promiscuous mode [ 65.803564][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.811676][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.820928][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.829700][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.837793][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.847522][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.856335][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.865163][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.873428][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.881487][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.890235][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.898489][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.915616][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.924184][ T4185] device veth1_vlan entered promiscuous mode [ 65.934040][ T4194] device veth0_vlan entered promiscuous mode [ 65.945282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.953322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.962710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.987635][ T4194] device veth1_vlan entered promiscuous mode [ 66.002563][ T4193] device veth1_vlan entered promiscuous mode [ 66.015456][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.028587][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.037959][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.047037][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.056777][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.070113][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.081890][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.095133][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.102934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.111738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.120188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.128647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.138911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.147913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.156907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.168920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.210109][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.222409][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.235852][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.258457][ T4185] device veth0_macvtap entered promiscuous mode [ 66.266331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.277203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.286355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.297028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.305815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.318144][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.328629][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.337486][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.346887][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.389032][ T4185] device veth1_macvtap entered promiscuous mode [ 66.409252][ T4194] device veth0_macvtap entered promiscuous mode [ 66.452487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.460708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.470241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.480653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.490689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.499606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.517561][ T4194] device veth1_macvtap entered promiscuous mode [ 66.547471][ T1309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.558513][ T1309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.560458][ T4193] device veth0_macvtap entered promiscuous mode [ 66.600482][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.608934][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.618065][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.627830][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.638876][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.649806][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.660554][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.671916][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.681834][ T4193] device veth1_macvtap entered promiscuous mode [ 66.692403][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.704490][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.709765][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.718120][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.737044][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.746862][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.757674][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.768354][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.778919][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.789804][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.800796][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.813874][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.825640][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.825683][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 66.837259][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.852535][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 66.852718][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.864315][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 66.869917][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.880082][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 66.888428][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.891188][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 66.902927][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.919361][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.930216][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.940332][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.951050][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.961225][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.972266][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.984866][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.992299][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.003470][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.012421][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.021277][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.030428][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.039313][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.061966][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.073604][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.082790][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.092852][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.114612][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.127943][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.138299][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.149378][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.159552][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.170257][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.180388][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.191357][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.203108][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.218810][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.230732][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.242375][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.251347][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.268972][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.279689][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.297364][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.308589][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.318874][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.329709][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.340059][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.351055][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.361146][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.372369][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.383952][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.416937][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.428778][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.440903][ T1309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.442530][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.451159][ T1309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.459492][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.478994][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.488019][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.515413][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.523621][ T4246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.542169][ T4246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.588446][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.673585][ T4246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.689732][ T4246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.715543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.742180][ T4246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.758921][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.784710][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.792708][ T4246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.831814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.845779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.878409][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.890715][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.903066][ T4246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.903584][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.911665][ T4246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.944014][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.956833][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.982249][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.018349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.978243][ T1107] Bluetooth: hci1: command 0x0419 tx timeout [ 69.124926][ T4228] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.317929][ T1107] Bluetooth: hci3: command 0x0419 tx timeout [ 69.324797][ T1107] Bluetooth: hci4: command 0x0419 tx timeout [ 69.331128][ T1107] Bluetooth: hci0: command 0x0419 tx timeout [ 69.338863][ T1107] Bluetooth: hci2: command 0x0419 tx timeout [ 69.614386][ T4228] usb 3-1: Using ep0 maxpacket: 8 [ 70.384060][ T4301] FAULT_INJECTION: forcing a failure. [ 70.384060][ T4301] name failslab, interval 1, probability 0, space 0, times 1 [ 70.405224][ T4228] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 70.424438][ T4228] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 70.444805][ T4228] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 70.454936][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.469821][ T4228] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 70.485353][ T4277] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.503206][ T4228] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 70.522822][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.567703][ T4301] CPU: 1 PID: 4301 Comm: syz.0.11 Not tainted syzkaller #0 [ 70.574962][ T4301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 70.585062][ T4301] Call Trace: [ 70.588349][ T4301] [ 70.591280][ T4301] dump_stack_lvl+0x188/0x250 [ 70.595963][ T4301] ? show_regs_print_info+0x20/0x20 [ 70.601167][ T4301] ? load_image+0x410/0x410 [ 70.605680][ T4301] ? __might_sleep+0xf0/0xf0 [ 70.610278][ T4301] ? __lock_acquire+0x7d40/0x7d40 [ 70.615316][ T4301] should_fail+0x383/0x4b0 [ 70.619757][ T4301] should_failslab+0x5/0x20 [ 70.624274][ T4301] slab_pre_alloc_hook+0x51/0xc0 [ 70.629212][ T4301] ? __kernfs_new_node+0xa8/0x6b0 [ 70.634253][ T4301] __kmalloc_track_caller+0x69/0x330 [ 70.639569][ T4301] ? __kernfs_new_node+0xa8/0x6b0 [ 70.644615][ T4301] kstrdup_const+0x51/0x90 [ 70.649054][ T4301] __kernfs_new_node+0xa8/0x6b0 [ 70.653913][ T4301] ? kernfs_new_node+0x250/0x250 [ 70.658859][ T4301] ? sysfs_do_create_link_sd+0x75/0x110 [ 70.664410][ T4301] ? __lock_acquire+0x7d40/0x7d40 [ 70.669437][ T4301] kernfs_new_node+0x148/0x250 [ 70.674206][ T4301] kernfs_create_link+0xa3/0x200 [ 70.679149][ T4301] sysfs_do_create_link_sd+0x83/0x110 [ 70.684550][ T4301] device_add+0x83b/0x1050 [ 70.688974][ T4301] device_create+0x266/0x300 [ 70.693571][ T4301] ? string+0x257/0x290 [ 70.697744][ T4301] ? widen_string+0x3b/0x320 [ 70.702336][ T4301] ? root_device_unregister+0xf0/0xf0 [ 70.707719][ T4301] bdi_register_va+0x93/0x6c0 [ 70.712403][ T4301] super_setup_bdi_name+0xf5/0x200 [ 70.717522][ T4301] ? fuse_fill_super_common+0x4d3/0x10a0 [ 70.723171][ T4301] ? vfs_get_tree+0x270/0x270 [ 70.727869][ T4301] ? do_raw_spin_unlock+0x11d/0x230 [ 70.733258][ T4301] fuse_fill_super_common+0x610/0x10a0 [ 70.738730][ T4301] ? up_write+0x1b6/0x410 [ 70.743246][ T4301] fuse_fill_super+0x173/0x1f0 [ 70.748114][ T4301] ? fuse_reconfigure+0xb0/0xb0 [ 70.752983][ T4301] get_tree_nodev+0xb0/0x160 [ 70.757588][ T4301] fuse_get_tree+0x2d7/0x4d0 [ 70.762335][ T4301] vfs_get_tree+0x88/0x270 [ 70.766808][ T4301] do_new_mount+0x247/0xa40 [ 70.771470][ T4301] __se_sys_mount+0x2e3/0x3d0 [ 70.776464][ T4301] ? __x64_sys_mount+0xc0/0xc0 [ 70.781237][ T4301] ? lockdep_hardirqs_on+0x94/0x140 [ 70.786442][ T4301] ? __x64_sys_mount+0x1c/0xc0 [ 70.791215][ T4301] do_syscall_64+0x4c/0xa0 [ 70.795639][ T4301] ? clear_bhb_loop+0x30/0x80 [ 70.800504][ T4301] ? clear_bhb_loop+0x30/0x80 [ 70.805196][ T4301] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.811092][ T4301] RIP: 0033:0x7fe7307591d9 [ 70.815513][ T4301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.835129][ T4301] RSP: 002b:00007fe72e9b1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 70.843730][ T4301] RAX: ffffffffffffffda RBX: 00007fe7309e0fa0 RCX: 00007fe7307591d9 [ 70.851748][ T4301] RDX: 0000200000000080 RSI: 00002000000020c0 RDI: 0000000000000000 [ 70.859747][ T4301] RBP: 00007fe7307f0888 R08: 00002000000010c0 R09: 0000000000000000 [ 70.867812][ T4301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.875783][ T4301] R13: 00007fe7309e1038 R14: 00007fe7309e0fa0 R15: 00007ffc79dd0eb8 [ 70.883818][ T4301] [ 70.908321][ T4228] usbtmc 3-1:16.0: bulk endpoints not found [ 71.138008][ T4231] usb 3-1: USB disconnect, device number 2 [ 71.155513][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.166091][ T4277] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 71.214385][ T4277] usb 5-1: config 0 has no interface number 0 [ 71.241063][ T23] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 71.282588][ T4277] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 71.305024][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.393324][ T23] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 71.411657][ T23] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 