last executing test programs: 12.547400824s ago: executing program 3 (id=2743): write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01}, @val, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5}}}}}, 0x36) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xb00}]}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000300)={[], [{@appraise_type}, {@permit_directio}]}, 0x1, 0x53d, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003080)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002f80)=ANY=[], 0xa0}}], 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x202, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="bacfe885669eb0f4e4b949277c966873896aaa3b7992446cb843c1659dfc93c91637bbfa786fb0a26ebd918cfb3cdbdf6f2479a3e4561c85725e5a29217436b93263913637e623623063529b45a586a6be332ed3907e40c2fd8fe81d1d9eb4a3bdd228d600f184547c29e5e5c10cae17a0210b2d0f3f7585bca0711645e82fe0c3dccdfb05ed832ce3a7b7a6053b1bd8c9af714b4640fa8bb06756c0ab9bdcf1ad272d77a9d29f59058cf742d7e833d938b61c5eb2e8e6c1dee2d124ac642cbe00ad0e28", 0xfffffd4e}], 0x1, 0x0, 0x0, 0x0) 11.56525076s ago: executing program 0 (id=2747): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600004, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 10.64510413s ago: executing program 2 (id=2748): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) 9.521995848s ago: executing program 2 (id=2752): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x0, "9b4d3948"}, @main=@item_012={0x1, 0x0, 0x0, "9f"}, @local=@item_4={0x3, 0x2, 0x0, "6d1fa409"}, @main=@item_012={0x2, 0x0, 0x0, "1a79"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000d40), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000007080), 0x0, 0x0) fsopen(0x0, 0x0) 9.521728448s ago: executing program 3 (id=2753): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb682, &(0x7f000000cf3d)=""/195}, 0x48) 9.521109748s ago: executing program 0 (id=2761): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x782e, &(0x7f0000000040)={0x0, 0x0, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, &(0x7f0000001040)={0x6, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) 8.183978745s ago: executing program 0 (id=2755): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='bic\x00', 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) open(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r2, 0x1, 0x3d, &(0x7f00000002c0), 0x8) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000240)=@in6={0xa, 0x4e20, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[@txtime={{0x18}}], 0x18}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, 0x0, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0}}, 0x40) 7.419786932s ago: executing program 3 (id=2756): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x35, 0x4, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x4, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast}, {@empty}, {@multicast1}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xde, [@rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.261371126s ago: executing program 1 (id=2759): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80803, 0x83) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xff}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 7.258991566s ago: executing program 0 (id=2760): r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getresuid(&(0x7f00000000c0), &(0x7f0000000340), &(0x7f0000000380)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdir(0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000400)=0x4000000, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x22004851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 6.105815716s ago: executing program 1 (id=2762): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) write(r0, &(0x7f00000005c0)="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", 0x120) socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = dup2(r2, r2) write$tun(r3, &(0x7f0000000040)=ANY=[], 0x46) 5.824129191s ago: executing program 4 (id=2763): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045503, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5.788564024s ago: executing program 3 (id=2764): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x0, 0xc8, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x0, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0xf}}, {@remote}, {@multicast2, 0x7}, {@private=0xa010100}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.669804802s ago: executing program 4 (id=2765): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600004, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 4.668898052s ago: executing program 1 (id=2775): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setsig(0x4203, r3, 0x0, &(0x7f0000000ac0)={0x0, 0x0, 0x40002}) 4.486468348s ago: executing program 2 (id=2766): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000730000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x12}, 0x10) 2.686543855s ago: executing program 4 (id=2767): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000180)=""/171) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x48, 0x7, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_RULE_USERDATA={0x31, 0x7, 0x1, 0x0, "baa6931798f0ecac41ffd34196a61f75e53b5ae28c80541baf9eac3daa881e53b92c53762e98a809161d3d0d3d"}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048884}, 0x410) creat(0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x18) 2.492039972s ago: executing program 1 (id=2768): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) pipe2(&(0x7f0000001440)={0xffffffffffffffff}, 0x0) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="0802"], 0x208) write$FUSE_BMAP(r3, &(0x7f0000000500)={0x18}, 0x18) write$FUSE_POLL(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYRES32=r2], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x8, 0x0) 1.643697926s ago: executing program 2 (id=2769): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a40cc4, &(0x7f0000000c80)=ANY=[@ANYRESDEC, @ANYBLOB="4ffef8a5fe039b069f473594fba9121a07732b", @ANYRESOCT, @ANYRES8, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRES64, @ANYBLOB="14a8d0ca3386858350717bda500a6e0d271cba7c24404f4fdd13b1b5922dc27fae2bb7656c2c9cf00076db74ad9da398465c271f3c99f9c8b75aa628562a36eae8e60442812741be1793c1486650f74ba8ad8536070000000000000065f3bc92da1e56d7ffa95c91b5c58ba55f9245a209ef24b8348e9ff4cb9b84333e1a13"], 0xde, 0x0, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000280)='./bus/file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f00000004c0)='./bus/file0\x00', r3, &(0x7f0000000500)='./file0\x00', 0x2) 1.500669809s ago: executing program 0 (id=2770): r0 = userfaultfd(0x80001) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x10, &(0x7f00000002c0)=ANY=[], 0x1, 0xac3, &(0x7f0000001180)="$eJzs3U2MW0cBAOCxd73JJilxIKFLGpqEQlt+umk2S/iJIKkSIRE1FeJSqeISpWmJCEGiSEBViSQnbrSqgsSJH3HqpSoIiV5Q1BOXSjRShdRT4cCBKIhKSJRAYhR75q09sfPsza69Xn+f9DyeN+955j0/P7+/mQnAxKo2XxcX5yohXHr95WN/f/Bvs7fGHC6mqDdfp9titRBCJcans897d6oV3njvhVPdwkpYaL6meHjiWjHv5hDC+bAnXA71sPPSlZfeXHj8xIXjF/e+9cqhq6uz9AAAMFm+dvnQ4o6//Om+bddfvf9I2FCMT8fn9RjfEo/7j8QD/3T8Xw2d8Urb0G4mm246DtXZzummukzXnk8tm266R/4zWf61HtNtCHfOf6ptXLflhnGWtuN6qFTnO+LV6vx865w8NM/rZyrz586cfea5ERUUWHH/2h1C2NM2HL3YGV9rw+E1UIZlDo01UIaxHI4ML6/rjZaRL/OQhsbWUe+BAFry+4W3OZ9fWbg7xadN95f/tceq3eeHFTDs7X+g/GdGnH+Q/68v2OOwctbr1pSWK/2OtsR4fh8hf36p9+8vv9PROTa/H1Hrs5y97iOMy/2FXuWcGnI5lqtX+fPtYr36UgzTevhyR+rujt9P/p2Oy3cMdPd+fv3fYDCs7SF0xGt381mNEe9/gLUrf26uke6PRvlzfXn6hpL0jSXpsyXpm0rSN5ekwyT77fd+El6sLF3vys/pB70enq6z3RPDDwxYnvx65KD558/9Dupu88+fJ4a17Pcnnzz9+aefutJ6/r9SbP834/aeTjfq8bd1OU6Qrhfm19WLZ//rnflUe0z3waw893SZvvl+e+d0le1LnxPa9jO3lWOuc76tvabb1TldPZtuNg4bs/LmxyebsvnS8Ufar6b1NZ0tby1bjpmsHGm/si2GeTlgOdL22Ov5/7R9zoVa5ZkzZ08/GuNpO/3jVG3DrfH7h1xu4O71W/9nLnTW/9lSjK9V2/cLW5fGV1r7hdfi53WOXyjy6Rx/IMbT/9w3p2ab4+dPfefs0yu/+DDRnvvh8986efbs6e96s+w3X1kbxRjkTTptWSvl8WbQN3tWO4sR75iAVbfvR62DgEfOfPvks6efPX3uwMGDBxYWDn7hwOK+5nH9vvaj+3bnR1BaYCUt/emPuiQAAAAAAAAAAABAv75//NiVt9/43Dut+v9L9f9S/f/05G+q///jrP5/Xk8+1YNP9QC3dUlvTpM1sDqTTVeLw4ey8m7P8tmRzffhGBb9+MX6/ym7vF3XVJ57s/G10NGIb/Eua07gtvZSZrI2SPL+Aj8Ww4sx/FWAEarMdh8dwzu0b115v21bT+1TtLVL0dA+8PhI31tza2hr0ijV/+7arlPbl71tCGVk5Q2jxuKolxHo7h8T1f73P5cWfORlMfQepoeb388md5to9DxK77cHG4CVMer+P9N1zxSe+8NXN94a0mTXHuvcX+btl8Ig/vx2Z3yt9z+52vnn/fYNO/9RL/+w+/8s+r/re/+X9ZhXX16+//n51Xfasg07+80/X/7UDvT2wfK/HvNPS/NQ6C//xi+z/PMbQn36b5b/pj7zv235dy0v///F/NNqe/iBfvNvlbhS7SzHbLYc6f5fft04uZEtf2rb8w75f/35bsu/zI4ab8b8YZKNSz+zg8qOI4qD9uX3/xudX9n+f4vCZru1/DmMz8Z42hGn5xzy/k4GLX96viL9D+zIPr9S8v+m/9/x9sUYlv0eUv+/aXusx7/8tnhzXaZ4rcu6Xa/7GhhX707U/b9hDVdbp0HLm3/jKpevOvr1s66GxtQy5iv6iRtx+RuNxupe0Cox0swZ+fof9XnCqPMf9fovk/f/mx/D5/3/5ul5/795et7/b54+G7+hXul5/7/5+sz7/83T780+N+8feK4k/SMl6Tu7pxen7feVzL+rJP2jJel7i/TDHVOk9PtL5t9dkt66//nvYmye/kDJ/B8vSf9ESfqDJekPt6W39wGd0j9ZMv96l+qjTOrywyTL6+f5/cPkSPd/ev3+t5ekA+Prp6/uP/rUb75Rb9X/nymuh6T7eEdivBbPn34Q4/l979AWv5X2Roz/NUtf69c7YJLk7Wfk/+8PlaQD4ys95+X3DROosrH76BiWtVvV6zif8fKpGH46hp+J4SMxnI/hvhjuj+HCkMrH6jj62u8OvVhZOt/fmqX3+zx5Xh+oo52oEMKBPsuTXx8Y9Hn2vB2/Qd1t/susDgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAy1ebr4uJcJYRLr7987MkTZ/bdGnO4mKLefJ1ui9WK+UJ4NIZTMfxFfHPjvRdOtYc3Y1gJC6ESKsX48MS1IqfNIYTzYU+4HOph56UrL7258PiJC8cv7n3rlUNXV28NAAAAwPr3/wAAAP//XtEYmw==") socket$nl_route(0x10, 0x3, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000001580)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x10) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder1\x00') syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_emit_ethernet(0x1b1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) read(r1, &(0x7f0000000100)=""/85, 0x55) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000280)={0x2, 0xfe}, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f000006f000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3000}) 1.398105758s ago: executing program 3 (id=2771): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000003c0)=ANY=[@ANYBLOB="4231bae27181e0c2e99eb3ffda2b642787128d231e2ed492cdafc83f6fe85cf2848e0a", @ANYRES16, @ANYRESDEC], 0x1, 0x2b6, &(0x7f00000000c0)="$eJzs3UFrY1UUAODz0jSNukgRN4qLB7pwVaZu3bTKCGJXSgR1ocXpgCRhIIWAI5iZ1fwCl/4Pf4IbN/4Dwa3gri6qV17ee01iX9PS1hT1+1an995z73nvQrrKyeevjgYPHmXx9OTn6HazaO3FXvyZxXa0ovYk2nFe0xgA8G/we0rxW7pOZrt1+9UAAOtQ/v8v3XUtAMB6fPjxJ+/vHxzc/yDPu/Fy79mkn0XE6NmkX87vP4wvYxhHcS96cRqRzpTxu+8d3I92XtiO10fTSb/IHH32Y7X//q8Rs/zd6MV2c/5uXlrIn076m/F85LH/cLMutRcvNee/2ZAf/U688dpC/TvRi5++iEcxjAdR5M7zv9nN83fStydff1ocU+RnrehvzdbNpY113gsAAAAAAAAAAAAAAAAAAAAAAP9tO3mele17Zv17iqGq/87G6Wx+J69tL/fnKfOzeqOyP1CKqkXPNMV3dX+de3mep2rhPL8dr7T9iAAAAAAAAAAAAAAAAAAAAAAUjr96PDgcDo/GtxLU3QDqr/Vfd5+9+cjWUrkNi7euftZit4Gi1pWLo92O1RuepNLlz9WqD21e89zFUzcItuaX+1GUQX0xN9o5/e2Fv/h2+ffjwWFeralf8uAwu+ysbr3P94tTnbjpS0izCk/T8p12z0pdzurc0pvvvNA49UdK6Wr7vPVLeUfVSDZrsXG10zeroPEBi6B7/i5+uHjDCz8yNq75UQMAAAAAAAAAAAAAAAAAAFyi/K7vk6PxccPk05WprX+sKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYs/L3/4dH47OgGxHLI+eCaZW8ak0VdGJ8fMePCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/AXwEAAP//wZJM4A==") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.315857595s ago: executing program 4 (id=2772): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80803, 0x83) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xff}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 1.311307466s ago: executing program 2 (id=2783): socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socketpair(0x5, 0x2, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x38}}, 0x0) recvfrom$packet(r1, &(0x7f00000001c0)=""/255, 0xff, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tr\nr'], 0xa) 1.276723098s ago: executing program 1 (id=2773): write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01}, @val, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5}}}}}, 0x36) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xb00}]}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000300)={[], [{@appraise_type}, {@permit_directio}]}, 0x1, 0x53d, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003080)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002f80)=ANY=[], 0xa0}}], 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x202, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="bacfe885669eb0f4e4b949277c966873896aaa3b7992446cb843c1659dfc93c91637bbfa786fb0a26ebd918cfb3cdbdf6f2479a3e4561c85725e5a29217436b93263913637e623623063529b45a586a6be332ed3907e40c2fd8fe81d1d9eb4a3bdd228d600f184547c29e5e5c10cae17a0210b2d0f3f7585bca0711645e82fe0c3dccdfb05ed832ce3a7b7a6053b1bd8c9af714b4640fa8bb06756c0ab9bdcf1ad272d77a9d29f59058cf742d7e833d938b61c5eb2e8e6c1dee2d124ac642cbe00ad0e28", 0xfffffd4e}], 0x1, 0x0, 0x0, 0x0) 457.95999ms ago: executing program 4 (id=2774): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000056512f3e000000010000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000c00040007004c001a804800048014000700ff01000000000000000000000000000114000700fc01000000000000000000000000000014000700fe80000000000000000000000000000005000b"], 0x74}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="78010000170001000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000020010000000000000000000000000000fe8000000000000000000000000000aa00"/104, @ANYRES64=r2, @ANYRESOCT=r0, @ANYBLOB="0000000000000000000000000000007fc43108aa0000000000000200"/43, @ANYRESDEC, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000800080008000000000044000500ff02000000000000000000000000000100000000000000000a000000ac1e000100"/208], 0x178}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x5}}]}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 379.666807ms ago: executing program 2 (id=2776): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) clock_nanosleep(0x6, 0x0, &(0x7f0000000780), 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000b800)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) write$FUSE_BMAP(r0, &(0x7f00000003c0)={0x18, 0x0, r2, {0x231}}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x44) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb653, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="002207000000ab34f5ac1d95"], 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) 315.986632ms ago: executing program 1 (id=2777): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f000000079b4d3948019f0b6d011fe4021a79fe234468a19ad19669b8d71782da4613fae22eef5d0756"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000d40), 0x0, 0x0) ioctl$HIDIOCGPHYS(r2, 0x4004480f, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x20002189) 198.473302ms ago: executing program 4 (id=2778): socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 90.011132ms ago: executing program 0 (id=2779): r0 = syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x2000c0, &(0x7f0000000780)={[{@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@fat=@discard}, {@fat=@tz_utc}, {@fat=@flush}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@nocase}, {@dots}, {@dots}, {@dots}, {@fat=@discard}, {@nodots}, {@fat=@showexec}, {@fat=@errors_continue}, {}, {@nodots}]}, 0x0, 0x1c8, &(0x7f00000004c0)="$eJzs3UFr02AYB/CncbaZp90EUQh48TTUTzCRCWJAUHrQk8L0sorgLtHL9jH8gH4A2akXicxki4sKbaVJrL/fpU/675s876FpL3366ua7w4P3R2+/XP8caTqKZC/2Yj6KnUji3EkAAJtkXpbxtaz03QsA0I0FPv+/ddwSALBmz1+8fPIgz/efZVkacXpSTItp9Vjljx7n+3ezH3aaVadFMb1ykd/L2t8dzvKrca3O71frs8v5OO7crvKz7OHTvJVP4mC9WwcAAAAAAAAAAAAAAAAAAAAAgN7ciuzcb+f77O628+06r45+mg/Umt+zFTe26sNmPFB53MWmAAAAAAAAAAAAAAAAAAAA4B9z9PHT4evZ7M2HpphExOVnlilG9YlXXN51kcQg2hhoMR5GG0sX2TDamK34LhhHxF9dPflzNC/LcqHzNPeISV83JwAAAAAAAAAAAAAAAAAA+M80P/r9NUv7aAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAetD8//8KxXFELPDii4tt97pVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANtj3AAAA//9O1DTv") getdents64(r0, &(0x7f0000000100)=""/151, 0x97) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="fd00a603f9fc3aa000000000ead80000"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xff5, &(0x7f0000002300)=""/4085}, 0x90) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000500fe80"], 0x3c}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000940)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000002380)=""/4096, 