last executing test programs: 7m6.24141667s ago: executing program 2 (id=151): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$vbi(0x0, 0x1, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x800000000000, 0x0, 0x0, 0x0, 0x0) 7m5.045320824s ago: executing program 2 (id=156): socket$inet6_tcp(0xa, 0x1, 0x0) creat(0x0, 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x18b}, 0x0) r0 = getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, &(0x7f0000000100)) 7m2.670141081s ago: executing program 2 (id=158): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000200)=ANY=[], 0x12, 0x9ef, &(0x7f0000004cc0)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="16000000020000001d"], 0x0) 7m0.964247256s ago: executing program 2 (id=161): socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3800106, &(0x7f0000000600)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@resgid}, {@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0x6}}, {@data_err_ignore}]}, 0x6, 0x444, &(0x7f0000000780)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000140)=ANY=[], 0x1, 0x5e7, &(0x7f0000000680)="$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") getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f000000c1c0)={0x2020}, 0x2020) 6m59.5957766s ago: executing program 2 (id=165): close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5, 0x0, 0x0, @void, @value}, 0x10) close(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) 6m56.45747516s ago: executing program 2 (id=175): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) syz_usb_connect(0x5, 0xfffffffffffffd60, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/67, 0x0, 0x166676000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x300}]}}, &(0x7f0000000a40)=""/174, 0x32, 0xae, 0x1, 0x0, 0x0, @void, @value}, 0x20) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000500)=""/58, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1ff) unshare(0x2040400) 6m54.825970535s ago: executing program 32 (id=175): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) syz_usb_connect(0x5, 0xfffffffffffffd60, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/67, 0x0, 0x166676000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x300}]}}, &(0x7f0000000a40)=""/174, 0x32, 0xae, 0x1, 0x0, 0x0, @void, @value}, 0x20) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000500)=""/58, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1ff) unshare(0x2040400) 6m24.711644585s ago: executing program 4 (id=242): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./bus\x00', 0x200800, &(0x7f0000000000)={[], [{@flag='lazytime'}]}, 0x4, 0x9606, &(0x7f0000012cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x71e5b314, 0x40000, 0x0, 0x80}) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0xfea7) r5 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) sendfile(r5, r6, 0x0, 0x1000000201005) copy_file_range(r3, 0x0, r2, 0x0, 0xffffffffa003e45c, 0x700000000000000) 6m21.441248325s ago: executing program 4 (id=250): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x22100, 0x0) 6m17.816048436s ago: executing program 4 (id=257): r0 = socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) bind$packet(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001439) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) 6m4.488559056s ago: executing program 4 (id=281): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f00000004c0)={[{@fat=@flush}, {@dots}, {@dots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@fat=@gid}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@discard}, {@fat=@nfs}, {@dots}, {@fat=@debug}, {@fat=@errors_continue}, {@dots}, {@nodots}, {@fat=@quiet}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") mkdirat(0xffffffffffffff9c, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed2006, &(0x7f0000000340)={[{@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@block_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0xee, 0x456, &(0x7f00000004c0)="$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") syz_usb_connect(0x3, 0x94, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b924b00821046c023ec3010203010902"], 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open(0x0, 0x10b942, 0x0) 5m59.400961102s ago: executing program 4 (id=293): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_rxnfc={0x1, 0x0, 0x0, {0x0, @ah_ip6_spec={@loopback, @loopback}, {}, @udp_ip4_spec={@rand_addr, @private}, {0x0, @dev}}}}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 5m57.733032977s ago: executing program 4 (id=295): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4, 0xed, 0x3, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x23894) 5m57.166810569s ago: executing program 33 (id=295): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4, 0xed, 0x3, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x23894) 3m26.142347564s ago: executing program 5 (id=621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, 0x0) utimensat(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x100) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='affs\x00', 0x8090, 0x0) 3m24.779681258s ago: executing program 5 (id=625): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000003380)) r2 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 3m21.371727039s ago: executing program 5 (id=635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) chdir(&(0x7f0000000080)='./file0\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) 3m19.719141704s ago: executing program 5 (id=639): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000440)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x2102, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0xc, 0x0, &(0x7f0000000b80)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000048c0)={0x2020}, 0x2020) 3m18.440902388s ago: executing program 5 (id=641): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340), 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, 0x0) 3m18.090797269s ago: executing program 5 (id=643): bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x4001, &(0x7f0000000000)=0x3, 0x2, 0x0) mbind(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x4001, &(0x7f0000000040)=0x1, 0xbab, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x41045508, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x1000407, &(0x7f0000000040)={[{@abort}, {@norecovery}, {@orlov}, {@nomblk_io_submit}]}, 0x4, 0x5cd, &(0x7f0000001400)="$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") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000240), 0x2, 0x1) getdents(r0, 0x0, 0x0) msgget(0x3, 0x0) getdents(r0, 0xfffffffffffffffd, 0x58) 3m2.728283165s ago: executing program 34 (id=643): bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x4001, &(0x7f0000000000)=0x3, 0x2, 0x0) mbind(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x4001, &(0x7f0000000040)=0x1, 0xbab, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x41045508, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x1000407, &(0x7f0000000040)={[{@abort}, {@norecovery}, {@orlov}, {@nomblk_io_submit}]}, 0x4, 0x5cd, &(0x7f0000001400)="$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") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000240), 0x2, 0x1) getdents(r0, 0x0, 0x0) msgget(0x3, 0x0) getdents(r0, 0xfffffffffffffffd, 0x58) 34.970111414s ago: executing program 7 (id=959): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200c00, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa73, &(0x7f0000003cc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000340)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kcmp(r0, r0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000180)={0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}) 32.266488109s ago: executing program 7 (id=963): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040efbff2820"], 0x7) r0 = syz_open_dev$sndpcmc(0x0, 0xffff, 0xc002) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) r1 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_emit_vhci(0x0, 0x0) ioctl$EVIOCGMASK(r2, 0x5b01, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0xc06c4124, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x0) fcntl$dupfd(r3, 0x0, r3) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 29.138763816s ago: executing program 7 (id=972): syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x1400) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b042200", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006272696467650000"], 0x4c}}, 0x0) 25.493735817s ago: executing program 7 (id=978): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000340)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) semop(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x0, 0x0, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x7c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x8) 24.749805771s ago: executing program 7 (id=981): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 22.143056486s ago: executing program 7 (id=984): socket(0x1e, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) 16.200554289s ago: executing program 1 (id=995): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x1}, 0xe) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x800, 0x2) ppoll(&(0x7f00000000c0)=[{r2, 0x1007}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) 11.230571507s ago: executing program 1 (id=1002): socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") llistxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="010000000700000061220000020000000000", @ANYRES32], 0x50) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x50483, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @rand_addr=0x64010100}}}], 0x20}}], 0x1, 0x40) 10.861581829s ago: executing program 1 (id=1003): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_MM_MAP(0x59616d61, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) io_uring_setup(0x17ba, &(0x7f00000002c0)={0x0, 0x0, 0x10}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)=""/233, 0xe9}], 0x1}}], 0x1, 0x0, 0x0) 9.735067266s ago: executing program 1 (id=1004): r0 = socket$inet(0xa, 0x1, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x24) listen(r0, 0x8) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) listen(r3, 0x100) listen(r2, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x1) r5 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 8.456367733s ago: executing program 0 (id=1007): openat$rtc(0xffffffffffffff9c, 0x0, 0x121002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x700000000000000) 8.371125413s ago: executing program 6 (id=1008): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x7) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r2, 0x100) listen(r1, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x1) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r5, 0x7) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) 8.268105114s ago: executing program 1 (id=1009): openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0xd) syz_clone(0x0, 0x0, 0x2c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x40000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x7, 0x12) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x64) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) 7.24011349s ago: executing program 0 (id=1010): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 6.880447442s ago: executing program 35 (id=984): socket(0x1e, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) 5.888665077s ago: executing program 3 (id=1012): ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000780)={&(0x7f0000000580), 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x34, 0x6, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000400), 0x0, 0x4008001) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, &(0x7f00000007c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={0x0}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x0) 5.887041537s ago: executing program 0 (id=1013): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x2, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/187], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0xffffffffffffffff, 0xffffffffffffff91, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000000)=0x9, 0x4) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, r5, 0xc8036ab6d6cbef07}, 0x14}}, 0x0) 5.886501137s ago: executing program 6 (id=1014): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001322564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r4, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="d2023300802b0001080211000000080211"], 0x2f0}}, 0x0) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000100)='./file0\x00', 0x2004400, &(0x7f0000001140)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYBLOB="a85f0dc3446ae0c36ba4848c770920cd9addace5c10dee3a96f810395203ae3bd777155e0b6764a2fd6da6853696460e4dc9849661ef1979cffa16b5bf59dabf336f10c3c559e5e6957f06f8cc8dc9d87dce1e2fe00f1a9e839df7923f50ee737985bd9b461e751d8f2be497d8651d589f890f61b87b83f3c7ad3ba191fa8e9a0ea1b14157305d0891f22ea0bbafcc5044e7177fcb08366d582b977b1847305408f72d19577993c4f746315483175fd218fe2194c2e6c97f561184a4f7c739d2ae93ba3016354f0d2ed26e6b810ebbbd0d1f93e7251bd3b5ed60ea3c840a2bbe7fc0", @ANYRES32], 0x1, 0xa1b, &(0x7f0000001540)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xfe0) truncate(&(0x7f00000000c0)='./file1\x00', 0x2) truncate(&(0x7f00000000c0)='./file1\x00', 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3e6}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) r6 = socket$packet(0x11, 0x3, 0x300) recvmsg(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000000) 5.778333248s ago: executing program 1 (id=1015): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f00000003c0)=ANY=[]) 5.728520868s ago: executing program 3 (id=1016): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 5.43168754s ago: executing program 0 (id=1017): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) open(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) shutdown(r4, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 5.246414661s ago: executing program 6 (id=1018): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000000)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x41, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 4.077042707s ago: executing program 3 (id=1019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x4f63, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r3, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f00000003c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd3f503f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32ccd508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f71105c4a42e9b979fcee1f628d1cec3462830606bb612bfed912c1cdc907bb91a2e86de2ad5", @ANYBLOB=',session=0000\x00000000R\x00\x00\x00\x00\x00\x00\x005,\x00'], 0x12, 0xc38, &(0x7f0000001080)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 4.075613908s ago: executing program 6 (id=1020): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/37, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000140)={0x7, 0x0, 0xb}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.493479306s ago: executing program 3 (id=1021): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027"], 0x6c}}, 0x840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') 2.492102446s ago: executing program 0 (id=1030): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r1 = fanotify_init(0x81, 0x0) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) read$FUSE(r1, 0x0, 0x0) 2.117442939s ago: executing program 6 (id=1022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) lseek(r3, 0x38, 0x1) 2.049456649s ago: executing program 3 (id=1023): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x25, &(0x7f0000000300)=ANY=[@ANYRES8=0x0, @ANYRES8=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000005, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) signalfd4(0xffffffffffffffff, &(0x7f0000000380), 0x8, 0x80000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/424]}, 0x220) 500.877498ms ago: executing program 6 (id=1024): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a404ac, &(0x7f0000000600)=ANY=[@ANYBLOB="ba618c14e6c7e698de3fb8b765b993fa49575985fb77bf8cbe11f3e10fe145c3161212e5b9a65501d007df1337c25665e8404c1dc11c53041207bea7fd891761869c2d7d6a7a06c71bfcfe33d41cab42b82ecd0a1fd7f713b1fc70fee63b712bbefbb0a96138503f0163651b0512fa7aa1c1df2df969aa400e0f1901ad03d5cb2eaa2e2fd9500641a214a4ff49e005d1eeb61c2893e933bb23f2568bb02382c787f0c6642de45d21683e0bcf71115878d6e9a489bf815b4133e3d156bdd935a75e", @ANYRES32=0x0, @ANYRES64, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES64], 0xfe, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(0x0) 499.953917ms ago: executing program 3 (id=1034): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000015000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0xfffffffffffffd1d}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000ffff0f000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000001f0000000000000071100a00000000002683a69bcfd67095d0770b69a5e69d70e368152023cdf441383e5181957e33888c2bb01b0adc359816144d9113707bf87b657f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r1}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r2, &(0x7f0000000980), 0x12) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xdd, 0xbd, 0x73, 0x10, 0x582, 0x7d, 0xa385, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x97, 0x69, 0x58}}]}}]}}, 0x0) 0s ago: executing program 0 (id=1025): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x7) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r2, 0x100) listen(r1, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x1) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r5, 0x7) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) kernel console output (not intermixed with test programs): unknown main item tag 0x0 [ 145.034890][ T26] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 145.042461][ T26] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 145.051040][ T26] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 145.058672][ T26] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 145.066188][ T26] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 145.086463][ T26] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 145.094047][ T26] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 145.101646][ T26] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 145.109159][ T26] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 145.124690][ T26] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 145.144212][ T26] hid-generic 0000:0000:0003.