71.424482][ T23] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 71.449264][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.456988][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.484752][ T4277] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 71.495371][ T23] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 71.506054][ T4277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.520202][ T23] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 71.534351][ T4277] usb 5-1: Product: syz [ 71.538618][ T4277] usb 5-1: Manufacturer: syz [ 71.609529][ T4314] batman_adv: batadv0: Adding interface: syzkaller0 [ 71.638075][ T4314] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.711689][ T4277] usb 5-1: SerialNumber: syz [ 71.724473][ T23] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 71.742531][ T4314] batman_adv: batadv0: Interface activated: syzkaller0 [ 71.744605][ T4277] usb 5-1: config 0 descriptor?? [ 71.757896][ T23] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 71.767334][ T23] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 71.775970][ T4316] process 'syz.2.14' launched '/dev/fd/-1/./file2' with NULL argv: empty string added [ 71.776746][ T23] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 71.811179][ T4277] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 71.930415][ T4313] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 72.003327][ T4313] batman_adv: batadv0: Removing interface: syzkaller0 [ 72.164555][ C1] usb 5-1: yurex_control_callback - control failed: -71 [ 72.168556][ T4306] usb 5-1: USB disconnect, device number 2 [ 72.207594][ T4306] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 74.267472][ T4306] usb 2-1: USB disconnect, device number 2 [ 74.292909][ T4306] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 74.333273][ T4306] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 74.372598][ T4306] keyspan 2-1:1.0: device disconnected [ 75.184274][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 75.204272][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 75.224271][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 75.244274][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 75.264270][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 75.284268][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 75.304269][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 75.324270][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 75.354286][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 76.744277][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 76.780820][ T4432] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 76.782877][ T4432] netlink: 'syz.4.33': attribute type 1 has an invalid length. [ 77.162498][ T4450] 8021q: VLANs not supported on gre0 [ 79.915393][ T4528] netlink: 'syz.3.54': attribute type 10 has an invalid length. [ 79.965555][ T4528] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.973601][ T4528] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.879887][ T4528] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.887034][ T4528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.895449][ T4528] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.902520][ T4528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.172304][ T4528] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 81.182733][ T4535] 8021q: VLANs not supported on gre0 [ 81.239756][ T4549] device syzkaller0 entered promiscuous mode [ 81.475469][ T4567] FAULT_INJECTION: forcing a failure. [ 81.475469][ T4567] name failslab, interval 1, probability 0, space 0, times 0 [ 81.629702][ T4567] CPU: 1 PID: 4567 Comm: syz.1.67 Not tainted syzkaller #0 [ 81.636965][ T4567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 81.647046][ T4567] Call Trace: [ 81.650357][ T4567] [ 81.653305][ T4567] dump_stack_lvl+0x188/0x250 [ 81.658016][ T4567] ? show_regs_print_info+0x20/0x20 [ 81.663243][ T4567] ? load_image+0x410/0x410 [ 81.667775][ T4567] ? __might_sleep+0xf0/0xf0 [ 81.672386][ T4567] ? __lock_acquire+0x7d40/0x7d40 [ 81.677440][ T4567] should_fail+0x383/0x4b0 [ 81.681889][ T4567] should_failslab+0x5/0x20 [ 81.686422][ T4567] slab_pre_alloc_hook+0x51/0xc0 [ 81.692014][ T4567] __kmalloc+0x6b/0x340 [ 81.696193][ T4567] ? security_sk_alloc+0x47/0x130 [ 81.701336][ T4567] security_sk_alloc+0x47/0x130 [ 81.706285][ T4567] sk_prot_alloc+0x101/0x210 [ 81.710921][ T4567] ? sk_alloc+0x1d/0x310 [ 81.715288][ T4567] sk_alloc+0x2f/0x310 [ 81.719402][ T4567] ? vcc_create+0x6d/0x310 [ 81.723852][ T4567] vcc_create+0x9b/0x310 [ 81.728126][ T4567] __sock_create+0x473/0x910 [ 81.732757][ T4567] __sys_socket+0xe2/0x170 [ 81.737203][ T4567] __x64_sys_socket+0x76/0x80 [ 81.741906][ T4567] do_syscall_64+0x4c/0xa0 [ 81.746559][ T4567] ? clear_bhb_loop+0x30/0x80 [ 81.751273][ T4567] ? clear_bhb_loop+0x30/0x80 [ 81.756065][ T4567] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.761997][ T4567] RIP: 0033:0x7f635ccb51d9 [ 81.766446][ T4567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.786179][ T4567] RSP: 002b:00007f635af0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 81.794632][ T4567] RAX: ffffffffffffffda RBX: 00007f635cf3cfa0 RCX: 00007f635ccb51d9 [ 81.802711][ T4567] RDX: 0000000000000005 RSI: 0000000000000005 RDI: 0000000000000008 [ 81.810703][ T4567] RBP: 00007f635cd4c888 R08: 0000000000000000 R09: 0000000000000000 [ 81.818696][ T4567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.826705][ T4567] R13: 00007f635cf3d038 R14: 00007f635cf3cfa0 R15: 00007fffdeced148 [ 81.834808][ T4567] [ 83.911164][ T4616] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.930863][ T4614] 8021q: VLANs not supported on gre0 [ 85.020721][ T4631] md: could not open device unknown-block(1,0). [ 85.039961][ T4632] device syzkaller0 entered promiscuous mode [ 86.500742][ T4654] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 86.810823][ T1109] cfg80211: failed to load regulatory.db [ 87.266154][ T4659] 8021q: VLANs not supported on gre0 [ 87.895545][ T4673] md: could not open device unknown-block(1,0). [ 89.700789][ T4694] kernel read not supported for file /file0 (pid: 4694 comm: syz.2.98) [ 89.710229][ T26] audit: type=1800 audit(1791506894.694:2): pid=4694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.98" name="file0" dev="mqueue" ino=34854 res=0 errno=0 [ 90.034117][ T4299] kernel write not supported for file /input/event0 (pid: 4299 comm: kworker/1:9) [ 92.029879][ T4714] file system registered [ 92.242801][ T4722] device syzkaller0 entered promiscuous mode [ 93.070342][ T4185] ffs_data_put(): freeing [ 93.144565][ T26] audit: type=1326 audit(1791506898.124:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbffa191d9 code=0x7ffc0000 [ 93.228286][ T26] audit: type=1326 audit(1791506898.194:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbbffa191d9 code=0x7ffc0000 [ 93.256322][ T26] audit: type=1326 audit(1791506898.204:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbffa191d9 code=0x7ffc0000 [ 93.280693][ T26] audit: type=1326 audit(1791506898.204:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbbffa191d9 code=0x7ffc0000 [ 93.305739][ T4733] kernel read not supported for file /file0 (pid: 4733 comm: syz.0.113) [ 93.307915][ T26] audit: type=1326 audit(1791506898.204:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbffa191d9 code=0x7ffc0000 [ 93.375892][ T26] audit: type=1326 audit(1791506898.204:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fbbffa191d9 code=0x7ffc0000 [ 93.428923][ T26] audit: type=1326 audit(1791506898.204:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbffa191d9 code=0x7ffc0000 [ 93.484636][ T4232] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 93.576803][ T26] audit: type=1326 audit(1791506898.204:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fbbffa191d9 code=0x7ffc0000 [ 93.873708][ T26] audit: type=1326 audit(1791506898.204:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbffa191d9 code=0x7ffc0000 [ 94.015854][ T4232] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 94.078954][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 94.186715][ T4232] usb 3-1: Product: syz [ 94.236840][ T4232] usb 3-1: Manufacturer: syz [ 94.290804][ T4232] usb 3-1: SerialNumber: syz [ 94.373627][ T4232] usb 3-1: config 0 descriptor?? [ 95.215012][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 95.215028][ T26] audit: type=1326 audit(1791506900.204:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbbffa18e6b code=0x7ffc0000 [ 96.106059][ T26] audit: type=1326 audit(1791506900.204:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbbffa18e6b code=0x7ffc0000 [ 96.130021][ T26] audit: type=1326 audit(1791506900.204:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbbffa18e6b code=0x7ffc0000 [ 96.187744][ T4232] usb 3-1: USB disconnect, device number 3 [ 96.318441][ T26] audit: type=1326 audit(1791506900.244:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbbff9d9a0e code=0x7ffc0000 [ 96.605625][ T4772] 8021q: VLANs not supported on gre0 [ 96.668437][ T26] audit: type=1326 audit(1791506900.954:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbffa191d9 code=0x7ffc0000 [ 97.024990][ T26] audit: type=1326 audit(1791506901.014:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbbff9d9a0e code=0x7ffc0000 [ 97.210029][ T26] audit: type=1326 audit(1791506901.024:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbffa191d9 code=0x7ffc0000 [ 97.264425][ T4232] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 97.496611][ T4805] device syzkaller0 entered promiscuous mode [ 97.687332][ T26] audit: type=1326 audit(1791506901.044:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbbffa191d9 code=0x7ffc0000 [ 97.992257][ T26] audit: type=1326 audit(1791506901.064:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbffa191d9 code=0x7ffc0000 [ 98.063847][ T4811] kernel read not supported for file /file0 (pid: 4811 comm: syz.4.127) [ 98.144983][ T26] audit: type=1326 audit(1791506901.094:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbffa191d9 code=0x7ffc0000 [ 102.396351][ T4853] device syzkaller0 entered promiscuous mode [ 102.849870][ T4886] loop0: detected capacity change from 0 to 256 [ 102.887636][ T4888] loop1: detected capacity change from 0 to 512 [ 103.038284][ T4896] loop3: detected capacity change from 0 to 512 [ 103.079039][ T4896] ======================================================= [ 103.079039][ T4896] WARNING: The mand mount option has been deprecated and [ 103.079039][ T4896] and is ignored by this kernel. Remove the mand [ 103.079039][ T4896] option from the mount to silence this warning. [ 103.079039][ T4896] ======================================================= [ 103.132378][ T4896] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 103.181216][ T4888] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 103.243710][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 103.243726][ T26] audit: type=1800 audit(1791506908.224:59): pid=4888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.143" name="sda" dev="loop1" ino=19 res=0 errno=0 [ 103.304151][ T4906] loop2: detected capacity change from 0 to 512 [ 103.311659][ T4896] EXT4-fs (loop3): 1 truncate cleaned up [ 103.358914][ T4896] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nogrpid,grpjquota=,,errors=continue. Quota mode: none. [ 103.416842][ T4906] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 103.463233][ T4906] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.674502][ T4951] device syzkaller0 entered promiscuous mode [ 105.498390][ T4187] ffs_data_put(): freeing [ 105.578570][ T4953] 8021q: VLANs not supported on gre0 [ 106.319881][ T4973] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 106.722676][ T4978] loop1: detected capacity change from 0 to 512 [ 106.738717][ T4978] EXT4-fs (loop1): Ignoring removed oldalloc option [ 106.794566][ T4978] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 106.821207][ T4980] loop3: detected capacity change from 0 to 512 [ 106.912950][ T4978] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,acl,oldalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 106.965334][ T4980] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000017ffd,noauto_da_alloc,journal_ioprio=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 107.004804][ T4980] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.054189][ T4980] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.163: corrupted inode contents [ 107.070912][ T4980] EXT4-fs error (device loop3): ext4_dirty_inode:6087: inode #2: comm syz.3.163: mark_inode_dirty error [ 107.095590][ T4980] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.163: corrupted inode contents [ 107.119500][ T4980] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.163: mark_inode_dirty error [ 107.230866][ T4187] ffs_data_put(): freeing [ 107.301388][ T5003] loop1: detected capacity change from 0 to 2048 [ 108.696457][ T5041] 8021q: VLANs not supported on gre0 [ 109.552234][ T4187] ffs_data_put(): freeing [ 109.911582][ T4228] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 110.870040][ T5071] FAULT_INJECTION: forcing a failure. [ 110.870040][ T5071] name failslab, interval 1, probability 0, space 0, times 0 [ 110.894386][ T4228] usb 5-1: Using ep0 maxpacket: 16 [ 110.929127][ T5071] CPU: 1 PID: 5071 Comm: syz.1.187 Not tainted syzkaller #0 [ 110.936481][ T5071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 110.946652][ T5071] Call Trace: [ 110.949955][ T5071] [ 110.952912][ T5071] dump_stack_lvl+0x188/0x250 [ 110.957638][ T5071] ? show_regs_print_info+0x20/0x20 [ 110.962868][ T5071] ? load_image+0x410/0x410 [ 110.967420][ T5071] ? rcu_lock_release+0x5/0x20 [ 110.972229][ T5071] should_fail+0x383/0x4b0 [ 110.976818][ T5071] should_failslab+0x5/0x20 [ 110.981342][ T5071] slab_pre_alloc_hook+0x51/0xc0 [ 110.986331][ T5071] kmem_cache_alloc_trace+0x47/0x290 [ 110.986368][ T5071] ? proc_self_get_link+0xe1/0x170 [ 110.986397][ T5071] proc_self_get_link+0xe1/0x170 [ 110.986419][ T5071] ? proc_setup_self+0x2d0/0x2d0 [ 110.986440][ T5071] pick_link+0x701/0xdc0 [ 110.986474][ T5071] step_into+0xac6/0xcd0 [ 110.986507][ T5071] ? set_root+0x3a0/0x3a0 [ 110.986533][ T5071] ? walk_component+0x1b6/0x460 [ 110.986562][ T5071] link_path_walk+0x688/0xde0 [ 110.986601][ T5071] ? handle_lookup_down+0x130/0x130 [ 110.986636][ T5071] path_openat+0x28e/0x2fb0 [ 110.986684][ T5071] ? __kasan_slab_alloc+0xa9/0xc0 [ 110.986716][ T5071] ? do_filp_open+0x400/0x400 [ 110.986759][ T5071] do_filp_open+0x1df/0x400 [ 110.986786][ T5071] ? vfs_tmpfile+0x300/0x300 [ 110.986831][ T5071] ? _raw_spin_unlock+0x24/0x40 [ 110.986852][ T5071] ? alloc_fd+0x59e/0x650 [ 110.986881][ T5071] do_sys_openat2+0x14b/0x500 [ 110.986900][ T5071] ? __lock_acquire+0x7d40/0x7d40 [ 110.986925][ T5071] ? do_sys_open+0xe0/0xe0 [ 110.986945][ T5071] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 110.986973][ T5071] ? lock_chain_count+0x20/0x20 [ 110.987002][ T5071] __x64_sys_openat+0x135/0x160 [ 110.987028][ T5071] do_syscall_64+0x4c/0xa0 [ 110.987048][ T5071] ? clear_bhb_loop+0x30/0x80 [ 110.987069][ T5071] ? clear_bhb_loop+0x30/0x80 [ 110.987100][ T5071] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.987123][ T5071] RIP: 0033:0x7f635cc75a0e [ 110.987143][ T5071] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 110.987161][ T5071] RSP: 002b:00007f635af0cec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 110.987186][ T5071] RAX: ffffffffffffffda RBX: 00007f635af0d6c0 RCX: 00007f635cc75a0e [ 110.987201][ T5071] RDX: 0000000000000002 RSI: 00007f635af0cf90 RDI: ffffffffffffff9c [ 110.987216][ T5071] RBP: 00007f635cd4c888 R08: 0000000000000000 R09: 0000000000000000 [ 110.987229][ T5071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.987242][ T5071] R13: 00007f635cf3d038 R14: 00007f635cf3cfa0 R15: 00007fffdeced148 [ 110.987275][ T5071] [ 111.074631][ T4228] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.270624][ T5083] Zero length message leads to an empty skb [ 111.309929][ T5085] EXT4-fs (sda1): shut down requested (2) [ 111.317107][ T1107] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.324553][ T5085] Aborting journal on device sda1-8. [ 111.400968][ T4228] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.403745][ T4186] ffs_data_put(): freeing [ 111.421689][ T4228] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 111.435256][ T4228] usb 5-1: config 0 interface 0 has no altsetting 0 [ 111.441989][ T4228] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 111.451255][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.470129][ T4228] usb 5-1: config 0 descriptor?? [ 111.841879][ T1107] usb 1-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 111.925399][ T5103] 8021q: VLANs not supported on gre0 [ 112.067718][ T5055] udc-core: couldn't find an available UDC or it's busy [ 112.669748][ T5055] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 112.691411][ T1107] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 112.784037][ T1107] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 112.811124][ T1107] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 112.851059][ T1107] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 112.870512][ T1107] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 112.883602][ T1107] usb 1-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 113.002664][ T4306] usb 5-1: USB disconnect, device number 3 [ 113.009067][ T4185] ffs_data_put(): freeing [ 113.064667][ T1107] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 113.084284][ T1107] usb 1-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 113.093057][ T1107] usb 1-1: Product: syz [ 113.099900][ T1107] usb 1-1: Manufacturer: syz [ 113.115909][ T1107] usb 1-1: SerialNumber: syz [ 113.154923][ T5077] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 113.162067][ T5077] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 113.179937][ T5140] loop3: detected capacity change from 0 to 2048 [ 113.191907][ T5077] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 113.215903][ T1107] keyspan 1-1:1.0: Keyspan 1 port adapter converter detected [ 113.236244][ T1107] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 113.278341][ T5140] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.295915][ T1107] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 82 [ 113.315565][ T1107] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 113.327017][ T1107] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 114.476748][ T4228] usb 1-1: USB disconnect, device number 2 [ 114.524250][ T4228] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 114.593291][ T4228] keyspan 1-1:1.0: device disconnected [ 114.715334][ T5164] 8021q: VLANs not supported on gre0 [ 115.491597][ T4185] ffs_data_put(): freeing [ 115.689125][ T5170] loop0: detected capacity change from 0 to 512 [ 115.701269][ T5172] loop4: detected capacity change from 0 to 512 [ 115.733866][ T5174] loop2: detected capacity change from 0 to 512 [ 115.811125][ T5173] loop3: detected capacity change from 0 to 4096 [ 115.815478][ T5170] EXT4-fs (loop0): 1 truncate cleaned up [ 115.832315][ T5170] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 115.868454][ T5174] EXT4-fs (loop2): 1 truncate cleaned up [ 115.874566][ T5172] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.884987][ T5174] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 115.919916][ T5173] EXT4-fs (loop3): Test dummy encryption mode enabled [ 115.946862][ T5172] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 115.964556][ T5173] EXT4-fs (loop3): inline encryption not supported [ 116.044043][ T5173] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,test_dummy_encryption=v1,inlinecrypt,resgid=0x0000000000000000,noinit_itable,norecovery,nombcache,nodioread_nolock,errors=remount-ro,norecovery,usrquota,max_dir_size_kb=0x0000000000000000,. Quota mode: writeback. [ 116.048770][ T5170] EXT4-fs (loop0): Online resizing not supported with sparse_super2 [ 116.079061][ T5172] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.219: bg 0: block 248: padding at end of block bitmap is not set [ 116.141025][ T5172] Quota error (device loop4): write_blk: dquota write failed [ 116.179698][ T5186] loop2: detected capacity change from 0 to 16 [ 116.202995][ T5172] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 116.213268][ T5173] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 116.248887][ T5172] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.219: Failed to acquire dquot type 1 [ 116.307901][ T5186] erofs: (device loop2): mounted with root inode @ nid 36. [ 116.330974][ T5172] EXT4-fs (loop4): 1 truncate cleaned up [ 116.360344][ T5172] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 116.387988][ T5186] erofs: (device loop2): find_target_block_classic: corrupted dir block 0 @ nid 46 [ 116.552999][ T5172] EXT4-fs error (device loop4): ext4_lookup:1864: inode #2: comm syz.4.219: deleted inode referenced: 12 [ 117.364412][ T4513] Quota error (device loop4): remove_tree: Getting block too big (0 >= 6) [ 117.373396][ T4513] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:26: Failed to release dquot type 1 [ 117.455687][ T4187] ffs_data_put(): freeing [ 117.814350][ T4228] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 117.829878][ T5223] 8021q: VLANs not supported on gre0 [ 117.929878][ T5219] binder: 5216:5219 ioctl 0 200000000300 returned -22 [ 118.204597][ T4228] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 118.220195][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.252114][ T4228] usb 2-1: config 0 descriptor?? [ 119.301099][ T4185] ffs_data_put(): freeing [ 119.400791][ T5246] loop3: detected capacity change from 0 to 128 [ 119.458937][ T5246] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 119.500518][ T5246] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 119.547358][ T5246] FAT-fs (loop3): Filesystem has been set read-only [ 119.582434][ T5246] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 119.599756][ T5206] loop1: detected capacity change from 0 to 1024 [ 119.606012][ T5246] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 119.629656][ T5249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.242'. [ 119.633357][ T5246] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 119.679765][ T5206] hfsplus: invalid attributes max_key_len 0 [ 119.716421][ T5206] hfsplus: failed to load attributes file [ 119.750067][ T4228] usb 2-1: Cannot set autoneg [ 119.758059][ T4228] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 119.776534][ T4185] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 119.811466][ T4228] usb 2-1: USB disconnect, device number 3 [ 120.458916][ T4187] ffs_data_put(): freeing [ 120.557889][ T5276] netlink: 16 bytes leftover after parsing attributes in process `syz.3.251'. [ 120.689191][ T5277] ip_tables: iptables: counters copy to user failed while replacing table [ 120.734361][ T4230] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 120.748406][ T5279] ip_tables: iptables: counters copy to user failed while replacing table [ 121.492971][ T5296] loop3: detected capacity change from 0 to 512 [ 121.578099][ T5301] loop0: detected capacity change from 0 to 512 [ 121.668615][ T5301] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.264: bad orphan inode 15 [ 121.679209][ T4230] usb 2-1: config 0 has no interfaces? [ 121.691976][ T5301] ext4_test_bit(bit=14, block=5) = 0 [ 121.704730][ T5301] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 121.712700][ T5296] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 121.766750][ T5308] loop4: detected capacity change from 0 to 128 [ 121.774825][ T5296] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.809041][ T5309] 8021q: VLANs not supported on gre0 [ 121.851582][ T5308] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 121.861491][ T4230] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 121.887847][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.924370][ T4230] usb 2-1: Product: syz [ 121.938095][ T4230] usb 2-1: Manufacturer: syz [ 121.946537][ T4230] usb 2-1: SerialNumber: syz [ 121.970858][ T4230] usb 2-1: config 0 descriptor?? [ 121.984539][ T26] audit: type=1800 audit(1791506926.974:60): pid=5308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.265" name="file1" dev="loop4" ino=94 res=0 errno=0 [ 122.064636][ T5308] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 122.290676][ T5318] netlink: 16 bytes leftover after parsing attributes in process `syz.4.268'. [ 122.606601][ T5268] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 122.790694][ T1109] usb 2-1: USB disconnect, device number 4 [ 123.178147][ T5324] loop0: detected capacity change from 0 to 512 [ 123.288396][ T5324] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 123.354401][ T5324] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 123.366693][ T5338] loop4: detected capacity change from 0 to 512 [ 123.437204][ T5324] EXT4-fs (loop0): 1 truncate cleaned up [ 123.443072][ T5324] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.667382][ T5349] netlink: 16 bytes leftover after parsing attributes in process `syz.3.279'. [ 123.829015][ T5338] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 124.465459][ T5338] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.539641][ T5378] loop1: detected capacity change from 0 to 512 [ 125.794775][ T5378] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 125.821570][ T5378] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.984438][ T4230] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 126.110756][ T5386] ip_tables: iptables: counters copy to user failed while replacing table [ 127.041091][ T5398] netlink: 'syz.1.295': attribute type 1 has an invalid length. [ 127.154617][ T4230] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 127.162838][ T4230] usb 4-1: config 0 has no interface number 0 [ 127.177260][ T4230] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 65535, setting to 64 [ 127.189190][ T4230] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 127.199619][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.241522][ T4230] usb 4-1: config 0 descriptor?? [ 127.264950][ T5374] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 127.287436][ T4230] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input5 [ 127.543488][ T4230] usb 4-1: USB disconnect, device number 2 [ 127.549453][ C0] usbtouchscreen 4-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19 [ 127.573045][ T5417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.305'. [ 127.594290][ T5412] kernel read not supported for file /file0 (pid: 5412 comm: syz.1.304) [ 127.602800][ T26] audit: type=1800 audit(1791506932.584:61): pid=5412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.304" name="file0" dev="mqueue" ino=36959 res=0 errno=0 [ 127.631375][ T5418] loop0: detected capacity change from 0 to 512 [ 127.708420][ T5422] loop4: detected capacity change from 0 to 128 [ 127.758156][ T5422] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 127.812528][ T5418] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 127.855775][ T5418] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.058208][ T5437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.315'. [ 130.338190][ T4193] ffs_data_put(): freeing [ 130.884595][ T5458] kernel read not supported for file /file0 (pid: 5458 comm: syz.0.323) [ 130.893386][ T26] audit: type=1800 audit(1791506935.874:62): pid=5458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.323" name="file0" dev="mqueue" ino=37048 res=0 errno=0 [ 131.455921][ T5474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.327'. [ 132.470166][ T5481] loop0: detected capacity change from 0 to 2048 [ 132.772490][ T5481] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 132.895571][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.902482][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.577473][ T4185] ffs_data_put(): freeing [ 135.604123][ T5506] event trace: Could not enable event p [ 135.819476][ T5510] kernel read not supported for file /file0 (pid: 5510 comm: syz.2.342) [ 135.829543][ T26] audit: type=1800 audit(1791506940.824:63): pid=5510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.342" name="file0" dev="mqueue" ino=37121 res=0 errno=0 [ 135.868093][ T5515] loop3: detected capacity change from 0 to 1024 [ 135.935298][ T5520] netlink: 16 bytes leftover after parsing attributes in process `syz.0.343'. [ 136.218918][ T5515] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,nobarrier,barrier,block_validity,nodioread_nolock,nodelalloc,nolazytime,init_itable=0x0000000000000006,,errors=continue. Quota mode: none. [ 136.566592][ T5515] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.789765][ T5530] loop0: detected capacity change from 0 to 128 [ 136.808426][ T26] audit: type=1800 audit(1791506941.794:64): pid=5515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.340" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 136.855409][ T5530] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 136.892146][ T5515] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: comm syz.3.340: lblock 0 mapped to illegal pblock 0 (length 1) [ 136.958420][ T5530] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 137.002037][ T5537] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.340: lblock 0 mapped to illegal pblock 0 (length 1) [ 137.033118][ T5539] ffs_data_put(): freeing [ 137.114799][ T5537] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.340: lblock 0 mapped to illegal pblock 0 (length 1) [ 140.427461][ T5572] netlink: 16 bytes leftover after parsing attributes in process `syz.3.359'. [ 141.239940][ T5580] loop1: detected capacity change from 0 to 512 [ 141.258347][ T4187] ffs_data_put(): freeing [ 141.349797][ T5585] loop0: detected capacity change from 0 to 128 [ 141.362681][ T5580] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.374034][ T5580] ext4 filesystem being mounted at /64/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.415097][ T5585] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 