last executing test programs: 46.770656064s ago: executing program 1 (id=1904): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x3b) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f00000004c0)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) socket(0x1597fe0ae51bd740, 0x1, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'tunl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000d80), 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x8810) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000001180)=0x80, 0x4) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) accept$alg(r2, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000180)={0x1}) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141101) getpgid(0xffffffffffffffff) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$dri(0x0, 0xea, 0x0) write(r1, &(0x7f0000000000)="02", 0x35a63c) 45.310634904s ago: executing program 1 (id=1909): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@func={0x4, 0x0, 0x0, 0xc, 0x4}, @restrict, @func_proto, @func_proto]}, {0x0, [0x0, 0x0, 0x0, 0x3a6f5491e0ad3b4f, 0x30]}}, 0x0, 0x4f}, 0x20) 44.844378792s ago: executing program 1 (id=1910): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setgroups(0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000540)={[{@usrjquota}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x181fffc}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@discard}, {@nobarrier}, {@dioread_nolock}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1b, 0x4d4, &(0x7f0000000a40)="$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") r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC=r2, @ANYBLOB="0100000000003a", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x800) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getpid() r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f0000001380)="17", &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r7, 0x0, &(0x7f00000001c0)=""/133}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r7, &(0x7f00000001c0), 0x0}, 0x20) 43.737791493s ago: executing program 1 (id=1912): pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x6) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000400)={'fscrypt:', @desc1}, &(0x7f0000000440)={0x0, "550e8fa8ad9ebc90f37648b12d9d933517e3c5c648d1e97ef0fddb8aa2d9307f364ca459419865e1ee600d641e0ad6ca7dbe078a95cd5ffdc4539d7e95afb693"}, 0x48, r2) close_range(r0, 0xffffffffffffffff, 0x0) 43.0465451s ago: executing program 1 (id=1914): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001900)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000004c0)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @flat, @flat=@handle}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000001a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 42.493578245s ago: executing program 1 (id=1915): r0 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000040)={0x0, 0x0, {0x400, 0x10a, 0x7, 0x2}}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x9, 0x5f2, 0x400, 0x2, 0x18}) r1 = socket$can_raw(0x1d, 0x3, 0x1) fcntl$setflags(r1, 0x2, 0x0) r2 = syz_clone(0x4a00e100, &(0x7f0000000100)="677d4e2320eabbc9259f66ae60c0986a6d0ed035a6dd6afad0ca5fc1cf6f74de39b0a5ac1ea7e348ec8eb45e0d0d910ce322d38ac113f318c3ff7f65b93f557405223e8c56e4564a54e560283a6ce63a5b35d5e525848d3e7e750649e3e5fe1824ae5e8c2bc042dfe21d2576228845206e3b9f137e1a391bf883d662d9d0788b22acb71b715efd9c42cc319611c801563548d772b1899414ccb4ee9d", 0x9c, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="db15f0d491e4c279e567cea2c54d22fc39c92a820b48d856e63ae84fedbbf5885f96e6c1bf9c2b9221f7f73e9f8bca2aed0e830a23d7f2e672e39de4a24d87b9a3e1ab9eec2f8afdc9a2c059f7edbc0d0caacf8fcf9b") sched_setscheduler(0x0, 0x6, &(0x7f00000002c0)=0xfffff89a) ptrace$cont(0x1f, r2, 0x8, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x9, 0xc9, 0xc8, 0x1}}}, 0x8) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x4c}, {0x5, [{@any, 0xfb, 0x3, 0x9, "f89410", 0x4, 0x33}, {@any, 0x6, 0x0, 0xb, "982856", 0x2, 0x8}, {@any, 0x10, 0xae, 0x6, "8e231b", 0x0, 0xa}, {@none, 0x9, 0x1, 0x9, "b3dcc7", 0x3, 0x1}, {@any, 0xff, 0x4, 0x3, "7beeb8", 0xfc8, 0xf8}]}}}, 0x4f) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/stat\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0x6}}]}}, 0xf) r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r4, 0x20000000) keyctl$clear(0x7, r4) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f00000004c0)={0x0, {0x7, 0x8001}}) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r2, &(0x7f0000000500), 0x4003) r5 = accept4$unix(r3, &(0x7f0000000540)=@abs, &(0x7f00000005c0)=0x6e, 0x80800) r6 = getegid() r7 = geteuid() r8 = getgid() getgroups(0x5, &(0x7f0000001000)=[0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0]) r10 = socket$pppoe(0x18, 0x1, 0x0) r11 = memfd_create(&(0x7f00000011c0)='/dev/radio#\x00', 0x0) sendmmsg$unix(r5, &(0x7f0000001c80)=[{{&(0x7f0000000600)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000680)="49dce0a50baad21fd1cbf7fc18e8cde5089d47cc7448a000c7d0ed9c5429b341b09c36aaa75ddd1dd4bc099a221e7dda458f3e1bc65be22cffccab57e27877c2a06d97029974296e6c5c0b55731a892f87aa52a5ee9f4115b9fde9e2e10ad8d90ffd268a330ef2d08774a7a6a3", 0x6d}, {&(0x7f0000000700)="0e05b83a5accdba0e1958128702d073706f7aa2a94ac7a24b94812bce870240058a546ab809a6f7c0854188bbddf9ede55ed47fa1d8debdc498501c1be503de7ce079d0d794d9809980b6abdd2201b6afb1c2800175b04522c2f14c4cd170684c02f06de087e664bf9a01edc2c7914916bd11eddbe8f8ad7f1b3795a62a4b4fcaf05aa667a00a6025755c561292c8a6ca1a8ea0f85f1515bb7eb0e3a610e7c8d49de5e4ae50cdc2a4546301248117cdd87393eaf3f33b5a0b7dbe54342a19090d58818d18b11e2b071f46de5c9e03118726de5bdfb2be89e9b3109efa6fa4d4e8006edebf062fba0", 0xe8}, {&(0x7f0000000800)="b9b571e7cc407e3875c16127938d4f092eb024a250615a1858a70e04ccbcfd20a49b3805f9eb89b894014eb0afc7631520cfb94253225275aef6067c9463dd241b7e15a2980b262134630140", 0x4c}, {&(0x7f0000000880)="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", 0xfb}, {&(0x7f0000000980)="f06f32973508442a435dcb0fd3a416f99f9bde7a95e594e9a856d86fa265d834068ad07fa07555a41fd438745e6cd3d5dabdfb30cf44e29824ff92a956633ed79d3807742be3e1b8ce07f35849d78eab72986dcc555f4641448274ddafb7ac80d5807d425ec82398f3a8fa5dfa87dec12b30536a2af882566ee072315e8878e351fed9e9c1f9a67ec7f981cb813c5bc377c6e74ebca1e60d4d7a15faa547694ecfea93b0611d5511dc508080413116b60635b6f1a95872d1f9813defb8504b3b782c4443b96bc2b0748aac900672ecc8139b894e761e60df29a7378ae0730219ca49be2effe8f33bda", 0xe9}, {&(0x7f0000000a80)="d199359ccdf5ac6123f43185b86ee7a0aad78215e1856261f2e595fce8aea545711fc0f4f23d28e8091dd485a87bd38d71fb38a449a8ca8e9e3835f543c0af7f7da6319532262e6bb8a56e402ed86939c30e1b9b39f0ddcaea119705ea9aad88afd2f7a2b4c153868ace7becdef03b575a897940a70b237a872f0a758f8015e8e55c498faab1401baef4e13f950d39", 0x8f}], 0x6, &(0x7f0000000bc0)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}], 0x20, 0x20d2}}, {{&(0x7f0000000c00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000c80)="51dd4c9d3f920903aa2a431384c2156e72355094d637667803b552378d81a1cf4994d336df16a3189bbc1765bdf41b3d9074511805288661be9955e046f4a3304aa5f196727b675345c8b32235e6912d659f1fc3305096597cc15d93a73c07f4ec2b6cf7a3ca6b610d3d", 0x6a}, {&(0x7f0000000d00)="91eed3eb9c1f350722f1038a228d487f6504a87fba5cca69f085caf0f76ad357581d3dbf970ef3e8", 0x28}, {&(0x7f0000000d40)="f358bf3ea9d0a823bbe811e759898fcff8be49aaff0ffc708318db8585b95f1c18b2cc68f0b84dbd9150197a31e19004980014cd8298f864c4a7d78f1da2d4f85349d64f2bdfbe8a547ad83652e47baadaf16fbaf8f2c06dd1cc7312539108fceb3da3faea4b", 0x66}, {&(0x7f0000000dc0)="6d69889556e610c2fd08f91df7f6332c7d0da0086a8a8c59180ab644e34a8e52c4332a7d98310cf6caafd4020fbdfc92c15abb849cb88a25e8372d60623c858b5f5fe5c86646db739bead6608825bae750dba7871bd4da243f4af011", 0x5c}, {&(0x7f0000000e40)="68decc6306e9bb5809f04c0a24adaff4bc00c7f5461ae9cc4037e5457d0805f1ecb5e5dd64060ae53f6527f6d851ff39454caf082b8de5b750a865527401309f53a01c7055db5ca762dc0665841af06818ad263ad062a66355a13a1c37700b3414cdc1a51423f295125c727be76e5e7f53c37647e6e986fe44c6d87d0745a614fffd97b45a07b46cfd3de483d7dbb2b62c083c2bbcddb3f796b9e1ab11527c39ad79d8978cdbc112727bbdb9e2d0a8e307061eaaa3444ac850580b4186aee6c34dc069e0301e25af63169b93129060282d80a2ebc247ba5474be6a58", 0xdc}, {&(0x7f0000000f40)="17d7374897643b45b1abacf6d30f2b3ed36e96b35703b591503b725be746b5f3779734ee1b39911e7e046853cfb2275baa11b973a3", 