last executing test programs: 1m41.112364147s ago: executing program 3 (id=1065): syz_open_dev$loop(&(0x7f0000000140), 0xffffffff80000001, 0x1680a2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/rcu_normal', 0x82802, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/dlm/cluster/comms/1\x00', 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x40}}, 0x0) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000640), &(0x7f00000006c0)=0x6e, 0x0) bind$unix(r2, &(0x7f0000000700)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mkdirat(0xffffffffffffff9c, 0x0, 0x1bc) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f00000008c0), &(0x7f0000000900)) openat$tun(0xffffff9c, &(0x7f0000000940), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r3, &(0x7f0000000c00)='1', 0x1) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000c80)="020052487f00000100000000000000000000000100"/59, 0x3b) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, 0x0, 0x2c004005) openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1m40.817730357s ago: executing program 3 (id=1069): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000004c0)={0x4, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000500)={0x400002, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000d00)={0x400002, 0xffffffffffffffff, 0x1}) 1m39.840084806s ago: executing program 3 (id=1071): r0 = socket$tipc(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='7', 0x1) bind$tipc(r0, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) 1m39.21415027s ago: executing program 3 (id=1075): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mount$bind(&(0x7f0000000480)='.\x00', &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000540)='./file0/../file0\x00', &(0x7f0000001a40)='./file0/file0\x00', 0x0, 0x9a101a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000001d80)='.\x00', &(0x7f0000001dc0)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f0000001e00)='./file0\x00', 0xb) 1m39.008179211s ago: executing program 3 (id=1076): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={0x0, 0xfd1c, 0x4, 0x400, 0xed, 0x1}, 0x14) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) 1m38.505206962s ago: executing program 3 (id=1080): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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") syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000300)='./bus\x00', 0x2010414, &(0x7f0000000c00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESHEX, @ANYRES64], 0x1, 0x2d3, &(0x7f00000010c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000dc0)=@caif=@rfm, &(0x7f0000000e40)=0x80) rt_sigqueueinfo(0x0, 0x13, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @empty, 0x3}, 0x1c) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000004c0)={@mcast2}, 0x14) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r4, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d", 0x54) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0x0) 1m38.13371832s ago: executing program 32 (id=1080): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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") syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000300)='./bus\x00', 0x2010414, &(0x7f0000000c00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESHEX, @ANYRES64], 0x1, 0x2d3, &(0x7f00000010c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000dc0)=@caif=@rfm, &(0x7f0000000e40)=0x80) rt_sigqueueinfo(0x0, 0x13, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @empty, 0x3}, 0x1c) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000004c0)={@mcast2}, 0x14) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r4, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d", 0x54) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0x0) 5.667259493s ago: executing program 1 (id=1734): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = open(&(0x7f0000001100)='./bus\x00', 0x14507e, 0x0) r2 = eventfd2(0x0, 0x0) r3 = dup2(r2, r1) write$eventfd(r2, &(0x7f0000001140)=0xfffffffffffffffe, 0x8) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000001180)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000011c0)={0x0, 0x0, 0x0, &(0x7f0000001200)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001240)={0x1, 0x0, 0x0, &(0x7f0000001280)=""/77, 0x0, 0xb000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001300)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001340)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000001380)={0x1, r3}) 5.460102363s ago: executing program 1 (id=1736): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xffe0, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 5.024130868s ago: executing program 1 (id=1738): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000140)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000180)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x1, 0x1, 0x0, &(0x7f0000000400)=""/87, &(0x7f0000000500)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000580)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000005c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000600)=0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 4.839454347s ago: executing program 1 (id=1740): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000c0000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000001400000011"], 0xc8}}, 0x0) 3.777254235s ago: executing program 2 (id=1745): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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") syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000300)='./bus\x00', 0x2010414, &(0x7f0000000c00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESHEX, @ANYRES64], 0x1, 0x2d3, &(0x7f00000010c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000dc0)=@caif=@rfm, &(0x7f0000000e40)=0x80) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10002004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) rt_sigqueueinfo(0x0, 0x13, 0x0) fsopen(0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'team_slave_0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x46, 0xdd, 0x7ff, 0x7, 0x1, 0x5, 0x40, 0xa, 0x81, 0x4, 0x53b6, 0xfffffffa, 0x4, 0x7, 0x8, 0xab, [0x1ff, 0xcbde]}}) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000004c0)={@mcast2}, 0x14) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e22, 0x80000001, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x0, @local, 0xfffffff7}}}, 0x108) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d", 0x54) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0x0) 3.412537943s ago: executing program 1 (id=1746): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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") syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000300)='./bus\x00', 0x2010414, &(0x7f0000000c00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESHEX, @ANYRES64], 0x1, 0x2d3, &(0x7f00000010c0)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000dc0)=@caif=@rfm, &(0x7f0000000e40)=0x80) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10002004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) fsopen(0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'team_slave_0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x46, 0xdd, 0x7ff, 0x7, 0x1, 0x5, 0x40, 0xa, 0x81, 0x4, 0x53b6, 0xfffffffa, 0x4, 0x7, 0x8, 0xab, [0x1ff, 0xcbde]}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x65, 0x0, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @empty, 0x3}, 0x1c) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000004c0)={@mcast2}, 0x14) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r4, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d", 0x54) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0x0) 2.220163234s ago: executing program 4 (id=1751): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 2.095415437s ago: executing program 4 (id=1752): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) eventfd2(0xe5c, 0x80000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 1.990037667s ago: executing program 2 (id=1753): socket$inet6(0xa, 0x3, 0x87) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x38, r1, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4890}, 0x4010) getresuid(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, 0x0, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4040490) 1.792151328s ago: executing program 4 (id=1754): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1, 0x4, 0x2, 0x1000, 0x7, 0xfffffff9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x5, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0xb32019a74e55d2de) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000500)="05", 0x1, 0x20000005, &(0x7f0000000540)={0x11, 0x7, r5, 0x1, 0x0, 0x6, @remote}, 0x14) 1.760037011s ago: executing program 2 (id=1755): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x96, 0x0, 0x100, 0x10000, 0x1, '\x00', 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.480481249s ago: executing program 2 (id=1756): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) lremovexattr(0x0, &(0x7f0000000380)=@known='system.posix_acl_default\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x2, 0xb0) 1.461477461s ago: executing program 0 (id=1757): r0 = io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xbfb6, 0x800, 0x1, 0x87}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x28, 0x9, 0x52, 0xfffff038}, {0x48, 0x9, 0x80, 0x8}, {0x6, 0xfd, 0x20, 0x2000057c}]}, 0x10) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0x9ffc) io_uring_enter(r0, 0x190d, 0x8420, 0x10, 0x0, 0x0) 1.395031998s ago: executing program 4 (id=1758): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0x7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f0000000680)="ba", 0x1, 0x840, &(0x7f00000006c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.271106301s ago: executing program 2 (id=1759): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4000000000000009, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$UBLK_U_CMD_GET_FEATURES(0xffffffffffffffff, 0x80207513, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000740)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) 1.249231873s ago: executing program 0 (id=1760): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4884, 0x0, 0x0) r2 = openat$binfmt_format(0xffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r2, &(0x7f0000000040)='-1\x00', 0x2) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000580)='./dm0\x00', 0x6180, r1) openat$dm_dev(0xffffffffffffff9c, &(0x7f00000005c0)='./dm0\x00', 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x80580, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000d80)={0x1, &(0x7f0000000dc0)=[{0x6, 0x0, 0xfe, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.056001902s ago: executing program 2 (id=1761): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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") syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000300)='./bus\x00', 0x2010414, &(0x7f0000000c00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESHEX, @ANYRES64], 0x1, 0x2d3, &(0x7f00000010c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000dc0)=@caif=@rfm, &(0x7f0000000e40)=0x80) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10002004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) rt_sigqueueinfo(0x0, 0x13, 0x0) fsopen(0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'team_slave_0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x46, 0xdd, 0x7ff, 0x7, 0x1, 0x5, 0x40, 0xa, 0x81, 0x4, 0x53b6, 0xfffffffa, 0x4, 0x7, 0x8, 0xab, [0x1ff, 0xcbde]}}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000004c0)={@mcast2}, 0x14) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e22, 0x80000001, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x0, @local, 0xfffffff7}}}, 0x108) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d", 0x54) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0x0) 1.052091313s ago: executing program 4 (id=1762): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0xfd, 0xfc, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000094, &(0x7f0000000380)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000440)="136092b9c45c4d81a153ed73c6dfa1c26dd5d5ffe7da5e8eee62f3f63aa34d222440ad92edd6bffdfa5467a1d8aea7571308dc0d3dbf396e6b68733aae734f8d468229c67c43c4f4faa607ce369eeccf7023b172eda7b838c072c89b26e67c468353c5a3b6d956e217f2f54222e235bdd6624c56c8c7eef8dd7619712cea86819c2df63aa7cd3a84f3b3317eb6a3fd959f09fbb22593294c336ea355a37f66b564c8d7d32d7063fd55abda6661ee378b42c11d81c548aef3d82f642def57865dcd0d339b20", 0xc5, 0x40041, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) write$binfmt_elf64(r1, &(0x7f0000000640)=ANY=[], 0x540) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 936.621344ms ago: executing program 0 (id=1763): socket(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f00008dc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x16b0, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 735.930245ms ago: executing program 0 (id=1764): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_audit(0x10, 0x3, 0x9) socket$inet(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./control\x00', 0xa00300, &(0x7f0000000c80)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xfff}}, {@delalloc}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000d80)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000001a80)='.