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 145.356021][ T4969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.171'. [ 145.375235][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 145.725329][ T4976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.173'. [ 146.007342][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 146.518106][ T4472] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 146.978723][ T4530] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 147.858857][ T4475] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 147.894946][ T4345] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.173900][ T4345] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.186383][ T4530] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 148.466032][ T4345] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.487905][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 148.503308][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 148.522205][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 148.531002][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 148.539743][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 148.547103][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 148.572708][ T5010] device ipvlan2 entered promiscuous mode [ 148.580992][ T5010] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 148.588843][ T5010] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 148.636849][ T5011] loop3: detected capacity change from 0 to 8 [ 148.665544][ T5011] squashfs: Unknown parameter '' [ 148.734721][ T4345] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.038038][ T4581] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 149.239897][ T5025] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 149.267580][ T5025] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 149.399801][ T4475] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 150.239589][ T4578] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 150.275423][ T5006] chnl_net:caif_netlink_parms(): no params data found [ 150.567488][ T4266] Bluetooth: hci3: command 0x0409 tx timeout [ 150.746290][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 152.526722][ T5033] syz.1.188 (5033): drop_caches: 2 [ 152.647520][ T4266] Bluetooth: hci3: command 0x041b tx timeout [ 152.749926][ T4530] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 152.802944][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 152.874852][ T5062] loop1: detected capacity change from 0 to 1024 [ 152.895758][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.913743][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.087632][ T4578] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 153.337307][ T5062] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 153.489978][ T5062] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 153.589505][ T5060] netlink: 'syz.0.193': attribute type 10 has an invalid length. [ 153.763681][ T5060] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.927297][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 154.084571][ T4581] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 154.110180][ T5060] bond0: (slave team0): Enslaving as an active interface with an up link [ 154.224260][ T5006] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.248403][ T5006] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.289389][ T5006] device bridge_slave_0 entered promiscuous mode [ 154.339342][ T5006] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.346502][ T5006] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.441926][ T5006] device bridge_slave_1 entered promiscuous mode [ 154.470107][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 154.537623][ T56] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 154.727514][ T4266] Bluetooth: hci3: command 0x040f tx timeout [ 156.808595][ T4266] Bluetooth: hci3: command 0x0419 tx timeout [ 157.009571][ T4307] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 157.319814][ T5006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.422045][ T5006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.487724][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 157.848173][ T5006] team0: Port device team_slave_0 added [ 157.912257][ T5006] team0: Port device team_slave_1 added [ 158.157461][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 158.749444][ T4499] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 158.779796][ T5006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.790196][ T5006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.927336][ T5006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.016828][ T5006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.059469][ T5006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.146828][ T5116] kvm: emulating exchange as write [ 159.222140][ T5006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.481731][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 159.500021][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.543146][ T4307] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 159.543251][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.887310][ T4307] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 160.417529][ T4295] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 160.427430][ T5124] netlink: 'syz.4.207': attribute type 10 has an invalid length. [ 160.490589][ T5124] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.576511][ T5124] device team0 entered promiscuous mode [ 160.589260][ T5124] device team_slave_0 entered promiscuous mode [ 160.604390][ T5124] device team_slave_1 entered promiscuous mode [ 160.626769][ T5124] bond0: (slave team0): Enslaving as an active interface with an up link [ 160.714186][ T4345] device hsr_slave_0 left promiscuous mode [ 160.748319][ T56] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 160.769160][ T4345] device hsr_slave_1 left promiscuous mode [ 160.924335][ T4345] device veth1_macvtap left promiscuous mode [ 160.950683][ T4345] device veth0_macvtap left promiscuous mode [ 160.960602][ T4345] device veth1_vlan left promiscuous mode [ 160.980862][ T4345] device veth0_vlan left promiscuous mode [ 161.207474][ T14] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 161.818206][ T4475] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 162.430615][ T4581] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 164.198828][ T4581] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 164.927496][ T4472] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 165.947637][ T56] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 166.554919][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 166.745170][ T5176] loop3: detected capacity change from 0 to 64 [ 167.238436][ T4581] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 167.708425][ T4303] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 168.471733][ T4345] bond0 (unregistering): (slave team0): Releasing backup interface [ 168.824671][ T56] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 168.869395][ T4345] bond0 (unregistering): Released all slaves [ 169.014793][ T5167] device ipvlan2 entered promiscuous mode [ 169.077029][ T5006] device hsr_slave_0 entered promiscuous mode [ 169.098108][ T5006] device hsr_slave_1 entered promiscuous mode [ 169.267327][ T4499] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 169.927334][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 170.294456][ T5192] loop3: detected capacity change from 0 to 4096 [ 170.388650][ T4472] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 170.444030][ T5207] loop1: detected capacity change from 0 to 2048 [ 170.545470][ T5006] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 170.553618][ T5207] loop1: p3 < > p4 < > [ 170.558121][ T5207] loop1: partition table partially beyond EOD, truncated [ 170.631533][ T5207] loop1: p3 start 4284289 is beyond EOD, truncated [ 170.648358][ T5006] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 170.693839][ T5006] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 170.750134][ T3623] loop1: p3 < > p4 < > [ 170.754366][ T3623] loop1: partition table partially beyond EOD, truncated [ 170.791250][ T5006] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 170.852108][ T3623] loop1: p3 start 4284289 is beyond EOD, truncated [ 170.876087][ T4307] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 171.060772][ T4330] udevd[4330]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 171.092903][ T5192] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 171.120516][ T5199] syz.4.224 (5199): drop_caches: 2 [ 171.264704][ T5006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.286740][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.296793][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.377257][ T5006] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.403601][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.595004][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.608056][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.615252][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.632188][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.739685][ T5192] ntfs3: loop3: failed to replay log file. Can't mount rw! [ 172.758479][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.822399][ T4932] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 172.961531][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.968862][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.034171][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.712182][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.738029][ T4307] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 174.388501][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.461359][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.481505][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.498197][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.163061][ T4307] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 175.784117][ T5006] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.800114][ T5006] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.812717][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.823114][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.833940][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.848345][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.858163][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.867265][ T4581] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 175.929538][ T5258] ip6t_rpfilter: unknown options [ 176.705361][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.734564][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.976187][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 177.184785][ T5273] loop3: detected capacity change from 0 to 16 [ 177.249677][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 177.310206][ T5273] erofs: (device loop3): mounted with root inode @ nid 36. [ 177.360715][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 177.445726][ T5273] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 177.563421][ T5273] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -29 in[62, 4034] out[1851] [ 177.662559][ T5273] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 177.726583][ T5282] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 177.794835][ T5282] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -29 in[62, 4034] out[1851] [ 177.836418][ T5006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.894696][ T5286] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 177.937920][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.945414][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.041363][ T5282] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 178.084596][ T5286] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -29 in[62, 4034] out[1851] [ 178.128059][ T5286] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 178.470371][ T4475] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 178.815372][ T4307] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 179.547558][ T5307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.247'. [ 179.590397][ T5310] netlink: 'syz.0.247': attribute type 4 has an invalid length. [ 179.645826][ T5310] netlink: 17 bytes leftover after parsing attributes in process `syz.0.247'. [ 179.703815][ T5312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.247'. [ 179.897777][ T4307] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 179.913239][ T5278] loop4: detected capacity change from 0 to 32768 [ 180.028045][ T4475] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 180.167104][ T5278] XFS (loop4): Mounting V5 Filesystem [ 180.216678][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 180.232544][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 180.293059][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 180.316392][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.342985][ T5278] XFS (loop4): Ending clean mount [ 180.353931][ T5006] device veth0_vlan entered promiscuous mode [ 180.385411][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.394718][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.451804][ T5006] device veth1_vlan entered promiscuous mode [ 180.467574][ T4258] XFS (loop4): Unmounting Filesystem [ 180.560932][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 180.619073][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 180.706704][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 180.716985][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.730107][ T5006] device veth0_macvtap entered promiscuous mode [ 180.766991][ T5006] device veth1_macvtap entered promiscuous mode [ 180.928498][ T5006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.985120][ T5006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.022628][ T5006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.048263][ T4307] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 181.085895][ T5006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.167265][ T5006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.194860][ T4581] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 181.223205][ T5006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.295359][ T5006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.323986][ T5006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.388310][ T5006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.473989][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 181.482636][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.491176][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.502526][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.529885][ T5006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.561758][ T5006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.586110][ T5006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.622125][ T5006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.662859][ T5006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.703400][ T5006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.746967][ T5006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.794689][ T5006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.869062][ T5006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.079934][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 182.111758][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 182.133336][ T5006] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.157967][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 183.132624][ T5006] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.149511][ T5006] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.167747][ T5006] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.229305][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 183.392958][ T4581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.413660][ T4581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.503540][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 183.526044][ T4475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.552048][ T4475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.593416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 184.023235][ T5371] device syzkaller0 entered promiscuous mode [ 184.260320][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 185.637951][ T4581] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 186.570805][ T5387] netlink: 'syz.4.257': attribute type 12 has an invalid length. [ 186.637844][ T4932] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 186.749466][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 187.637371][ T5415] ip6t_rpfilter: unknown options [ 189.006184][ T4581] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 189.010471][ T4499] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 190.470372][ T5429] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 190.668893][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 190.679811][ T4581] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 192.869981][ T4499] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 192.899773][ T4581] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 194.007324][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 194.007355][ T27] audit: type=1326 audit(1733933273.874:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5444 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019f57ff19 code=0x7ffc0000 [ 194.113916][ T27] audit: type=1326 audit(1733933273.874:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5444 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019f57ff19 code=0x7ffc0000 [ 194.145964][ T27] audit: type=1326 audit(1733933273.874:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5444 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f019f57ff19 code=0x7ffc0000 [ 194.191211][ T27] audit: type=1326 audit(1733933273.874:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5444 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019f57ff19 code=0x7ffc0000 [ 194.260437][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.266862][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.306631][ T27] audit: type=1326 audit(1733933273.874:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5444 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019f57ff19 code=0x7ffc0000 [ 194.337994][ T27] audit: type=1326 audit(1733933273.874:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5444 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f019f57ff19 code=0x7ffc0000 [ 194.944496][ T27] audit: type=1326 audit(1733933273.874:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5444 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019f57ff19 code=0x7ffc0000 [ 195.042021][ T27] audit: type=1326 audit(1733933273.874:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5444 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019f57ff19 code=0x7ffc0000 [ 195.076412][ T27] audit: type=1326 audit(1733933273.874:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5444 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f019f57ff19 code=0x7ffc0000 [ 195.104429][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 195.134934][ T27] audit: type=1326 audit(1733933273.874:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5444 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019f57ff19 code=0x7ffc0000 [ 195.210319][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 196.228772][ T4581] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 196.327563][ T4265] Bluetooth: hci1: command 0x0406 tx timeout [ 196.333704][ T4265] Bluetooth: hci4: command 0x0406 tx timeout [ 196.340070][ T4266] Bluetooth: hci0: command 0x0406 tx timeout [ 196.346866][ T4266] Bluetooth: hci2: command 0x0406 tx timeout [ 196.356407][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 196.577378][ T126] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 196.727387][ T126] usb 6-1: device descriptor read/64, error -71 [ 197.012647][ T126] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 197.177295][ T126] usb 6-1: device descriptor read/64, error -71 [ 197.309086][ T126] usb usb6-port1: attempt power cycle [ 197.350081][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 197.498534][ T4530] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 197.512467][ T5481] loop4: detected capacity change from 0 to 256 [ 197.797354][ T126] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 197.837929][ T126] usb 6-1: device descriptor read/8, error -71 [ 197.987392][ T4295] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 198.115423][ T5496] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 198.197766][ T4295] usb 5-1: Using ep0 maxpacket: 8 [ 198.213051][ T4295] usb 5-1: config 0 has no interfaces? [ 198.317640][ T126] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 198.439834][ T126] usb 6-1: device descriptor read/8, error -71 [ 198.507754][ T4472] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 198.678436][ T4475] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 198.727487][ T126] usb usb6-port1: unable to enumerate USB device [ 198.942832][ T4295] usb 5-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=c3.3e [ 198.990666][ T4295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.027364][ T4295] usb 5-1: Product: syz [ 199.062326][ T4295] usb 5-1: Manufacturer: syz [ 199.066987][ T4295] usb 5-1: SerialNumber: syz [ 199.150111][ T4295] usb 5-1: config 0 descriptor?? [ 199.388497][ T5481] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000685) [ 199.697705][ T5510] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 200.932364][ T5481] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000685) [ 201.668041][ T4307] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 201.792801][ T4348] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 201.842776][ T4295] usb 5-1: USB disconnect, device number 2 [ 201.848917][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 202.393736][ T5519] sctp: failed to load transform for md5: -4 [ 202.393862][ T5520] sctp: failed to load transform for md5: -2 [ 202.466181][ T5529] sctp: failed to load transform for md5: -4 [ 202.494764][ T4258] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000685) [ 202.503095][ T5527] sctp: failed to load transform for md5: -4 [ 202.567282][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 202.599522][ T5523] sctp: failed to load transform for md5: -4 [ 202.616345][ T4258] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000685) [ 203.719092][ T33] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 203.938072][ T4472] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 204.336968][ T4932] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.586447][ T4932] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.766701][ T4932] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.854217][ T4345] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 204.915608][ T5569] IPVS: wrr: FWM 4 0x00000004 - no destination available [ 204.934084][ T5572] loop3: detected capacity change from 0 to 256 [ 205.959277][ T4932] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.097531][ T4345] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 208.109611][ T4475] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 208.227602][ T4345] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 209.366214][ T4266] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.379140][ T4264] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.392108][ T4264] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.406074][ T5611] loop1: detected capacity change from 0 to 256 [ 209.415871][ T4264] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.424926][ T4264] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 209.482377][ T5611] exfat: Deprecated parameter 'namecase' [ 209.530296][ T4264] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 209.775484][ T4331] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 210.618668][ T5611] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x9f38bf76, utbl_chksum : 0xe619d30d) [ 210.719533][ T4345] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 210.744340][ T4932] bond1: (slave ip6gretap1): Releasing active interface [ 211.504752][ T4265] Bluetooth: hci4: command 0x1003 tx timeout [ 211.514003][ T4331] usb 1-1: Using ep0 maxpacket: 32 [ 211.519926][ T48] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 211.640685][ T48] Bluetooth: hci5: command 0x0409 tx timeout [ 211.650866][ T4932] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 32:d0:44:e3:b5:16 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 211.683605][ T4932] bond1: (slave ip6gretap2): making interface the new active one [ 211.773227][ T4331] usb 1-1: device descriptor read/all, error -71 [ 211.804464][ T4932] bond1: (slave ip6gretap2): Releasing active interface [ 212.678011][ T4479] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 213.748503][ T48] Bluetooth: hci5: command 0x041b tx timeout [ 213.801281][ T4530] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 214.218906][ T5610] chnl_net:caif_netlink_parms(): no params data found [ 214.323088][ T4331] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 214.517197][ T4331] usb 1-1: Using ep0 maxpacket: 16 [ 214.524390][ T4331] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.561784][ T4331] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.571313][ T126] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 214.613689][ T4331] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.645162][ T4331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.665283][ T4331] usb 1-1: Product: syz [ 214.689121][ T4331] usb 1-1: Manufacturer: syz [ 214.713222][ T4331] usb 1-1: SerialNumber: syz [ 214.738809][ T126] usb 4-1: device descriptor read/64, error -71 [ 214.873699][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.884750][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.901699][ T5610] device bridge_slave_0 entered promiscuous mode [ 214.986950][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.007266][ T126] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 215.024916][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.037532][ T33] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 215.067349][ T5610] device bridge_slave_1 entered promiscuous mode [ 215.173721][ T126] usb 4-1: device descriptor read/64, error -71 [ 215.307579][ T126] usb usb4-port1: attempt power cycle [ 215.354617][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.441832][ T4932] device hsr_slave_0 left promiscuous mode [ 215.458719][ T4932] device hsr_slave_1 left promiscuous mode [ 215.488804][ T4932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.516143][ T4932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.711038][ T4932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.718863][ T4932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.728876][ T4932] device vlan2 left promiscuous mode [ 215.734333][ T4932] device bond0 left promiscuous mode [ 215.740071][ T126] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 215.967270][ T4266] Bluetooth: hci5: command 0x040f tx timeout [ 216.705501][ T126] usb 4-1: device descriptor read/8, error -71 [ 216.730704][ T5682] mmap: syz.1.318 (5682) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 216.743046][ T4932] device bond_slave_0 left promiscuous mode [ 216.756379][ T4932] device bond_slave_1 left promiscuous mode [ 216.797012][ T4932] device team0 left promiscuous mode [ 216.817284][ T4932] device team_slave_0 left promiscuous mode [ 216.850192][ T4932] device team_slave_1 left promiscuous mode [ 216.875449][ T26] usb 1-1: USB disconnect, device number 3 [ 216.903587][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 216.903604][ T27] audit: type=1804 audit(1733933296.804:71): pid=5686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.319" name="/newroot/15/file1" dev="fuse" ino=1 res=1 errno=0 [ 216.941583][ T4932] bridge0: port 3(vlan2) entered disabled state [ 216.993988][ T27] audit: type=1800 audit(1733933296.844:72): pid=5686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.319" name="/" dev="fuse" ino=1 res=0 errno=0 [ 217.014346][ T27] audit: type=1804 audit(1733933296.884:73): pid=5686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.319" name="/newroot/15/file1" dev="fuse" ino=1 res=1 errno=0 [ 217.014636][ T33] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 217.035723][ T27] audit: type=1804 audit(1733933296.894:74): pid=5686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.319" name="/newroot/15/file1" dev="fuse" ino=1 res=1 errno=0 [ 217.043269][ T126] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 217.080582][ T4932] device bridge_slave_1 left promiscuous mode [ 217.092411][ T4932] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.109740][ T126] usb 4-1: device descriptor read/8, error -71 [ 217.136279][ T4932] device bridge_slave_0 left promiscuous mode [ 217.151687][ T4932] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.185857][ T27] audit: type=1800 audit(1733933296.894:75): pid=5686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.319" name="/" dev="fuse" ino=1 res=0 errno=0 [ 217.247481][ T126] usb usb4-port1: unable to enumerate USB device [ 217.294340][ T4932] device veth1_macvtap left promiscuous mode [ 217.300527][ T4932] device veth0_macvtap left promiscuous mode [ 217.308634][ T4932] device veth1_vlan left promiscuous mode [ 217.314637][ T4932] device veth0_vlan left promiscuous mode [ 218.027339][ T48] Bluetooth: hci5: command 0x0419 tx timeout [ 218.310088][ T26] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 218.499633][ T26] usb 1-1: config 0 has an invalid interface number: 192 but max is 0 [ 218.512443][ T26] usb 1-1: config 0 has no interface number 0 [ 218.520228][ T26] usb 1-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8b.ad [ 219.637425][ T4472] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 219.677270][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.727984][ T26] usb 1-1: config 0 descriptor?? [ 219.954648][ T26] usb 1-1: string descriptor 0 read error: -71 [ 220.087735][ T4266] Bluetooth: hci5: command 0x0405 tx timeout [ 220.221980][ T26] snd-usb-audio: probe of 1-1:0.192 failed with error -2 [ 220.244676][ T4330] udevd[4330]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.192/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.270690][ T26] usb 1-1: USB disconnect, device number 4 [ 220.338769][ T4932] bond1 (unregistering): Released all slaves [ 220.819215][ T4307] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 