0x35}], 0x6, &(0x7f0000001340)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00, r6}}}, @cred={{0x1c, 0x1, 0x2, {r2, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xffffffffffffffff, r9}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x28, 0x1, 0x1, [r1, r3, r3, r0, r3, r10]}}, @rights={{0x20, 0x1, 0x1, [r11, r0, r1, r1]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x100, 0x800}}, {{&(0x7f0000001440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000015c0)=[{&(0x7f00000014c0)="c42397524dc6db63696ba6f71035699abadd6a3d576e046acaf3dc8871e197750cd66a367d453ec9b5cb955b5180cbdc5b7aece3ef0804eb87a7116cb31730acb51167cfd1eb67e1df957c44e0255c2ae9b7b96d1e22041f5b010e3107c5d706c97f475b8613d184cb2200a844e8171bc479c0f85caf014df0fd9b52c642d8cd132e138143820a3537b9cb1cd0b0e1feaa68673912338daaa1e22ed3809313a902d9ab8e377214b7debd3ea2258646bee03173d38334884e278f8ab5c7b7fb7fbce3d678ea7faaacab098ab1c88caaa05f82c28ef9b215ac5985f227c60035e05d850514ab74818f32a330281426e32e1230a537f6", 0xf5}], 0x1, &(0x7f0000001b40)=[@rights={{0x24, 0x1, 0x1, [r3, r3, r3, r1, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [r3, r3, r1, r1, r3, r3, r1, r0]}}], 0x130, 0x1}}], 0x3, 0x44000) 15.60054075s ago: executing program 2 (id=1975): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r4 = syz_io_uring_setup(0x2e2c, &(0x7f0000001580), &(0x7f0000001600), &(0x7f0000001640)) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0x2, &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[r3]}, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = open(&(0x7f0000000540)='./file0\x00', 0x309dc2, 0x7d856d30ba63a6e5) r7 = open(&(0x7f0000000380)='./file1\x00', 0x42042, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000010c0)={r6}, 0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/fscaps', 0x200, 0x54) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3d00001126ee28dcd11ce5ec583d7039267bfd91e686737de5b57db34d10740fd023e14e47df13db012cd3855eb44d4ceeb9abd83ac20a80e2203d8a3f1c7d699508b643294b0c6e7e3779d9c54b5f39148655ff8e8798ee1f6567bfddce1f653394929ac969e030f1223e17dab7e14396c76c1a5d40ff90679f8618f60a9e4f6faa01", @ANYRES64=r2, @ANYBLOB="8a96d9a1a5233ae7bd4225df3996de7f57c2064ff09465609b269e7e94e026bb9300019f8470966a4bd8c203e40d4994", @ANYBLOB="0c0099000400000058000000080001005700000008000100", @ANYRES32=r0, @ANYRES32=r4], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendfile(r6, r7, 0x0, 0x1000000211005) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000200)) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0x4008af12, &(0x7f0000000080)={0x1, 0x7b}) ioctl$VHOST_SET_LOG_FD(r8, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) 15.127018249s ago: executing program 2 (id=1977): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x4b, 0x76, 0x12, 0x20, 0x1a0a, 0x101, 0x3a75, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x32, 0x94, 0x28}}]}}]}}, 0x0) 12.742116675s ago: executing program 3 (id=1981): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x44c6, 0x0, 0x0, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xc, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @loopback, {[@cipso={0x86, 0xb, 0x0, [{0x0, 0x5, "4eb8a6"}]}, @lsrr={0x83, 0x3}, @cipso={0x86, 0x21, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0x2}, {0x0, 0x8, "ffd11634eea2"}, {0x0, 0x2}, {0x0, 0x8, "ccf0294e2a3b"}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}}, 0x0) unshare(0x2000680) fsopen(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 12.628465454s ago: executing program 2 (id=1982): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1b, 0x45, 0xb4, 0x40, 0x6993, 0xb001, 0x74c4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x2, 0x3}}]}}]}}]}}, 0x0) 11.497892557s ago: executing program 3 (id=1984): socket(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000015ec6a08ab9d84cd75040102130109022400010002000009040000025842000009050f000000000000090506000000"], 0x0) 10.021941158s ago: executing program 4 (id=1989): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000000)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='[:\x00\x00', 0x0) 9.686861585s ago: executing program 4 (id=1990): r0 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) ptrace$peek(0x2, 0x0, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000049500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x6a, &(0x7f0000000980)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "955aec9ef39911c4e608778212119fd3d90397a2d165de62", "580c5119fb37bf4a8be03c1f77f40bafce6ab79eb3b71dc477351f542ce9232f"}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) acct(&(0x7f00000001c0)='./file0\x00') ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) setfsgid(0xee00) setresgid(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) r6 = io_uring_setup(0x1de0, &(0x7f0000000440)) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000040), 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) waitid(0x3, r0, 0x0, 0x2, 0x0) 9.452687455s ago: executing program 3 (id=1991): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40001) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000001001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='ext4_mb_release_inode_pa\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r5 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r5, 0x0, 0x400000000000000, 0x7) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x6, @local, 0x7}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kmem_cache_free\x00', r1}, 0x10) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r6, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f0000000680)={0x1f, @none}, 0x8) listen(r7, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x464, &(0x7f0000000940)="$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") quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 9.38251135s ago: executing program 2 (id=1992): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095000000000000007eba521fb0ec4d39ac64443a2f35563e79d33e2470a6957d373becac05b54c"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303180007006000000002000020d3"]) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0xe40, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r9, @ANYBLOB="03000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0010005a73bef63a008003e4000025335f67b14f9bd23e69ec8f71ed187e5ea72a261d468987235fbf75f4482d0562f05c69ca22cf29b7ca782b8cab19620ab66230264a2e96efbc84e349bca599eb4faf2cbf71db152700f5b8ed18658816e4c29829455070cb0f3c0ac162cf15e731b0e666a64c43f1912ae456d5789e6cbfeddbb579bf0dd10d62dfe32641c59fef152284b54de10cddf0fb3f37a28ca8d73ca0fc9f8900", @ANYRES32=r11, @ANYBLOB="00000000c31006002c0012800b000100697036746e6c00001c00028006000f000000000008000800020000000800070004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x884) 8.514032452s ago: executing program 4 (id=1993): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x4}}}}]}, 0x40}}, 0x0) 7.777486572s ago: executing program 3 (id=1996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xb583c63ca7430066) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r6, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0xff, 0x208, &(0x7f0000000780)="$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") clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_perm_addr}) 5.640587487s ago: executing program 0 (id=1997): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed500041000e1"], 0x11) 5.495903049s ago: executing program 0 (id=1998): syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000c0d000/0x1000)=nil, 0x1000, 0x3000007, 0x46832, 0xffffffffffffffff, 0x0) 5.234552321s ago: executing program 0 (id=1999): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r2, @ANYBLOB=',=remount-ro,uid=', @ANYRESHEX=r1, @ANYBLOB=',allow_utime=00000000000000000000377,\x00'], 0x81, 0x14f0, &(0x7f0000002ac0)="$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") setxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v2, 0x14, 0x0) 5.077677563s ago: executing program 0 (id=2000): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) setgroups(0x1, &(0x7f00000021c0)=[r1]) write$FUSE_INIT(r2, &(0x7f0000002200)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x100018}}, 