\x00', 0x0, 0x82) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, 0x0, 0x0) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="20040000f30300042cbd7000fcdbdf250100000000000000370000000900000005000000040000000000000008000000020000000000008004000000090000000000000008000000080000000c0000000400000001000100040000000cedffff0200000001000000030000000000000000040000dd030000010000800400000003000000030000000b0000000f00000001000100c9ffffff06000000b1000000ff070000ff7f000003000000030000000b0000000a00000081ff"], 0x420}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x2, 0xb3, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470881000200000001001b24", @ANYRES8=r2], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) 360.887203ms ago: executing program 1 (id=1765): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$eJzs3MtvVFUYAPDv3r54tyo+QNAqJhIfLS3PhRuMJi40MdEFxlVtC0EGqrQmQkhAF7g0JO6NSxP/Ale6MerKxMSV7g0JMWxEE5Mx9869nXE6Uzt0YID5/ZIL58w9wznfnHPmPs5cAuhb49kfScSWiPg1IjbUsv8tMF7768b1C7N/Xb8wm0S1+sYfSV7uz+sXZsui5fs21zLVapEfaVHv5bcjZiqV+bNFfnLp9HuTi+fOP3/y9MyJ+RPzZ6aPHDmwf/fwoemDXYlzNGvrSCzs2vHKW1demz125Z0fvsrau6XY3xhHt4zXPt2VBrpdU+9tbUgngz1sCB3JhmLWXUP5/B+Ngdi4vG80Xv64p40DbqlqtVptdXwuXKoC97Aket0CoDfKA312/Vtut+nU445w7WjE+4dr8d8ottqewUiLMkNN17fdNB4Rxy79/Xm2xS26DwEA0OiboxHxXKvzvzQeaii3rVhDGYuI+yLi/oh4ICK2R8SDEXnZhyPikQ7rb14hWXn+k169qcDWKDv/e6FY21o+//unmsdfGBsoclvz+IeS4ycr8/uKz2RvDI1k+alV6vj2pZ8/bbev8fwv27L6y3PBmvTqYNMNurmZpZl1hr3s2kcROweb4s8lUS7jJBGxIyJ2dvQv168wTj7z5a52perxb4yIVvGvogvrTNUvIp6u9f+laIq/lLRdn5w6fGj64OSGqMzvmyxHxUo//nT59Xb1/3//31pZ/29qHv/13ruYDflkQ8TiufOn8vXaxc7ruPzbJy2vaTatY/wPJ2/m6eHitQ9nlpbOTkUMJ6+ufH26/t4yX5bP4t+7p9X4T/PvuCj6/9GIyAbx7oh4LCIeL9r+REQ8GRF7Von/+xeferfdvvbxr3JXvouy+Oda9H/D+B/LUvX+7zwxcOq7rzuPv5T1/4E8tbd4ZS3ff2tt4Ho+OwAAALhbpPlv4JN0YjmdphMTtd/wb49NaWVhcenZ4wsfnJmr/VZ+LIbS8k7XaMP90Kni3nCZn27K7y/uG382sDHPT8wuVOZ6HTz0uc1t5n/m93vwORWgiee1oH+Z/9C/zH/oX/X5f6in7QBuP8d/6F+t5v/FHrQDuP0c/6F/mf/Qv8x/6F/mP/Slts/Gp+t65P+uTfyy7Y5oxl2QiLTzdw1GL9s83NPabzoxuOb/zOImEyMtd/X6mwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA7/g0AAP//hh/x1w==") syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000300)='./bus\x00', 0x2010414, &(0x7f0000000c00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESHEX, @ANYRES64], 0x1, 0x2d3, &(0x7f00000010c0)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000dc0)=@caif=@rfm, &(0x7f0000000e40)=0x80) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10002004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) rt_sigqueueinfo(0x0, 0x13, 0x0) fsopen(0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'team_slave_0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x46, 0xdd, 0x7ff, 0x7, 0x1, 0x5, 0x40, 0xa, 0x81, 0x4, 0x53b6, 0xfffffffa, 0x4, 0x7, 0x8, 0xab, [0x1ff, 0xcbde]}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x65, 0x0, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @empty, 0x3}, 0x1c) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000004c0)={@mcast2}, 0x14) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e22, 0x80000001, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x0, @local, 0xfffffff7}}}, 0x108) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r4, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d", 0x54) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0x0) 146.214615ms ago: executing program 0 (id=1766): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x8, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x84, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x1c786f53}]}) ioctl$TUNGETVNETLE(r1, 0x40107447, &(0x7f0000000180)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 155.02µs ago: executing program 0 (id=1767): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x10}, {0xe, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) close(0x3) 0s ago: executing program 4 (id=1768): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000000a40)=""/102392, 0x18ff8) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 58.417866][ T5447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.437283][ T5447] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. syzkaller login: [ 79.174051][ T5774] cgroup: Unknown subsys name 'net' [ 79.315495][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.028163][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.085881][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.094677][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.103064][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.136538][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.144468][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.151910][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.237786][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.246144][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.254297][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.262352][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.273132][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.276649][ T5785] (null): rxe_set_mtu: Set mtu to 1024 [ 83.286927][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.295161][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.303789][ T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.311397][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.319799][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.327931][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.341723][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.349921][ T5800] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.362222][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.368874][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.376811][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.383803][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.407708][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.427590][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.437795][ T5800] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.445217][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.526796][ T5791] (null): rxe_set_mtu: Set mtu to 1024 [ 83.533056][ T5791] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 83.570010][ T5792] (null): rxe_set_mtu: Set mtu to 1024 [ 83.575831][ T5792] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 83.585649][ T5790] (null): rxe_set_mtu: Set mtu to 1024 [ 83.607984][ T5790] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 83.905991][ T5785] infiniband rxe0: set active [ 83.916423][ T8] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.961191][ T5785] infiniband rxe0: added rxe_eth0 [ 84.073241][ T5785] RDS/IB: rxe0: added [ 84.080784][ T5785] smc: adding ib device rxe0 with port count 1 [ 84.087940][ T5785] smc: ib device rxe0 port 1 has pnetid [ 84.141570][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.149190][ T8] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.282319][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 84.375177][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 84.408508][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 84.441740][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.763933][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.771959][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.783061][ T5791] bridge_slave_0: entered allmulticast mode [ 84.790542][ T5791] bridge_slave_0: entered promiscuous mode [ 84.800536][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.816494][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.823606][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.834492][ T5792] bridge_slave_0: entered allmulticast mode [ 84.843710][ T5792] bridge_slave_0: entered promiscuous mode [ 84.855847][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.863169][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.873742][ T5792] bridge_slave_1: entered allmulticast mode [ 84.881380][ T5792] bridge_slave_1: entered promiscuous mode [ 84.905640][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.916466][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.923707][ T5791] bridge_slave_1: entered allmulticast mode [ 84.941617][ T5791] bridge_slave_1: entered promiscuous mode [ 84.994120][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.001637][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.012716][ T5790] bridge_slave_0: entered allmulticast mode [ 85.020583][ T5790] bridge_slave_0: entered promiscuous mode [ 85.033064][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.040493][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.051604][ T5790] bridge_slave_1: entered allmulticast mode [ 85.059534][ T5790] bridge_slave_1: entered promiscuous mode [ 85.089984][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.130110][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.143005][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.164786][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.182875][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.233440][ T5791] team0: Port device team_slave_0 added [ 85.242690][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.252725][ T5788] Bluetooth: hci0: command tx timeout [ 85.268303][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.290243][ T5790] team0: Port device team_slave_0 added [ 85.303892][ T5790] team0: Port device team_slave_1 added [ 85.335956][ T5791] team0: Port device team_slave_1 added [ 85.365773][ T5792] team0: Port device team_slave_0 added [ 85.374632][ T5792] team0: Port device team_slave_1 added [ 85.396046][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.403185][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.430518][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.457544][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.464579][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.496719][ T5788] Bluetooth: hci3: command tx timeout [ 85.502578][ T5788] Bluetooth: hci2: command tx timeout [ 85.508469][ T5788] Bluetooth: hci1: command tx timeout [ 85.526659][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.570804][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.577958][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.604061][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.620493][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.627635][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.653706][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.679827][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.686994][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.713027][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.727096][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.734144][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.760168][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.829153][ T5790] hsr_slave_0: entered promiscuous mode [ 85.836128][ T5790] hsr_slave_1: entered promiscuous mode [ 85.924908][ T5791] hsr_slave_0: entered promiscuous mode [ 85.935750][ T5791] hsr_slave_1: entered promiscuous mode [ 85.942723][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.966446][ T5791] Cannot create hsr debugfs directory [ 86.032978][ T5792] hsr_slave_0: entered promiscuous mode [ 86.039651][ T5792] hsr_slave_1: entered promiscuous mode [ 86.045845][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.053760][ T5792] Cannot create hsr debugfs directory [ 86.469930][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 86.500908][ T5790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.549908][ T5790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.561136][ T5790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.573253][ T5790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.672894][ T5791] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.683438][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.690909][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.698556][ T5785] bridge_slave_0: entered allmulticast mode [ 86.706072][ T5785] bridge_slave_0: entered promiscuous mode [ 86.715205][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.722557][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.729969][ T5785] bridge_slave_1: entered allmulticast mode [ 86.737669][ T5785] bridge_slave_1: entered promiscuous mode [ 86.755620][ T5791] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.767333][ T5791] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.800720][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.810998][ T5791] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.854330][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.914925][ T5785] team0: Port device team_slave_0 added [ 86.923743][ T5785] team0: Port device team_slave_1 added [ 86.938108][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.953875][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.012366][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.020975][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.049199][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.062399][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.075350][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.111945][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.120037][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.146738][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.300420][ T5785] hsr_slave_0: entered promiscuous mode [ 87.308037][ T5785] hsr_slave_1: entered promiscuous mode [ 87.314441][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.323369][ T5785] Cannot create hsr debugfs directory [ 87.336520][ T52] Bluetooth: hci0: command tx timeout [ 87.574463][ T52] Bluetooth: hci1: command tx timeout [ 87.580447][ T5788] Bluetooth: hci2: command tx timeout [ 87.585888][ T5788] Bluetooth: hci3: command tx timeout [ 87.592823][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.625969][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.743304][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.755758][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.776413][ T4501] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.783818][ T4501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.799635][ T4501] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.806850][ T4501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.851944][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.896330][ T4501] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.903573][ T4501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.914127][ T4501] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.921284][ T4501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.945155][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.981780][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.015908][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.023128][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.033588][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.055546][ T5791] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.067445][ T5791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.092438][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.099676][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.109570][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.145599][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.386138][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.460574][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.484602][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.491863][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.539743][ T1319] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.546999][ T1319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.694967][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.711861][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.834768][ T5790] veth0_vlan: entered promiscuous mode [ 88.900028][ T5791] veth0_vlan: entered promiscuous mode [ 88.924547][ T5790] veth1_vlan: entered promiscuous mode [ 88.960250][ T5791] veth1_vlan: entered promiscuous mode [ 89.033294][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.054918][ T5791] veth0_macvtap: entered promiscuous mode [ 89.068595][ T5790] veth0_macvtap: entered promiscuous mode [ 89.091257][ T5791] veth1_macvtap: entered promiscuous mode [ 89.105017][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.124671][ T5790] veth1_macvtap: entered promiscuous mode [ 89.169529][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.213157][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.227764][ T5791] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.237756][ T5791] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.248116][ T5791] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.257214][ T5791] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.272342][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.283167][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.294438][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.324862][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.337751][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.349904][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.361391][ T5790] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.370768][ T5790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.380783][ T5790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.390336][ T5790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.403436][ T5792] veth0_vlan: entered promiscuous mode [ 89.417164][ T52] Bluetooth: hci0: command tx timeout [ 89.443584][ T5785] veth0_vlan: entered promiscuous mode [ 89.481854][ T5792] veth1_vlan: entered promiscuous mode [ 89.516844][ T5785] veth1_vlan: entered promiscuous mode [ 89.635276][ T5792] veth0_macvtap: entered promiscuous mode [ 89.655304][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.657330][ T52] Bluetooth: hci2: command tx timeout [ 89.669627][ T5788] Bluetooth: hci1: command tx timeout [ 89.669668][ T5800] Bluetooth: hci3: command tx timeout [ 89.684870][ T5792] veth1_macvtap: entered promiscuous mode [ 89.695454][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.747842][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.759384][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.769473][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.780363][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.791888][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.824180][ T5785] veth0_macvtap: entered promiscuous mode [ 89.839365][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.850108][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.861423][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.868285][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.879313][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.891851][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.904007][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.938634][ T5792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.950214][ T5792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.960796][ T5792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.969875][ T5792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.999599][ T5785] veth1_macvtap: entered promiscuous mode [ 90.012185][ T4501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.036476][ T4501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.108875][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.123710][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.138391][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.143856][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.155895][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.167275][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.177535][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.188748][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.201418][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.260035][ T5791] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.282095][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.307353][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.320441][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.332438][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.344100][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.354773][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.368134][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.389384][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.405573][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.414713][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.431090][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.537221][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.560487][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.670004][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.702428][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.729770][ T28] audit: type=1800 audit(1793265191.605:2): pid=5877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3" name="/" dev="fuse" ino=1 res=0 errno=0 [ 90.732267][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.789908][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.928249][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.959056][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.015569][ T28] audit: type=1326 audit(1793265191.895:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5887 comm="syz.2.5" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb7bc79f559 code=0x0 [ 91.194767][ T5896] syz.3.4[5896]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.241309][ T5896] loop3: detected capacity change from 0 to 256 [ 91.286567][ T5896] ======================================================= [ 91.286567][ T5896] WARNING: The mand mount option has been deprecated and [ 91.286567][ T5896] and is ignored by this kernel. Remove the mand [ 91.286567][ T5896] option from the mount to silence this warning. [ 91.286567][ T5896] ======================================================= [ 91.469178][ T5903] netlink: 'syz.1.7': attribute type 1 has an invalid length. [ 91.487902][ T5800] Bluetooth: hci0: command tx timeout [ 91.514679][ T5903] : renamed from dummy0 [ 91.657635][ T5874] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.726562][ T5800] Bluetooth: hci3: command tx timeout [ 91.729297][ T52] Bluetooth: hci2: command tx timeout [ 91.732241][ T5800] Bluetooth: hci1: command tx timeout [ 91.867183][ T5874] usb 1-1: Using ep0 maxpacket: 8 [ 91.885104][ T5874] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.927943][ T5874] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.927995][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.928018][ T5874] usb 1-1: Product: syz [ 91.928034][ T5874] usb 1-1: Manufacturer: syz [ 91.928050][ T5874] usb 1-1: SerialNumber: syz [ 92.082980][ T9] cfg80211: failed to load regulatory.db [ 92.118079][ T5919] syz.2.10 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 92.210649][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.647557][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.952047][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.995693][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.504767][ T27] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.546863][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.581866][ T27] usb 2-1: config 0 descriptor?? [ 93.759418][ T5926] syz.3.13 uses obsolete (PF_INET,SOCK_PACKET) [ 93.867392][ T5874] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 93.874196][ T5874] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 93.900027][ T5874] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 94.230381][ T27] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 94.690822][ T27] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 94.994032][ T5852] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.082809][ T27] usb 2-1: USB disconnect, device number 2 [ 95.091279][ T5874] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 95.216556][ T5874] usb 1-1: USB disconnect, device number 2 [ 95.224951][ T5874] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 95.323687][ T5933] fido_id[5933]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 96.198846][ T5964] Zero length message leads to an empty skb [ 99.229492][ T6005] netlink: 16 bytes leftover after parsing attributes in process `syz.3.25'. [ 99.428700][ T6010] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.966262][ C0] sched: RT throttling activated [ 100.517030][ T5854] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.568531][ T6023] kvm: emulating exchange as write [ 100.708198][ T28] audit: type=1326 audit(1793265201.595:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.31" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ceb9f559 code=0x7ffc0000 [ 100.729759][ T5854] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 100.756574][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.775791][ T28] audit: type=1326 audit(1793265201.595:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.31" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ceb9f559 code=0x7ffc0000 [ 100.802957][ T6032] loop1: detected capacity change from 0 to 164 [ 100.810820][ T5854] usb 4-1: config 0 descriptor?? [ 100.833496][ T5854] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 100.856448][ T28] audit: type=1326 audit(1793265201.635:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.31" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ceb9f559 code=0x7ffc0000 [ 100.920819][ T28] audit: type=1326 audit(1793265201.635:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.31" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ceb9f559 code=0x7ffc0000 [ 100.975484][ T28] audit: type=1326 audit(1793265201.645:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.31" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb3ceb9f559 code=0x7ffc0000 [ 101.063583][ T28] audit: type=1326 audit(1793265201.645:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.31" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ceb9f559 code=0x7ffc0000 [ 101.111201][ T28] audit: type=1326 audit(1793265201.645:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.31" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ceb9f559 code=0x7ffc0000 [ 101.145827][ T28] audit: type=1326 audit(1793265201.645:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.31" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ceb9f559 code=0x7ffc0000 [ 101.181900][ T28] audit: type=1326 audit(1793265201.645:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.31" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ceb9f559 code=0x7ffc0000 [ 101.221322][ T28] audit: type=1326 audit(1793265201.655:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.31" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fb3ceb9f559 code=0x7ffc0000 [ 102.907938][ T6054] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.924197][ T5854] usb 4-1: USB disconnect, device number 2 [ 103.423598][ T6063] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 106.398831][ T6096] loop3: detected capacity change from 0 to 2048 [ 106.596098][ T6096] rxe_eth0 speed is unknown, defaulting to 1000 [ 107.143768][ T6104] loop0: detected capacity change from 0 to 64 [ 107.935712][ T6106] syz.0.54: attempt to access beyond end of device [ 107.935712][ T6106] loop0: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 107.959716][ T6106] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 107.968908][ T6106] syz.0.54: attempt to access beyond end of device [ 107.968908][ T6106] loop0: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 107.982783][ T6106] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 107.991765][ T6106] syz.0.54: attempt to access beyond end of device [ 107.991765][ T6106] loop0: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 108.005140][ T6106] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 108.014249][ T6106] syz.0.54: attempt to access beyond end of device [ 108.014249][ T6106] loop0: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 108.027634][ T6106] Buffer I/O error on dev loop0, logical block 167, lost async page write [ 108.036557][ T6106] syz.0.54: attempt to access beyond end of device [ 108.036557][ T6106] loop0: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 108.051072][ T6106] Buffer I/O error on dev loop0, logical block 169, lost async page write [ 108.060274][ T6106] syz.0.54: attempt to access beyond end of device [ 108.060274][ T6106] loop0: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 108.073703][ T6106] Buffer I/O error on dev loop0, logical block 171, lost async page write [ 108.082663][ T6106] syz.0.54: attempt to access beyond end of device [ 108.082663][ T6106] loop0: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 108.095975][ T6106] Buffer I/O error on dev loop0, logical block 172, lost async page write [ 109.122532][ T6125] loop3: detected capacity change from 0 to 256 [ 110.924349][ T6141] loop1: detected capacity change from 0 to 1024 [ 111.413605][ T6131] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.428913][ T6131] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.471937][ T6131] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.497413][ T6131] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.530929][ T6131] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.567991][ T6131] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.587006][ T6131] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.598019][ T6131] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.615535][ T6131] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.638683][ T6131] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.646732][ T6131] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 111.659591][ T6131] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.984695][ T5800] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.912967][ T6172] syz.2.77 (6172) used greatest stack depth: 17576 bytes left [ 115.921421][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 115.921437][ T28] audit: type=1326 audit(1793265215.405:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.2.77" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb7bc79f559 code=0x0 [ 115.951772][ T5800] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.957930][ T5800] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.963977][ T5800] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.970789][ T5800] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.746350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 117.585615][ T6186] kAFS: No cell specified [ 117.873604][ T6188] loop0: detected capacity change from 0 to 1024 [ 118.046410][ T5800] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.056377][ T5800] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.062464][ T5800] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.066510][ T5788] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.593063][ T6201] syz.0.81 (6201) used greatest stack depth: 17416 bytes left [ 120.136533][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.142667][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.148904][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.063179][ T6217] ip_tables: iptables: counters copy to user failed while replacing table [ 122.075749][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.75'. [ 123.701286][ T6246] capability: warning: `syz.3.88' uses deprecated v2 capabilities in a way that may be insecure [ 124.224944][ T6255] syzkaller0: entered promiscuous mode [ 124.235278][ T6255] syzkaller0: entered allmulticast mode [ 127.836450][ T6280] Illegal XDP return value 64 on prog (id 10) dev N/A, expect packet loss! [ 127.903314][ T6284] jffs2: notice: (6284) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 134.407886][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.416040][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.906562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 145.316404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 148.015900][ T6388] gadgetfs: bound to dummy_udc driver [ 150.909149][ T6399] loop2: detected capacity change from 0 to 256 [ 151.131574][ T6399] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.992075][ T6408] lo: entered allmulticast mode [ 154.183575][ T6405] lo: left allmulticast mode [ 155.556422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 155.885992][ T5874] IPVS: starting estimator thread 0... [ 156.026599][ T6417] IPVS: using max 22 ests per chain, 52800 per kthread [ 160.676398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 161.616492][ T6442] sctp: [Deprecated]: syz.1.136 (pid 6442) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.616492][ T6442] Use struct sctp_sack_info instead [ 165.386635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 165.796373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 170.506527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 173.066538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 173.316581][ T6480] netlink: 32 bytes leftover after parsing attributes in process `syz.1.142'. [ 173.476380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 173.732928][ T6481] loop3: detected capacity change from 0 to 4096 [ 174.054609][ T6481] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 174.080539][ T6481] EXT4-fs (loop3): Test dummy encryption mode enabled [ 174.101784][ T6481] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 174.116410][ T6481] System zones: 0-5 [ 174.168634][ T6481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.104437][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.495605][ T6495] loop3: detected capacity change from 0 to 1024 [ 175.517723][ T6495] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.587499][ T6495] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 175.879184][ T6495] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 176.051347][ T6495] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #11: comm syz.3.150: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 176.205300][ T6495] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.150: couldn't read orphan inode 11 (err -117) [ 176.253855][ T6495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.466059][ T6495] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.150: Invalid block bitmap block 0 in block_group 0 [ 177.658517][ T6495] Quota error (device loop3): write_blk: dquota write failed [ 177.675558][ T6495] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 177.706434][ T6495] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.150: Failed to acquire dquot type 0 [ 178.136852][ T6495] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.150: Invalid inode bitmap blk 137438953472 in block_group 0 [ 178.357595][ T1319] EXT4-fs error (device loop3): __ext4_get_inode_loc:4509: comm kworker/u4:7: Invalid inode table block 8589934593 in block_group 0 [ 179.158252][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.036537][ T6529] __vm_enough_memory: pid: 6529, comm: syz.2.155, not enough memory for the allocation [ 188.896484][ T28] audit: type=1326 audit(1793265289.035:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.1.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ceb9f559 code=0x7ffc0000 [ 189.045112][ T28] audit: type=1326 audit(1793265289.035:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.1.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ceb9f559 code=0x7ffc0000 [ 189.116293][ T28] audit: type=1326 audit(1793265289.035:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.1.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ceb9f559 code=0x7ffc0000 [ 189.286704][ T28] audit: type=1326 audit(1793265289.035:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.1.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3ceb9f559 code=0x7ffc0000 [ 189.326645][ T28] audit: type=1326 audit(1793265289.035:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.1.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ceb9f559 code=0x7ffc0000 [ 189.356773][ T28] audit: type=1326 audit(1793265289.035:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.1.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ceb9f559 code=0x7ffc0000 [ 189.385224][ T28] audit: type=1326 audit(1793265289.035:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.1.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ceb9f559 code=0x7ffc0000 [ 189.414553][ T28] audit: type=1326 audit(1793265289.035:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.1.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3ceb9f559 code=0x7ffc0000 [ 189.461421][ T28] audit: type=1326 audit(1793265289.045:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.1.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ceb9f559 code=0x7ffc0000 [ 189.510732][ T28] audit: type=1326 audit(1793265289.045:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.1.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ceb9f559 code=0x7ffc0000 [ 193.423456][ T5788] Bluetooth: hci2: unexpected event for opcode 0x041c [ 194.523723][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.530136][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.203270][ T5788] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 202.219363][ T6609] sctp: failed to load transform for md5: -2 [ 203.593641][ T6629] netlink: 72 bytes leftover after parsing attributes in process `syz.0.176'. [ 203.603507][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'. [ 203.612725][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'. [ 205.790754][ T9] IPVS: starting estimator thread 0... [ 206.056582][ T6652] IPVS: using max 18 ests per chain, 43200 per kthread [ 209.993906][ T6679] process 'syz.2.193' launched '/dev/fd/3' with NULL argv: empty string added [ 211.834883][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 225.599848][ T6750] Process accounting resumed [ 230.862264][ T6792] overlayfs: failed to clone upperpath [ 233.740046][ T6809] loop3: detected capacity change from 0 to 1024 [ 236.956839][ T6839] fuse: Bad value for 'fd' [ 238.506360][ T6846] capability: warning: `syz.2.231' uses 32-bit capabilities (legacy support in use) [ 239.023727][ T6844] vivid-000: disconnect [ 239.030210][ T6844] vivid-000: reconnect [ 239.107009][ T6855] fuse: Bad value for 'fd' [ 244.938838][ T6877] overlayfs: failed to clone upperpath [ 244.986703][ T6877] netlink: 14 bytes leftover after parsing attributes in process `syz.1.241'. [ 245.079581][ T6877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.106397][ T6877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.119817][ T6877] bond0 (unregistering): Released all slaves [ 246.237668][ T6879] o2cb: This node has not been configured. [ 246.243781][ T6879] o2cb: Cluster check failed. Fix errors before retrying. [ 246.251061][ T6879] (syz.2.235,6879,1):user_dlm_register:674 ERROR: status = -22 [ 246.258650][ T6879] (syz.2.235,6879,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 246.839118][ T6890] overlayfs: failed to clone upperpath [ 246.851078][ T6890] netlink: 14 bytes leftover after parsing attributes in process `syz.0.239'. [ 247.599854][ T6890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.669943][ T6890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.681898][ T6890] bond0 (unregistering): Released all slaves [ 249.766507][ T6908] ip_tables: iptables: counters copy to user failed while replacing table [ 255.604118][ T6940] netlink: 44 bytes leftover after parsing attributes in process `syz.2.256'. [ 255.891739][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.898321][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.652528][ T6955] loop3: detected capacity change from 0 to 512 [ 256.700311][ T6955] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 256.740628][ T6955] System zones: 1-12 [ 257.296888][ T6955] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.258: missing EA_INODE flag [ 257.946648][ T6955] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.258: error while reading EA inode 12 err=-117 [ 258.684870][ T6955] EXT4-fs (loop3): 1 orphan inode deleted [ 258.928686][ T6955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.330929][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.909638][ T6990] binder: 6983:6990 ioctl 4018620d 0 returned -22 [ 266.093917][ T7001] warning: `syz.2.268' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 267.783808][ T5788] Bluetooth: hci3: hardware error 0x00 [ 268.861821][ T7030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.898814][ T7030] netlink: 'syz.0.277': attribute type 1 has an invalid length. [ 268.907008][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.277'. [ 269.828163][ T5788] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 270.592877][ T5788] Bluetooth: hci1: unexpected event for opcode 0x0c13 [ 270.894796][ T7043] tcpci: probe of 0-0002 failed with error -5 [ 270.905481][ T7043] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 271.010693][ T7043] loop3: detected capacity change from 0 to 1024 [ 271.121538][ T7043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.941596][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.286328][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 272.531105][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.552231][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 272.565799][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.007839][ T5788] Bluetooth: hci2: command 0x0c1a tx timeout [ 274.087423][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 274.096816][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.117500][ T9] usb 4-1: config 0 descriptor?? [ 274.975189][ T5854] usb 4-1: USB disconnect, device number 3 [ 275.086274][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 275.093840][ T5788] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 275.821384][ T7121] loop3: detected capacity change from 0 to 164 [ 276.312918][ T7131] loop3: detected capacity change from 0 to 8192 [ 276.342769][ T7131] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 277.166565][ T5788] Bluetooth: hci2: command 0x0c1a tx timeout [ 277.206459][ T5854] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 277.448779][ T5854] usb 4-1: Using ep0 maxpacket: 32 [ 277.553583][ T5854] usb 4-1: unable to get BOS descriptor or descriptor too short [ 277.776411][ T5854] usb 4-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 277.888738][ T5854] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 277.958497][ T5854] usb 4-1: language id specifier not provided by device, defaulting to English [ 277.980695][ T5854] usb 4-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 278.000640][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.023980][ T5854] usb 4-1: Product: syz [ 278.033507][ T5788] Bluetooth: hci2: unexpected event for opcode 0x0804 [ 278.047787][ T5854] usb 4-1: SerialNumber: syz [ 280.059494][ T5854] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 280.298193][ T5854] usb 4-1: USB disconnect, device number 4 [ 281.263400][ T7176] rxe_eth0 speed is unknown, defaulting to 1000 [ 282.049467][ T5788] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 282.059432][ T5788] Bluetooth: hci2: Injecting HCI hardware error event [ 282.067656][ T5788] Bluetooth: hci2: hardware error 0x00 [ 283.231129][ T7184] ip_tables: iptables: counters copy to user failed while replacing table [ 284.007370][ T7195] loop3: detected capacity change from 0 to 512 [ 284.027055][ T7195] EXT4-fs: Ignoring removed nomblk_io_submit option [ 284.045455][ T7195] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 284.152854][ T5788] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 284.205474][ T7195] EXT4-fs (loop3): 1 truncate cleaned up [ 284.630540][ T7195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.318191][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.812123][ T7289] loop3: detected capacity change from 0 to 512 [ 291.821458][ T7289] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 291.904330][ T7153] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 