0x1000}, 0x0, 0x100}) pipe2$9p(&(0x7f0000000480), 0x10080) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x111041, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) 0s ago: executing program 3 (id=2780): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000300), 0x0, r0}, 0x68) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x20000400) socket$inet6_udp(0xa, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/drivers\x00', 0x0, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000100)={0x0, 0x1}, 0x0) r2 = syz_io_uring_setup(0x4172, 0x0, &(0x7f0000000100), 0x0) io_uring_enter(r2, 0x539d, 0x0, 0x0, 0x0, 0xffffffffffffff4a) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) kernel console output (not intermixed with test programs): 0:0000:0000.0013: unknown main item tag 0x0 [ 886.417950][ T1291] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 886.445911][ T1291] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 886.453517][ T1291] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 886.468085][ T1291] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 886.482698][ T1291] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 886.518469][ T1291] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 886.526508][ T1291] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 886.548894][ T1291] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 886.578845][ T1291] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 886.608356][ T1291] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 886.627833][ T1291] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 886.658074][ T1291] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 886.676423][ T1291] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 886.737212][ T1291] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 [ 886.916358][ T2664] team0 (unregistering): Port device team_slave_1 removed [ 886.939645][ T2664] team0 (unregistering): Port device team_slave_0 removed [ 886.960455][ T2664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 886.979179][T12174] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 886.993072][ T2664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 887.209126][ T2664] bond0 (unregistering): Released all slaves [ 887.410783][T12174] usb 4-1: config 0 has no interfaces? [ 887.609482][T12174] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice=98.00 [ 887.646414][T12174] usb 4-1: New USB device strings: Mfr=18, Product=255, SerialNumber=255 [ 887.664931][T12174] usb 4-1: Product: syz [ 887.673520][T12174] usb 4-1: Manufacturer: syz [ 887.678213][T12174] usb 4-1: SerialNumber: syz [ 887.724167][T12174] usb 4-1: config 0 descriptor?? [ 887.855231][T14912] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 887.869744][T15082] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2402'. [ 888.064803][T12174] usb 4-1: USB disconnect, device number 18 [ 888.264346][T14912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.399245][ T1075] Bluetooth: hci6: command 0x0409 tx timeout [ 888.414980][T14912] 8021q: adding VLAN 0 to HW filter on device team0 [ 888.497076][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 888.526573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 888.558482][T15079] chnl_net:caif_netlink_parms(): no params data found [ 888.687148][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 888.721189][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 888.786301][ T3637] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.793435][ T3637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 888.816911][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 888.842762][T15109] loop0: detected capacity change from 0 to 32768 [ 888.899970][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 888.913727][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 888.942478][ T3637] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.949625][ T3637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.012169][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 889.034156][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 889.076780][T15079] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.229185][T15079] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.474212][T13149] Bluetooth: hci6: command 0x041b tx timeout [ 890.606667][T15079] device bridge_slave_0 entered promiscuous mode [ 890.640496][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 890.652485][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 890.665388][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 890.783728][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 890.822813][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 890.846961][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 890.856365][T15079] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.863638][T15079] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.872059][T15079] device bridge_slave_1 entered promiscuous mode [ 890.884832][T14912] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 890.897245][T14912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 890.905451][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 890.936547][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 890.993380][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 891.586604][T15079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.651837][T15079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 891.876240][T15147] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 891.876253][T15079] team0: Port device team_slave_0 added [ 891.964735][T15079] team0: Port device team_slave_1 added [ 891.965322][T15147] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 891.993552][T15152] loop3: detected capacity change from 0 to 64 [ 892.102502][T15079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.119777][T15079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.243939][T15079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.287673][T15079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.309249][T15079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.412061][T15079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.466711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 892.497611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 892.540091][ T26] audit: type=1800 audit(1725654910.470:204): pid=15152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2419" name="file1" dev="loop3" ino=2 res=0 errno=0 [ 892.760203][ T3994] Bluetooth: hci6: command 0x040f tx timeout [ 892.774986][T14912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 892.810885][T15168] loop3: detected capacity change from 0 to 16 [ 892.816474][T15079] device hsr_slave_0 entered promiscuous mode [ 892.987483][T15168] erofs: (device loop3): mounted with root inode @ nid 36. [ 893.000320][T15079] device hsr_slave_1 entered promiscuous mode [ 893.100458][T15079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 893.236653][T15079] Cannot create hsr debugfs directory [ 893.622927][T15171] erofs: (device loop3): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 893.632374][T15171] erofs: (device loop3): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 893.641501][T15171] erofs: (device loop3): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 893.651022][T15171] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 893.660771][T15171] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 45055 of nid 36 [ 893.671912][T15171] erofs: (device loop3): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 893.682997][T15171] attempt to access beyond end of device [ 893.682997][T15171] loop3: rw=524288, want=6536, limit=16 [ 893.694347][T15171] attempt to access beyond end of device [ 893.694347][T15171] loop3: rw=524288, want=34359736344, limit=16 [ 893.706219][T15171] attempt to access beyond end of device [ 893.706219][T15171] loop3: rw=524288, want=736, limit=16 [ 893.717384][T15171] attempt to access beyond end of device [ 893.717384][T15171] loop3: rw=524288, want=536576872, limit=16 [ 893.729198][T15171] attempt to access beyond end of device [ 893.729198][T15171] loop3: rw=524288, want=24, limit=16 [ 893.740320][T15171] attempt to access beyond end of device [ 893.740320][T15171] loop3: rw=524288, want=13478624040, limit=16 [ 893.889904][ T4289] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 894.199499][ T4289] usb 1-1: Using ep0 maxpacket: 8 [ 894.255164][ T26] audit: type=1326 audit(1725654912.180:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15172 comm="syz.1.2425" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39e7f7fef9 code=0x0 [ 894.329048][T15174] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2425'. [ 894.422339][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 894.431692][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 894.472464][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 894.491893][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 894.544261][T14912] device veth0_vlan entered promiscuous mode [ 894.559341][ T4289] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 894.582569][ T4289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.601998][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 894.605040][ T4289] usb 1-1: Product: syz [ 894.611146][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 894.631309][T14912] device veth1_vlan entered promiscuous mode [ 894.637045][ T4289] usb 1-1: Manufacturer: syz [ 894.655525][ T4289] usb 1-1: SerialNumber: syz [ 894.685977][ T4289] usb 1-1: config 0 descriptor?? [ 894.725919][T14912] device veth0_macvtap entered promiscuous mode [ 894.748491][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 894.764749][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 894.780089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 894.798161][T12174] Bluetooth: hci6: command 0x0419 tx timeout [ 894.805733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 894.831913][T14912] device veth1_macvtap entered promiscuous mode [ 894.856836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 894.876783][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 894.959346][ T4289] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 894.972651][T15079] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.998746][T14912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.029114][T14912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.059155][T14912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.088292][T14912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.111107][T14912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.129131][T14912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.140035][T14912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.150824][T14912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.161592][T14912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.172524][T14912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.182720][T14912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.194494][T14912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.206628][T14912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.215499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 895.226532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 895.241104][T14912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.253318][T14912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.264238][T14912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.275753][T14912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.286595][T14912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.293242][T15177] loop3: detected capacity change from 0 to 40427 [ 895.300206][T14912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.304896][ T26] audit: type=1326 audit(1725654913.220:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15180 comm="syz.1.2428" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39e7f7fef9 code=0x0 [ 895.315387][T14912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.366126][T14912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.376376][T14912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.387082][T14912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.396955][T14912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.407848][T14912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.419985][T14912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 895.452817][T15177] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 895.453013][T15079] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.476485][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 895.479174][T15177] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 895.495861][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 895.503494][T15177] F2FS-fs (loop3): invalid crc value [ 895.512704][T15177] F2FS-fs (loop3): Found nat_bits in checkpoint [ 895.516105][T14912] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.536843][T14912] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.548437][T14912] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.563252][T14912] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.581914][T15177] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 895.591397][T15177] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 895.629185][T15079] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.848047][T15079] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.882599][ T3637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 895.903070][ T3637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 895.931850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 895.932531][T13585] attempt to access beyond end of device [ 895.932531][T13585] loop3: rw=2049, want=45104, limit=40427 [ 895.962013][ T3637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 895.985125][ T3637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.010448][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 896.111116][T15079] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 896.122601][T15079] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 896.132489][T15079] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 896.152630][T15079] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 896.307283][T15079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.327295][T15079] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.366155][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 896.812933][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 897.035029][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 897.152885][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 897.210515][ T3637] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.217676][ T3637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 897.246982][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 897.256370][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 897.266531][ T3637] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.273708][ T3637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.710239][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 897.762424][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 897.803125][T15205] loop0: detected capacity change from 0 to 4096 [ 897.814751][T15198] XFS (nullb0): Invalid superblock magic number [ 897.894058][ T4289] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 897.942330][ T4289] usb 1-1: USB disconnect, device number 26 [ 897.972079][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 897.993772][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 898.073614][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 898.122025][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 898.158720][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 899.184277][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 