0x50) setxattr$system_posix_acl(&(0x7f0000002540)='./file0\x00', &(0x7f0000002580)='system.posix_acl_default\x00', &(0x7f00000025c0), 0x24, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004900)="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", 0x2000, &(0x7f0000002800)={&(0x7f0000002140)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.221411379s ago: executing program 2 (id=2001): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x7b}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340), 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0xb, 0x8400, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000017c0)={r2, &(0x7f0000001680), 0x0}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xde93, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffff, '\x00', r1, 0xffffffffffffffff, 0xffffffff, 0x0, 0x2}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000280)=""/188, 0x26, 0xbc, 0x1}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x2200, 0x2}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000800)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbbe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x81000006}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="90010000", @ANYRES16=r5, @ANYBLOB="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"], 0x190}, 0x1, 0x0, 0x0, 0xc010}, 0x1) r6 = fsopen(&(0x7f0000000400)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000280)="17f3af4213e783e2d1677efd782beee5b69ba538bd3cada70d793bc3e3e96e6eeeff20370ab459395e2b59a6eb644e7c53324a5c29bcf009b79b63c640e45316a68a83636e614eaaff0036a2a72156", 0x4f, 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.205972411s ago: executing program 0 (id=2010): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.078896922s ago: executing program 3 (id=2002): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x31c83}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x14, 0x8, &(0x7f00000002c0)="fdfffeffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 966.79985ms ago: executing program 0 (id=2003): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x3c}, {0x6}]}) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x80}, [@RTA_PRIORITY]}, 0x24}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001d00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000100000011, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000008000008500000050000000a50000009700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = dup2(r2, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000002000a0002"], 0x28}}, 0x0) 926.435704ms ago: executing program 3 (id=2004): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xa00}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xa}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {0x7, 0x0, 0x0, 0x6}, {0x5, 0x0, 0x7, 0x2, 0x0, 0x2}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4e7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) bind$bt_l2cap(r4, &(0x7f0000000080), 0xe) listen(r4, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000100)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x2f21, &(0x7f0000000000)={0x0, 0x7b75, 0x80, 0x2, 0x2d0, 0x0, r0}) 842.603911ms ago: executing program 4 (id=2005): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={@mcast1}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000800001c0037800b00011c6970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0) 366.81068ms ago: executing program 4 (id=2006): r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='attr\x00') fchdir(r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$cgroup_ro(r1, &(0x7f00000000c0)='devices.list\x00', 0x275a, 0x2) 230.363531ms ago: executing program 2 (id=2007): syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="9fcef773371e4e035a4ff190bea4efd68642046c23be8a9aae70a0043860f98931e9a9d2a4cb9b6cbfab8d88542eafc9851179a8bc28dad0fbfc05804b2b"], 0x1, 0x8a, &(0x7f0000000180)="$eJzszqENAkEUBNDhDKhrAEEH1wOlECQ4FISEimiFEugAgcUcYsGsxCy5vJf8n0zGzO11XaZPxksyVg7H026zLz9MUpdknmSRZNWX/FiXbvbp78/z9nut9wIAAL/rMtR5aDYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4A+9AwAA///rYCNS") mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sync() rename(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file1\x00') 0s ago: executing program 4 (id=2008): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ec0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ef"}]}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r6, 0x5432, 0x0) kernel console output (not intermixed with test programs): p mac addresses unique to avoid problems! [ 535.976350][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.997961][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.019083][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.045948][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.059311][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.070175][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.083602][ T9629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.172330][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 536.205666][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 536.234152][ T9629] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.264848][ T9629] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.274086][ T9629] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.295413][ T9629] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.417744][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 536.438575][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 536.495446][ T3648] Bluetooth: hci7: command tx timeout [ 536.714172][ T9674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.915656][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 536.924423][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 537.112039][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 537.133228][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 537.168804][ T9674] device veth0_vlan entered promiscuous mode [ 537.185376][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 537.193632][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 537.240527][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.253886][ T9674] device veth1_vlan entered promiscuous mode [ 537.259479][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.522574][ T27] audit: type=1804 audit(1723574780.471:431): pid=9769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1639" name="/newroot/109/bus/bus" dev="overlay" ino=606 res=1 errno=0 [ 537.523905][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 537.580799][ T9769] Invalid ELF header magic: != ELF [ 537.604649][ T9734] chnl_net:caif_netlink_parms(): no params data found [ 537.698655][ T3833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.715660][ T3833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.800572][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 538.044332][ T9674] device veth0_macvtap entered promiscuous mode [ 538.078912][ T9674] device veth1_macvtap entered promiscuous mode [ 538.125812][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 538.134492][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 538.171039][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 538.191154][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 538.332654][ T3988] device hsr_slave_0 left promiscuous mode [ 538.364811][ T3988] device hsr_slave_1 left promiscuous mode [ 538.375201][ T3988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.403669][ T3988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.422896][ T3988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.443974][ T3988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.515307][ T3988] device bridge_slave_1 left promiscuous mode [ 538.521587][ T3988] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.587921][ T3655] Bluetooth: hci7: command tx timeout [ 538.616741][ T3988] device bridge_slave_0 left promiscuous mode [ 538.623587][ T3988] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.707098][ T9782] loop2: detected capacity change from 0 to 512 [ 538.956950][ T9782] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1589: invalid indirect