222.339916][ T4530] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 222.859304][ T4932] team0 (unregistering): Port device team_slave_1 removed [ 223.076495][ T4932] team0 (unregistering): Port device team_slave_0 removed [ 223.256833][ T4932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.465118][ T4932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.499177][ T4479] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 224.994996][ T4932] bond0 (unregistering): (slave team0): Releasing backup interface [ 225.002780][ T4475] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 225.269996][ T4932] bond0 (unregistering): Released all slaves [ 225.425048][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.680623][ T5610] team0: Port device team_slave_0 added [ 225.715325][ T5610] team0: Port device team_slave_1 added [ 226.132743][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.140433][ T4307] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 226.245883][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.633912][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.751692][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.777360][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.004032][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.357599][ T4581] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 227.439605][ T5610] device hsr_slave_0 entered promiscuous mode [ 227.657742][ T5610] device hsr_slave_1 entered promiscuous mode [ 227.707490][ T5610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.746820][ T5610] Cannot create hsr debugfs directory [ 227.925928][ T5780] loop5: detected capacity change from 0 to 512 [ 228.317191][ T5780] EXT4-fs: Ignoring removed mblk_io_submit option [ 228.327386][ T5780] ext4: Unknown parameter 'subj_user' [ 228.469994][ T5610] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 228.499649][ T5610] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 228.548612][ T4472] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 228.576772][ T5610] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 228.635167][ T5610] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 228.807456][ T4329] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 229.017435][ T4329] usb 6-1: Using ep0 maxpacket: 8 [ 229.037057][ T4329] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 229.172497][ T4329] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.306571][ T4329] usb 6-1: config 0 has no interface number 0 [ 229.318608][ T4329] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 229.334896][ T4329] usb 6-1: New USB device found, idVendor=0421, idProduct=008f, bcdDevice=ba.de [ 229.346456][ T4329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.417347][ T4329] usb 6-1: config 0 descriptor?? [ 230.207506][ T4329] usb 6-1: bad CDC descriptors [ 230.215537][ T4329] usb 6-1: bad CDC descriptors [ 230.227380][ T4329] cdc_acm 6-1:0.1: Zero length descriptor references [ 230.244651][ T4329] cdc_acm: probe of 6-1:0.1 failed with error -22 [ 230.271812][ T4329] usb 6-1: USB disconnect, device number 6 [ 230.317578][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.379511][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.393736][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.448902][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.504324][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.526696][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.556936][ T4578] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.564303][ T4578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.843771][ T4479] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 230.857821][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.303120][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.340443][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.371942][ T4348] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.379163][ T4348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.433381][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 232.462749][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.489746][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.532899][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.574883][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 232.596214][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.255091][ T5610] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 234.322782][ T5610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.367803][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 234.376027][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 234.425552][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 234.448658][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 234.478077][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 234.518045][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 234.555985][ T5835] netlink: 24 bytes leftover after parsing attributes in process `syz.5.350'. [ 234.841204][ T4581] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 236.615664][ T5861] loop5: detected capacity change from 0 to 2048 [ 236.638704][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 236.646282][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 236.711774][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.744717][ T5864] netlink: 'syz.3.356': attribute type 10 has an invalid length. [ 236.855865][ T5861] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 236.974990][ T5864] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 237.157688][ T4578] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 238.136853][ T7] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 238.358988][ T7] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 238.387481][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 238.437226][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.478598][ T7] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 238.510927][ T4345] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 238.550066][ T7] usb 6-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 238.657582][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.684232][ T7] usb 6-1: config 0 descriptor?? [ 239.860439][ T7] usb 6-1: can't set config #0, error -71 [ 239.898717][ T4472] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 239.902973][ T7] usb 6-1: USB disconnect, device number 7 [ 239.997317][ T4472] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 240.045416][ T4472] EXT4-fs (loop5): This should not happen!! Data will be lost [ 240.045416][ T4472] [ 240.087489][ T4472] EXT4-fs (loop5): Total free blocks count 0 [ 240.110484][ T4472] EXT4-fs (loop5): Free/Dirty block details [ 240.150373][ T4472] EXT4-fs (loop5): free_blocks=66060288 [ 240.182536][ T4472] EXT4-fs (loop5): dirty_blocks=4032 [ 240.198472][ T4472] EXT4-fs (loop5): Block reservation details [ 240.204528][ T4472] EXT4-fs (loop5): i_reserved_data_blocks=252 [ 240.237795][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 240.277775][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.358823][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.410533][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.449919][ T5610] device veth0_vlan entered promiscuous mode [ 240.464203][ T4307] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1980 with error 28 [ 240.488231][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.524229][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 240.543403][ T4348] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 240.585621][ T5610] device veth1_vlan entered promiscuous mode [ 241.313046][ T5610] device veth0_macvtap entered promiscuous mode [ 241.376137][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 241.398697][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 241.438088][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 241.477956][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.498618][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 241.658537][ T5610] device veth1_macvtap entered promiscuous mode [ 241.677223][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.711539][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.778134][ T4581] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 241.925249][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.511472][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.547213][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.564980][ T5908] loop3: detected capacity change from 0 to 40427 [ 242.584549][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.651618][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.662690][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.663680][ T5908] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 242.674845][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.723145][ T5908] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 242.728330][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 242.768524][ T5908] F2FS-fs (loop3): invalid crc value [ 242.788793][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.818418][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.829555][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.849096][ T5908] F2FS-fs (loop3): Found nat_bits in checkpoint [ 242.865670][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.898543][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.917538][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.946560][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.976717][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.004116][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.047616][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.114045][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 243.173896][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.263524][ T5947] virtio-fs: tag <(null)> not found [ 243.359793][ T4472] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 243.524557][ T5610] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.813803][ T5610] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.864606][ T5610] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.917940][ T5610] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.333580][ T5962] loop3: detected capacity change from 0 to 64 [ 244.712513][ T4932] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 245.237067][ T4932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.267623][ T4932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.573744][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 246.585008][ T5974] loop1: detected capacity change from 0 to 8 [ 246.673157][ T4578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.712180][ T4578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.746287][ T5974] loop1: detected capacity change from 0 to 8 [ 246.806293][ T5974] Major/Minor mismatch, older Squashfs 3.0 filesystems are unsupported [ 246.836927][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 247.350868][ T4581] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 249.127372][ T5797] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 250.198892][ T4303] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 250.597912][ T6022] loop6: detected capacity change from 0 to 64 [ 250.659986][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.691221][ T4578] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 252.138276][ T6040] loop6: detected capacity change from 0 to 256 [ 254.617423][ T4581] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 255.692258][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.698677][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.509275][ T4472] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 260.738384][ T6113] tipc: Started in network mode [ 260.743545][ T6113] tipc: Node identity 4, cluster identity 4711 [ 260.759849][ T4475] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 260.787241][ T6113] tipc: Node number set to 4 [ 260.866587][ T6114] loop6: detected capacity change from 0 to 4096 [ 261.000804][ T6114] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 262.902112][ T6114] ntfs: (device loop6): parse_options(): NLS character set macgre not found. Using previous one utf8. [ 262.946302][ T6114] ntfs: (device loop6): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 262.986776][ T6114] ntfs: (device loop6): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 263.066427][ T6114] ntfs: volume version 3.1. [ 263.210168][ T6145] loop1: detected capacity change from 0 to 256 [ 263.368828][ T6145] exfat: Unknown parameter 'um0Pa000000000' [ 263.420192][ T4475] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 263.460045][ T4330] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 266.694497][ T6152] ntfs: (device loop6): map_mft_record(): Failed with error code 4. [ 266.703356][ T6152] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -4. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 266.903226][ T5610] ntfs: (device loop6): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 268.517829][ T4307] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 268.553202][ T4578] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.907377][ T4348] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 272.639239][ T4932] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 273.207259][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 275.959688][ T6228] loop6: detected capacity change from 0 to 16 [ 275.977356][ T4479] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 276.053031][ T6228] erofs: (device loop6): mounted with root inode @ nid 36. [ 276.111654][ T6228] vivid-003: ================= START STATUS ================= [ 276.157260][ T6228] vivid-003: Radio HW Seek Mode: Bounded [ 276.186492][ T6228] vivid-003: Radio Programmable HW Seek: false [ 276.250321][ T6228] vivid-003: RDS Rx I/O Mode: Block I/O [ 276.257760][ T6228] vivid-003: Generate RBDS Instead of RDS: false [ 276.264175][ T6228] vivid-003: RDS Reception: true [ 276.432053][ T6228] vivid-003: RDS Program Type: 0 inactive [ 276.570079][ T6228] vivid-003: RDS PS Name: inactive [ 276.693210][ T6228] vivid-003: RDS Radio Text: inactive [ 277.088108][ T6228] vivid-003: RDS Traffic Announcement: false inactive [ 277.095072][ T6228] vivid-003: RDS Traffic Program: false inactive [ 277.227887][ T6228] vivid-003: RDS Music: false inactive [ 277.263724][ T6228] vivid-003: ================== END STATUS ================== [ 277.710613][ T4475] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 278.451233][ T6241] loop3: detected capacity change from 0 to 1024 [ 278.488621][ T6241] EXT4-fs: Ignoring removed oldalloc option [ 279.667027][ T6241] EXT4-fs warning (device loop3): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop3. [ 280.185352][ T6268] loop1: detected capacity change from 0 to 512 [ 280.217830][ T6268] EXT4-fs (loop1): Test dummy encryption mode enabled [ 281.909539][ T4932] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 281.985011][ T6268] EXT4-fs error (device loop1): __ext4_fill_super:5400: inode #2: comm syz.1.429: casefold flag without casefold feature [ 282.003973][ T6268] EXT4-fs (loop1): get root inode failed [ 282.009832][ T6268] EXT4-fs (loop1): mount failed [ 283.180878][ T6281] kvm [6279]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x6d00000800 [ 283.260642][ T6281] kvm [6279]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x14500000800 [ 283.337984][ T6281] kvm [6279]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x14600000000 [ 283.368093][ T6281] kvm [6279]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x1cd00000800 [ 283.455347][ T6281] kvm [6279]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x2e500000800 [ 283.529725][ T4479] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 283.568699][ T6300] loop5: detected capacity change from 0 to 4096 [ 283.625821][ T6300] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 284.330286][ T6300] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 285.070096][ T6302] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 286.743102][ T4932] ntfs3: loop5: ntfs3_write_inode r=5 failed, -22. [ 286.892690][ T5006] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 289.061723][ T4581] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 289.080606][ T6344] vivid-001: ================= START STATUS ================= [ 289.080691][ T6344] vivid-001: Radio HW Seek Mode: Bounded [ 289.080748][ T6344] vivid-001: Radio Programmable HW Seek: false [ 289.080775][ T6344] vivid-001: RDS Rx I/O Mode: Block I/O [ 289.080801][ T6344] vivid-001: Generate RBDS Instead of RDS: false [ 289.080836][ T6344] vivid-001: RDS Reception: true [ 289.080862][ T6344] vivid-001: RDS Program Type: 0 inactive [ 289.080895][ T6344] vivid-001: RDS PS Name: inactive [ 289.080926][ T6344] vivid-001: RDS Radio Text: inactive [ 289.080957][ T6344] vivid-001: RDS Traffic Announcement: false inactive [ 289.080990][ T6344] vivid-001: RDS Traffic Program: false inactive [ 289.081021][ T6344] vivid-001: RDS Music: false inactive [ 289.081052][ T6344] vivid-001: ================== END STATUS ================== [ 290.091866][ T6372] device vlan2 entered promiscuous mode [ 290.199267][ T6372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.459'. [ 290.290990][ T4303] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 291.901201][ T4348] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 291.939417][ T6372] device hsr_slave_1 left promiscuous mode [ 291.990344][ T6399] netlink: 36 bytes leftover after parsing attributes in process `syz.6.463'. [ 292.364900][ T6399] loop6: detected capacity change from 0 to 8192 [ 292.847815][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.6.467'. [ 293.027360][ T4932] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 293.164237][ T6426] loop1: detected capacity change from 0 to 512 [ 293.362090][ T6426] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 293.397735][ T6426] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 293.723518][ T6440] EXT4-fs (loop1): shut down requested (2) [ 294.602235][ T56] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 294.906621][ T6420] loop3: detected capacity change from 0 to 32768 [ 294.929091][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 295.661671][ T6420] XFS (loop3): Mounting V5 Filesystem [ 295.779346][ T6467] loop6: detected capacity change from 0 to 64 [ 295.889310][ T6420] XFS (loop3): Ending clean mount [ 295.978358][ T4581] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 297.418041][ T4253] XFS (loop3): Unmounting Filesystem [ 298.528454][ T6302] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 300.118005][ T6503] loop6: detected capacity change from 0 to 1024 [ 300.490243][ T6503] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:477: comm syz.6.484: Invalid block bitmap block 0 in block_group 0 [ 300.554166][ T6503] Quota error (device loop6): write_blk: dquota write failed [ 300.608345][ T6503] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 300.624665][ T6509] loop3: detected capacity change from 0 to 1024 [ 300.668109][ T4348] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 300.693748][ T6503] EXT4-fs error (device loop6): ext4_acquire_dquot:6801: comm syz.6.484: Failed to acquire dquot type 0 [ 300.760747][ T6503] EXT4-fs error (device loop6): ext4_free_blocks:6210: comm syz.6.484: Freeing blocks not in datazone - block = 0, count = 4096 [ 300.866326][ T6503] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.484: Invalid inode bitmap blk 0 in block_group 0 [ 300.883472][ T4932] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-8 [ 301.008942][ T6512] hfsplus: request for non-existent node 33423360 in B*Tree [ 301.017041][ T6503] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem [ 301.059778][ T6503] EXT4-fs (loop6): 1 orphan inode deleted [ 301.065610][ T6503] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 301.078200][ T4932] EXT4-fs error (device loop6): ext4_release_dquot:6824: comm kworker/u4:17: Failed to release dquot type 0 [ 301.091368][ T6512] hfsplus: request for non-existent node 33423360 in B*Tree [ 301.181374][ T6509] hfsplus: request for non-existent node 33423360 in B*Tree [ 301.216595][ T6509] hfsplus: request for non-existent node 33423360 in B*Tree [ 301.279698][ T6516] hfsplus: request for non-existent node 33423360 in B*Tree [ 301.298770][ T6516] hfsplus: request for non-existent node 33423360 in B*Tree [ 301.324100][ T5610] EXT4-fs (loop6): unmounting filesystem. [ 301.335788][ T6512] hfsplus: request for non-existent node 33423360 in B*Tree [ 301.383789][ T6512] hfsplus: request for non-existent node 33423360 in B*Tree [ 301.425157][ T6509] hfsplus: request for non-existent node 33423360 in B*Tree [ 301.458370][ T6509] hfsplus: request for non-existent node 33423360 in B*Tree [ 301.542587][ T6516] hfsplus: request for non-existent node 33423360 in B*Tree [ 301.560629][ T6516] hfsplus: request for non-existent node 33423360 in B*Tree [ 301.589525][ T6512] hfsplus: request for non-existent node 33423360 in B*Tree [ 301.617195][ T6512] hfsplus: request for non-existent node 33423360 in B*Tree [ 301.651464][ T6509] hfsplus: request for non-existent node 33423360 in B*Tree [ 301.665319][ T6509] hfsplus: request for non-existent node 33423360 in B*Tree [ 301.695301][ T6520] hfsplus: request for non-existent node 33423360 in B*Tree [ 301.722849][ T6520] hfsplus: request for non-existent node 33423360 in B*Tree [ 301.798135][ T4348] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 302.942170][ T4932] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 304.208943][ T6579] loop3: detected capacity change from 0 to 256 [ 304.309151][ T4335] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 304.668760][ T4932] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 305.913117][ T6612] loop3: detected capacity change from 0 to 1024 [ 305.948356][ T4348] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 306.143761][ T27] audit: type=1800 audit(1733933386.044:76): pid=6612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.503" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 306.238088][ T6612] hfsplus: request for non-existent node 16777216 in B*Tree [ 306.254938][ T6612] hfsplus: request for non-existent node 16777216 in B*Tree [ 306.269333][ T6620] hfsplus: request for non-existent node 16777216 in B*Tree [ 306.306191][ T6620] hfsplus: request for non-existent node 16777216 in B*Tree [ 306.330691][ T6612] hfsplus: request for non-existent node 16777216 in B*Tree [ 306.356910][ T6612] hfsplus: request for non-existent node 16777216 in B*Tree [ 306.550908][ T11] hfsplus: request for non-existent node 16777216 in B*Tree [ 306.571134][ T11] hfsplus: request for non-existent node 16777216 in B*Tree [ 306.655173][ T6629] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 308.199772][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 308.541429][ T6649] loop6: detected capacity change from 0 to 1764 [ 308.651694][ T6649] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 309.357378][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 311.145540][ T4499] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 311.156878][ T6671] [U] +P]TEH+;ےE=O_K؇ [ 311.584800][ T6697] loop3: detected capacity change from 0 to 512 [ 311.594445][ T6697] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 311.630336][ T6697] EXT4-fs (loop3): 1 truncate cleaned up [ 311.636613][ T6697] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 312.655569][ T4253] EXT4-fs (loop3): unmounting filesystem. [ 312.725082][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 314.374330][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 315.573630][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 316.149751][ T4295] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 316.737521][ T6751] loop1: detected capacity change from 0 to 128 [ 316.885831][ T6754] loop3: detected capacity change from 0 to 1764 [ 316.934145][ T4335] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 316.979008][ T4295] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 316.997833][ T4295] usb 7-1: config 0 has no interface number 0 [ 317.004000][ T4295] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 317.046026][ T4295] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 317.087942][ T4295] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 317.108103][ T4295] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.140333][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.146748][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.158386][ T4295] usb 7-1: Product: syz [ 317.163522][ T4295] usb 7-1: Manufacturer: syz [ 317.169747][ T4295] usb 7-1: SerialNumber: syz [ 317.211069][ T4295] usb 7-1: config 0 descriptor?? [ 317.260218][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 317.503479][ T6738] loop6: detected capacity change from 0 to 512 [ 318.407560][ T4295] usbtouchscreen 7-1:0.214: Failed to read FW rev: -71 [ 318.435863][ T4295] usbtouchscreen: probe of 7-1:0.214 failed with error -71 [ 318.564079][ T4295] usb 7-1: USB disconnect, device number 2 [ 320.027605][ T4499] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 320.177337][ T4329] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 320.306251][ T6795] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 320.397324][ T4329] usb 7-1: Using ep0 maxpacket: 32 [ 320.406531][ T4329] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 320.434435][ T4329] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 320.465803][ T4329] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 320.478315][ T6803] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 320.674168][ T4329] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.684677][ T4329] usb 7-1: config 0 descriptor?? [ 320.691095][ T6786] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 320.700915][ T4329] hub 7-1:0.0: USB hub found [ 321.449549][ T4479] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 321.586228][ T4329] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 321.687270][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.547'. [ 321.927319][ T6823] Invalid ELF header len 1 [ 322.792993][ T4329] usbhid 7-1:0.0: can't add hid device: -71 [ 322.808013][ T4329] usbhid: probe of 7-1:0.0 failed with error -71 [ 322.866741][ T4329] usb 7-1: USB disconnect, device number 3 [ 323.032118][ T6844] netlink: 16 bytes leftover after parsing attributes in process `syz.5.552'. [ 323.164268][ T4932] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 323.554968][ T6840] loop3: detected capacity change from 0 to 1024 [ 323.854065][ T6844] loop5: detected capacity change from 0 to 4096 [ 323.907784][ T6844] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 325.587239][ T6844] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 325.647611][ T4932] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 327.444032][ T6844] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 329.014389][ T4530] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 329.104210][ T6898] loop5: detected capacity change from 0 to 512 [ 330.269910][ T6898] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #16: comm syz.5.562: corrupted inode contents [ 330.321531][ T6898] EXT4-fs error (device loop5): ext4_dirty_inode:6089: inode #16: comm syz.5.562: mark_inode_dirty error [ 330.334591][ T6898] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #16: comm syz.5.562: corrupted inode contents [ 330.357415][ T6898] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #16: comm syz.5.562: mark_inode_dirty error [ 330.504869][ T6898] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #16: comm syz.5.562: corrupted inode contents [ 330.571915][ T6921] loop3: detected capacity change from 0 to 512 [ 330.579124][ T6921] EXT4-fs: Ignoring removed i_version option [ 330.585173][ T6921] EXT4-fs: Ignoring removed mblk_io_submit option [ 330.591881][ T6921] ext4: Unknown parameter 'seclabel' [ 330.617421][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 330.625692][ T6898] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 330.651397][ T6898] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #16: comm syz.5.562: corrupted inode contents [ 330.929615][ T6898] EXT4-fs error (device loop5): ext4_truncate:4311: inode #16: comm syz.5.562: mark_inode_dirty error [ 331.431893][ T6926] loop1: detected capacity change from 0 to 128 [ 331.448723][ T6898] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 331.503145][ T6898] EXT4-fs (loop5): 1 truncate cleaned up [ 331.585277][ T6898] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 331.600667][ T4479] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 331.617020][ T6926] EXT4-fs (loop1): Test dummy encryption mode enabled [ 331.657292][ T6898] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.692649][ T4479] EXT4-fs error (device loop5): ext4_release_dquot:6824: comm kworker/u4:12: Failed to release dquot type 1 [ 331.786163][ T6926] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 331.828964][ T6926] ext4 filesystem being mounted at /131/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 332.647926][ T4932] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 333.536129][ T5006] EXT4-fs (loop5): unmounting filesystem. [ 334.008683][ T6926] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 334.047744][ T6931] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 334.074758][ T6931] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 334.085537][ T6931] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 334.116209][ T6931] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 334.147724][ T6931] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 334.167529][ T6931] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 334.209686][ T6931] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 334.242264][ T6931] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 334.265087][ T6931] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 334.290729][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 334.307431][ T6931] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 334.324553][ T6931] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 334.366294][ T6931] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 334.457799][ T6959] loop5: detected capacity change from 0 to 256 [ 334.489046][ T4347] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 334.514476][ T6959] exfat: Bad value for 'iocharset' [ 334.534595][ T6962] loop1: detected capacity change from 0 to 1024 [ 335.970075][ T27] audit: type=1800 audit(1733933415.874:77): pid=6962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.577" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 336.007186][ T48] Bluetooth: hci1: command 0x0c1a tx timeout [ 336.145176][ T6962] hfsplus: request for non-existent node 16777216 in B*Tree [ 336.167222][ T48] Bluetooth: hci2: command 0x0c1a tx timeout [ 336.247346][ T48] Bluetooth: hci3: command 0x0c1a tx timeout [ 336.267696][ T6962] hfsplus: request for non-existent node 16777216 in B*Tree [ 336.293957][ T6974] hfsplus: request for non-existent node 16777216 in B*Tree [ 336.321885][ T6974] hfsplus: request for non-existent node 16777216 in B*Tree [ 336.330066][ T48] Bluetooth: hci5: command 0x0c1a tx timeout [ 336.433675][ T6962] hfsplus: request for non-existent node 16777216 in B*Tree [ 336.469607][ T6962] hfsplus: request for non-existent node 16777216 in B*Tree [ 336.591986][ T4578] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 336.811509][ T4578] hfsplus: request for non-existent node 16777216 in B*Tree [ 336.819417][ T4578] hfsplus: request for non-existent node 16777216 in B*Tree [ 338.103045][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 338.247557][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 338.327333][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 338.457275][ T48] Bluetooth: hci5: command 0x0406 tx timeout [ 338.582287][ T4578] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 339.923754][ T7016] loop6: detected capacity change from 0 to 1764 [ 340.129825][ T4335] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 341.045299][ T4932] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 341.184278][ T7034] loop1: detected capacity change from 0 to 2048 [ 341.318321][ T7034] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 342.222099][ T27] audit: type=1800 audit(1733933422.124:78): pid=7047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.593" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 342.628993][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 342.637685][ T7051] sg_write: data in/out 2012/14 bytes for SCSI command 0x7-- guessing data in; [ 342.637685][ T7051] program syz.6.595 not setting count and/or reply_len properly [ 343.183622][ T6302] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 