899.233857][T15216] netlink: 'syz.3.2434': attribute type 10 has an invalid length. [ 899.249164][T15216] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2434'. [ 899.278352][T15216] bridge0: port 3(dummy0) entered blocking state [ 899.308570][T15216] bridge0: port 3(dummy0) entered disabled state [ 899.380875][T15216] device dummy0 entered promiscuous mode [ 899.415338][T15216] bridge0: port 3(dummy0) entered blocking state [ 899.421907][T15216] bridge0: port 3(dummy0) entered forwarding state [ 899.465016][T15079] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 899.538485][T15079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 899.585948][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 899.595285][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 899.611027][T15228] loop3: detected capacity change from 0 to 256 [ 899.618899][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 899.639374][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 899.651308][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 899.726304][T15224] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 899.733780][T15224] IPv6: NLM_F_CREATE should be set when creating new route [ 900.544569][T15234] loop2: detected capacity change from 0 to 128 [ 900.919193][ T7236] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 900.941696][T15234] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 900.952958][ T4289] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 900.957247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 900.968303][T15234] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038 (0x7fffffff) [ 900.972972][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 901.073220][T15079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 901.170830][ T7236] usb 2-1: Using ep0 maxpacket: 8 [ 901.323455][ T4289] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 901.356298][ T4289] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 901.375435][ T4289] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 901.385092][ T4289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.458373][ T7236] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 901.522481][T15239] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 901.543325][ T7236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.727958][ T7236] usb 2-1: Product: syz [ 901.784711][ T7236] usb 2-1: Manufacturer: syz [ 902.026241][ T7236] usb 2-1: SerialNumber: syz [ 902.070407][ T7236] usb 2-1: config 0 descriptor?? [ 902.116413][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 902.151622][ T4289] usb 4-1: USB disconnect, device number 19 [ 902.208515][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 902.299732][T15265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2444'. [ 902.339371][ T7236] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 902.364516][ C0] eth0: bad gso: type: 1, size: 1408 [ 902.366532][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 902.402248][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 902.509445][T15079] device veth0_vlan entered promiscuous mode [ 902.543159][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 902.557506][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 902.859046][T15079] device veth1_vlan entered promiscuous mode [ 903.121222][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 903.199608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 903.222161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 903.240865][T15079] device veth0_macvtap entered promiscuous mode [ 903.260521][T15079] device veth1_macvtap entered promiscuous mode [ 903.425210][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 903.471594][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.566270][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 903.587740][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.626727][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 903.654406][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.684905][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 903.725537][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.756084][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 903.776622][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.786335][T15271] loop0: detected capacity change from 0 to 32768 [ 903.792541][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 903.825602][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.843364][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 903.866069][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.900001][T15079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 903.924683][T15271] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2447 (15271) [ 903.944183][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 903.990924][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 904.014679][T15271] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 904.016783][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 904.059738][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 904.080890][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 904.089204][T15271] BTRFS info (device loop0): using free space tree [ 904.109548][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.120405][T15271] BTRFS info (device loop0): has skinny extents [ 904.163957][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 904.215343][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.236720][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 904.389698][ T7236] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 904.468829][ T7236] usb 2-1: USB disconnect, device number 28 [ 904.788227][T15278] loop2: detected capacity change from 0 to 32768 [ 905.009197][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.019472][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 905.031080][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.040975][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 905.071973][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.085608][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 905.119268][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.138692][T15271] BTRFS info (device loop0): enabling ssd optimizations [ 905.159196][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 905.187311][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.268141][T15079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 905.297894][ T3989] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 905.333567][ T3989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 905.363742][T15278] overlayfs: upper fs needs to support d_type. [ 905.383977][T15079] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.409160][T15079] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.418456][T15278] overlayfs: upper fs does not support tmpfile. [ 905.466517][T15079] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.536781][T15079] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.546227][T15278] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 905.611822][T15278] overlayfs: failed to resolve './file0': -2 [ 905.769301][T13769] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 905.817211][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.844940][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.905559][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 905.959204][ T2664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.064621][ T2664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.099031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 906.140633][T13769] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 906.184869][T13769] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 906.239202][T13769] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.268461][T13769] usb 4-1: config 0 descriptor?? [ 906.291047][T15323] netlink: 'syz.1.2457': attribute type 9 has an invalid length. [ 906.342077][T13769] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 906.353081][T15323] netlink: 'syz.1.2457': attribute type 7 has an invalid length. [ 906.373323][T15323] netlink: 'syz.1.2457': attribute type 8 has an invalid length. [ 906.822889][T13769] usb 4-1: USB disconnect, device number 20 [ 907.201538][T15347] loop2: detected capacity change from 0 to 8192 [ 907.441874][ T26] audit: type=1326 audit(1725654925.370:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15346 comm="syz.2.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea6e3ef9 code=0x7ffc0000 [ 907.479561][T15369] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2465'. [ 907.604304][ T26] audit: type=1326 audit(1725654925.370:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15346 comm="syz.2.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f92ea6e3ef9 code=0x7ffc0000 [ 907.679680][ T26] audit: type=1326 audit(1725654925.370:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15346 comm="syz.2.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea6e3ef9 code=0x7ffc0000 [ 907.712249][ T26] audit: type=1326 audit(1725654925.370:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15346 comm="syz.2.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f92ea6e2890 code=0x7ffc0000 [ 907.739404][T12174] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 907.751176][ T26] audit: type=1326 audit(1725654925.370:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15346 comm="syz.2.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f92ea6e3afb code=0x7ffc0000 [ 908.164187][T15334] Bluetooth: hci5: command 0x0406 tx timeout [ 908.269623][ T26] audit: type=1326 audit(1725654925.370:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15346 comm="syz.2.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f92ea6e3afb code=0x7ffc0000 [ 908.352521][ T26] audit: type=1326 audit(1725654925.370:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15346 comm="syz.2.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f92ea6e3afb code=0x7ffc0000 [ 908.407995][ T26] audit: type=1326 audit(1725654925.370:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15346 comm="syz.2.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f92ea6e3afb code=0x7ffc0000 [ 908.431119][ T26] audit: type=1326 audit(1725654926.080:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15346 comm="syz.2.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f92ea6e3afb code=0x7ffc0000 [ 908.472707][ T26] audit: type=1326 audit(1725654926.100:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15346 comm="syz.2.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f92ea6e3afb code=0x7ffc0000 [ 908.574968][T15392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2471'. [ 908.749501][T12174] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 908.795958][T12174] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 908.831978][T15339] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 909.046568][T12174] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 909.091673][T12174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 909.199284][T15339] usb 2-1: Using ep0 maxpacket: 16 [ 909.238788][T12174] usb 3-1: SerialNumber: syz [ 909.369439][T15339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 909.566215][T15339] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 909.594619][T15339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.958597][T15339] usb 2-1: Product: syz [ 910.969161][T15339] usb 2-1: Manufacturer: syz [ 910.973787][T15339] usb 2-1: SerialNumber: syz [ 911.036323][T15339] usb 2-1: config 0 descriptor?? [ 911.063807][T12174] usb 3-1: 0:2 : does not exist [ 911.083925][T15339] pegasus_notetaker: probe of 2-1:0.0 failed with error -12 [ 911.153571][T12174] usb 3-1: USB disconnect, device number 25 [ 911.202141][T11347] udevd[11347]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 911.222068][T11121] udevd[11121]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 911.324677][T15333] usb 2-1: USB disconnect, device number 29 [ 911.458845][T15413] xt_l2tp: v2 doesn't support IP mode [ 912.625742][T15431] loop3: detected capacity change from 0 to 128 [ 912.646676][T15435] netlink: 'syz.1.2483': attribute type 10 has an invalid length. [ 912.705183][T15431] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 913.794841][T15445] loop2: detected capacity change from 0 to 1764 [ 914.032116][T15453] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 914.045182][T15453] F2FS-fs (loop3): Unable to read 1th superblock [ 914.051757][T15453] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 914.062720][T15453] F2FS-fs (loop3): Unable to read 2th superblock [ 914.073541][T15453] loop3: detected capacity change from 0 to 64 [ 914.174778][T15433] loop0: detected capacity change from 0 to 32768 [ 914.267858][T15453] hfs: unable to load iocharset "macromania]n" [ 914.274409][T15453] hfs: unable to parse mount options [ 914.280268][T15433] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2482 (15433) [ 914.518000][T15453] loop3: detected capacity change from 0 to 2048 [ 914.622156][T15453] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 914.762890][T15433] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 914.851507][T15433] BTRFS info (device loop0): using free space tree [ 914.966110][T15433] BTRFS info (device loop0): has skinny extents [ 915.349048][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.422009][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.451929][T15478] kvm: vcpu 0: requested 394 ns lapic timer period limited to 200000 ns [ 915.478902][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.546517][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.699358][T15433] BTRFS error (device loop0): open_ctree failed [ 916.285927][T15475] loop3: detected capacity change from 0 to 32768 [ 916.438018][T15475] XFS (loop3): Mounting V5 Filesystem [ 917.200444][T15475] XFS (loop3): Ending clean mount [ 917.238324][T15475] XFS (loop3): Quotacheck needed: Please wait. [ 917.278626][T15488] chnl_net:caif_netlink_parms(): no params data found [ 917.522146][T15510] netlink: 812 bytes leftover after parsing attributes in process `syz.1.2500'. [ 917.606429][T15475] XFS (loop3): Quotacheck: Done. [ 917.742823][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 917.742837][ T26] audit: type=1800 audit(1725654935.670:233): pid=15529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2495" name="bus" dev="loop3" ino=9292 res=0 errno=0 [ 918.615405][T15339] Bluetooth: hci4: command 0x0409 tx timeout [ 918.624793][T15488] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.686845][T15488] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.695934][T15488] device bridge_slave_0 entered promiscuous mode [ 918.723525][T15488] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.749264][T15488] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.758021][T15488] device bridge_slave_1 entered promiscuous mode [ 918.863262][T15549] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2509'. [ 918.878313][T15488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.956229][T15488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.100959][T15488] team0: Port device team_slave_0 added [ 919.111149][T15488] team0: Port device team_slave_1 added [ 919.152551][T13585] XFS (loop3): Unmounting Filesystem [ 919.261192][T15553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2511'. [ 919.337337][T15488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.349180][T15488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.439460][T15488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 919.495163][T15488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 919.502645][T15488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.539548][T15488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 919.693349][T15488] device hsr_slave_0 entered promiscuous mode [ 919.710681][T15488] device hsr_slave_1 entered promiscuous mode [ 