mapped block 256 (level 2) [ 538.984484][ T9782] EXT4-fs (loop2): 2 truncates cleaned up [ 538.990494][ T9782] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 539.307289][ T3655] Bluetooth: hci5: command 0x0406 tx timeout [ 539.449123][ T3988] device veth1_macvtap left promiscuous mode [ 539.465675][ T3988] device veth0_macvtap left promiscuous mode [ 539.485190][ T3988] device veth1_vlan left promiscuous mode [ 539.491068][ T3988] device veth0_vlan left promiscuous mode [ 539.554911][ T8371] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 539.926209][ T8371] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 539.953330][ T8371] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 539.973250][ T8371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.995189][ T8371] usb 3-1: config 0 descriptor?? [ 540.044968][ T8371] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 540.654973][ T3648] Bluetooth: hci7: command tx timeout [ 541.437864][ T9629] EXT4-fs (loop2): unmounting filesystem. [ 541.442233][ T4122] usb 3-1: USB disconnect, device number 20 [ 541.669663][ T3988] team0 (unregistering): Port device team_slave_1 removed [ 541.908849][ T3988] team0 (unregistering): Port device team_slave_0 removed [ 542.155214][ T3988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.353722][ T9806] syz.1.1649[9806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 542.354269][ T9806] syz.1.1649[9806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 542.427950][ T4070] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 542.948643][ T3648] Bluetooth: hci7: command tx timeout [ 543.074499][ T3988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.215142][ T4070] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 543.232889][ T4070] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 543.251920][ T4070] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.265782][ T4070] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 543.285025][ T4070] usb 3-1: config 1 has no interface number 0 [ 543.304773][ T4070] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d6.01 [ 543.325377][ T4070] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.436454][ T4070] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 543.615384][ T4070] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 543.634873][ T4070] snd_usb_pod 3-1:1.1: invalid control EP [ 543.640659][ T4070] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 543.658114][ T4070] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 543.668322][ T4070] snd_usb_pod: probe of 3-1:1.1 failed with error -22 [ 543.835502][ T4070] usb 3-1: USB disconnect, device number 21 [ 544.689934][ T9830] loop2: detected capacity change from 0 to 512 [ 544.760462][ T9830] EXT4-fs error (device loop2): __ext4_fill_super:5399: inode #2: comm syz.2.1659: casefold flag without casefold feature [ 544.824198][ T9830] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 544.904950][ T9830] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 544.913152][ T9830] System zones: 0-2, 18-18, 34-35 [ 544.967179][ T9830] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 545.126301][ T9629] EXT4-fs (loop2): unmounting filesystem. [ 545.407452][ T9840] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1663'. [ 546.550374][ T3988] bond0 (unregistering): Released all slaves [ 546.798024][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.857737][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.904969][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.942792][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.982447][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.007540][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.037181][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.072654][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.114801][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.154622][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.164489][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.206422][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.224452][ T9862] loop2: detected capacity change from 0 to 256 [ 547.237090][ T9674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.274315][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 547.283721][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 547.307161][ T9734] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.314377][ T9734] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.324035][ T9734] device bridge_slave_0 entered promiscuous mode [ 547.373308][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.385440][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.404701][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.419475][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.434648][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.469840][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.484657][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.504676][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.514538][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.527753][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.539561][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.551148][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.563200][ T9674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.571367][ T9734] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.579372][ T9734] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.588081][ T9734] device bridge_slave_1 entered promiscuous mode [ 547.616561][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 547.626763][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 547.648318][ T9674] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.670955][ T9674] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.699356][ T9674] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.764748][ T9674] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.927237][ T9734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.030636][ T9734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.267677][ T9734] team0: Port device team_slave_0 added [ 548.298161][ T3784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.309383][ T9734] team0: Port device team_slave_1 added [ 548.318308][ T3784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.533065][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 548.557906][ T9734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.572433][ T9734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.649404][ T9734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.686777][ T9734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.714085][ T9734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.771691][ T9734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.808204][ T3784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.834692][ T3784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.977564][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 549.015933][ T9885] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 549.042663][ T9734] device hsr_slave_0 entered promiscuous mode [ 549.184286][ T9734] device hsr_slave_1 entered promiscuous mode [ 549.534868][ T27] audit: type=1326 audit(1723574792.481:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9886 comm="syz.3.1606" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5e63799f9 code=0x0 [ 549.560484][ T3648] Bluetooth: hci6: command 0x0406 tx timeout [ 550.545026][ T9734] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.823793][ T9734] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.245473][ T9734] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.297889][ T9915] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1690'. [ 551.426655][ T9913] loop2: detected capacity change from 0 to 2048 [ 551.533162][ T9734] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.562629][ T9913] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 552.106945][ T9734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 552.150828][ T9734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 552.202344][ T9734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 552.386281][ T9734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 554.344202][ T9734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.460179][ T9933] xt_CONNSECMARK: invalid mode: 0 [ 554.805517][ T9734] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.977655][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 555.002311][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 555.105943][ T9945] loop2: detected capacity change from 0 to 128 [ 555.244335][ T9945] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 555.266220][ T9945] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 555.987807][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 556.020881][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 556.053644][ T4581] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.060890][ T4581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.105858][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 556.125624][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 556.147738][ T4581] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.154969][ T4581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.318979][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 557.036242][ T9948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1701'. [ 557.046069][ T9948] netlink: 'syz.4.1701': attribute type 20 has an invalid length. [ 557.109646][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1702'. [ 557.130688][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1702'. [ 557.163634][ T9957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1702'. [ 557.555431][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 557.556285][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 557.557214][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 557.559366][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 557.625875][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 557.627939][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 557.645243][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 557.645932][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 557.650618][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 557.674853][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 557.675679][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 557.686713][ T9734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 557.749738][ T9969] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1708'. [ 557.749771][ T9969] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1708'. [ 558.825582][ T9980] netlink: 'syz.3.1710': attribute type 298 has an invalid length. [ 559.008861][ T9985] loop2: detected capacity change from 0 to 512 [ 559.092270][ T9985] EXT4-fs (loop2): orphan cleanup on readonly fs [ 559.092952][ T9985] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 559.093164][ T9985] EXT4-fs warning (device loop2): ext4_enable_quotas:7012: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 559.093195][ T9985] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 559.101649][ T9985] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1711: bg 0: block 64: padding at end of block bitmap is not set [ 559.102252][ T9985] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 559.102854][ T9985] EXT4-fs (loop2): 1 orphan inode deleted [ 559.102888][ T9985] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 559.222451][ T9989] loop3: detected capacity change from 0 to 2048 [ 559.393150][ T9629] EXT4-fs (loop2): unmounting filesystem. [ 559.434772][ T26] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 559.437304][ T9994] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 559.658247][ T9734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.658603][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 559.658794][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 559.706807][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 559.707511][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 559.756676][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 559.757395][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 559.758338][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 559.758939][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 559.770637][ T9734] device veth0_vlan entered promiscuous mode [ 559.811303][ T9734] device veth1_vlan entered promiscuous mode [ 559.816266][ T26] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 559.900599][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 559.901409][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 559.902100][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 559.902810][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 559.905402][ T26] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 559.905436][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 559.905462][ T26] usb 2-1: SerialNumber: syz [ 559.917483][ T9734] device veth0_macvtap entered promiscuous mode [ 559.937691][ T9734] device veth1_macvtap entered promiscuous mode [ 560.018669][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.018695][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.018708][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.018724][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.018737][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.018753][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.018766][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.018781][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.018803][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.018817][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.018830][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.018845][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.018858][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.018874][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.020522][ T9734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.021909][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 560.022686][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 560.023343][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 560.027417][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 560.030880][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.030902][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.030917][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.030932][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.030945][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.030961][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.030975][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.030995][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.031009][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.031023][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.031035][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.031049][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.031062][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.031076][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.041857][ T9734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.043234][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 560.044337][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 560.737833][ T9991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.795097][ T9991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.109380][ T9734] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.134671][ T9734] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.143605][ T9734] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.196398][ T9734] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.995035][T10010] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1713'. [ 562.266913][ T26] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 562.275945][T10025] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1722'. [ 562.307297][ T26] usb 2-1: USB disconnect, device number 23 [ 562.399824][T10028] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 562.562254][ T3986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.604734][ T3986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.632135][ T3784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.650084][ T3784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.688579][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 562.782545][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 562.830337][T10034] xt_ecn: cannot match TCP bits for non-tcp packets [ 562.854070][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.912098][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.899344][T10043] loop3: detected capacity change from 0 to 256 [ 563.968257][T10043] exfat: Deprecated parameter 'namecase' [ 564.019239][T10043] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 565.853659][T10052] fuse: Bad value for 'user_id' [ 566.526594][ T3658] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 566.541977][ T3658] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 566.556572][ T3658] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 566.566251][ T3658] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 566.573941][ T3658] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 566.581633][ T3658] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 566.596812][T10066] loop2: detected capacity change from 0 to 1024 [ 567.354794][ T4068] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 567.785052][ T4068] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 567.818431][ T4068] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 567.854705][ T4068] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.889175][ T4068] usb 1-1: config 0 descriptor?? [ 567.941057][ T4068] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 568.034676][ T3688] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 568.042432][ T8371] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 568.197333][T10065] chnl_net:caif_netlink_parms(): no params data found [ 568.285782][ T8371] usb 2-1: Using ep0 maxpacket: 32 [ 568.405016][ T3688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.415200][ T8371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 568.449125][ T8371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 568.459495][ T3688] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 568.538084][T10065] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.561218][T10065] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.610772][T10065] device bridge_slave_0 entered promiscuous mode [ 568.624948][ T8371] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=51.44 [ 568.634430][ T3688] usb 3-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=39.78 [ 568.664822][ T3648] Bluetooth: hci3: command tx timeout [ 568.664932][ T8371] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.679238][ T3688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.692993][T10065] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.724714][ T3688] usb 3-1: Product: syz [ 568.728932][ T3688] usb 3-1: Manufacturer: syz [ 568.733741][T10065] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.764087][ T8371] usb 2-1: Product: syz [ 568.774214][ T3688] usb 3-1: SerialNumber: syz [ 568.779265][ T8371] usb 2-1: Manufacturer: syz [ 568.783895][ T8371] usb 2-1: SerialNumber: syz [ 568.794759][T10065] device bridge_slave_1 entered promiscuous mode [ 568.814960][ T3688] usb 3-1: config 0 descriptor?? [ 568.852070][ T8371] usb 2-1: config 0 descriptor?? [ 568.858848][ T3688] usbtest 3-1:0.0: couldn't get endpoints, -22 [ 568.876701][ T3688] usbtest: probe of 3-1:0.0 failed with error -22 [ 568.936291][ T8371] legousbtower 2-1:0.0: interrupt endpoints not found [ 568.979855][T10065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.030612][T10065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.080557][ T3688] usb 3-1: USB disconnect, device number 22 [ 569.223545][T10065] team0: Port device team_slave_0 added [ 569.254415][T10065] team0: Port device team_slave_1 added [ 569.264497][ T8371] usb 2-1: USB disconnect, device number 24 [ 569.352948][T10065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.370406][T10065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.409337][T10065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.443123][T10065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.462013][T10065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.508056][T10065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.574022][ T3988] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.734318][ T3688] usb 1-1: USB disconnect, device number 16 [ 569.760374][T10065] device hsr_slave_0 entered promiscuous mode [ 569.864226][T10065] device hsr_slave_1 entered promiscuous mode [ 570.033390][T10065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 570.061598][T10065] Cannot create hsr debugfs directory [ 570.806174][ T3648] Bluetooth: hci3: command tx timeout [ 570.931716][ T3988] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.142238][T10108] loop2: detected capacity change from 0 to 512 [ 571.186006][T10108] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 571.242009][T10108] EXT4-fs (loop2): invalid journal inode [ 571.267330][ T3988] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.310443][T10108] sctp: [Deprecated]: syz.2.1750 (pid 10108) Use of struct sctp_assoc_value in delayed_ack socket option. [ 571.310443][T10108] Use struct sctp_sack_info instead [ 571.439791][T10108] netlink: 'syz.2.1750': attribute type 3 has an invalid length. [ 571.447811][T10108] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1750'. [ 572.275706][ T3988] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.824908][ T3648] Bluetooth: hci3: command tx timeout [ 573.339013][T10129] loop2: detected capacity change from 0 to 512 [ 573.431120][T10129] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 573.477478][T10129] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038 (0x7fffffff) [ 573.805477][ T9629] EXT4-fs (loop2): unmounting filesystem. [ 574.021589][T10065] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 574.135814][T10065] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 574.250827][T10065] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 574.591253][T10065] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 574.915053][ T3648] Bluetooth: hci3: command tx timeout [ 575.425027][ T4068] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 575.504811][T10173] loop2: detected capacity change from 0 to 1024 [ 575.525775][T10173] EXT4-fs: Ignoring removed oldalloc option [ 575.561906][T10173] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 575.618616][T10173] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 575.638319][ T3988] device hsr_slave_0 left promiscuous mode [ 575.662250][ T3988] device hsr_slave_1 left promiscuous mode [ 575.667000][T10173] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 575.682569][ T3988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.693511][ T3988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.708485][ T3988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.727242][T10173] journal_init_common: Cannot get buffer for journal superblock [ 575.745920][ T3988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.776183][T10173] EXT4-fs (loop2): Could not load journal inode [ 575.797714][ T3988] device bridge_slave_1 left promiscuous mode [ 575.805074][ T4068] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.826200][ T3988] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.834029][ T4068] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.864724][ T3988] device bridge_slave_0 left promiscuous mode [ 575.890780][ T4068] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 575.920476][ T4068] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.935565][ T3988] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.971802][ T4068] usb 1-1: config 0 descriptor?? [ 576.087102][ T3988] device veth1_macvtap left promiscuous mode [ 576.093227][ T3988] device veth0_macvtap left promiscuous mode [ 576.120020][ T3988] device veth1_vlan left promiscuous mode [ 576.133196][T10180] loop2: detected capacity change from 0 to 1024 [ 576.146231][ T3988] device veth0_vlan left promiscuous mode [ 576.281190][T10180] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.1774: Invalid block bitmap block 0 in block_group 0 [ 576.333590][T10180] Quota