347.392366][ T4479] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 350.140336][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 350.157686][ T4329] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 350.551853][ T7120] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 0 [ 350.592056][ T7121] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 1 [ 350.597328][ T4329] usb 6-1: Using ep0 maxpacket: 8 [ 350.612190][ T7122] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 2 [ 350.633212][ T7123] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 3 [ 350.669919][ T4329] usb 6-1: config 1 has an invalid descriptor of length 106, skipping remainder of the config [ 350.701725][ T7124] loop6: detected capacity change from 0 to 1024 [ 350.718017][ T4329] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 350.786428][ T4329] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.57 [ 351.002395][ T4329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 351.011555][ T4329] usb 6-1: SerialNumber: syz [ 351.039495][ T7110] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 351.050111][ T4329] cdc_ether 6-1:1.0: skipping garbage [ 351.055565][ T4329] usb 6-1: bad CDC descriptors [ 351.627319][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 351.807590][ T4329] usb 6-1: USB disconnect, device number 8 [ 355.948077][ T4479] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 357.585690][ T7170] loop6: detected capacity change from 0 to 2048 [ 357.857337][ T4335] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 357.994721][ T4479] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 358.465839][ T7199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.361106][ T6302] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 359.518743][ T7207] loop3: detected capacity change from 0 to 4096 [ 360.021500][ T7221] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 360.296439][ T7220] loop1: detected capacity change from 0 to 1024 [ 360.586764][ T7214] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 360.649817][ T4530] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 360.777244][ T27] audit: type=1800 audit(1733933440.664:79): pid=7207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.630" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 360.887186][ T6302] wlan1: Trigger new scan to find an IBSS to join [ 362.404211][ T7243] loop6: detected capacity change from 0 to 1024 [ 362.487703][ T7243] EXT4-fs (loop6): Test dummy encryption mode enabled [ 362.616776][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 362.946582][ T7243] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 363.899626][ T4266] Bluetooth: hci5: link tx timeout [ 363.905352][ T4266] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 364.204468][ T4266] Bluetooth: hci5: link tx timeout [ 364.235837][ T4266] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 364.345414][ T7278] hub 5-0:1.0: USB hub found [ 364.351375][ T7278] hub 5-0:1.0: 1 port detected [ 364.622429][ T6302] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 364.942999][ T4578] wlan1: Trigger new scan to find an IBSS to join [ 365.092089][ T7243] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 365.391204][ T7243] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 365.452671][ T7287] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 365.603981][ T5610] EXT4-fs (loop6): unmounting filesystem. [ 365.743192][ T7310] loop6: detected capacity change from 0 to 64 [ 365.930232][ T4578] wlan1: Creating new IBSS network, BSSID 8a:ba:14:05:17:62 [ 365.938127][ T4266] Bluetooth: hci5: command 0x0406 tx timeout [ 366.802180][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 367.052429][ T7323] : renamed from ipvlan1 [ 370.817305][ T33] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 371.147233][ T4299] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 371.187740][ T7381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.661'. [ 371.213679][ T7381] device bridge0 entered promiscuous mode [ 371.233800][ T7381] device macvtap1 entered promiscuous mode [ 371.265640][ T7385] device bridge0 left promiscuous mode [ 371.338418][ T4299] usb 2-1: Using ep0 maxpacket: 8 [ 371.345560][ T4299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 371.377219][ T4299] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 371.397143][ T4299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.429820][ T4299] usb 2-1: config 0 descriptor?? [ 371.701724][ T4299] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 371.957798][ T4578] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 372.156692][ T14] usb 2-1: USB disconnect, device number 4 [ 372.254133][ T14] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 372.471732][ T7401] loop3: detected capacity change from 0 to 1024 [ 373.979415][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 374.534221][ T7426] loop3: detected capacity change from 0 to 2048 [ 374.634697][ T7426] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 375.263885][ T4578] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 375.906232][ T7445] 9pnet: Could not find request transport: f [ 376.463602][ T33] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 378.571970][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.578379][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.774374][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 381.525043][ T6302] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 382.280971][ T4266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 382.311176][ T4266] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 382.322079][ T4266] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 382.344407][ T4266] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 382.353338][ T4266] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 382.361396][ T4266] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 382.433028][ T6302] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.569314][ T6302] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.722310][ T6302] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.727386][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 382.922664][ T6302] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.740657][ T7525] chnl_net:caif_netlink_parms(): no params data found [ 383.889155][ T4530] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 384.368260][ T7525] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.376156][ T7525] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.394648][ T7525] device bridge_slave_0 entered promiscuous mode [ 384.407245][ T4266] Bluetooth: hci3: command 0x0409 tx timeout [ 384.415715][ T7525] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.423377][ T7525] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.499922][ T7525] device bridge_slave_1 entered promiscuous mode [ 385.362591][ T7525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.376880][ T33] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 385.435435][ T7525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.611115][ T48] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 386.526924][ T4266] Bluetooth: hci3: command 0x041b tx timeout [ 386.749994][ T7525] team0: Port device team_slave_0 added [ 387.872868][ T7570] loop3: detected capacity change from 0 to 1024 [ 388.002490][ T7564] device bridge0 entered promiscuous mode [ 388.291555][ T7564] bridge0: port 3(macsec1) entered blocking state [ 388.298750][ T7564] bridge0: port 3(macsec1) entered disabled state [ 388.326386][ T7564] device bridge0 left promiscuous mode [ 388.341728][ T7577] syz.1.697 uses obsolete (PF_INET,SOCK_PACKET) [ 388.465080][ T7525] team0: Port device team_slave_1 added [ 388.567294][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 388.758366][ T4578] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 388.792232][ T4348] hfsplus: b-tree write err: -5, ino 4 [ 388.803042][ T7525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.834923][ T7525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.942930][ T7525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.932224][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 390.104885][ T7525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.114442][ T7525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.140521][ T7525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.179954][ T7601] binder: BINDER_SET_CONTEXT_MGR already set [ 390.229234][ T7589] input: syz1 as /devices/virtual/input/input9 [ 390.245971][ T7601] binder: 7600:7601 ioctl 4018620d 200001c0 returned -16 [ 390.647132][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 391.075933][ T7525] device hsr_slave_0 entered promiscuous mode [ 391.103536][ T7525] device hsr_slave_1 entered promiscuous mode [ 391.136230][ T7525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.157618][ T7525] Cannot create hsr debugfs directory [ 391.280626][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 393.833452][ T48] Bluetooth: hci5: unexpected event for opcode 0x0c6d [ 394.070741][ T4347] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 394.751154][ T4299] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 394.912377][ T6302] device hsr_slave_0 left promiscuous mode [ 394.930360][ T6302] device hsr_slave_1 left promiscuous mode [ 394.959058][ T4299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.981878][ T6302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.982485][ T4299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.012214][ T6302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.041389][ T6302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.062157][ T6302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.124581][ T6302] device bridge_slave_1 left promiscuous mode [ 395.157791][ T6302] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.202923][ T4299] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 395.212861][ T4299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.237942][ T6302] device bridge_slave_0 left promiscuous mode [ 395.246520][ T4299] usb 4-1: config 0 descriptor?? [ 395.265344][ T4578] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 395.273520][ T6302] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.415982][ T6302] device veth1_macvtap left promiscuous mode [ 395.447229][ T6302] device veth0_macvtap left promiscuous mode [ 395.453430][ T6302] device veth1_vlan left promiscuous mode [ 395.483779][ T6302] device veth0_vlan left promiscuous mode [ 395.699451][ T4299] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 395.948312][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 397.083087][ T33] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 397.138751][ T14] usb 4-1: USB disconnect, device number 7 [ 397.265472][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 397.722382][ T7678] cgroup: Unknown subsys name 'appraise_type' [ 397.860377][ T48] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 397.901509][ T48] Bluetooth: hci5: Injecting HCI hardware error event [ 397.942375][ T4266] Bluetooth: hci5: hardware error 0x00 [ 398.505909][ T4303] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 399.302729][ T6302] team0 (unregistering): Port device team_slave_1 removed [ 399.648503][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 399.728375][ T6302] team0 (unregistering): Port device team_slave_0 removed [ 400.069509][ T6302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.288527][ T6302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.727895][ T4266] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 400.866682][ T4581] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 402.158297][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 402.505456][ T6302] bond0 (unregistering): Released all slaves [ 404.768628][ T4479] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 406.157362][ T4479] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 406.172696][ T7525] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 408.140253][ T7525] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 408.188545][ T7525] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 408.211299][ T7525] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 408.962894][ T7525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.010333][ T7525] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.059991][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 409.078121][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 409.165615][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 409.186654][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 409.221981][ T4479] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.231263][ T4479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.269500][ T7776] loop6: detected capacity change from 0 to 1024 [ 409.284321][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 409.303416][ T7776] hfsplus: invalid btree flag [ 409.319167][ T7776] hfsplus: failed to load catalog file [ 409.354752][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 409.389933][ T33] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 409.400150][ T4479] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.407387][ T4479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.430688][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 409.516425][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 409.540805][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 409.575383][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 409.599410][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 409.639391][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 409.806448][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 409.882250][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 409.940696][ T7525] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 409.951245][ T7525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.979186][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 409.998021][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 410.022001][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 410.039041][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 410.063529][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 413.202304][ T4479] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 413.360580][ T7814] overlayfs: failed to clone upperpath [ 413.830294][ T7825] loop3: detected capacity change from 0 to 128 [ 414.122039][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 414.131411][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 414.149741][ T7525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.189328][ T4581] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 417.727372][ T4479] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 417.763588][ T7851] netlink: 'syz.0.763': attribute type 1 has an invalid length. [ 418.961583][ T6302] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 419.107595][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 420.369806][ T7884] loop6: detected capacity change from 0 to 16 [ 420.434328][ T7884] erofs: (device loop6): mounted with root inode @ nid 36. [ 420.491224][ T7884] syz.6.768: attempt to access beyond end of device [ 420.491224][ T7884] loop6: rw=0, sector=8, nr_sectors = 16 limit=16 [ 420.628677][ T4479] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 420.980792][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 420.999793][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 421.172281][ T7525] device veth0_vlan entered promiscuous mode [ 421.489032][ T7893] netlink: 'syz.1.770': attribute type 4 has an invalid length. [ 422.479163][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 422.480027][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 422.481076][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 422.481764][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 422.491885][ T7525] device veth1_vlan entered promiscuous mode [ 423.376800][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 423.450486][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 423.484402][ T7907] overlayfs: failed to clone upperpath [ 423.493561][ T7525] device veth0_macvtap entered promiscuous mode [ 423.511445][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 423.554030][ T7525] device veth1_macvtap entered promiscuous mode [ 423.567774][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 