919.732993][T15488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 919.755127][T15488] Cannot create hsr debugfs directory [ 919.912723][T15580] loop3: detected capacity change from 0 to 2048 [ 921.215292][T15333] Bluetooth: hci4: command 0x041b tx timeout [ 921.265760][T13585] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 921.389350][T13585] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 921.471426][ T144] device hsr_slave_0 left promiscuous mode [ 921.480403][ T144] device hsr_slave_1 left promiscuous mode [ 921.669584][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 921.677139][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 921.710509][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 921.737712][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 921.760070][ T144] device bridge_slave_1 left promiscuous mode [ 921.766314][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.826260][ T144] device bridge_slave_0 left promiscuous mode [ 921.845671][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.902654][ T144] device veth1_macvtap left promiscuous mode [ 921.919540][ T144] device veth0_macvtap left promiscuous mode [ 921.936317][ T144] device veth1_vlan left promiscuous mode [ 921.953939][ T144] device veth0_vlan left promiscuous mode [ 922.355693][T15633] Context (ID=0x0) not attached to queue pair (handle=0x4d4:0x0) [ 922.413600][ T144] team0 (unregistering): Port device team_slave_1 removed [ 922.447622][ T144] team0 (unregistering): Port device team_slave_0 removed [ 922.479705][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.519210][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 922.696952][ T144] bond0 (unregistering): Released all slaves [ 923.759623][T15334] Bluetooth: hci4: command 0x040f tx timeout [ 925.840258][T15334] Bluetooth: hci4: command 0x0419 tx timeout [ 926.191143][T12174] Bluetooth: hci5: command 0x0409 tx timeout [ 926.230061][T15488] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 926.432842][T15488] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 926.448272][T15488] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 926.605373][T15488] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 926.646277][T15661] chnl_net:caif_netlink_parms(): no params data found [ 927.576376][T15488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 927.789688][T15661] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.823246][T15661] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.006083][T15661] device bridge_slave_0 entered promiscuous mode [ 928.014860][T15661] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.023758][T15661] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.040103][T15661] device bridge_slave_1 entered promiscuous mode [ 928.259301][T15488] 8021q: adding VLAN 0 to HW filter on device team0 [ 928.306943][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 929.010946][ T1075] Bluetooth: hci5: command 0x041b tx timeout [ 929.037691][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 929.115004][T15661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 929.134421][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 929.160445][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 929.192477][ T3774] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.199624][ T3774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 929.237133][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 929.573912][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 929.718509][ T3774] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.725739][ T3774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 929.980967][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 930.049993][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 930.111127][T15661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 930.124975][T15727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 930.207318][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 930.231435][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 930.262964][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 930.298896][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 930.331271][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 930.361347][T15733] loop0: detected capacity change from 0 to 128 [ 930.362562][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 930.403302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 930.414903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 930.428296][T15733] EXT4-fs (loop0): Ignoring removed orlov option [ 930.455761][T15733] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a800c118, mo2=0002] [ 930.475780][T15488] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 930.509364][T15733] System zones: 1-3, 19-19, 35-36 [ 930.527705][T15488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 930.546577][T15733] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,i_version,mb_optimize_scan=0x0000000000000001,noload,orlov,nobarrier,,errors=continue. Quota mode: none. [ 930.580244][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 930.600238][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 930.650036][T15661] team0: Port device team_slave_0 added [ 930.661937][T15733] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 930.702738][T15661] team0: Port device team_slave_1 added [ 931.020855][T15750] printk: syz.4.2556 (15750): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 931.539257][T15661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 931.539702][ T1396] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.553651][T12174] Bluetooth: hci5: command 0x040f tx timeout [ 931.559903][ T1396] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.598324][T15661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 931.759234][T15333] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 931.779281][T15661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 931.828458][T15661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 931.858433][T15661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 931.884392][ C0] vkms_vblank_simulate: vblank timer overrun [ 931.969144][T15661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 931.997695][T15488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 932.034578][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 932.049194][T15333] usb 2-1: Using ep0 maxpacket: 8 [ 932.051993][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 932.153325][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 932.180250][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 932.189381][T15333] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 932.197702][T15333] usb 2-1: config 179 has no interface number 0 [ 932.216310][T15333] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 932.239500][T15333] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 932.278678][T15333] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 932.307470][T15333] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 932.349327][T15333] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 932.358497][T15333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.419475][T15747] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 932.468557][T15661] device hsr_slave_0 entered promiscuous mode [ 932.496462][T15661] device hsr_slave_1 entered promiscuous mode [ 932.516396][T15661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 932.532753][T15661] Cannot create hsr debugfs directory [ 932.634056][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 932.656267][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 932.687187][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 932.712051][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 932.755710][T15488] device veth0_vlan entered promiscuous mode [ 932.781097][T12174] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input24 [ 932.932014][T15770] loop0: detected capacity change from 0 to 32768 [ 932.957629][ T9138] usb 2-1: USB disconnect, device number 30 [ 932.969138][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 932.980459][ T9138] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 933.003009][T15770] gfs2: can't find protocol dlm [ 933.045901][T15488] device veth1_vlan entered promiscuous mode [ 933.070963][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 933.165249][ C0] vkms_vblank_simulate: vblank timer overrun [ 933.234226][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 933.282813][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 933.316115][T15488] device veth0_macvtap entered promiscuous mode [ 933.379037][T15488] device veth1_macvtap entered promiscuous mode [ 933.461439][T15661] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 933.471868][T15661] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.501425][T15488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.518791][T15488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.544083][T15488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.568739][T15488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.585388][T15488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.596781][T15339] Bluetooth: hci5: command 0x0419 tx timeout [ 933.616826][T15488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.633546][T15488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.644141][T15488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.664408][T15488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.682576][T15488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.702830][T15488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.729214][T15488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.750851][T15488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.776839][T15488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.789623][T15488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.797220][T15764] IPv6: Can't replace route, no match found [ 933.829577][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 933.837966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 933.926572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 933.968851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 934.767809][T15488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.811849][T15488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.863256][T15488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.906104][T15488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.941987][T15488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.967716][T15488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.997943][T15488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 935.008690][T15488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.018822][T15488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 935.030462][T15488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.040736][T15488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 935.051368][T15488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.061239][T15488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 935.699496][T15488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.747521][T15488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 935.781454][T15661] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.810440][T15661] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.879536][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 935.892454][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 935.920518][T15488] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.929517][T15488] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.929986][ T26] audit: type=1326 audit(1725654953.855:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15852 comm="syz.4.2574" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe867d6cef9 code=0x0 [ 935.938300][T15488] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.985267][T15488] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.023621][T15661] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 936.043242][T15661] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.197191][T15661] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 936.208397][T15661] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.251362][T15854] tipc: MTU too low for tipc bearer [ 936.268300][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.289760][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.318989][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 936.357088][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.376888][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.392372][T15661] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 936.402724][T15661] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 936.412418][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 936.422288][T15661] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 936.432136][T15661] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 937.411310][T15661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 937.475717][T15864] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 937.547961][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 937.556028][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 937.581853][T15661] 8021q: adding VLAN 0 to HW filter on device team0 [ 937.627499][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 937.643602][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 937.664050][ T5716] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.671219][ T5716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 937.843269][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 937.864022][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 937.894602][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 937.914181][ T5716] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.921339][ T5716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.967644][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 938.102131][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 938.669548][ T4289] Bluetooth: hci1: command 0x0406 tx timeout [ 938.857205][T15892] loop0: detected capacity change from 0 to 512 [ 938.901748][T15892] EXT4-fs (loop0): Unsupported blocksize for fs-verity [ 938.971278][T15889] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2582'. [ 938.984960][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 939.007373][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 939.028320][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 939.450077][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 939.648738][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 939.699003][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 939.756015][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 939.778193][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 939.786826][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 939.825566][T15908] loop2: detected capacity change from 0 to 2048 [ 941.895309][ T3989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 941.926381][ T3989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 942.458540][ T144] device hsr_slave_0 left promiscuous mode [ 942.552109][ T144] device hsr_slave_1 left promiscuous mode [ 942.603896][ C0] eth0: bad gso: type: 1, size: 1408 [ 942.612454][T15488] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 942.629985][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 942.685930][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 942.697841][T15488] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 942.708630][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 942.732426][T15929] Process accounting resumed [ 942.742383][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 942.779616][ T144] device dummy0 left promiscuous mode [ 942.796672][ T144] bridge0: port 3(dummy0) entered disabled state [ 942.806737][ T144] device bridge_slave_1 left promiscuous