error (device loop2): write_blk: dquota write failed [ 576.341429][T10180] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 576.351516][T10180] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.1774: Failed to acquire dquot type 0 [ 576.375324][T10180] EXT4-fs error (device loop2): ext4_free_blocks:6213: comm syz.2.1774: Freeing blocks not in datazone - block = 0, count = 4096 [ 576.392279][T10180] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1774: Invalid inode bitmap blk 0 in block_group 0 [ 576.405703][ T3784] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 576.419176][T10180] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 576.428410][ T3784] EXT4-fs error (device loop2): ext4_release_dquot:6800: comm kworker/u4:7: Failed to release dquot type 0 [ 576.440854][T10180] EXT4-fs (loop2): 1 orphan inode deleted [ 576.474899][T10180] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 576.475904][ T4068] hid (null): bogus close delimiter [ 576.694870][ T4068] usb 1-1: string descriptor 0 read error: -22 [ 577.584903][ T4068] uclogic 0003:256C:006D.0016: interface is invalid, ignoring [ 577.642755][ T9629] EXT4-fs (loop2): unmounting filesystem. [ 577.658234][ T34] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 577.685044][ T34] EXT4-fs error (device loop2): ext4_release_dquot:6800: comm kworker/u4:2: Failed to release dquot type 0 [ 577.881765][ T4120] usb 1-1: USB disconnect, device number 17 [ 578.304809][ T27] audit: type=1326 audit(1723574821.161:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.4.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6de3799f9 code=0x7ffc0000 [ 578.784642][ T27] audit: type=1326 audit(1723574821.161:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.4.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe6de378390 code=0x7ffc0000 [ 578.854649][ T27] audit: type=1326 audit(1723574821.161:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.4.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe6de37b187 code=0x7ffc0000 [ 578.938694][ T27] audit: type=1326 audit(1723574821.161:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.4.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe6de3799f9 code=0x7ffc0000 [ 579.035633][ T27] audit: type=1326 audit(1723574821.161:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.4.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe6de37b187 code=0x7ffc0000 [ 579.129586][ T27] audit: type=1326 audit(1723574821.161:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.4.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe6de37868a code=0x7ffc0000 [ 579.315628][T10210] fuse: Unknown parameter 'grou00000000000000000000' [ 580.225579][T10217] binder: Bad value for 'stats' [ 581.232525][ T3988] team0 (unregistering): Port device team_slave_1 removed [ 581.307935][ T3988] team0 (unregistering): Port device team_slave_0 removed [ 581.416745][ T3988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.543126][ T3988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.116878][ T3988] bond0 (unregistering): Released all slaves [ 583.327913][T10065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.446352][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 583.465406][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 583.486612][T10065] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.522259][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 583.545760][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 583.595319][ T4703] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.602477][ T4703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.635509][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1785'. [ 583.668593][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 583.702117][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 583.711544][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 583.744498][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.751715][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.775218][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 583.842729][T10232] loop2: detected capacity change from 0 to 4096 [ 583.895059][T10232] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 584.102468][ T27] kauditd_printk_skb: 28 callbacks suppressed [ 584.102485][ T27] audit: type=1800 audit(1723574827.051:467): pid=10232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1787" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 584.134802][ T4120] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 584.169774][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 584.178871][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 584.188707][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 584.199666][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 584.208577][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 584.934093][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 584.960120][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 584.995482][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 585.014266][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 585.041128][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 585.044879][ T4120] usb 1-1: Using ep0 maxpacket: 32 [ 585.211414][T10065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 585.344982][ T4120] usb 1-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice=30.b6 [ 585.365133][ T4120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.444962][ T4120] usb 1-1: Product: syz [ 585.454943][ T4120] usb 1-1: Manufacturer: syz [ 585.469889][ T4120] usb 1-1: SerialNumber: syz [ 585.492051][ T4120] usb 1-1: config 0 descriptor?? [ 585.557188][ T4120] disable ehci-hcd to run US-144 [ 585.778916][ T4120] usb 1-1: USB disconnect, device number 18 [ 585.785132][ T3688] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 585.965668][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 585.983492][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 586.034056][T10065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.054773][ T3688] usb 3-1: Using ep0 maxpacket: 16 [ 586.096420][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 586.125494][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 586.161397][T10065] device veth0_vlan entered promiscuous mode [ 586.174985][ T3688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.179886][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 586.205896][ T3688] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 586.206458][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 586.226990][ T4581] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 586.254671][ T3688] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 586.263933][T10065] device veth1_vlan entered promiscuous mode [ 586.285356][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 586.295583][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 586.304690][ T3688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.315432][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 586.353722][ T3688] usb 3-1: config 0 descriptor?? [ 586.400524][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 586.415823][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 586.445850][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 586.487221][T10065] device veth0_macvtap entered promiscuous mode [ 586.495579][ T4581] usb 2-1: Using ep0 maxpacket: 32 [ 586.520312][T10065] device veth1_macvtap entered promiscuous mode [ 586.613115][T10065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.625277][ T4581] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 44346, setting to 1024 [ 586.664394][ T4581] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 586.664675][T10065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.704714][ T4581] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 586.724804][T10065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.734618][ T4581] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.776575][T10065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.799777][T10252] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 586.807997][T10065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.836812][ T3688] microsoft 