292.190947][ T7297] rxe_eth0 speed is unknown, defaulting to 1000 [ 293.099580][ T7301] loop3: detected capacity change from 0 to 512 [ 293.107091][ T7301] EXT4-fs: Ignoring removed nomblk_io_submit option [ 293.123180][ T7301] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 293.197568][ T7301] EXT4-fs (loop3): 1 truncate cleaned up [ 293.225695][ T7301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.995478][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.675085][ T7327] loop3: detected capacity change from 0 to 1024 [ 298.034947][ T7353] loop3: detected capacity change from 0 to 512 [ 298.162345][ T7353] EXT4-fs: Ignoring removed nomblk_io_submit option [ 298.198266][ T7353] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 298.226960][ T7353] EXT4-fs (loop3): 1 truncate cleaned up [ 298.238106][ T7353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.507566][ T5788] Bluetooth: hci1: unexpected subevent 0x1a length: 12 > 6 [ 299.213418][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.365263][ T7375] loop3: detected capacity change from 0 to 2048 [ 299.423159][ T7375] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 299.446147][ T7375] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 299.490494][ T7375] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)! [ 299.513325][ T7375] EXT4-fs (loop3): group descriptors corrupted! [ 302.037110][ T7414] rxe_eth0 speed is unknown, defaulting to 1000 [ 310.703191][ T7480] loop3: detected capacity change from 0 to 512 [ 310.748692][ T7480] EXT4-fs: Ignoring removed nomblk_io_submit option [ 310.808014][ T7480] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 310.835076][ T7480] EXT4-fs (loop3): 1 truncate cleaned up [ 310.877885][ T7480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.908644][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.779167][ T7525] loop3: detected capacity change from 0 to 2048 [ 314.874146][ T7525] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 315.176750][ T7535] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 315.193777][ T7525] syz.3.459: attempt to access beyond end of device [ 315.193777][ T7525] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 316.540285][ T7551] loop3: detected capacity change from 0 to 4096 [ 316.632727][ T7551] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 316.660149][ T7551] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 318.246567][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.253264][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.381835][ T50] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 318.426513][ T5792] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 318.450903][ T5792] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 318.472036][ T5792] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 318.488112][ T50] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 319.434787][ T7578] loop3: detected capacity change from 0 to 32768 [ 320.634495][ T7608] loop3: detected capacity change from 0 to 64 [ 320.898009][ T7614] loop3: detected capacity change from 0 to 512 [ 320.905966][ T7614] EXT4-fs: Ignoring removed nomblk_io_submit option [ 320.927328][ T7614] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 320.980070][ T7614] EXT4-fs (loop3): 1 truncate cleaned up [ 321.001745][ T7614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.081134][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.394151][ T7647] loop3: detected capacity change from 0 to 512 [ 322.437277][ T7647] EXT4-fs: Ignoring removed nomblk_io_submit option [ 322.477945][ T7647] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 322.515990][ T7647] EXT4-fs (loop3): 1 truncate cleaned up [ 322.549281][ T7647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.600365][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.153753][ T7685] loop3: detected capacity change from 0 to 512 [ 324.288961][ T7685] EXT4-fs: Ignoring removed nomblk_io_submit option [ 324.508200][ T7685] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 324.813167][ T7685] EXT4-fs (loop3): 1 truncate cleaned up [ 324.855339][ T7685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.079587][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.856533][ T5793] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 327.058527][ T5793] usb 4-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 327.090584][ T5793] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 327.136062][ T5793] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 327.164578][ T5793] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 327.208106][ T5793] usb 4-1: config 0 interface 0 has no altsetting 0 [ 327.245573][ T5793] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 327.269780][ T5793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.296652][ T5793] usb 4-1: config 0 descriptor?? [ 327.302556][ T7705] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 327.895501][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.541'. [ 328.250253][ T5793] logitech 0003:046D:CA04.0002: unknown main item tag 0x2 [ 328.267353][ T5793] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 328.284802][ T5793] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 328.296559][ T7738] macsec0: default FDB implementation only supports local addresses [ 328.323996][ T5793] input: HID 046d:ca04 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:046D:CA04.0002/input/input5 [ 328.534112][ T5793] logitech 0003:046D:CA04.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:ca04] on usb-dummy_hcd.3-1/input0 [ 328.563639][ T5793] logitech 0003:046D:CA04.0002: implement() called with too large value 243 (n: 0)! (kworker/0:3) [ 328.600535][ T5793] logitech 0003:046D:CA04.0002: Force feedback for Logitech variant 2 rumble devices by Anssi Hannula [ 328.652573][ T5793] usb 4-1: USB disconnect, device number 5 [ 328.702869][ T7745] fido_id[7745]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 330.701590][ T7782] sctp: [Deprecated]: syz.0.560 (pid 7782) Use of int in max_burst socket option. [ 330.701590][ T7782] Use struct sctp_assoc_value instead [ 331.082266][ T7789] loop3: detected capacity change from 0 to 2048 [ 331.131422][ T7789] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 333.003525][ T7807] loop3: detected capacity change from 0 to 65536 [ 333.066924][ T7807] XFS (loop3): Mounting V5 Filesystem d408de26-55fb-48ab-a8ab-aacedb20f9dd [ 333.245231][ T7807] XFS (loop3): Ending clean mount [ 334.006688][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 334.006704][ T28] audit: type=1326 audit(1793265691.883:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.1.580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ceb9f559 code=0x7ffc0000 [ 334.074764][ T5792] XFS (loop3): Unmounting Filesystem d408de26-55fb-48ab-a8ab-aacedb20f9dd [ 334.206320][ T28] audit: type=1326 audit(1793265691.943:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.1.580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fb3ceb9f559 code=0x7ffc0000 [ 334.230595][ T28] audit: type=1326 audit(1793265691.943:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.1.580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ceb9f559 code=0x7ffc0000 [ 334.256103][ T28] audit: type=1326 audit(1793265691.943:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.1.580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ceb9f559 code=0x7ffc0000 [ 335.556347][ T7858] loop3: detected capacity change from 0 to 512 [ 335.563934][ T7858] EXT4-fs: Ignoring removed nomblk_io_submit option [ 335.578218][ T7858] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 335.611336][ T7858] EXT4-fs (loop3): 1 truncate cleaned up [ 335.629478][ T7858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.758240][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.780052][ T7881] jffs2: notice: (7881) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 338.464346][ T7893] loop3: detected capacity change from 0 to 1764 [ 338.773116][ T7901] loop3: detected capacity change from 0 to 512 [ 338.797468][ T7901] EXT4-fs: Ignoring removed nomblk_io_submit option [ 338.830394][ T7901] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 338.877180][ T7901] EXT4-fs (loop3): 1 truncate cleaned up [ 338.884231][ T7901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.985456][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.340220][ T7942] Cannot find add_set index 0 as target [ 341.795438][ T7955] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 342.090341][ T7970] netlink: 'syz.2.631': attribute type 3 has an invalid length. [ 342.277261][ T7979] 9pnet_fd: Insufficient options for proto=fd [ 342.810471][ T7995] netlink: 'syz.3.642': attribute type 1 has an invalid length. [ 342.818533][ T7995] netlink: 56 bytes leftover after parsing attributes in process `syz.3.642'. [ 343.155001][ T8009] loop3: detected capacity change from 0 to 1024 [ 343.176725][ T8009] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 343.227421][ T8009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.390134][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.634359][ T8022] loop3: detected capacity change from 0 to 2048 [ 343.647580][ T8025] block device autoloading is deprecated and will be removed. [ 343.708827][ T8022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 343.883831][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.845995][ T8063] loop3: detected capacity change from 0 to 128 [ 344.868568][ T8063] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 345.022616][ T2936] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 345.804564][ T8069] loop3: detected capacity change from 0 to 32768 [ 345.891389][ T8069] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 346.059146][ T8069] XFS (loop3): Ending clean mount [ 347.050050][ T5792] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 347.579880][ T8127] loop3: detected capacity change from 0 to 128 [ 347.617429][ T8127] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 347.678196][ T8127] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 347.706243][ T8127] FAT-fs (loop3): Filesystem has been set read-only [ 347.713002][ T8127] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 347.737302][ T8127] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 347.770824][ T8127] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 347.871801][ T5792] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 348.063619][ T8135] loop3: detected capacity change from 0 to 512 [ 348.084814][ T8135] EXT4-fs: Ignoring removed nomblk_io_submit option [ 348.134471][ T8135] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 348.149954][ T8135] EXT4-fs (loop3): 1 truncate cleaned up [ 348.157605][ T8135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.843980][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.168018][ T8155] loop3: detected capacity change from 0 to 256 [ 349.411735][ T8155] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 353.768424][ T8216] ipvlan2: entered promiscuous mode [ 353.796501][ T8216] team0: Device ipvlan2 failed to register rx_handler [ 354.296714][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 354.496574][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 354.517822][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 354.544656][ T27] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 354.577922][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.591113][ T27] usb 4-1: config 0 descriptor?? [ 354.844587][ T27] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 355.050521][ T5871] usb 4-1: USB disconnect, device number 6 [ 355.785086][ T8260] loop3: detected capacity change from 0 to 4096 [ 355.828130][ T8260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.983262][ T28] audit: type=1800 audit(1793265713.863:149): pid=8260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.751" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 356.136647][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.306867][ T8268] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl812) [ 356.511100][ T8274] loop3: detected capacity change from 0 to 512 [ 356.567669][ T8274] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 356.606366][ T8274] System zones: 1-12 [ 356.657023][ T8274] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.756: missing EA_INODE flag [ 356.705266][ T8274] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.756: error while reading EA inode 12 err=-117 [ 356.735276][ T8274] EXT4-fs (loop3): 1 orphan inode deleted [ 356.752252][ T8274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.893873][ T8274] fscrypt (loop3, inode 15): Mutually exclusive encryption flags (0x1a) [ 357.002800][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.680339][ T8297] gadgetfs: bound to dummy_udc driver [ 357.956412][ T27] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 357.975551][ C1] gadgetfs: connected [ 357.982397][ T8296] gadgetfs: suspended from state 3 [ 357.988274][ T8296] gadgetfs: disconnected [ 358.866251][ T5871] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 359.076238][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 359.111426][ T5871] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.129404][ T5871] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.151821][ T5871] usb 4-1: config 0 interface 0 has no altsetting 0 [ 359.158588][ T5871] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 359.168007][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.187195][ T5871] usb 4-1: config 0 descriptor?? [ 359.469100][ T8333] sctp: [Deprecated]: syz.0.781 (pid 8333) Use of int in max_burst socket option deprecated. [ 359.469100][ T8333] Use struct sctp_assoc_value instead [ 359.622884][ T5871] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 359.642039][ T5871] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 359.654558][ T5871] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 359.667604][ T5871] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 359.674734][ T5871] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 359.697343][ T5871] mcp2221 0003:04D8:00DD.0003: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 359.861511][ T5871] usb 4-1: USB disconnect, device number 7 [ 361.317975][ T5871] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 361.546251][ T5871] usb 4-1: Using ep0 maxpacket: 8 [ 361.617021][ T5871] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.661368][ T5871] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.681845][ T5871] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 361.725873][ T5871] usb 4-1: config 0 interface 0 has no altsetting 0 [ 361.751756][ T5871] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 361.784986][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.831776][ T5871] usb 4-1: config 0 descriptor?? [ 363.855221][ T5871] input: HID 046d:c623 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:046D:C623.0004/input/input6 [ 364.003597][ T5871] logitech 0003:046D:C623.