mode [ 942.821041][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.837651][ T144] device bridge_slave_0 left promiscuous mode [ 942.854224][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.923312][ T144] device veth1_macvtap left promiscuous mode [ 942.937576][ T144] device veth0_macvtap left promiscuous mode [ 942.945281][ T144] device veth1_vlan left promiscuous mode [ 942.963152][ T144] device veth0_vlan left promiscuous mode [ 943.278634][ T26] audit: type=1326 audit(1725654961.195:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15930 comm="syz.1.2594" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39e7f7fef9 code=0x0 [ 943.655931][ T144] team0 (unregistering): Port device team_slave_1 removed [ 943.922714][ T144] team0 (unregistering): Port device team_slave_0 removed [ 944.086357][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 944.339993][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 945.956060][ T144] bond0 (unregistering): Released all slaves [ 946.982984][T15945] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2596'. [ 947.050631][T15661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 947.089794][T15661] device veth0_vlan entered promiscuous mode [ 947.096986][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 947.382069][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 947.553689][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 947.672481][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 947.804885][T15661] device veth1_vlan entered promiscuous mode [ 947.834557][T15961] loop0: detected capacity change from 0 to 512 [ 947.884152][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 947.893715][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 947.931280][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 947.977175][T15961] EXT4-fs (loop0): Ignoring removed bh option [ 948.041245][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 948.051472][T15961] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 948.068344][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 948.132711][T15661] device veth0_macvtap entered promiscuous mode [ 948.160730][T15661] device veth1_macvtap entered promiscuous mode [ 948.222697][T15661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.237930][ C0] eth0: bad gso: type: 1, size: 1408 [ 948.285677][T15661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.309330][T15661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.329649][T15961] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 948.350226][T15661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.370545][T15661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.623343][T15661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.635557][T15661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.697648][T15661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.978542][T15661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.129222][T15661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.157696][T15661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.189642][T15661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.219270][T15661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.269794][T15661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.302577][T15661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 949.354918][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 949.389876][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 949.430202][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 949.481557][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 949.531818][T15661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.551450][T15661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.572625][T15661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.598227][T15661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.618119][T15661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.639995][T15661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.661147][T15661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.684390][T15661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.716986][T15661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.739161][T15661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.759127][T15661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.789104][T15661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.798953][T15661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.829119][T15661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.841017][T15661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 949.852425][T15661] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.861680][T15661] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.871345][T15661] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.881627][T15661] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.900822][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 949.930768][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 951.658589][ T3581] Bluetooth: hci4: command 0x0409 tx timeout [ 951.757473][T15997] loop0: detected capacity change from 0 to 2048 [ 951.934199][T16000] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 952.003860][T15997] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.2610: bad orphan inode 8192 [ 952.014978][T15997] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 952.086593][T15974] chnl_net:caif_netlink_parms(): no params data found [ 952.109904][ T5707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.118713][ T5707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.323614][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 952.369754][ T5716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.383132][ T5716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.042839][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 953.859736][ T2726] Bluetooth: hci4: command 0x041b tx timeout [ 954.112964][T15974] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.316759][T16027] loop0: detected capacity change from 0 to 512 [ 954.340561][T15974] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.397805][T15974] device bridge_slave_0 entered promiscuous mode [ 954.408183][T16031] loop3: detected capacity change from 0 to 512 [ 954.420905][T16027] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 954.432366][T16027] ext4 filesystem being mounted at /145/bus supports timestamps until 2038 (0x7fffffff) [ 955.147272][T16015] netlink: 812 bytes leftover after parsing attributes in process `syz.4.2614'. [ 955.167351][T15974] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.175477][T15974] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.184689][T15974] device bridge_slave_1 entered promiscuous mode [ 955.241908][T16031] EXT4-fs error (device loop3): __ext4_iget:4872: inode #14: block 1886221359: comm syz.3.2615: invalid block [ 955.306782][T16031] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2615: couldn't read orphan inode 14 (err -117) [ 955.331480][T15974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.341834][T16031] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,minixdf,auto_da_alloc,nouid32,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 955.365799][T16031] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038 (0x7fffffff) [ 955.378911][T15974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 955.909389][ T9138] Bluetooth: hci4: command 0x040f tx timeout [ 955.934987][T15974] team0: Port device team_slave_0 added [ 956.008988][T15974] team0: Port device team_slave_1 added [ 956.082905][T15974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 956.105307][T15974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 956.204985][T15974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 956.303591][T15974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.313967][T15974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 956.387693][T15974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 957.199491][T16052] loop0: detected capacity change from 0 to 32768 [ 957.463647][T15974] device hsr_slave_0 entered promiscuous mode [ 957.506220][T16052] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2631 (16052) [ 957.528628][T16056] loop3: detected capacity change from 0 to 512 [ 957.535639][T16052] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 957.544415][T16052] BTRFS info (device loop0): using free space tree [ 957.550993][T16052] BTRFS info (device loop0): has skinny extents [ 957.561605][T15974] device hsr_slave_1 entered promiscuous mode [ 957.588637][T15974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 957.606783][T15974] Cannot create hsr debugfs directory [ 957.624069][T16056] EXT4-fs (loop3): Ignoring removed bh option [ 957.699377][T16056] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 957.707685][T16052] BTRFS info (device loop0): enabling ssd optimizations [ 957.729376][ T21] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 957.783219][T16056] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 958.052959][ T9138] Bluetooth: hci4: command 0x0419 tx timeout [ 958.302017][ T21] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 958.339168][ T21] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 958.379388][ T21] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 958.419646][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.489770][T16054] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 958.755114][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 959.034387][T15328] usb 2-1: USB disconnect, device number 31 [ 959.056312][T15974] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.215573][T15974] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.334512][T15974] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.349321][T16092] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 959.351203][T16088] loop0: detected capacity change from 0 to 2048 [ 959.472789][T15974] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.627057][T16088] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 960.469236][ T26] audit: type=1800 audit(1725654978.385:236): pid=16099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2623" name="bus" dev="loop0" ino=6 res=0 errno=0 [ 962.246917][T15974] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 962.286792][T15974] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 962.369759][T16114] loop3: detected capacity change from 0 to 4096 [ 962.392022][T15974] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 962.496617][T16114] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 962.535375][T16114] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 962.548727][T16114] ntfs3: loop3: Failed to load $MFT. [ 962.609153][ T9134] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 962.630053][T15974] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 962.769757][T16114] netlink: 812 bytes leftover after parsing attributes in process `syz.3.2629'. [ 962.785811][T15974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 962.859431][T16123] loop3: detected capacity change from 0 to 512 [ 962.860272][ T9134] usb 2-1: Using ep0 maxpacket: 8 [ 962.887992][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 962.896143][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 962.915917][T15974] 8021q: adding VLAN 0 to HW filter on device team0 [ 962.943971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 962.960796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 962.970014][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.977122][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 962.991523][ T9134] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 962.997522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 963.011944][ T9134] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 963.033829][ T9134] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 963.036234][T16123] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 963.053838][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 963.055032][T16123] ext4 filesystem being mounted at /6/bus supports timestamps until 2038 (0x7fffffff) [ 963.071961][ T9134] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 963.101036][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 963.179987][ T3691] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.187106][ T3691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 963.206470][ T9134] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 963.239670][ T9134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.273651][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 963.288409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 963.298335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 963.320416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 963.913985][T15974] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 963.960006][T16119] program syz.1.2641 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 963.980348][T15974] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 964.059732][ T9134] usb 2-1: GET_CAPABILITIES returned 0 [ 964.065360][ T9134] usbtmc 2-1:16.0: can't read capabilities [ 964.100472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 964.112603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 964.128465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 964.139222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 964.148014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 964.157629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 964.166896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 964.176583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 964.357027][T12174] usb 2-1: USB disconnect, device number 32 [ 965.361446][T16156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2638'. [ 965.419458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 965.437973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 965.478520][T15974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.517168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 965.540987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 965.621744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 965.635951][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 965.724037][T15974] device veth0_vlan entered promiscuous mode [ 966.141858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 966.171205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 966.403836][ T21] Bluetooth: hci7: command 0x0409 tx timeout [ 966.508989][T15974] device veth1_vlan entered promiscuous mode [ 966.534568][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 966.539162][T15327] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 966.554797][T16135] chnl_net:caif_netlink_parms(): no params data found [ 966.639336][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 966.648031][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 966.667646][T15974] device veth0_macvtap entered promiscuous mode [ 966.718995][T15974] device veth1_macvtap entered promiscuous mode [ 966.797921][T16135] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.805249][T16135] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.816636][T16135] device bridge_slave_0 entered promiscuous mode [ 966.829309][T15327] usb 5-1: Using ep0 maxpacket: 16 [ 966.853111][T16169] loop3: detected capacity change from 0 to 32768 [ 966.860312][T16135] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.867972][T16135] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.876997][T16135] device bridge_slave_1 entered promiscuous mode [ 966.900507][T16169] XFS: ikeep mount option is deprecated. [ 