141.426341][ T5585] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 144.788345][ T4186] ffs_data_put(): freeing [ 144.852911][ T5620] netlink: 16 bytes leftover after parsing attributes in process `syz.3.380'. [ 145.419894][ T5627] tmpfs: Bad value for 'nr_inodes' [ 145.662904][ T5631] loop0: detected capacity change from 0 to 512 [ 145.732786][ T5640] loop3: detected capacity change from 0 to 128 [ 145.753420][ T5638] loop1: detected capacity change from 0 to 512 [ 145.757997][ T5631] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 145.820819][ T5645] ffs_data_put(): freeing [ 145.986301][ T5631] EXT4-fs (loop0): 1 truncate cleaned up [ 145.992057][ T5631] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,errors=remount-ro,. Quota mode: none. [ 146.004434][ T5640] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 146.057098][ T5640] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.079855][ T5638] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 146.117798][ T5638] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.022671][ T5671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 149.051839][ T5672] loop3: detected capacity change from 0 to 512 [ 149.152731][ T5672] EXT4-fs (loop3): Test dummy encryption mode enabled [ 149.183309][ T5680] ffs_data_put(): freeing [ 149.196066][ T5672] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 149.244297][ T5672] EXT4-fs (loop3): SIPHASH is not a valid default hash value [ 149.283205][ T5685] loop4: detected capacity change from 0 to 512 [ 149.387559][ T5685] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 149.407497][ T5685] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.453393][ T5696] Illegal XDP return value 4294967274, expect packet loss! [ 149.631441][ T5704] netlink: 16 bytes leftover after parsing attributes in process `syz.1.413'. [ 149.749982][ T4193] ffs_data_put(): freeing [ 149.855703][ T5719] loop0: detected capacity change from 0 to 512 [ 149.960646][ T5719] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 150.020648][ T5719] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.991447][ T5738] capability: warning: `syz.4.428' uses 32-bit capabilities (legacy support in use) [ 151.015104][ T1107] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 151.176519][ T5749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.431'. [ 151.210604][ T4187] ffs_data_put(): freeing [ 151.384749][ T1107] usb 2-1: not running at top speed; connect to a high speed hub [ 151.439102][ T5758] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 152.401178][ T5761] loop3: detected capacity change from 0 to 128 [ 152.583518][ T5761] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 152.774007][ T5761] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.900664][ T5762] loop4: detected capacity change from 0 to 512 [ 153.492507][ T26] audit: type=1804 audit(1791506958.474:65): pid=5761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.437" name="/newroot/94/bus/file1" dev="loop3" ino=94 res=1 errno=0 [ 153.608718][ T1107] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 153.844871][ T5762] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 153.977220][ T26] audit: type=1326 audit(1791506958.954:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.1.438" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f635ccb51d9 code=0x0 [ 154.178737][ T5762] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.271445][ T1107] usb 2-1: can't read configurations, error -71 [ 154.404878][ T5761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.437'. [ 154.414649][ T5761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.437'. [ 154.423619][ T5761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.437'. [ 154.432714][ T5761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.437'. [ 154.441772][ T5761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.437'. [ 154.450815][ T5761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.437'. [ 154.459791][ T5761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.437'. [ 154.468757][ T5761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.437'. [ 154.477824][ T5761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.437'. [ 154.876968][ T4186] ffs_data_put(): freeing [ 155.331868][ T5797] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 155.882454][ T5795] loop0: detected capacity change from 0 to 2048 [ 156.183971][ T5795] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.242512][ T5807] capability: warning: `syz.0.455' uses deprecated v2 capabilities in a way that may be insecure [ 158.249596][ T5809] ffs_data_put(): freeing [ 159.804209][ C1] sched: RT throttling activated [ 159.964387][ T1107] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 160.156658][ T5843] loop1: detected capacity change from 0 to 512 [ 160.208623][ T5832] syz.4.464 (5832): drop_caches: 2 [ 160.231381][ T1107] usb 1-1: Using ep0 maxpacket: 16 [ 160.243392][ T4185] ffs_data_put(): freeing [ 160.289097][ T5843] EXT4-fs (loop1): 1 truncate cleaned up [ 160.297594][ T5843] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 160.444469][ T1107] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 160.501717][ T1107] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.794846][ T5848] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 161.114656][ T1107] usb 1-1: config 0 has no interface number 0 [ 161.134430][ T5853] overlayfs: failed to clone upperpath [ 161.294640][ T1107] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 161.407812][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.417807][ T1107] usb 1-1: Product: syz [ 161.422018][ T1107] usb 1-1: Manufacturer: syz [ 161.427738][ T1107] usb 1-1: SerialNumber: syz [ 162.846498][ T1107] usb 1-1: config 0 descriptor?? [ 163.124602][ T1107] usb 1-1: can't set config #0, error -71 [ 163.138577][ T1107] usb 1-1: USB disconnect, device number 3 [ 163.956555][ T5884] loop3: detected capacity change from 0 to 2048 [ 163.996396][ T5884] UDF-fs: bad mount option "fscontext=root" or missing value [ 164.142696][ T4193] ffs_data_put(): freeing [ 164.313079][ T5892] __nla_validate_parse: 1 callbacks suppressed [ 164.313093][ T5892] netlink: 16 bytes leftover after parsing attributes in process `syz.0.485'. [ 164.484134][ T5904] loop0: detected capacity change from 0 to 512 [ 164.623737][ T5908] loop5: detected capacity change from 0 to 7 [ 164.633865][ T5908] Dev loop5: unable to read RDB block 7 [ 164.642876][ T5908] loop5: unable to read partition table [ 164.663226][ T5908] loop5: partition table beyond EOD, truncated [ 164.669934][ T5908] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑû) failed (rc=-5) [ 165.098032][ T5904] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 165.578523][ T5904] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.925874][ T5931] loop4: detected capacity change from 0 to 512 [ 168.128487][ T5931] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.499: corrupted inode contents [ 168.162443][ T5931] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 168.172926][ T5931] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.499: corrupted inode contents [ 168.187625][ T5931] EXT4-fs error (device loop4): ext4_evict_inode:332: inode #15: comm syz.4.499: mark_inode_dirty error [ 168.204160][ T5931] EXT4-fs (loop4): 1 orphan inode deleted [ 168.210324][ T5931] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,init_itable=0x00000000000000ff,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 168.413189][ T4186] ffs_data_put(): freeing [ 168.497326][ T5942] netlink: 16 bytes leftover after parsing attributes in process `syz.3.502'. [ 168.726750][ T5962] loop0: detected capacity change from 0 to 8 [ 168.777168][ T26] audit: type=1800 audit(1791506973.764:67): pid=5967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.506" name="attr_allow_any_host" dev="configfs" ino=37920 res=0 errno=0 [ 168.826928][ T4230] nvmet: creating controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:63d021f2-da8d-4c5c-9275-552239d9726b. [ 168.862675][ T26] audit: type=1800 audit(1791506973.764:68): pid=5967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.506" name="addr_trtype" dev="configfs" ino=37926 res=0 errno=0 [ 168.982141][ T5962] SQUASHFS error: lzo decompression failed, data probably corrupt [ 169.048962][ T5962] SQUASHFS error: Failed to read block 0x71e: -5 [ 169.135676][ T5962] SQUASHFS error: Unable to read metadata cache entry [71c] [ 169.227399][ T5967] nvme nvme0: creating 2 I/O queues. [ 169.253034][ T5962] SQUASHFS error: Unable to read inode 0x11f [ 169.548121][ T5962] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(0.0.0), cmd(3) [ 171.779359][ T5967] nvme nvme0: new ctrl: "testsubsys" [ 172.003914][ T5996] loop4: detected capacity change from 0 to 512 [ 172.067257][ T5996] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 172.092367][ T5988] 8021q: VLANs not supported on gre0 [ 172.242769][ T5996] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.519: inode #88: comm syz.4.519: iget: illegal inode # [ 172.411673][ T6005] netlink: 16 bytes leftover after parsing attributes in process `syz.0.523'. [ 172.421079][ T5996] EXT4-fs (loop4): Remounting filesystem read-only [ 172.480857][ T5996] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.519: error while reading EA inode 88 err=-117 [ 172.529240][ T5996] EXT4-fs (loop4): Remounting filesystem read-only [ 172.550549][ T5996] EXT4-fs (loop4): 1 orphan inode deleted [ 172.564635][ T5996] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,jqfmt=vfsold,nodelalloc,bsdgroups,. Quota mode: none. [ 172.621093][ T5993] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 172.740784][ T5993] EXT4-fs (loop4): Remounting filesystem read-only [ 173.013169][ T6021] loop0: detected capacity change from 0 to 1024 [ 173.291415][ T6021] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,nobarrier,barrier,block_validity,nodioread_nolock,nodelalloc,nolazytime,init_itable=0x0000000000000006,,errors=continue. Quota mode: none. [ 173.621712][ T6021] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.611748][ T6038] loop0: detected capacity change from 0 to 256 [ 175.793990][ T6038] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 177.572903][ T6070] loop1: detected capacity change from 0 to 512 [ 177.839457][ T4201] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 178.089668][ T6072] overlayfs: failed to resolve './file1': -2 [ 178.285881][ T6070] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 178.300102][ T6070] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.569232][ T6087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'. [ 178.706857][ T6092] netlink: 60 bytes leftover after parsing attributes in process `syz.2.555'. [ 179.807757][ T6102] loop0: detected capacity change from 0 to 2048 [ 179.874341][ T6102] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.150445][ T6121] loop4: detected capacity change from 0 to 512 [ 180.169141][ T6123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.565'. [ 182.125177][ T6121] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 182.163652][ T6121] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.410954][ T6162] loop1: detected capacity change from 0 to 164 [ 183.198962][ T6166] loop3: detected capacity change from 0 to 512 [ 183.255237][ T6166] EXT4-fs (loop3): Ignoring removed nobh option [ 183.306951][ T6166] EXT4-fs (loop3): 1 truncate cleaned up [ 183.312666][ T6166] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,errors=remount-ro,nombcache,noload,nobh,debug_want_extra_isize=0x0000000000000008,. Quota mode: none. [ 183.368753][ T6166] EXT4-fs (loop3): shut down requested (0) [ 183.387245][ T26] audit: type=1800 audit(1791506988.374:69): pid=6173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.582" name="attr_allow_any_host" dev="configfs" ino=39228 res=0 errno=0 [ 183.426838][ T6173] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 183.458356][ T6162] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 183.473531][ T26] audit: type=1800 audit(1791506988.414:70): pid=6173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.582" name="addr_trtype" dev="configfs" ino=39229 res=0 errno=0 [ 183.513287][ T6176] netlink: 16 bytes leftover after parsing attributes in process `syz.4.583'. [ 183.567897][ T4228] nvmet: creating controller 2 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:63d021f2-da8d-4c5c-9275-552239d9726b. [ 183.627849][ T6173] nvme nvme1: creating 2 I/O queues. [ 185.077927][ T6173] nvme nvme1: new ctrl: "testsubsys" [ 185.175896][ T6188] loop4: detected capacity change from 0 to 512 [ 185.197903][ T6185] overlayfs: failed to clone upperpath [ 185.208301][ T6189] loop1: detected capacity change from 0 to 1024 [ 185.312474][ T6188] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 185.353591][ T6188] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.471530][ T26] audit: type=1800 audit(1791506990.454:71): pid=6189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.585" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 186.626039][ T2284] Bluetooth: hci2: command 0x0406 tx timeout [ 186.637406][ T2284] Bluetooth: hci1: command 0x0406 tx timeout [ 186.643501][ T2284] Bluetooth: hci0: command 0x0406 tx timeout [ 186.671006][ T1107] Bluetooth: hci3: command 0x0406 tx timeout [ 186.687608][ T6218] loop0: detected capacity change from 0 to 128 [ 186.704545][ T6219] loop4: detected capacity change from 0 to 2048 [ 186.841468][ T6218] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 186.926856][ T6219] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 186.932411][ T6225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.599'. [ 186.951363][ T6218] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 186.962581][ T6218] ext2 filesystem being mounted at /112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 186.994493][ T6219] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.145434][ T26] audit: type=1800 audit(1791506992.134:72): pid=6227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.595" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 189.831756][ T6266] netlink: 16 bytes leftover after parsing attributes in process `syz.1.610'. [ 190.749669][ T6267] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 190.801564][ T6267] pci 0000:00:07.0: [1af4:1005] type 00 class 0x00ff00 [ 190.836036][ T6267] pci 0000:00:07.0: reg 0x10: [io 0xc0a0-0xc0bf] [ 190.867818][ T6267] pci 0000:00:07.0: reg 0x14: [mem 0xfe802000-0xfe80203f] [ 191.027456][ T6267] pci 0000:00:07.0: BAR 1: assigned [mem 0xc0000000-0xc000003f] [ 191.050094][ T6267] pci 0000:00:07.0: BAR 0: assigned [io 0xc0a0-0xc0bf] [ 192.325902][ T4306] virtio-pci 0000:00:07.0: virtio_pci: leaving for legacy driver [ 193.147153][ T6275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.615'. [ 193.363124][ T6273] loop1: detected capacity change from 0 to 4096 Read from remote host us-central1-ssh-serialport.googleapis.com: Connection reset by peer client_loop: send disconnect: Broken pipe