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.3-1/input0 [ 364.036754][ T5871] usb 4-1: USB disconnect, device number 8 [ 364.207584][ T8411] fido_id[8411]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 366.114239][ T8436] jffs2: notice: (8436) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 367.345456][ T8432] loop3: detected capacity change from 0 to 32768 [ 367.380383][ T8432] XFS: ikeep mount option is deprecated. [ 367.498355][ T8432] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 368.238402][ T8432] XFS (loop3): Ending clean mount [ 368.306071][ T8462] fuse: Bad value for 'fd' [ 368.346984][ T8462] 9pnet_fd: Insufficient options for proto=fd [ 368.452243][ T5792] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 369.848296][ T8486] loop3: detected capacity change from 0 to 1024 [ 369.933480][ T8486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.194427][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.600466][ T8519] loop3: detected capacity change from 0 to 1024 [ 370.613172][ T8519] EXT4-fs: Ignoring removed nomblk_io_submit option [ 370.630446][ T8519] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 370.654192][ T8519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.667310][ T8519] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.720402][ T28] audit: type=1804 audit(1793265728.603:150): pid=8519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.852" name="/newroot/155/file1/file1" dev="loop3" ino=15 res=1 errno=0 [ 370.812414][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 373.342270][ T8564] loop3: detected capacity change from 0 to 32768 [ 373.455870][ T8564] JBD2: Ignoring recovery information on journal [ 373.738210][ T8564] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 374.738340][ T5792] ocfs2: Unmounting device (7,3) on (node local) [ 377.657502][ T5874] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 377.877774][ T5874] usb 4-1: unable to get BOS descriptor or descriptor too short [ 377.912363][ T5874] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.946523][ T5874] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 377.955589][ T5874] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 378.039899][ T5874] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 378.093033][ T5874] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 378.134740][ T5874] usb 4-1: config 1 interface 1 has no altsetting 0 [ 378.165614][ T5874] usb 4-1: string descriptor 0 read error: -22 [ 378.927236][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.946010][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.415476][ T5874] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 379.424682][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.497171][ T8653] sctp: [Deprecated]: syz.2.900 (pid 8653) Use of int in max_burst socket option. [ 379.497171][ T8653] Use struct sctp_assoc_value instead [ 379.733219][ T8661] netlink: 'syz.2.908': attribute type 12 has an invalid length. [ 379.748029][ T8661] ip6gre1: entered promiscuous mode [ 379.753397][ T8661] ip6gre1: entered allmulticast mode [ 380.256388][ T5874] usb 4-1: 2:0: bogus dB values (-11561/-11298), disabling dB reporting [ 380.286263][ T5874] usb 4-1: 2:0: failed to get current value for ch 1 (-71) [ 380.312695][ T5874] usb 4-1: Warning! Unlikely big volume range (=675), cval->res is probably wrong. [ 380.336351][ T5874] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = -29598/-28923/1 [ 380.396074][ T5874] usb 4-1: USB disconnect, device number 9 [ 383.847130][ T8728] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3393688969 (54299023504 ns) > initial count (49421972784 ns). Using initial count to start timer. [ 385.396870][ T8771] jffs2: notice: (8771) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 386.180847][ T8798] tipc: Started in network mode [ 386.186601][ T8798] tipc: Node identity 1001001, cluster identity 4711 [ 386.198566][ T8798] tipc: Node number set to 16781313 [ 386.215789][ T8798] tipc: Enabled bearer , priority 0 [ 386.518397][ T8795] loop3: detected capacity change from 0 to 32768 [ 386.561411][ T8795] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 386.671413][ T8795] XFS (loop3): Ending clean mount [ 386.871493][ T5792] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 389.765954][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e19c400: rx timeout, send abort [ 389.786493][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e19c400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 391.415725][ T8877] jffs2: notice: (8877) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 391.572122][ T8867] loop3: detected capacity change from 0 to 32768 [ 391.606936][ T8867] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.990 (8867) [ 391.698512][ T8867] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 391.719663][ T8867] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 391.736827][ T8867] BTRFS info (device loop3): using free space tree [ 392.018838][ T8867] BTRFS info (device loop3): enabling ssd optimizations [ 393.343933][ T5792] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 395.328133][ T8953] loop3: detected capacity change from 0 to 512 [ 395.335873][ T8953] EXT4-fs: Ignoring removed nomblk_io_submit option [ 395.366413][ T8953] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 395.426636][ T8953] EXT4-fs (loop3): 1 truncate cleaned up [ 395.433994][ T8953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.508176][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.696345][ T27] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 398.094182][ T27] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 398.116273][ T27] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 398.124502][ T27] usb 4-1: Product: syz [ 398.129082][ T27] usb 4-1: Manufacturer: syz [ 398.133756][ T27] usb 4-1: SerialNumber: syz [ 398.148203][ T27] usb 4-1: config 0 descriptor?? [ 398.183074][ T27] ch341 4-1:0.0: ch341-uart converter detected [ 399.582583][ T27] ch341-uart ttyUSB0: break control not supported, using simulated break [ 399.968272][ T27] usb 4-1: ch341-uart converter now attached to ttyUSB0 [ 400.026539][ T27] usb 4-1: USB disconnect, device number 10 [ 400.121861][ T27] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 400.150206][ T27] ch341 4-1:0.0: device disconnected [ 400.397279][ T9014] netlink: 'syz.0.1040': attribute type 3 has an invalid length. [ 401.143771][ T9038] futex_wake_op: syz.0.1047 tries to shift op by 144; fix this program [ 401.557135][ T9051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1051'. [ 401.984084][ T9069] overlayfs: failed to clone upperpath [ 402.083814][ T9071] 9pnet_fd: Insufficient options for proto=fd [ 402.330561][ T9080] loop3: detected capacity change from 0 to 512 [ 404.193357][ T9103] FAULT_INJECTION: forcing a failure. [ 404.193357][ T9103] name failslab, interval 1, probability 0, space 0, times 1 [ 404.206671][ T9103] CPU: 1 PID: 9103 Comm: syz.3.1071 Not tainted syzkaller #0 [ 404.214092][ T9103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 404.224204][ T9103] Call Trace: [ 404.227527][ T9103] [ 404.230507][ T9103] dump_stack_lvl+0x18c/0x250 [ 404.235264][ T9103] ? show_regs_print_info+0x20/0x20 [ 404.240514][ T9103] ? load_image+0x420/0x420 [ 404.245079][ T9103] ? mark_lock+0x94/0x320 [ 404.249515][ T9103] should_fail_ex+0x394/0x4c0 [ 404.254278][ T9103] should_failslab+0x9/0x20 [ 404.258839][ T9103] slab_pre_alloc_hook+0x59/0x300 [ 404.263919][ T9103] kmem_cache_alloc_node+0x5e/0x320 [ 404.269167][ T9103] ? __alloc_skb+0x103/0x2c0 [ 404.273811][ T9103] __alloc_skb+0x103/0x2c0 [ 404.278281][ T9103] tipc_buf_acquire+0x2b/0xe0 [ 404.283018][ T9103] tipc_named_publish+0x266/0x760 [ 404.288091][ T9103] tipc_nametbl_publish+0x15e/0x270 [ 404.293383][ T9103] tipc_sk_publish+0x1cc/0x430 [ 404.298211][ T9103] ? tipc_sk_withdraw+0x640/0x640 [ 404.303306][ T9103] ? do_raw_spin_unlock+0x121/0x230 [ 404.308563][ T9103] tipc_sk_bind+0x1ee/0x300 [ 404.313141][ T9103] __sys_bind+0x2f0/0x3f0 [ 404.317538][ T9103] ? __ia32_sys_socketpair+0xb0/0xb0 [ 404.322870][ T9103] __x64_sys_bind+0x7a/0x90 [ 404.327424][ T9103] do_syscall_64+0x55/0xb0 [ 404.331890][ T9103] ? clear_bhb_loop+0x40/0x90 [ 404.336605][ T9103] ? clear_bhb_loop+0x40/0x90 [ 404.341319][ T9103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.347257][ T9103] RIP: 0033:0x7f00e079f559 [ 404.351703][ T9103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.371336][ T9103] RSP: 002b:00007f00de9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 404.379783][ T9103] RAX: ffffffffffffffda RBX: 00007f00e0a25fa0 RCX: 00007f00e079f559 [ 404.387810][ T9103] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 404.396271][ T9103] RBP: 00007f00e0836b20 R08: 0000000000000000 R09: 0000000000000000 [ 404.404296][ T9103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.412290][ T9103] R13: 00007f00e0a26038 R14: 00007f00e0a25fa0 R15: 00007ffc2df09a58 [ 404.420301][ T9103] [ 404.423461][ T9103] tipc: Publication distribution failure [ 404.771568][ T9108] tipc: Resetting bearer [ 405.467969][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1081'. [ 407.071848][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 407.083634][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 407.092359][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 407.100566][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 407.108662][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 407.135280][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 407.301403][ T9137] rxe_eth0 speed is unknown, defaulting to 1000 [ 408.101527][ T9137] chnl_net:caif_netlink_parms(): no params data found [ 408.372940][ T9137] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.413850][ T9137] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.442854][ T9137] bridge_slave_0: entered allmulticast mode [ 408.470916][ T9137] bridge_slave_0: entered promiscuous mode [ 408.510193][ T9137] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.534004][ T9137] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.546493][ T9137] bridge_slave_1: entered allmulticast mode [ 408.554012][ T9137] bridge_slave_1: entered promiscuous mode [ 408.632875][ T9137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.670158][ T9137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.764255][ T9137] team0: Port device team_slave_0 added [ 408.779808][ T9137] team0: Port device team_slave_1 added [ 408.835073][ T9137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.850137][ T9137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.881222][ T9137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.897320][ T9137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.904322][ T9137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.931509][ T9137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.040645][ T9137] hsr_slave_0: entered promiscuous mode [ 409.049666][ T9137] hsr_slave_1: entered promiscuous mode [ 409.074611][ T9137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.082358][ T9137] Cannot create hsr debugfs directory [ 409.246520][ T5788] Bluetooth: hci3: command tx timeout [ 409.491107][ T9175] jffs2: notice: (9175) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 409.494989][ T9137] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 409.527376][ T9137] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 409.545371][ T9137] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 409.564514][ T9137] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 409.787180][ T9137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.857074][ T9137] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.893153][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.900404][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.941464][ T4501] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.948769][ T4501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.127030][ T9137] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 410.169220][ T9137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 410.483340][ T9198] netlink: 'syz.0.1109': attribute type 32 has an invalid length. [ 410.760897][ T9137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.346287][ T5788] Bluetooth: hci3: command tx timeout [ 412.397305][ T9226] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 412.489900][ T28] audit: type=1326 audit(1793265770.373:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.0.1119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b2d9f559 code=0x7fc00000 [ 412.583284][ T9137] veth0_vlan: entered promiscuous mode [ 412.589069][ T28] audit: type=1326 audit(1793265770.413:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.0.1119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f67b2d9f559 code=0x7fc00000 [ 412.646344][ T28] audit: type=1326 audit(1793265770.423:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.0.1119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b2d9f559 code=0x7fc00000 [ 412.683396][ T9137] veth1_vlan: entered promiscuous mode [ 412.808246][ T9137] veth0_macvtap: entered promiscuous mode [ 412.839510][ T9137] veth1_macvtap: entered promiscuous mode [ 412.879673][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.893572][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.905236][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.919363][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.943903][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.965226][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.990086][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.016348][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.052453][ T9137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.070116][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.080845][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.093539][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.106552][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.119339][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.135464][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.145701][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.156566][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.170520][ T9137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.208229][ T9137] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.226604][ T9137] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.244728][ T9137] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.253899][ T9137] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.265895][ T9245] netlink: 'syz.1.1126': attribute type 1 has an invalid length. [ 413.308105][ T9245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.354154][ T9248] bond0: (slave geneve2): making interface the new active one [ 413.391816][ T9248] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 413.409602][ T5788] Bluetooth: hci3: command tx timeout [ 413.636551][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.644832][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.724766][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.772864][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.015239][ T9276] FAULT_INJECTION: forcing a failure. [ 414.015239][ T9276] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 414.045618][ T9276] CPU: 0 PID: 9276 Comm: syz.4.1082 Not tainted syzkaller #0 [ 414.053090][ T9276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 414.063193][ T9276] Call Trace: [ 414.066540][ T9276] [ 414.069516][ T9276] dump_stack_lvl+0x18c/0x250 [ 414.074299][ T9276] ? show_regs_print_info+0x20/0x20 [ 414.079614][ T9276] ? load_image+0x420/0x420 [ 414.084190][ T9276] ? __lock_acquire+0x7eb0/0x7eb0 [ 414.089303][ T9276] ? __virt_addr_valid+0x10c/0x380 [ 414.094530][ T9276] should_fail_ex+0x394/0x4c0 [ 414.099287][ T9276] _copy_from_user+0x2f/0xe0 [ 414.103945][ T9276] vmemdup_user+0xac/0x1e0 [ 414.108426][ T9276] path_setxattr+0x207/0x590 [ 414.113065][ T9276] ? vfs_write+0x5de/0x9a0 [ 414.117535][ T9276] ? simple_xattrs_free+0x150/0x150 [ 414.122801][ T9276] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 414.128820][ T9276] ? lock_chain_count+0x20/0x20 [ 414.133714][ T9276] __x64_sys_lsetxattr+0xb8/0xd0 [ 414.138749][ T9276] do_syscall_64+0x55/0xb0 [ 414.143201][ T9276] ? clear_bhb_loop+0x40/0x90 [ 414.147921][ T9276] ? clear_bhb_loop+0x40/0x90 [ 414.152637][ T9276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 414.158567][ T9276] RIP: 0033:0x7ffa6859f559 [ 414.163020][ T9276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.182858][ T9276] RSP: 002b:00007ffa69515028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 414.191320][ T9276] RAX: ffffffffffffffda RBX: 00007ffa68825fa0 RCX: 00007ffa6859f559 [ 414.199370][ T9276] RDX: 0000200000001cc0 RSI: 00002000000001c0 RDI: 0000000000000000 [ 414.207382][ T9276] RBP: 00007ffa68636b20 R08: 0000000000000003 R09: 0000000000000000 [ 414.215423][ T9276] R10: 0000000000001001 R11: 0000000000000246 R12: 0000000000000000 [ 414.223481][ T9276] R13: 00007ffa68826038 R14: 00007ffa68825fa0 R15: 00007ffcb7832b98 [ 414.231540][ T9276] [ 414.415621][ T9283] overlayfs: failed to resolve './cgroup': -2 [ 415.487331][ T5788] Bluetooth: hci3: command tx timeout [ 416.781388][ T9348] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 416.941893][ T9356] overlayfs: failed to clone upperpath [ 418.446519][ T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 418.826897][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 418.834211][ T27] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 418.850752][ T27] usb 5-1: config 0 interface 0 has no altsetting 0 [ 418.878393][ T27] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 418.887736][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.895774][ T27] usb 5-1: Product: syz [ 418.900179][ T27] usb 5-1: Manufacturer: syz [ 418.904875][ T27] usb 5-1: SerialNumber: syz [ 418.994488][ T27] usb 5-1: config 0 descriptor?? [ 419.621667][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 419.689957][ T27] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7 [ 419.751820][ T27] imon:send_packet: packet tx failed (-71) [ 419.776404][ T27] imon 5-1:0.0: panel buttons/knobs setup failed [ 419.928642][ T27] rc_core: IR keymap rc-imon-pad not found [ 419.934554][ T27] Registered IR keymap rc-empty [ 419.960505][ T27] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 420.103440][ T9393] jffs2: notice: (9393) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 420.198668][ T27] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 420.216665][ T27] imon:send_packet: packet tx failed (-71) [ 420.246287][ T27] imon 5-1:0.0: remote input dev register failed [ 420.252837][ T27] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 420.736544][ T27] imon 5-1:0.0: unable to initialize intf0, err 0 [ 420.886073][ T27] imon:imon_probe: failed to initialize context! [ 420.893887][ T27] imon 5-1:0.0: unable to register, err -19 [ 420.955889][ T27] usb 5-1: USB disconnect, device number 2 [ 421.178667][ T9408] veth0: entered promiscuous mode [ 421.189252][ T9408] veth0: entered allmulticast mode [ 422.332739][ T9426] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 423.376416][ T9446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1193'. [ 423.654168][ T9454] loop4: detected capacity change from 0 to 512 [ 423.665512][ T9454] EXT4-fs: Ignoring removed nomblk_io_submit option [ 423.718246][ T9454] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 423.755936][ T9454] EXT4-fs (loop4): 1 truncate cleaned up [ 423.780666][ T9454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.853759][ T9137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.487726][ T9514] overlayfs: failed to clone upperpath [ 427.415307][ T9523] loop4: detected capacity change from 0 to 512 [ 427.433359][ T9523] EXT4-fs: Ignoring removed nobh option [ 427.492483][ T9523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.554033][ T9523] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.574982][ T9523] EXT4-fs error (device loop4): ext4_do_update_inode:5294: inode #2: comm syz.4.1222: corrupted inode contents [ 427.594398][ T9523] EXT4-fs error (device loop4): ext4_dirty_inode:6188: inode #2: comm syz.4.1222: mark_inode_dirty error [ 427.610837][ T9523] EXT4-fs error (device loop4): ext4_do_update_inode:5294: inode #2: comm syz.4.1222: corrupted inode contents [ 427.710862][ T9137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.637092][ T9571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1239'. [ 429.785770][ T9571] 8021q: adding VLAN 0 to HW filter on device bond1 [ 429.810655][ T9585] overlayfs: failed to clone upperpath [ 429.903360][ T9577] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 430.345183][ T9581] bond1 (unregistering): (slave macvlan1): Releasing backup interface [ 430.395180][ T9581] bond1 (unregistering): Released all slaves [ 430.974025][ T9620] CIFS: Attempting to mount //127.0.0.1/share [ 431.186971][ T9620] CIFS: VFS: cifs_mount failed w/return code = -5 [ 433.695512][ T9699] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 435.127417][ T5854] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 435.316949][ T5854] usb 5-1: Using ep0 maxpacket: 32 [ 435.349894][ T5854] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 435.378948][ T5854] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 435.400663][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 435.421174][ T5854] usb 5-1: Product: syz [ 435.442097][ T5854] usb 5-1: Manufacturer: syz [ 435.447183][ T5854] usb 5-1: SerialNumber: syz [ 435.472079][ T5854] usb 5-1: config 0 descriptor?? [ 435.479163][ T9730] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 436.537659][ T9754] overlayfs: failed to clone upperpath [ 438.228440][ T9768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1310'. [ 438.253408][ T9768] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.263188][ T9768] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.272021][ T9768] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.280836][ T9768] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.348049][ T9768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1310'. [ 438.738598][ T9] usb 5-1: USB disconnect, device number 3 [ 440.497063][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.503722][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.023092][ T9866] loop4: detected capacity change from 0 to 512 [ 444.086747][ T9866] EXT4-fs: Ignoring removed nomblk_io_submit option [ 444.168442][ T9866] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 444.241420][ T9866] EXT4-fs (loop4): 1 truncate cleaned up [ 444.278450][ T9866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.292148][ T9137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.020724][ T9919] overlayfs: failed to clone upperpath [ 447.275885][ T9930] loop4: detected capacity change from 0 to 512 [ 447.298779][ T9930] EXT4-fs: Ignoring removed nomblk_io_submit option [ 447.347944][ T9930] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 447.373765][ T9930] EXT4-fs (loop4): 1 truncate cleaned up [ 447.392051][ T9930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.751059][ T9944] overlayfs: failed to clone upperpath [ 448.485019][ T9137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.854138][ T9972] loop4: detected capacity change from 0 to 512 [ 448.887111][ T9972] EXT4-fs: Ignoring removed nomblk_io_submit option [ 448.910389][ T9972] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 448.977837][ T9972] EXT4-fs (loop4): 1 truncate cleaned up [ 448.997956][ T9972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.511621][ T9989] overlayfs: failed to clone upperpath [ 449.764087][ T9137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.828673][ T9995] netlink: 'syz.0.1388': attribute type 1 has an invalid length. [ 449.913710][ T9995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.187782][ T9995] bond0: (slave geneve2): making interface the new active one [ 450.214062][ T9995] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 451.908042][T10062] overlayfs: failed to clone upperpath [ 452.674426][T10083] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 453.626392][ T5874] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 453.872253][ T5874] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 453.894261][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.932341][ T5874] usb 5-1: Product: syz [ 453.947492][ T5874] usb 5-1: Manufacturer: syz [ 453.960543][ T5874] usb 5-1: SerialNumber: syz [ 454.001182][ T5874] usb 5-1: config 0 descriptor?? [ 454.459419][ T5874] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 455.828832][ T5874] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 455.866562][ T5874] usb 5-1: USB disconnect, device number 4 [ 457.354652][T10167] futex_wake_op: syz.0.1451 tries to shift op by 32; fix this program [ 457.656325][T10173] loop4: detected capacity change from 0 to 512 [ 457.672926][T10173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 457.688331][T10173] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 457.733274][T10173] EXT4-fs (loop4): 1 truncate cleaned up [ 457.750019][T10173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.085286][T10185] overlayfs: failed to clone upperpath [ 458.158449][ T9137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.313417][T10191] loop4: detected capacity change from 0 to 512 [ 458.331779][T10191] EXT4-fs: Ignoring removed nomblk_io_submit option [ 458.345774][T10191] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 458.364160][T10191] EXT4-fs (loop4): 1 truncate cleaned up [ 458.371624][T10191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.860738][ T9137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.999710][T10213] loop4: detected capacity change from 0 to 512 [ 461.010639][T10213] EXT4-fs: Ignoring removed nomblk_io_submit option [ 461.028768][T10213] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 461.065557][T10213] EXT4-fs (loop4): 1 truncate cleaned up [ 461.073234][T10213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.505133][ T9137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.587597][T10226] ip_tables: iptables: counters copy to user failed while replacing table [ 461.748212][T10231] loop4: detected capacity change from 0 to 1024 [ 462.124092][T10243] loop4: detected capacity change from 0 to 512 [ 462.145959][T10243] EXT4-fs: Ignoring removed nomblk_io_submit option [ 462.191384][T10243] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 462.254680][T10243] EXT4-fs (loop4): 1 truncate cleaned up [ 462.302520][T10243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.745418][ T9137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.177335][T10282] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1498'. [ 464.266768][ T5854] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 464.446877][ T5854] usb 5-1: too many configurations: 248, using maximum allowed: 8 [ 464.456339][ T5854] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 464.465217][ T5854] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.475580][ T5854] usb 5-1: config 0 has no interfaces? [ 464.484403][ T5854] usb 5-1: config index 1 descriptor too short (expected 28277, got 36) [ 464.493192][ T5854] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.504105][ T5854] usb 5-1: config 0 has no interfaces? [ 464.511313][ T5854] usb 5-1: config index 2 descriptor too short (expected 28277, got 36) [ 464.519774][ T5854] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.530753][ T5854] usb 5-1: config 0 has no interfaces? [ 464.538172][ T5854] usb 5-1: config index 3 descriptor too short (expected 28277, got 36) [ 464.546897][ T5854] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.557364][ T5854] usb 5-1: config 0 has no interfaces? [ 464.564205][ T5854] usb 5-1: config index 4 descriptor too short (expected 28277, got 36) [ 464.573464][ T5854] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.596239][ T5854] usb 5-1: config 0 has no interfaces? [ 464.605649][ T5854] usb 5-1: config index 5 descriptor too short (expected 