966.911804][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.922718][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.932838][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.945115][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.955413][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.965895][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.976448][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.986987][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.998621][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.009488][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.019347][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.021953][T16169] XFS (loop3): Mounting V5 Filesystem [ 967.030071][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.030102][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.030120][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.068200][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.079363][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.092786][T15974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 967.117252][T16135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 967.129694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 967.148810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 967.161370][T15327] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 967.161788][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 967.181274][T15327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.181613][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 967.191665][T15327] usb 5-1: Product: syz [ 967.210595][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.221540][T15327] usb 5-1: Manufacturer: syz [ 967.226157][T15327] usb 5-1: SerialNumber: syz [ 967.238889][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.249120][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.250827][T15327] usb 5-1: config 0 descriptor?? [ 967.268553][T16169] XFS (loop3): Ending clean mount [ 967.280679][T16169] XFS (loop3): Quotacheck needed: Please wait. [ 967.287761][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.314919][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.326825][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.337109][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.348068][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.359739][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.372143][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.382449][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.393597][T16169] XFS (loop3): Quotacheck: Done. [ 967.394517][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.411028][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.429320][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.458254][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.468868][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.472658][T16169] xfs: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 967.480987][T15974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 967.507613][T16135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 967.529335][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 967.548539][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 967.574572][T15974] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.583856][T15974] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.595539][T15974] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.604713][T15974] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.614600][T15327] usb 5-1: Not enough endpoints found in device, aborting! [ 967.650587][ T144] device hsr_slave_0 left promiscuous mode [ 967.681469][ T144] device hsr_slave_1 left promiscuous mode [ 967.708465][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 967.716774][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 967.725612][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 967.733587][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 967.741908][ T144] device bridge_slave_1 left promiscuous mode [ 967.748215][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.758104][ T144] device bridge_slave_0 left promiscuous mode [ 967.769428][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.795853][T15661] XFS (loop3): Unmounting Filesystem [ 967.801956][ T144] device veth1_macvtap left promiscuous mode [ 967.837052][T15333] usb 5-1: USB disconnect, device number 24 [ 967.850671][ T144] device veth0_macvtap left promiscuous mode [ 967.856800][ T144] device veth1_vlan left promiscuous mode [ 967.870374][ T144] device veth0_vlan left promiscuous mode [ 968.316306][ T144] team0 (unregistering): Port device team_slave_1 removed [ 968.350439][ T144] team0 (unregistering): Port device team_slave_0 removed [ 968.375845][ C0] eth0: bad gso: type: 1, size: 1408 [ 968.390130][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 968.446646][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 968.618287][ T2726] Bluetooth: hci7: command 0x041b tx timeout [ 969.645318][ T144] bond0 (unregistering): Released all slaves [ 969.801764][T16135] team0: Port device team_slave_0 added [ 969.898511][T16135] team0: Port device team_slave_1 added [ 969.986437][T16135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 969.994726][T16135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 970.024885][T16135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 970.071900][T16135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 970.084983][T16135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 970.112995][T16135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 970.178481][ T2664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.251747][ T2664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.296956][T16135] device hsr_slave_0 entered promiscuous mode [ 970.307354][T16135] device hsr_slave_1 entered promiscuous mode [ 970.324378][T16135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 970.333691][T16135] Cannot create hsr debugfs directory [ 970.348686][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 970.475074][ T2664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.506953][ T2664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.539754][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 970.630299][ T9134] Bluetooth: hci7: command 0x040f tx timeout [ 970.679880][T16135] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.875726][T16135] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.636653][T16135] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.666650][T16212] loop3: detected capacity change from 0 to 1024 [ 971.792262][T16135] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.062382][ T26] audit: type=1326 audit(1725654989.985:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16224 comm="syz.3.2658" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e5ebabef9 code=0x0 [ 972.101513][T16223] loop2: detected capacity change from 0 to 2048 [ 972.115295][T16226] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2658'. [ 972.147212][T16135] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 972.177811][T16135] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 972.222095][T16135] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 972.246659][T16223] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2659: bad orphan inode 8192 [ 972.247971][T16135] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 972.272807][T16223] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 973.368290][ T3581] Bluetooth: hci7: command 0x0419 tx timeout [ 973.471396][T16135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 973.516272][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 973.622149][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 974.468180][T16135] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.502644][T16244] loop2: detected capacity change from 0 to 512 [ 974.523847][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 974.540800][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 974.619774][ T5707] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.626923][ T5707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.644314][T16244] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 974.656171][T16244] ext4 filesystem being mounted at /3/bus supports timestamps until 2038 (0x7fffffff) [ 974.852595][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 974.878940][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 974.928109][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 974.984963][ T5707] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.992152][ T5707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.165508][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 975.543599][T16135] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 975.592237][T16135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 975.664267][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 975.716847][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 975.748789][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 975.757951][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 975.819369][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 975.860955][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 980.565755][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 980.574354][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 980.584106][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 980.627498][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 980.667384][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 980.897099][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 980.905789][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 980.918539][T16135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 980.953923][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 980.964530][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 980.989151][T16135] device veth0_vlan entered promiscuous mode [ 980.995883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 981.015095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 981.025857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 981.034284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 981.049669][T16135] device veth1_vlan entered promiscuous mode [ 981.074690][ T5719] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 981.090577][ T5719] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 981.107895][ T5719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 981.116875][ T5719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 981.128956][T16135] device veth0_macvtap entered promiscuous mode [ 981.142985][T16135] device veth1_macvtap entered promiscuous mode [ 981.161192][T16135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.172388][T16135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.182692][T16135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.194068][T16135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.204314][T16135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.216226][T16135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.226388][T16135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.237200][T16135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.248795][T16135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.261496][T16135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.279154][T16135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.300232][T16135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.310449][T16135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.322098][T16135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.332391][T16135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.342908][T16135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.357109][T16135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 981.366304][ T5719] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 981.374932][ T5719] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 981.383592][ T5719] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 981.392630][ T5719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 981.406426][T16135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.417849][T16135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.427940][T16135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.438723][T16135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.449432][T16135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.460239][T16135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.471626][T16135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.482167][T16135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.492111][T16135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.502653][T16135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.513012][T16135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.524276][T16135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.534172][T16135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.544917][T16135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.554938][T16135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.565411][T16135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.576853][T16135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 981.587764][ T5719] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 981.606321][ T5719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 981.622648][T16135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.642084][T16135] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.658355][T16135] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.689458][T16135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.844336][ T5719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.860585][ T5719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.882795][ T3637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.888051][ T5719] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 981.898866][ T3637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.917018][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 982.252801][T16265] loop3: detected capacity change from 0 to 32768 [ 982.331956][T16265] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2674 (16265) [ 983.189659][T16265] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 983.198448][T16265] BTRFS info (device loop3): using free space tree [ 983.205151][T16265] BTRFS info (device loop3): has skinny extents [ 983.253213][T16265] BTRFS info (device loop3): enabling ssd optimizations [ 983.359233][ T9134] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 983.700409][ T9134] usb 1-1: Using ep0 maxpacket: 16 [ 983.937895][ T9134] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.948492][ T9134] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 983.959503][ T9134] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 983.969423][ T9134] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 983.980230][ T9134] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 984.077288][ T9134] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 984.086951][ T9134] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 984.095701][ T9134] usb 1-1: Manufacturer: syz [ 984.110436][ T9134] usb 1-1: config 0 descriptor?? [ 984.275703][ T144] device hsr_slave_0 left promiscuous mode [ 984.284895][ T144] device hsr_slave_1 left promiscuous mode [ 984.291936][ T144] device bridge_slave_0 left promiscuous mode [ 984.298121][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.311150][ T144] device veth1_macvtap left promiscuous mode [ 984.317189][ T144] device veth0_macvtap left promiscuous mode [ 984.324328][ T144] device veth1_vlan left promiscuous mode [ 984.330189][ T144] device veth0_vlan left promiscuous mode [ 984.439350][ T9134] rc_core: IR keymap rc-hauppauge not found [ 984.445410][ T9134] Registered IR keymap rc-empty [ 984.451083][ T9134] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 984.476136][ T144] team0 (unregistering): Port device macvlan2 removed [ 984.479239][ T9134] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 984.519873][ T9134] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 