423.610723][ T7911] input: syz1 as /devices/virtual/input/input10 [ 423.638097][ T7525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.683834][ T7525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.765739][ T7525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.830468][ T7525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.872276][ T7525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.985164][ T7525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.034852][ T7525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.233027][ T7525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.213447][ T7525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.263169][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 425.279562][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 425.326100][ T7525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.361218][ T7525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.437085][ T7525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.463630][ T4348] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 425.494594][ T7525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.537131][ T7525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.575863][ T7525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.609842][ T7525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.624536][ T7525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.656400][ T7525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.682600][ T7525] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.702538][ T7525] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.721574][ T7525] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.732335][ T7525] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.749781][ T7924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.777'. [ 425.775508][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 425.788048][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 425.847559][ T7921] device bridge_slave_1 left promiscuous mode [ 425.853958][ T7921] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.905587][ T7921] bridge1: port 1(bridge_slave_1) entered blocking state [ 425.923664][ T7921] bridge1: port 1(bridge_slave_1) entered disabled state [ 425.978543][ T7921] device bridge_slave_1 entered promiscuous mode [ 426.431594][ T7932] kAFS: No cell specified [ 429.278901][ T4266] Bluetooth: hci3: link tx timeout [ 429.284519][ T4266] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 429.297451][ T4266] Bluetooth: hci3: link tx timeout [ 429.302615][ T4266] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 429.310984][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.315647][ T4266] Bluetooth: hci3: link tx timeout [ 429.324666][ T4266] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 429.332768][ T4266] Bluetooth: hci3: link tx timeout [ 429.338065][ T4266] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 429.345858][ T4266] Bluetooth: hci3: link tx timeout [ 429.348695][ T4479] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 429.351094][ T4266] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 429.368543][ T4266] Bluetooth: hci3: link tx timeout [ 429.373715][ T4266] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 429.447170][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.524724][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 429.555806][ T4348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.793219][ T4348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.110189][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 431.364927][ T7968] loop6: detected capacity change from 0 to 8 [ 431.371511][ T4266] Bluetooth: hci3: command 0x0406 tx timeout [ 431.533833][ T7976] netlink: 'syz.6.789': attribute type 10 has an invalid length. [ 431.993369][ T7976] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.002411][ T7976] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.033529][ T7982] input: syz1 as /devices/virtual/input/input11 [ 432.239438][ T7976] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.246906][ T7976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.254649][ T7976] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.261866][ T7976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.342355][ T4347] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 432.351193][ T7976] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 432.448546][ T7979] kvm [7977]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x5500000800 [ 432.470459][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.6.789'. [ 432.481140][ T7979] kvm [7977]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x7100000800 [ 432.687347][ T7968] device bridge_slave_1 left promiscuous mode [ 432.701406][ T7979] kvm [7977]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xa600000000 [ 433.687448][ T7968] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.751446][ T7968] device bridge_slave_0 left promiscuous mode [ 433.774106][ T7968] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.985837][ T7968] bond0: (slave bridge0): Releasing backup interface [ 434.385075][ T8008] netlink: 20 bytes leftover after parsing attributes in process `syz.3.795'. [ 435.519194][ T8011] loop7: detected capacity change from 0 to 16 [ 436.114258][ T4479] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 436.145401][ T8011] erofs: (device loop7): mounted with root inode @ nid 36. [ 436.169436][ T4348] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 436.187651][ T8009] syz.7.794: attempt to access beyond end of device [ 436.187651][ T8009] loop7: rw=0, sector=8, nr_sectors = 16 limit=16 [ 437.489139][ T4932] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 438.368105][ T8043] loop7: detected capacity change from 0 to 128 [ 438.390545][ T8043] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 438.460928][ T8043] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 439.115905][ T6302] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 439.258133][ T4581] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 442.861318][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.867775][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.550431][ T6302] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 448.701122][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 449.467280][ T4295] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 449.578312][ T8114] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 449.588750][ T8114] F2FS-fs (loop13): Unable to read 1th superblock [ 449.596237][ T8114] I/O error, dev loop13, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 449.605927][ T8114] F2FS-fs (loop13): Unable to read 2th superblock [ 450.309059][ T4295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.351211][ T4479] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 450.385901][ T4295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.438121][ T4295] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 450.493830][ T4295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.572898][ T4295] usb 2-1: config 0 descriptor?? [ 451.898512][ T8102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.027592][ T8102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.214383][ T4295] hid-multitouch 0003:0EEF:72D0.0004: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.1-1/input0 [ 453.272827][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 453.981872][ T22] usb 2-1: USB disconnect, device number 5 [ 455.266625][ T8149] loop3: detected capacity change from 0 to 16 [ 455.309592][ T8149] erofs: (device loop3): mounted with root inode @ nid 36. [ 455.359251][ T8149] syz.3.827: attempt to access beyond end of device [ 455.359251][ T8149] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 456.267410][ T4348] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 459.830489][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 462.077611][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 462.510897][ T8216] loop7: detected capacity change from 0 to 8 [ 463.891673][ T8229] loop3: detected capacity change from 0 to 256 [ 464.022684][ T8216] netlink: 'syz.7.842': attribute type 10 has an invalid length. [ 464.056963][ T8216] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.064605][ T8216] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.086570][ T27] audit: type=1326 audit(1733933543.984:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019f57ff19 code=0x7ffc0000 [ 464.139788][ T27] audit: type=1326 audit(1733933543.984:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f019f57ff19 code=0x7ffc0000 [ 464.164816][ T27] audit: type=1326 audit(1733933543.994:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019f57ff19 code=0x7ffc0000 [ 464.197394][ T8216] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.202598][ T27] audit: type=1326 audit(1733933543.994:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f019f57ff19 code=0x7ffc0000 [ 464.204521][ T8216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.234186][ T8216] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.241406][ T8216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.275397][ T27] audit: type=1326 audit(1733933543.994:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019f57ff19 code=0x7ffc0000 [ 464.354972][ T27] audit: type=1326 audit(1733933543.994:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f019f57ff19 code=0x7ffc0000 [ 464.404211][ T27] audit: type=1326 audit(1733933543.994:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019f57ff19 code=0x7ffc0000 [ 464.469077][ T27] audit: type=1326 audit(1733933543.994:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f019f57ff19 code=0x7ffc0000 [ 464.713386][ T27] audit: type=1326 audit(1733933543.994:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019f57ff19 code=0x7ffc0000 [ 465.058133][ T6302] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 465.538385][ T8216] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 465.590004][ T27] audit: type=1326 audit(1733933544.004:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019f57ff19 code=0x7ffc0000 [ 465.613735][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.7.842'. [ 465.640805][ T8238] device bridge_slave_1 left promiscuous mode [ 465.670292][ T8238] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.709338][ T8238] device bridge_slave_0 left promiscuous mode [ 467.715638][ T8238] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.990362][ T8238] bond0: (slave bridge0): Releasing backup interface [ 467.997227][ T5797] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 468.167380][ T4348] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 469.519493][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 469.609041][ T5797] usb 7-1: device descriptor read/all, error -71 [ 471.427719][ T4932] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 474.708040][ T4578] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 476.137187][ T22] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 479.811178][ T22] usb 2-1: device descriptor read/all, error -71 [ 479.827333][ T4348] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 479.888360][ T8353] loop7: detected capacity change from 0 to 164 [ 480.007844][ T48] Bluetooth: hci3: SCO packet for unknown connection handle 256 [ 483.257165][ T4581] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 483.577544][ T8381] loop6: detected capacity change from 0 to 16 [ 484.140078][ T8381] erofs: (device loop6): mounted with root inode @ nid 36. [ 484.271314][ T8381] syz.6.880: attempt to access beyond end of device [ 484.271314][ T8381] loop6: rw=0, sector=8, nr_sectors = 16 limit=16 [ 486.347818][ T4530] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 487.789269][ T4530] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 487.887572][ T4296] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 488.083097][ T4296] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 488.106311][ T4296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.160665][ T4296] usb 4-1: config 0 descriptor?? [ 489.127085][ T4352] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 489.321801][ T4296] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 489.321974][ T4296] asix: probe of 4-1:0.0 failed with error -71 [ 489.348626][ T4296] usb 4-1: USB disconnect, device number 8 [ 489.537493][ T4352] usb 7-1: Using ep0 maxpacket: 16 [ 489.552646][ T4352] usb 7-1: config 0 has an invalid interface number: 161 but max is 0 [ 489.567211][ T4352] usb 7-1: config 0 has no interface number 0 [ 489.608007][ T4352] usb 7-1: config 0 interface 161 has no altsetting 0 [ 489.670114][ T4352] usb 7-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 489.725577][ T4352] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.351710][ T4352] usb 7-1: Product: syz [ 490.355957][ T4352] usb 7-1: Manufacturer: syz [ 490.360726][ T4352] usb 7-1: SerialNumber: syz [ 490.376831][ T4352] usb 7-1: config 0 descriptor?? [ 490.428791][ T4352] ums-jumpshot 7-1:0.161: USB Mass Storage device detected [ 490.489480][ T4352] ums-jumpshot 7-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 490.697244][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 493.878118][ T4352] usb 7-1: USB disconnect, device number 6 [ 495.407616][ T33] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 495.592597][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805992e000: rx timeout, send abort [ 496.100936][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805992e000: abort rx timeout. Force session deactivation [ 498.820089][ T48] Bluetooth: hci3: link tx timeout [ 498.838444][ T48] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 498.848291][ T48] Bluetooth: hci3: link tx timeout [ 498.853822][ T48] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.862632][ T48] Bluetooth: hci3: link tx timeout [ 498.868109][ T48] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 498.893588][ T48] Bluetooth: hci3: link tx timeout [ 498.905720][ T48] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 500.309468][ T4578] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 500.967556][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 501.470706][ T8484] syz.7.902 sent an empty control message without MSG_MORE. [ 501.878548][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 503.368198][ T4578] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 503.376625][ T8542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.915'. [ 503.394227][ T8542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.915'. [ 503.445903][ T8542] device ip6gretap0 entered promiscuous mode [ 503.499359][ T8542] device gretap0 entered promiscuous mode [ 503.516085][ T8542] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 503.543128][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 505.480663][ T4347] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 506.342616][ T8568] xt_CT: No such helper "syz0" [ 506.585557][ T8566] tty tty23: ldisc open failed (-12), clearing slot 22 [ 506.593316][ T8567] tty tty23: ldisc open failed (-12), clearing slot 22 [ 506.785830][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.803246][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.978349][ T33] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 509.257328][ T4296] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 509.455223][ T4296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.467173][ T4296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.479470][ T4296] usb 4-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 509.496217][ T4296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.527551][ T4296] usb 4-1: config 0 descriptor?? [ 509.570551][ T4479] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 512.504436][ T8579] capability: warning: `syz.3.924' uses 32-bit capabilities (legacy support in use) [ 513.002481][ T8605] netlink: 'syz.1.932': attribute type 10 has an invalid length. [ 513.223406][ T4296] usbhid 4-1:0.0: can't add hid device: -71 [ 513.257717][ T4296] usbhid: probe of 4-1:0.0 failed with error -71 [ 513.283334][ T4296] usb 4-1: USB disconnect, device number 9 [ 513.284463][ T4530] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 514.363154][ T8605] team0: Port device netdevsim0 added [ 514.419019][ T8612] netlink: 'syz.1.932': attribute type 10 has an invalid length. [ 515.427537][ T4581] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 515.971584][ T8612] team0: Port device netdevsim0 removed [ 516.002634][ T8612] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 516.105180][ T8631] netlink: 16 bytes leftover after parsing attributes in process `syz.7.937'. [ 516.149753][ T8631] device team0 entered promiscuous mode [ 516.179703][ T8631] device team_slave_0 entered promiscuous mode [ 516.199657][ T8631] device team_slave_1 entered promiscuous mode [ 516.230090][ T8631] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 516.272572][ T8631] device team0 left promiscuous mode [ 516.308888][ T8631] device team_slave_0 left promiscuous mode [ 516.373398][ T8631] device team_slave_1 left promiscuous mode [ 517.603280][ T4578] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 519.226117][ T8664] loop3: detected capacity change from 0 to 128 [ 519.320025][ T8664] EXT4-fs (loop3): Test dummy encryption mode enabled [ 519.539853][ T8669] device bond0 entered promiscuous mode [ 519.560596][ T8664] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 519.587405][ T8669] device bond_slave_0 entered promiscuous mode [ 519.719026][ T8664] ext4 filesystem being mounted at /199/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 519.731896][ T8669] device bond_slave_1 entered promiscuous mode [ 520.120170][ T8680] 9pnet_fd: p9_fd_create_tcp (8680): problem connecting socket to 127.0.0.1 [ 520.932029][ T8669] device team0 entered promiscuous mode [ 520.937683][ T8669] device team_slave_0 entered promiscuous mode [ 520.944042][ T8669] device team_slave_1 entered promiscuous mode [ 520.983520][ T4581] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 521.007724][ T8669] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 521.045576][ T8669] device bond0 left promiscuous mode [ 521.212371][ T8669] device bond_slave_0 left promiscuous mode [ 521.242878][ T8669] device bond_slave_1 left promiscuous mode [ 521.250261][ T8669] device team0 left promiscuous mode [ 521.255695][ T8669] device team_slave_0 left promiscuous mode [ 522.160539][ T8690] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 522.170957][ T8690] overlayfs: upper fs does not support tmpfile. [ 522.180445][ T8690] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 522.502540][ T8669] device team_slave_1 left promiscuous mode [ 523.093330][ T4253] EXT4-fs (loop3): unmounting filesystem. [ 524.212694][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 526.367291][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 526.405594][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 527.558506][ T4479] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 527.637419][ T8740] loop7: detected capacity change from 0 to 2048 [ 527.803048][ T8746] overlayfs: failed to clone lowerpath [ 528.659749][ T8745] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 529.929022][ T8761] Driver unsupported XDP return value 0 on prog (id 216) dev N/A, expect packet loss! [ 530.501115][ T4578] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 532.269417][ T4932] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 533.283356][ T8801] loop3: detected capacity change from 0 to 128 [ 533.359338][ T8801] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 533.384848][ T8801] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.154891][ T8817] overlayfs: failed to resolve './file0': -2 [ 535.511442][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 536.676490][ T8801] syz.3.974 (pid 8801) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 537.167829][ T4253] EXT4-fs (loop3): unmounting filesystem. [ 537.654626][ T4578] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 538.230352][ T48] Bluetooth: hci3: link tx timeout [ 538.235602][ T48] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 538.243376][ T48] Bluetooth: hci3: link tx timeout [ 538.248691][ T48] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 538.279976][ T48] Bluetooth: hci3: link tx timeout [ 538.285212][ T48] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 538.292951][ T48] Bluetooth: hci3: link tx timeout [ 538.299295][ T48] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 538.389224][ T8849] netlink: 28 bytes leftover after parsing attributes in process `syz.1.982'. [ 538.902661][ T48] Bluetooth: hci3: link tx timeout [ 538.908891][ T48] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 538.929642][ T48] Bluetooth: hci3: link tx timeout [ 538.937156][ T48] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 538.982615][ T8849] bridge0: port 2(syz_tun) entered blocking state [ 539.051032][ T48] Bluetooth: hci3: link tx timeout [ 539.109388][ T48] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 539.120628][ T48] Bluetooth: hci3: link tx timeout [ 539.126557][ T48] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 539.207573][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 539.503291][ T8849] bridge0: port 2(syz_tun) entered disabled state [ 539.647790][ T8849] device syz_tun entered promiscuous mode [ 539.730068][ T8849] bridge0: port 2(syz_tun) entered blocking state [ 539.737598][ T8849] bridge0: port 2(syz_tun) entered forwarding state [ 539.888899][ T48] Bluetooth: hci3: link tx timeout [ 539.894094][ T48] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 539.902365][ T48] Bluetooth: hci3: link tx timeout [ 539.907580][ T48] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 539.913310][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 540.012975][ T48] Bluetooth: hci3: link tx timeout [ 540.018414][ T48] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 540.026388][ T48] Bluetooth: hci3: link tx timeout [ 540.031756][ T48] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 541.257247][ T48] Bluetooth: hci3: link tx timeout [ 541.271002][ T48] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 541.278746][ T48] Bluetooth: hci3: link tx timeout [ 541.283888][ T48] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 542.182155][ T33] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 542.627646][ T48] Bluetooth: hci3: link tx timeout [ 542.632837][ T48] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 542.642016][ T8875] loop3: detected capacity change from 0 to 256 [ 542.653416][ T48] Bluetooth: hci3: link tx timeout [ 542.659154][ T48] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 542.692782][ T8875] exfat: Unknown parameter 'Sh_&a^@RY cayrFzQ>P߁*ٹV8d|CpI77"TUTCH{W.H K;^ j_]75qYbYF' [ 543.665394][ T8894] loop3: detected capacity change from 0 to 512 [ 543.907435][ T4530] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 543.939112][ T8899] loop6: detected capacity change from 0 to 128 [ 544.781893][ T8899] EXT4-fs (loop6): Test dummy encryption mode enabled [ 545.168081][ T8899] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 545.187672][ T8899] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 547.141803][ T8911] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 547.151519][ T8911] overlayfs: upper fs does not support tmpfile. [ 547.158640][ T8911] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 548.103477][ T5610] EXT4-fs (loop6): unmounting filesystem. [ 548.128064][ T8927] netlink: 28 bytes leftover after parsing attributes in process `syz.0.996'. [ 549.588376][ T4530] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 550.247385][ T48] Bluetooth: hci3: command 0x0405 tx timeout [ 550.897892][ T33] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 552.844635][ T8979] loop6: detected capacity change from 0 to 2048 [ 552.931759][ T8979] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 553.450167][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 553.591874][ T8972] device bridge0 entered promiscuous mode [ 553.617960][ T8972] device macsec1 entered promiscuous mode [ 553.716208][ T8972] device bridge0 left promiscuous mode [ 554.837149][ T48] Bluetooth: hci3: link tx timeout [ 554.842331][ T48] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 554.850764][ T48] Bluetooth: hci3: link tx timeout [ 554.856011][ T48] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 556.118536][ T9001] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1014'. [ 556.235368][ T9001] loop6: detected capacity change from 0 to 1024 [ 556.258677][ T4499] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 556.347667][ T9001] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 556.353347][ T9010] loop3: detected capacity change from 0 to 1024 [ 556.445285][ T9010] EXT4-fs: Ignoring removed orlov option [ 556.527048][ T9010] EXT4-fs: Ignoring removed nomblk_io_submit option [ 556.655706][ T9010] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 557.915178][ T4253] EXT4-fs (loop3): unmounting filesystem. [ 558.042659][ T4479] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 558.296010][ T4266] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 558.308340][ T4266] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 558.317266][ T4266] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 558.325235][ T4266] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 558.333451][ T4266] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 558.340977][ T4266] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 558.382500][ T9032] kvm [9030]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xa00000000 [ 558.410470][ T9032] kvm [9030]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x250000f7ff [ 558.467592][ T9032] kvm [9030]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x250000ffff [ 558.587000][ T9043] loop3: detected capacity change from 0 to 2048 [ 558.968913][ T9043] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 559.615913][ T9050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1021'. [ 560.060031][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 560.544134][ T4265] Bluetooth: hci4: command 0x0409 tx timeout [ 561.590312][ T9068] loop6: detected capacity change from 0 to 128 [ 561.734496][ T9068] EXT4-fs (loop6): Test dummy encryption mode enabled [ 561.792517][ T9068] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 561.842128][ T4530] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 561.899818][ T9068] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 562.111916][ T8278] ------------[ cut here ]------------ [ 562.118603][ T8278] sysfs group 'byte_queue_limits' not found for kobject 'tx-0' [ 562.127064][ T8278] WARNING: CPU: 0 PID: 8278 at fs/sysfs/group.c:280 sysfs_remove_group+0x179/0x2a0 [ 562.136428][ T8278] Modules linked in: [ 562.140441][ T8278] CPU: 0 PID: 8278 Comm: kbnepd bnep0 Not tainted 6.1.119-syzkaller #0 [ 562.148794][ T8278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 562.159004][ T8278] RIP: 0010:sysfs_remove_group+0x179/0x2a0 [ 562.164914][ T8278] Code: 8b 36 4c 89 e0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 7a a4 c7 ff 49 8b 14 24 48 c7 c7 20 74 1c 8b 4c 89 f6 e8 57 35 38 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 31 1b 70 ff [ 562.184848][ T8278] RSP: 0018:ffffc90005f7f910 EFLAGS: 00010246 [ 562.191072][ T8278] RAX: 90c09e97a319f100 RBX: ffff8880265d3850 RCX: ffff88807ba68000 [ 562.199145][ T8278] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 562.207402][ T8278] RBP: dffffc0000000000 R08: ffffffff8152b88e R09: ffffed10171c4f1c [ 562.215516][ T8278] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880265d3820 [ 562.224102][ T8278] R13: 1ffffffff1811260 R14: ffffffff8c089a40 R15: ffff888058fc2658 [ 562.232554][ T8278] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 562.241584][ T8278] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 562.248248][ T8278] CR2: 00007f19a5060022 CR3: 0000000031aa8000 CR4: 00000000003506f0 [ 562.256266][ T8278] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 562.264348][ T8278] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 562.272616][ T8278] Call Trace: [ 562.276035][ T8278] [ 562.279086][ T8278] ? __warn+0x15a/0x520 [ 562.279120][ T4329] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 562.283266][ T8278] ? sysfs_remove_group+0x179/0x2a0 [ 562.296168][ T8278] ? report_bug+0x2af/0x500 [ 562.300807][ T8278] ? sysfs_remove_group+0x179/0x2a0 [ 562.306063][ T8278] ? handle_bug+0x3d/0x70 [ 562.310557][ T8278] ? exc_invalid_op+0x16/0x40 [ 562.315286][ T8278] ? asm_exc_invalid_op+0x16/0x20 [ 562.320446][ T8278] ? __warn_printk+0x28e/0x350 [ 562.325275][ T8278] ? sysfs_remove_group+0x179/0x2a0 [ 562.330597][ T8278] netdev_queue_update_kobjects+0x3ce/0x480 [ 562.336567][ T8278] netdev_unregister_kobject+0x10d/0x250 [ 562.342335][ T8278] unregister_netdevice_many+0x12bf/0x17a0 [ 562.348256][ T8278] ? alloc_netdev_mqs+0xeb0/0xeb0 [ 562.353344][ T8278] ? mutex_lock_nested+0x10/0x10 [ 562.358479][ T8278] ? read_lock_is_recursive+0x10/0x10 [ 562.363920][ T8278] unregister_netdev+0x19b/0x210 [ 562.369064][ T8278] ? clear_nonspinnable+0x60/0x60 [ 562.374188][ T8278] ? unlist_netdevice+0x7f0/0x7f0 [ 562.379354][ T8278] bnep_session+0x2db9/0x2fa0 [ 562.384142][ T8278] ? bnep_add_connection+0xd80/0xd80 [ 562.389550][ T8278] ? _raw_spin_unlock+0x40/0x40 [ 562.394479][ T8278] ? release_firmware_map_entry+0x12a/0x186 [ 562.400844][ T8278] ? wait_woken+0x1d0/0x1d0 [ 562.405401][ T8278] ? _raw_spin_unlock+0x40/0x40 [ 562.410382][ T8278] ? __kthread_parkme+0x168/0x1c0 [ 562.415747][ T8278] kthread+0x28d/0x320 [ 562.419922][ T8278] ? bnep_add_connection+0xd80/0xd80 [ 562.425280][ T8278] ? kthread_blkcg+0xd0/0xd0 [ 562.430010][ T8278] ret_from_fork+0x1f/0x30 [ 562.434494][ T8278] [ 562.437604][ T8278] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 562.444911][ T8278] CPU: 0 PID: 8278 Comm: kbnepd bnep0 Not tainted 6.1.119-syzkaller #0 [ 562.453161][ T8278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 562.463319][ T8278] Call Trace: [ 562.466604][ T8278] [ 562.469540][ T8278] dump_stack_lvl+0x1e3/0x2cb [ 562.474236][ T8278] ? nf_tcp_handle_invalid+0x642/0x642 [ 562.479722][ T8278] ? panic+0x764/0x764 [ 562.483919][ T8278] ? vscnprintf+0x59/0x80 [ 562.488271][ T8278] panic+0x318/0x764 [ 562.492180][ T8278] ? __warn+0x169/0x520 [ 562.496375][ T8278] ? memcpy_page_flushcache+0xfc/0xfc [ 562.501773][ T8278] ? ret_from_fork+0x1f/0x30 [ 562.506388][ T8278] __warn+0x348/0x520 [ 562.510395][ T8278] ? sysfs_remove_group+0x179/0x2a0 [ 562.515607][ T8278] report_bug+0x2af/0x500 [ 562.519955][ T8278] ? sysfs_remove_group+0x179/0x2a0 [ 562.525162][ T8278] handle_bug+0x3d/0x70 [ 562.529372][ T8278] exc_invalid_op+0x16/0x40 [ 562.533918][ T8278] asm_exc_invalid_op+0x16/0x20 [ 562.538785][ T8278] RIP: 0010:sysfs_remove_group+0x179/0x2a0 [ 562.544598][ T8278] Code: 8b 36 4c 89 e0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 7a a4 c7 ff 49 8b 14 24 48 c7 c7 20 74 1c 8b 4c 89 f6 e8 57 35 38 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 31 1b 70 ff [ 562.564649][ T8278] RSP: 0018:ffffc90005f7f910 EFLAGS: 00010246 [ 562.570754][ T8278] RAX: 90c09e97a319f100 RBX: ffff8880265d3850 RCX: ffff88807ba68000 [ 562.578734][ T8278] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 562.586714][ T8278] RBP: dffffc0000000000 R08: ffffffff8152b88e R09: ffffed10171c4f1c [ 562.594702][ T8278] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880265d3820 [ 562.602680][ T8278] R13: 1ffffffff1811260 R14: ffffffff8c089a40 R15: ffff888058fc2658 [ 562.610668][ T8278] ? __warn_printk+0x28e/0x350 [ 562.615489][ T8278] netdev_queue_update_kobjects+0x3ce/0x480 [ 562.621412][ T8278] netdev_unregister_kobject+0x10d/0x250 [ 562.627070][ T8278] unregister_netdevice_many+0x12bf/0x17a0 [ 562.632938][ T8278] ? alloc_netdev_mqs+0xeb0/0xeb0 [ 562.637974][ T8278] ? mutex_lock_nested+0x10/0x10 [ 562.642925][ T8278] ? read_lock_is_recursive+0x10/0x10 [ 562.648458][ T8278] unregister_netdev+0x19b/0x210 [ 562.653456][ T8278] ? clear_nonspinnable+0x60/0x60 [ 562.658525][ T8278] ? unlist_netdevice+0x7f0/0x7f0 [ 562.663608][ T8278] bnep_session+0x2db9/0x2fa0 [ 562.668343][ T8278] ? bnep_add_connection+0xd80/0xd80 [ 562.673654][ T8278] ? _raw_spin_unlock+0x40/0x40 [ 562.678524][ T8278] ? release_firmware_map_entry+0x12a/0x186 [ 562.684440][ T8278] ? wait_woken+0x1d0/0x1d0 [ 562.688963][ T8278] ? _raw_spin_unlock+0x40/0x40 [ 562.693826][ T8278] ? __kthread_parkme+0x168/0x1c0 [ 562.698871][ T8278] kthread+0x28d/0x320 [ 562.702944][ T8278] ? bnep_add_connection+0xd80/0xd80 [ 562.708266][ T8278] ? kthread_blkcg+0xd0/0xd0 [ 562.712860][ T8278] ret_from_fork+0x1f/0x30 [ 562.717320][ T8278] [ 562.720605][ T8278] Kernel Offset: disabled [ 562.725042][ T8278] Rebooting in 86400 seconds..