28277, got 36) [ 464.614416][ T5854] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.624949][ T5854] usb 5-1: config 0 has no interfaces? [ 464.636583][ T5854] usb 5-1: config index 6 descriptor too short (expected 28277, got 36) [ 464.654837][ T5854] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.665476][ T5854] usb 5-1: config 0 has no interfaces? [ 464.672936][ T5854] usb 5-1: config index 7 descriptor too short (expected 28277, got 36) [ 464.681728][ T5854] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.697091][ T5854] usb 5-1: config 0 has no interfaces? [ 464.703624][ T5854] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 464.713381][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.727180][ T5854] usb 5-1: config 0 descriptor?? [ 465.944858][ T5854] usb 5-1: string descriptor 0 read error: -71 [ 465.953364][ T5854] usb 5-1: USB disconnect, device number 5 [ 466.408452][T10351] loop4: detected capacity change from 0 to 512 [ 466.415820][T10351] EXT4-fs: Ignoring removed nomblk_io_submit option [ 466.431880][T10351] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 466.456402][T10351] EXT4-fs (loop4): 1 truncate cleaned up [ 466.464119][T10351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.579537][ T9137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.740052][T10365] loop4: detected capacity change from 0 to 512 [ 466.747574][T10365] EXT4-fs: Ignoring removed nomblk_io_submit option [ 466.779632][T10365] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 466.794590][T10365] EXT4-fs (loop4): 1 truncate cleaned up [ 466.815517][T10365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.221556][ T9137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.405963][T10377] zram0: detected capacity change from 0 to 8 [ 468.035617][T10400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1542'. [ 469.444444][T10432] device-mapper: thin: Data device (ram9) discard unsupported: Disabling discard passdown. [ 469.566167][T10440] syz.4.1552 (10440): attempted to duplicate a private mapping with mremap. This is not supported. [ 469.596505][T10432] device-mapper: ioctl: The device has no table. [ 471.492290][T10480] loop4: detected capacity change from 0 to 8192 [ 471.600315][T10480] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 471.695237][T10480] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 471.736536][T10480] REISERFS (device loop4): using ordered data mode [ 471.756140][T10480] reiserfs: using flush barriers [ 471.786252][T10480] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 471.847443][T10480] REISERFS (device loop4): checking transaction log (loop4) [ 471.907193][T10480] REISERFS (device loop4): Using r5 hash to sort names [ 471.939046][T10480] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 472.566804][T10495] ip_tables: iptables: counters copy to user failed while replacing table [ 472.628013][ T28] audit: type=1326 audit(1793265830.513:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10490 comm="syz.0.1574" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b2d9f559 code=0x7ffc0000 [ 472.678430][ T28] audit: type=1326 audit(1793265830.513:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10490 comm="syz.0.1574" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b2d9f559 code=0x7ffc0000 [ 473.420182][T10517] CIFS: Attempting to mount //127.0.0.1/share [ 473.498238][T10517] CIFS: VFS: cifs_mount failed w/return code = -5 [ 474.478333][T10540] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1588'. [ 475.944603][T10573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1600'. [ 476.237569][T10558] overlayfs: failed to clone lowerpath [ 476.243704][T10578] overlayfs: failed to resolve './cgroup': -2 [ 476.394679][T10580] ieee802154 phy0 wpan0: encryption failed: -22 [ 479.563055][T10650] ip_tables: iptables: counters copy to user failed while replacing table [ 480.920407][T10673] overlayfs: failed to resolve './cgroup': -2 [ 482.193127][T10702] loop4: detected capacity change from 0 to 512 [ 482.223415][T10702] EXT4-fs: Ignoring removed nomblk_io_submit option [ 482.276771][T10702] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 482.337323][T10702] EXT4-fs (loop4): 1 truncate cleaned up [ 482.344721][T10702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.242751][T10719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1650'. [ 483.355222][T10727] overlayfs: failed to clone upperpath [ 484.843808][ T9137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.882483][T10764] syz_tun: entered allmulticast mode [ 485.073952][T10768] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 487.000959][T10804] ip_tables: iptables: counters copy to user failed while replacing table [ 488.636102][T10820] TC_ACT_REPEAT abuse ? [ 488.902171][T10826] loop4: detected capacity change from 0 to 512 [ 488.914565][T10826] EXT4-fs: Ignoring removed nomblk_io_submit option [ 488.925897][T10826] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 488.950449][T10826] EXT4-fs (loop4): 1 truncate cleaned up [ 488.980390][T10826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.079040][ T9137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.703559][T10867] loop4: detected capacity change from 0 to 512 [ 490.734843][T10867] EXT4-fs: Ignoring removed nomblk_io_submit option [ 490.781851][T10867] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 490.823453][T10867] EXT4-fs (loop4): 1 truncate cleaned up [ 490.842540][T10867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.523864][ T9137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.262392][T10897] loop4: detected capacity change from 0 to 512 [ 494.289013][T10897] EXT4-fs: Ignoring removed nomblk_io_submit option [ 494.341416][T10897] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 494.378903][T10897] EXT4-fs (loop4): 1 truncate cleaned up [ 494.403607][T10897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.964844][T10915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1701'. [ 495.707722][ T9137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.558232][T10947] loop4: detected capacity change from 0 to 512 [ 496.570993][T10947] EXT4-fs: Ignoring removed nomblk_io_submit option [ 496.600042][T10947] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 496.648185][T10947] EXT4-fs (loop4): 1 truncate cleaned up [ 496.678389][T10947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.446353][ T9137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.938918][T10998] netlink: 'syz.0.1739': attribute type 10 has an invalid length. [ 498.958008][T10998] syz_tun: entered promiscuous mode [ 500.819630][ T5871] kernel read not supported for file [userfaultfd] (pid: 5871 comm: kworker/0:6) [ 501.657083][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.663760][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.160913][T11043] syzkaller0: entered promiscuous mode [ 502.178366][T11043] syzkaller0: entered allmulticast mode [ 502.527986][T11053] syzkaller0: entered promiscuous mode [ 502.537154][T11053] syzkaller0: entered allmulticast mode [ 502.986928][T11067] ip_tables: iptables: counters copy to user failed while replacing table [ 504.060341][ T77] wlan1: Trigger new scan to find an IBSS to join [ 504.139236][ T77] ------------[ cut here ]------------ [ 504.145121][ T77] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x40 [ 504.156412][ T77] WARNING: CPU: 0 PID: 77 at net/mac80211/rate.c:385 __rate_control_send_low+0x632/0x880 [ 504.166414][ T77] Modules linked in: [ 504.170339][ T77] CPU: 0 PID: 77 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 504.177822][ T77] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 504.187932][ T77] Workqueue: events_unbound cfg80211_wiphy_work [ 504.194283][ T77] RIP: 0010:__rate_control_send_low+0x632/0x880 [ 504.200638][ T77] Code: 30 42 0f b6 04 28 84 c0 0f 85 e5 01 00 00 41 8b 0e 48 c7 c7 80 af 00 8c 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 4e 75 45 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 04 fa ff [ 504.220388][ T77] RSP: 0018:ffffc900020ef400 EFLAGS: 00010246 [ 504.226525][ T77] RAX: 83850c70e940b000 RBX: 000000000000000c RCX: ffff88801931da00 [ 504.234562][ T77] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 504.242598][ T77] RBP: 0000000000000084 R08: ffffc900020ef007 R09: 1ffff9200041de00 [ 504.250651][ T77] R10: dffffc0000000000 R11: fffff5200041de01 R12: 0000000000000040 [ 504.258674][ T77] R13: dffffc0000000000 R14: ffff88805d41b3b8 R15: ffff888030fcc7a8 [ 504.266704][ T77] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 504.275673][ T77] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 504.282375][ T77] CR2: 000020000000e000 CR3: 00000000650e7000 CR4: 00000000003506f0 [ 504.290419][ T77] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 504.298438][ T77] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 504.306455][ T77] Call Trace: [ 504.309816][ T77] [ 504.312830][ T77] rate_control_send_low+0x194/0x790 [ 504.318222][ T77] rate_control_get_rate+0x20b/0x5c0 [ 504.323556][ T77] ieee80211_tx_h_rate_ctrl+0xb21/0x1740 [ 504.329295][ T77] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 504.335340][ T77] ? __lock_acquire+0x135d/0x7eb0 [ 504.340477][ T77] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 504.346612][ T77] invoke_tx_handlers_late+0xb1/0x17c0 [ 504.352113][ T77] ? invoke_tx_handlers_early+0xa30/0x1c80 [ 504.357964][ T77] ieee80211_tx+0x2d8/0x460 [ 504.362506][ T77] ? ieee80211_skb_resize+0x610/0x610 [ 504.367923][ T77] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 504.373454][ T77] ? ieee80211_xmit+0x2e0/0x3c0 [ 504.378348][ T77] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 504.384362][ T77] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 504.390217][ T77] ? ieee80211_scan_state_send_probe+0x4b2/0x930 [ 504.396585][ T77] ieee80211_scan_state_send_probe+0x57f/0x930 [ 504.402819][ T77] ieee80211_scan_work+0x42e/0x1b30 [ 504.408062][ T77] ? _raw_spin_unlock_irq+0x23/0x50 [ 504.413372][ T77] cfg80211_wiphy_work+0x228/0x260 [ 504.418547][ T77] ? process_scheduled_works+0x975/0x1600 [ 504.424305][ T77] process_scheduled_works+0xa60/0x1600 [ 504.429916][ T77] ? worker_attach_to_pool+0x370/0x370 [ 504.435405][ T77] ? assign_work+0x3cc/0x5d0 [ 504.440119][ T77] worker_thread+0xa5e/0xfe0 [ 504.444785][ T77] ? _raw_spin_unlock+0x40/0x40 [ 504.449694][ T77] ? __kthread_parkme+0x71/0x1c0 [ 504.454656][ T77] kthread+0x2fa/0x390 [ 504.458758][ T77] ? pr_cont_work+0x550/0x550 [ 504.463450][ T77] ? kthread_blkcg+0xd0/0xd0 [ 504.468079][ T77] ret_from_fork+0x48/0x80 [ 504.472542][ T77] ? kthread_blkcg+0xd0/0xd0 [ 504.477170][ T77] ret_from_fork_asm+0x11/0x20 [ 504.481986][ T77] [ 504.485043][ T77] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 504.492344][ T77] CPU: 0 PID: 77 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 504.499720][ T77] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 504.509783][ T77] Workqueue: events_unbound cfg80211_wiphy_work [ 504.516081][ T77] Call Trace: [ 504.519389][ T77] [ 504.522329][ T77] dump_stack_lvl+0x18c/0x250 [ 504.527081][ T77] ? show_regs_print_info+0x20/0x20 [ 504.532345][ T77] ? load_image+0x420/0x420 [ 504.536918][ T77] panic+0x2ca/0x720 [ 504.540863][ T77] ? bpf_jit_dump+0xd0/0xd0 [ 504.545391][ T77] ? ret_from_fork_asm+0x11/0x20 [ 504.550365][ T77] __warn+0x2e0/0x470 [ 504.554351][ T77] ? __rate_control_send_low+0x632/0x880 [ 504.560002][ T77] ? __rate_control_send_low+0x632/0x880 [ 504.565664][ T77] report_bug+0x2be/0x4f0 [ 504.570077][ T77] ? __rate_control_send_low+0x632/0x880 [ 504.575732][ T77] ? __rate_control_send_low+0x632/0x880 [ 504.581380][ T77] ? __rate_control_send_low+0x634/0x880 [ 504.587026][ T77] handle_bug+0xcf/0x120 [ 504.591375][ T77] exc_invalid_op+0x1a/0x50 [ 504.595898][ T77] asm_exc_invalid_op+0x1a/0x20 [ 504.600853][ T77] RIP: 0010:__rate_control_send_low+0x632/0x880 [ 504.607126][ T77] Code: 30 42 0f b6 04 28 84 c0 0f 85 e5 01 00 00 41 8b 0e 48 c7 c7 80 af 00 8c 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 4e 75 45 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 04 fa ff [ 504.626756][ T77] RSP: 0018:ffffc900020ef400 EFLAGS: 00010246 [ 504.632835][ T77] RAX: 83850c70e940b000 RBX: 000000000000000c RCX: ffff88801931da00 [ 504.640822][ T77] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 504.648819][ T77] RBP: 0000000000000084 R08: ffffc900020ef007 R09: 1ffff9200041de00 [ 504.656819][ T77] R10: dffffc0000000000 R11: fffff5200041de01 R12: 0000000000000040 [ 504.664809][ T77] R13: dffffc0000000000 R14: ffff88805d41b3b8 R15: ffff888030fcc7a8 [ 504.672827][ T77] rate_control_send_low+0x194/0x790 [ 504.678171][ T77] rate_control_get_rate+0x20b/0x5c0 [ 504.683514][ T77] ieee80211_tx_h_rate_ctrl+0xb21/0x1740 [ 504.689222][ T77] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 504.695258][ T77] ? __lock_acquire+0x135d/0x7eb0 [ 504.700358][ T77] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 504.706483][ T77] invoke_tx_handlers_late+0xb1/0x17c0 [ 504.711980][ T77] ? invoke_tx_handlers_early+0xa30/0x1c80 [ 504.717845][ T77] ieee80211_tx+0x2d8/0x460 [ 504.722383][ T77] ? ieee80211_skb_resize+0x610/0x610 [ 504.727804][ T77] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 504.733298][ T77] ? ieee80211_xmit+0x2e0/0x3c0 [ 504.738178][ T77] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 504.744220][ T77] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 504.750603][ T77] ? ieee80211_scan_state_send_probe+0x4b2/0x930 [ 504.756959][ T77] ieee80211_scan_state_send_probe+0x57f/0x930 [ 504.763193][ T77] ieee80211_scan_work+0x42e/0x1b30 [ 504.768439][ T77] ? _raw_spin_unlock_irq+0x23/0x50 [ 504.773668][ T77] cfg80211_wiphy_work+0x228/0x260 [ 504.778825][ T77] ? process_scheduled_works+0x975/0x1600 [ 504.784583][ T77] process_scheduled_works+0xa60/0x1600 [ 504.790174][ T77] ? worker_attach_to_pool+0x370/0x370 [ 504.795682][ T77] ? assign_work+0x3cc/0x5d0 [ 504.800317][ T77] worker_thread+0xa5e/0xfe0 [ 504.804962][ T77] ? _raw_spin_unlock+0x40/0x40 [ 504.809860][ T77] ? __kthread_parkme+0x71/0x1c0 [ 504.814829][ T77] kthread+0x2fa/0x390 [ 504.818916][ T77] ? pr_cont_work+0x550/0x550 [ 504.823632][ T77] ? kthread_blkcg+0xd0/0xd0 [ 504.828271][ T77] ret_from_fork+0x48/0x80 [ 504.832709][ T77] ? kthread_blkcg+0xd0/0xd0 [ 504.837336][ T77] ret_from_fork_asm+0x11/0x20 [ 504.842157][ T77] [ 504.845821][ T77] Kernel Offset: disabled [ 504.850299][ T77] Rebooting in 86400 seconds..