984.534594][ T9134] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input25 [ 984.559824][ T9134] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 984.590063][ T9134] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 984.611572][ T144] team0 (unregistering): Port device team_slave_1 removed [ 984.629315][ T9134] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 984.638360][ T144] team0 (unregistering): Port device team_slave_0 removed [ 984.651782][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 984.659377][ T9134] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 984.676014][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 984.689364][ T9134] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 984.719827][T15334] Bluetooth: hci2: command 0x0406 tx timeout [ 984.729340][ T9134] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 984.759382][ T9134] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 984.778644][ T144] bond0 (unregistering): Released all slaves [ 984.790319][ T9134] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 984.829247][ T9134] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 984.859280][ T9134] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 984.891942][ T9134] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 984.901063][ T9134] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 986.014640][ T3581] usb 1-1: USB disconnect, device number 27 [ 987.095099][T16307] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 987.185631][T16306] loop0: detected capacity change from 0 to 2048 [ 988.542104][T16135] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 988.607416][T16135] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 989.896902][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.091973][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.557768][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.008929][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.105701][T16367] loop3: detected capacity change from 0 to 2048 [ 992.165714][T16367] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.2683: bad orphan inode 8192 [ 992.193145][T16367] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 993.588300][ T3581] Bluetooth: hci7: command 0x0409 tx timeout [ 993.592671][ T1396] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.635240][ T1396] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.049737][T16359] chnl_net:caif_netlink_parms(): no params data found [ 994.600955][T16407] loop2: detected capacity change from 0 to 516 [ 994.706894][T16407] EXT4-fs (loop2): Ignoring removed bh option [ 994.766729][T16407] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 994.787742][T16359] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.825421][T16359] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.846626][T16407] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 994.856640][T16359] device bridge_slave_0 entered promiscuous mode [ 994.909188][T16359] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.931789][T16359] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.991156][T16359] device bridge_slave_1 entered promiscuous mode [ 995.363266][T16359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.376121][T16359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.669224][ T7236] Bluetooth: hci7: command 0x041b tx timeout [ 996.120246][T16359] team0: Port device team_slave_0 added [ 996.210777][T16359] team0: Port device team_slave_1 added [ 996.232030][T16400] loop3: detected capacity change from 0 to 32768 [ 996.294808][T16359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.330251][T16359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.383702][T16400] overlayfs: upper fs needs to support d_type. [ 996.389256][T16359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.415116][T16400] overlayfs: upper fs does not support tmpfile. [ 996.433286][T16359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.449217][T16359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.460606][T16400] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 996.512188][T16359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.574910][T16400] overlayfs: failed to resolve './file0': -2 [ 996.635596][T16359] device hsr_slave_0 entered promiscuous mode [ 996.650577][T16359] device hsr_slave_1 entered promiscuous mode [ 997.095518][ T144] device hsr_slave_0 left promiscuous mode [ 997.102940][T16433] loop3: detected capacity change from 0 to 8 [ 997.110059][ T144] device hsr_slave_1 left promiscuous mode [ 997.140443][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 997.156979][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 997.171976][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 997.199298][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 997.216170][T16433] SQUASHFS error: lzo decompression failed, data probably corrupt [ 997.229967][ T144] device bridge_slave_1 left promiscuous mode [ 997.246849][T16433] SQUASHFS error: Failed to read block 0x91: -5 [ 997.269355][T16433] SQUASHFS error: Unable to read metadata cache entry [8f] [ 997.277070][T16433] SQUASHFS error: Unable to read inode 0x11f [ 997.306958][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.321213][ T144] device bridge_slave_0 left promiscuous mode [ 997.327688][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.365847][ T144] device veth1_macvtap left promiscuous mode [ 997.416517][ T144] device veth0_macvtap left promiscuous mode [ 997.422741][ T144] device veth1_vlan left promiscuous mode [ 997.428548][ T144] device veth0_vlan left promiscuous mode [ 997.466017][T16433] loop3: detected capacity change from 0 to 512 [ 997.749462][T15334] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 997.814408][T16433] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 998.100546][T16433] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 998.138108][T16433] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 998.164033][ T9138] Bluetooth: hci7: command 0x040f tx timeout [ 998.180217][T16433] EXT4-fs (loop3): 1 truncate cleaned up [ 998.185896][T16433] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 998.260675][T16433] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #2: block 4: comm syz.3.2699: lblock 0 mapped to illegal pblock 4 (length 1) [ 998.279397][T15334] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 998.296410][T15334] usb 2-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 30 [ 998.311381][T16433] EXT4-fs (loop3): Remounting filesystem read-only [ 998.509425][T15334] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 998.520941][T15334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.529857][T15334] usb 2-1: Product: syz [ 998.534043][T15334] usb 2-1: Manufacturer: syz [ 998.538651][T15334] usb 2-1: SerialNumber: syz [ 998.824420][ T144] team0 (unregistering): Port device team_slave_1 removed [ 998.850770][ T144] team0 (unregistering): Port device team_slave_0 removed [ 999.110644][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 999.540789][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1000.229252][ T9138] Bluetooth: hci7: command 0x0419 tx timeout [ 1000.726217][ T144] bond0 (unregistering): Released all slaves [ 1002.295929][T15334] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1002.302440][T15334] cdc_ncm 2-1:1.0: bind() failure [ 1002.317197][T15334] usb 2-1: USB disconnect, device number 33 [ 1005.958925][T16359] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1007.755115][T16359] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1007.773103][T16359] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1007.782570][T16514] loop3: detected capacity change from 0 to 128 [ 1007.828045][T16359] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1008.008295][T16516] loop2: detected capacity change from 0 to 512 [ 1008.044498][T16359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1008.113365][T16516] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1008.124863][T16516] ext4 filesystem being mounted at /16/bus supports timestamps until 2038 (0x7fffffff) [ 1008.276632][T16359] 8021q: adding VLAN 0 to HW filter on device team0 [ 1008.360367][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1008.372873][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1008.380980][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1008.400115][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1008.436892][ T5716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.444138][ T5716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1008.574268][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1009.215230][ T5719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1009.245506][ T5719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1009.320086][ T5719] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.327173][ T5719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1009.367790][ T26] audit: type=1326 audit(1725655027.285:238): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=16523 comm="syz.4.2723" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe867d6cef9 code=0x0 [ 1009.480005][T15328] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1009.498374][ T5719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1009.522904][ T5719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1009.551457][ T5719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1009.610912][ T5719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1009.620235][ T5719] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1009.636089][ T3989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1009.650185][ T3989] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1009.670053][T15330] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1009.767246][ T3989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1009.809854][ T3989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1009.860929][T15328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.902100][ T3989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1009.935569][T15328] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1010.021284][ T3989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1010.070043][T15330] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.142403][T15330] usb 3-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 30 [ 1010.169627][T15328] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1010.222339][T16359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1010.314062][T15328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.374385][T15328] usb 2-1: config 0 descriptor?? [ 1010.509508][T15330] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1010.539404][T15330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.547438][T15330] usb 3-1: Product: syz [ 1010.589241][T15330] usb 3-1: Manufacturer: syz [ 1010.604235][T15330] usb 3-1: SerialNumber: syz [ 1010.647764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1010.668569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1010.986853][T16359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1011.516196][T15328] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1011.551635][T15328] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1011.561149][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1011.571837][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1011.616362][T15328] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 1011.697712][T16359] device veth0_vlan entered promiscuous mode [ 1011.722719][ T3989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1011.739586][ T3989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1011.774937][T16359] device veth1_vlan entered promiscuous mode [ 1011.843246][T15328] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1011.846024][ T3989] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1011.872870][T15328] usb 2-1: USB disconnect, device number 34 [ 1011.889237][T15330] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 1011.895401][T15330] cdc_ncm 3-1:1.0: bind() failure [ 1012.619401][ T3989] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1012.693870][T15330] usb 3-1: USB disconnect, device number 26 [ 1012.856896][T16359] device veth0_macvtap entered promiscuous mode [ 1012.942093][ T3989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1013.376318][ T3989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1014.388151][ T3989] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1015.279485][T16359] device veth1_macvtap entered promiscuous mode [ 1016.363068][T16359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.384353][T16359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.429363][T16359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.462012][T16359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.050296][T16359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1017.217665][T16359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.253638][T16359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1017.290239][T16359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.300237][T16359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1017.310714][T16359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.320592][T16359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1017.331118][T16359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.341112][T16359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1017.352328][T16359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.363279][T15334] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1017.371046][T16359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1017.381879][T16359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.417888][T16359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1017.497430][ T5719] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1017.657993][ T5719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1017.769744][T15334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.821176][T16359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1017.863346][T15334] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1017.959254][T16359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.982173][T16359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1017.994046][T15334] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1018.024140][T15334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.049072][T16359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.108483][T15334] usb 5-1: config 0 descriptor?? [ 1018.113909][T16359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.157696][T16359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.188599][T16359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.209066][T16359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.219391][T16359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.239502][T16359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.259077][T16359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.280871][T16359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.299174][T16359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.310673][T16359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.320878][T16359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.331765][T16359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.343668][T16359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1018.364066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1018.374393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1018.401895][T16359] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.419069][T16359] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.430486][T16359] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.439394][T16359] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.546197][ T5719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.573655][ T5719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.606783][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1018.618582][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.630123][T15334] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1018.637568][T15334] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1018.645564][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.663773][T15334] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 1018.676759][ T5719] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1018.726146][T15334] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1019.810826][ T3581] usb 5-1: USB disconnect, device number 25 [ 1020.205003][T16620] loop3: detected capacity change from 0 to 512 [ 1020.213237][T16621] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2742'. [ 1020.704412][T16620] EXT4-fs (loop3): Unrecognized mount option "appraise_type=imasig" or missing value [ 1020.991111][T16630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2746'. [ 1021.021787][T16630] netlink: 'syz.1.2746': attribute type 25 has an invalid length. [ 1021.047967][T16630] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1021.056934][T16630] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1021.065716][T16630] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1021.074482][T16630] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1024.362963][T16659] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1024.807733][ T7240] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1026.233006][ T7240] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1026.369363][ T7240] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1026.440411][ T7240] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1026.484347][ T7240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.530519][ T7240] usb 3-1: config 0 descriptor?? [ 1027.802189][ T7240] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 1027.971839][ T7240] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 1027.991516][ T7240] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 1030.003290][ T7240] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1030.999372][ T7240] usb 3-1: USB disconnect, device number 27 [ 1031.163704][T16723] loop0: detected capacity change from 0 to 2048 [ 1031.189916][T16725] loop3: detected capacity change from 0 to 256 [ 1031.221102][T16725] FAT-fs (loop3): Unrecognized mount option "B1q鞳+d'#.Ԓͯ?o\ [ 1031.221102][T16725] 18446744073709551615" or missing value [ 1031.522103][T16730] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1031.999618][T12174] Bluetooth: hci6: command 0x0406 tx timeout [ 1032.060303][T16723] attempt to access beyond end of device [ 1032.060303][T16723] loop0: rw=0, want=18441677524128759846, limit=2048 [ 1032.090730][T16742] IPVS: Unknown mcast interface: vcan0 [ 1032.441352][T16754] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1032.470733][T16754] kvm: pic: non byte read [ 1032.481237][T16754] kvm: pic: level sensitive irq not supported [ 1032.481559][T16754] kvm: pic: non byte read [ 1032.539145][T15328] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1032.594924][T16761] loop0: detected capacity change from 0 to 256 [ 1032.619319][ T7236] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1032.969418][T15328] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1032.989384][ T7236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.011749][T15328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.019334][ T7236] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1033.024744][T15328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.046957][T15328] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1033.064769][T15328] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 1033.076399][ T7236] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1033.076643][T15328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.109257][T15328] usb 3-1: config 0 descriptor?? [ 1033.114336][ T7236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.175163][ T7236] usb 2-1: config 0 descriptor?? [ 1033.190406][ T27] INFO: task syz.4.2372:14875 blocked for more than 144 seconds. [ 1033.198154][ T27] Not tainted 5.15.166-syzkaller #0 [ 1033.212655][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1033.224194][ T27] task:syz.4.2372 state:D stack:24152 pid:14875 ppid: 14035 flags:0x00004004 [ 1033.247590][ T27] Call Trace: [ 1033.253933][ T27] [ 1033.257504][ T27] __schedule+0x12c4/0x45b0 [ 1033.268599][ T27] ? blk_flush_plug_list+0x452/0x490 [ 1033.286161][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1033.304265][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1033.314557][ T27] ? blk_check_plugged+0x250/0x250 [ 1033.323491][ T27] ? print_irqtrace_events+0x210/0x210 [ 1033.338934][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 1033.368532][ T27] schedule+0x11b/0x1f0 [ 1033.377597][ T27] io_schedule+0x88/0x100 [ 1033.389898][ T27] wait_on_page_bit_common+0xa13/0x1180 [ 1033.409246][ T27] ? wait_on_page_bit+0x50/0x50 [ 1033.428259][ T27] ? rcu_lock_release+0x20/0x20 [ 1033.434330][ T27] ? bio_add_page+0x2b3/0x450 [ 1033.448529][ T27] z_erofs_runqueue+0x788/0x1a80 [ 1033.453581][ T27] ? tick_nohz_tick_stopped+0x77/0xb0 [ 1033.459369][ T27] ? z_erofs_do_read_page+0x2600/0x2600 [ 1033.464972][ T27] ? __bpf_trace_erofs_destroy_inode+0x20/0x20 [ 1033.471276][ T27] z_erofs_readahead+0xc9a/0x1280 [ 1033.476334][ T27] ? z_erofs_readpage+0x840/0x840 [ 1033.482888][ T27] read_pages+0x159/0x8e0 [ 1033.487246][ T27] ? page_cache_ra_unbounded+0x930/0x930 [ 1033.493069][ T27] ? add_to_page_cache_locked+0x40/0x40 [ 1033.498646][ T27] ? down_read+0x1b3/0x2e0 [ 1033.503239][ T27] page_cache_ra_unbounded+0x7b0/0x930 [ 1033.508746][ T27] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 1033.515439][ T27] force_page_cache_ra+0x378/0x3e0 [ 1033.520653][ T27] generic_fadvise+0x5ba/0x8b0 [ 1033.525448][ T27] ? dump_task+0x5f0/0x5f0 [ 1033.530039][ T27] ? __fdget+0x191/0x220 [ 1033.534320][ T27] __x64_sys_fadvise64+0x138/0x180 [ 1033.540761][ T27] do_syscall_64+0x3b/0xb0 [ 1033.545291][ T27] ? clear_bhb_loop+0x15/0x70 [ 1033.550075][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1033.556003][ T27] RIP: 0033:0x7fea2b6bbef9 [ 1033.560690][ T27] RSP: 002b:00007fea29b35038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 1033.569203][ T27] RAX: ffffffffffffffda RBX: 00007fea2b874f80 RCX: 00007fea2b6bbef9 [ 1033.571593][T15328] thrustmaster 0003:044F:B653.0017: unbalanced delimiter at end of report description [ 1033.577211][ T27] RDX: 0000000000004101 RSI: 0000000000e0ffff RDI: 0000000000000005 [ 1033.577233][ T27] RBP: 00007fea2b72e046 R08: 0000000000000000 R09: 0000000000000000 [ 1033.577249][ T27] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1033.577265][ T27] R13: 0000000000000000 R14: 00007fea2b874f80 R15: 00007ffe38d9f4d8 [ 1033.577300][ T27] [ 1033.604648][T15328] thrustmaster 0003:044F:B653.0017: parse failed [ 1033.612988][ T27] [ 1033.612988][ T27] Showing all locks held in the system: [ 1033.640339][ T27] 1 lock held by khungtaskd/27: [ 1033.645348][ T27] #0: ffffffff8c91fbe0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 1033.649218][T15328] thrustmaster: probe of 0003:044F:B653.0017 failed with error -22 [ 1033.655582][ T27] 4 locks held by kworker/u4:1/144: [ 1033.670648][ T7236] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1033.678175][ T7236] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1033.686112][ T27] #0: ffff8880171d5938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 1033.697251][ T7236] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 1033.705423][ T27] #1: ffffc900016cfd20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 1033.722992][ T7236] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1033.735506][ T27] #2: ffffffff8da25a50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 1033.748008][ T27] #3: ffffffff8c9241a8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x280/0x740 [ 1033.770385][ T27] 2 locks held by getty/3336: [ 1033.775088][ T27] #0: ffff88814b01f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1033.794117][ T27] #1: ffffc9000209b2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 1033.800768][T15334] usb 3-1: USB disconnect, device number 28 [ 1033.814570][ T27] 3 locks held by kworker/1:11/7240: [ 1033.820114][ T27] #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 1033.840992][ T27] #1: ffffc90003777d20 (fqdir_free_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 1033.852182][ T27] #2: ffffffff8c9240b0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x9c/0x4e0 [ 1033.862309][ T27] 1 lock held by syz.4.2372/14875: [ 1033.867435][ T27] #0: ffff888067e052e0 (mapping.invalidate_lock#15){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x1a6/0x930 [ 1033.878919][ T27] 2 locks held by kworker/0:13/15328: [ 1033.890266][ T27] #0: ffff888017072138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 1033.900748][ T27] #1: ffffc90003507d20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 1033.912766][ T27] 3 locks held by kworker/0:19/15334: [ 1033.918163][ T27] #0: ffff888142799538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 1033.929138][ T27] #1: ffffc90003587d20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 1033.940499][ T27] #2: ffff888024320220 (&dev->mutex){....}-{3:3}, at: hub_event+0x208/0x54c0 [ 1033.950173][ T27] 4 locks held by syz.1.2777/16752: [ 1033.955399][ T27] #0: ffffffff8d3a4210 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x2c/0x2f0 [ 1033.964316][ T27] #1: ffff888061941878 (&hiddev->existancelock){+.+.}-{3:3}, at: hiddev_open+0xa0/0x5b0 [ 1033.974512][ T27] #2: ffff8880b9127848 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 1033.986002][ T27] #3: ffff8880b903a318 (&rq->__lock){-.-.}-{2:2}, at: prepend_path+0x28e/0xb70 [ 1033.995308][ T27] [ 1033.997808][ T27] ============================================= [ 1033.997808][ T27] [ 1034.008142][ T27] NMI backtrace for cpu 1 [ 1034.012503][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.166-syzkaller #0 [ 1034.020492][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1034.030544][ T27] Call Trace: [ 1034.033828][ T27] [ 1034.036760][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 1034.041446][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1034.047087][ T27] ? panic+0x860/0x860 [ 1034.051183][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 1034.056307][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 1034.061318][ T27] ? __wake_up_klogd+0xd5/0x100 [ 1034.066180][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 1034.072338][ T27] ? _printk+0xd1/0x120 [ 1034.076501][ T27] ? panic+0x860/0x860 [ 1034.080572][ T27] ? __wake_up_klogd+0xcc/0x100 [ 1034.085428][ T27] ? panic+0x860/0x860 [ 1034.089502][ T27] ? __rcu_read_unlock+0x92/0x100 [ 1034.094531][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1034.100603][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 1034.106593][ T27] watchdog+0xe72/0xeb0 [ 1034.110764][ T27] kthread+0x3f6/0x4f0 [ 1034.114834][ T27] ? hungtask_pm_notify+0x50/0x50 [ 1034.119861][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1034.124458][ T27] ret_from_fork+0x1f/0x30 [ 1034.128899][ T27] [ 1034.132765][ T27] Sending NMI from CPU 1 to CPUs 0: [ 1034.138162][ C0] NMI backtrace for cpu 0 [ 1034.138173][ C0] CPU: 0 PID: 15328 Comm: kworker/0:13 Not tainted 5.15.166-syzkaller #0 [ 1034.138191][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1034.138203][ C0] Workqueue: events nsim_dev_trap_report_work [ 1034.138225][ C0] RIP: 0010:chacha_permute+0x4e2/0x1050 [ 1034.138247][ C0] Code: 89 74 24 48 44 89 e0 44 01 f0 89 44 24 54 31 c3 c1 c3 07 89 f0 41 89 fc 01 f8 89 44 24 20 41 31 c3 41 c1 c3 07 44 89 5c 24 0c <8b> 84 24 84 00 00 00 3b 84 24 b4 00 00 00 7d 30 e8 69 51 76 fd 83 [ 1034.138262][ C0] RSP: 0018:ffffc90003507648 EFLAGS: 00000003 [ 1034.138275][ C0] RAX: 00000000c2ace520 RBX: 000000009348d85c RCX: 0000000024b64754 [ 1034.138288][ C0] RDX: 000000008c8ff78e RSI: 00000000b06bd3a6 RDI: 000000001241117a [ 1034.138300][ C0] RBP: 00000000858eb4ca R08: 000000004811396c R09: 00000000e5d6935f [ 1034.138311][ C0] R10: 00000000528af7cf R11: 000000009396b105 R12: 000000001241117a [ 1034.138323][ C0] R13: 000000001ef2efad R14: 000000005cf99dab R15: 0000000094cdeaa0 [ 1034.138335][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 1034.138350][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1034.138362][ C0] CR2: 0000000000000000 CR3: 000000000c68e000 CR4: 00000000003506f0 [ 1034.138376][ C0] DR0: 0000000000000000 DR1: 00000000872c9164 DR2: 0000000000000000 [ 1034.138386][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1034.138397][ C0] Call Trace: [ 1034.138403][ C0] [ 1034.138409][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 1034.138428][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1034.138448][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 1034.138467][ C0] ? unknown_nmi_error+0xd0/0xd0 [ 1034.138501][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 1034.138520][ C0] ? nmi_handle+0xf7/0x370 [ 1034.138538][ C0] ? chacha_permute+0x4e2/0x1050 [ 1034.138556][ C0] ? default_do_nmi+0x62/0x150 [ 1034.138575][ C0] ? exc_nmi+0xa8/0x100 [ 1034.138592][ C0] ? end_repeat_nmi+0x16/0x31 [ 1034.138613][ C0] ? chacha_permute+0x4e2/0x1050 [ 1034.138632][ C0] ? chacha_permute+0x4e2/0x1050 [ 1034.138650][ C0] ? chacha_permute+0x4e2/0x1050 [ 1034.138668][ C0] [ 1034.138673][ C0] [ 1034.138697][ C0] chacha_block_generic+0x9b/0x1340 [ 1034.138715][ C0] ? skb_release_data+0x73a/0x8a0 [ 1034.138733][ C0] ? consume_skb+0xa3/0x140 [ 1034.138750][ C0] ? rational_best_approximation+0x250/0x250 [ 1034.138775][ C0] ? crng_make_state+0x2e9/0x690 [ 1034.138798][ C0] crng_make_state+0x30e/0x690 [ 1034.138816][ C0] ? process_one_work+0x8a1/0x10c0 [ 1034.138835][ C0] ? worker_thread+0xaca/0x1280 [ 1034.138852][ C0] ? kthread+0x3f6/0x4f0 [ 1034.138869][ C0] ? proc_do_uuid+0x2a0/0x2a0 [ 1034.138901][ C0] _get_random_bytes+0xd3/0x2b0 [ 1034.138922][ C0] ? get_random_bytes+0x20/0x20 [ 1034.138950][ C0] ? skb_put+0x110/0x1f0 [ 1034.138970][ C0] nsim_dev_trap_report_work+0x306/0xab0 [ 1034.138998][ C0] process_one_work+0x8a1/0x10c0 [ 1034.139030][ C0] ? worker_detach_from_pool+0x260/0x260 [ 1034.139053][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1034.139073][ C0] ? kthread_data+0x4e/0xc0 [ 1034.139090][ C0] ? wq_worker_running+0x97/0x170 [ 1034.139108][ C0] worker_thread+0xaca/0x1280 [ 1034.139145][ C0] kthread+0x3f6/0x4f0 [ 1034.139161][ C0] ? rcu_lock_release+0x20/0x20 [ 1034.139178][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1034.139195][ C0] ret_from_fork+0x1f/0x30 [ 1034.139221][ C0] [ 1034.384775][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 1034.482430][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.166-syzkaller #0 [ 1034.490411][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1034.500468][ T27] Call Trace: [ 1034.503753][ T27] [ 1034.506688][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 1034.511375][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1034.517024][ T27] ? panic+0x860/0x860 [ 1034.521109][ T27] panic+0x318/0x860 [ 1034.525010][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 1034.530650][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 1034.536953][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 1034.542184][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1034.548270][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 1034.554436][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 1034.560599][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 1034.566759][ T27] watchdog+0xeb0/0xeb0 [ 1034.570930][ T27] kthread+0x3f6/0x4f0 [ 1034.575005][ T27] ? hungtask_pm_notify+0x50/0x50 [ 1034.580032][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1034.584628][ T27] ret_from_fork+0x1f/0x30 [ 1034.589061][ T27] [ 1034.592361][ T27] Kernel Offset: disabled [ 1034.596700][ T27] Rebooting in 86400 seconds..