0003:045E:07DA.0017: invalid report_size 413955073 [ 586.856321][ T4581] hub 2-1:4.0: bad descriptor, ignoring hub [ 586.862287][ T4581] hub: probe of 2-1:4.0 failed with error -5 [ 586.869545][ T3688] microsoft 0003:045E:07DA.0017: item 0 4 1 7 parsing failed [ 586.891250][ T4581] usbhid 2-1:4.0: couldn't find an input interrupt endpoint [ 586.894890][T10065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.915157][ T3688] microsoft 0003:045E:07DA.0017: parse failed [ 586.934751][ T3688] microsoft: probe of 0003:045E:07DA.0017 failed with error -22 [ 586.962885][T10065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.993974][T10065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.021119][T10065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.062133][T10065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.096759][T10065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.125993][ T3688] usb 3-1: USB disconnect, device number 23 [ 587.141189][T10065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.171464][T10065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.202341][T10065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.227036][T10065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.240340][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 587.254339][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 587.284026][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 587.315076][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 587.340003][T10065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.374803][T10065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.414860][T10065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.453076][T10065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.485758][T10065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.523962][T10065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.563947][T10065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.604630][T10065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.624656][T10065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.693239][T10065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.722305][T10065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.744805][T10065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.780783][T10065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.814852][T10065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.854940][T10065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.892484][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 587.908960][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 587.949654][T10065] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.976721][T10065] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.009129][T10065] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.034757][T10065] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.290843][ T7675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.313507][ T7675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.376448][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 588.427521][ T7675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.457419][ T7675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.485738][ T4579] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 588.512312][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 588.745800][ T4579] usb 3-1: Using ep0 maxpacket: 16 [ 588.894812][ T4579] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.926548][ T4579] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.964632][ T4579] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 588.994960][ T8371] usb 2-1: USB disconnect, device number 25 [ 589.013616][ T4579] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 589.045799][ T4579] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.096615][ T4579] usb 3-1: config 0 descriptor?? [ 589.257920][T10285] loop3: detected capacity change from 0 to 16 [ 589.299606][T10285] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 589.575924][ T4579] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 589.614757][ T4579] microsoft 0003:045E:07DA.0018: ignoring exceeding usage max [ 589.631635][T10292] Process accounting resumed [ 589.713416][ T4579] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0018/input/input24 [ 589.908655][ T4579] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 589.972059][ T4579] usb 3-1: USB disconnect, device number 24 [ 589.984844][T10295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1814'. [ 590.440828][T10305] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1817'. [ 590.494266][T10305] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1817'. [ 590.598525][T10305] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1817'. [ 591.985523][T10323] batman_adv: batadv0: Adding interface: macvlan2 [ 592.020221][T10323] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.147118][T10323] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 592.728982][T10334] loop2: detected capacity change from 0 to 2048 [ 592.805351][T10334] loop2: p2 p3 < > p4 < p5 > [ 592.810198][T10334] loop2: partition table partially beyond EOD, truncated [ 592.836231][T10334] loop2: p2 start 33028 is beyond EOD, truncated [ 592.852949][T10334] loop2: p3 start 4284160 is beyond EOD, truncated [ 592.873810][T10334] loop2: p5 start 33028 is beyond EOD, truncated [ 592.915081][ T3092] loop2: p2 p3 < > p4 < p5 > [ 592.919892][ T3092] loop2: partition table partially beyond EOD, truncated [ 592.932277][ T3092] loop2: p2 start 33028 is beyond EOD, truncated [ 592.947856][ T3092] loop2: p3 start 4284160 is beyond EOD, truncated [ 592.973874][ T3092] loop2: p5 start 33028 is beyond EOD, truncated [ 593.109510][T10077] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 593.143260][T10077] udevd[10077]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 593.504727][ T4703] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 593.894883][ T4703] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 593.914280][ T4703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.946837][ T4703] usb 3-1: config 0 descriptor?? [ 594.486525][ T4703] ath6kl: Failed to submit usb control message: -71 [ 594.503432][ T4703] ath6kl: unable to send the bmi data to the device: -71 [ 594.533777][ T4703] ath6kl: Unable to send get target info: -71 [ 594.554081][ T4703] ath6kl: Failed to init ath6kl core: -71 [ 594.669155][ T4703] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 594.690889][ T4703] usb 3-1: USB disconnect, device number 25 [ 594.918210][T10349] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 597.287047][ T4119] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 597.555061][ T4119] usb 3-1: Using ep0 maxpacket: 8 [ 597.675013][ T4119] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 597.685003][ T4119] usb 3-1: config 0 has no interface number 0 [ 597.695117][ T4119] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 597.734683][ T4119] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 597.744399][ T4119] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 597.793437][ T4119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.829452][ T4119] usb 3-1: config 0 descriptor?? [ 597.871224][ T4119] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 598.096315][ T4122] usb 3-1: USB disconnect, device number 26 [ 598.223339][T10380] CIFS mount error: No usable UNC path provided in device string! [ 598.223339][T10380] [ 598.294279][T10380] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 599.907466][T10402] tipc: Trying to set illegal importance in message [ 600.906528][T10412] loop2: detected capacity change from 0 to 1764 [ 601.101138][T10412] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2267097982 (2267097982 ns) > initial count (752765037 ns). Using initial count to start timer. [ 601.437795][T10415] loop2: detected capacity change from 0 to 128 [ 601.460077][T10415] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 601.572374][T10415] loop2: detected capacity change from 0 to 2048 [ 601.735693][T10415] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 602.313416][ T9629] EXT4-fs (loop2): unmounting filesystem. [ 602.497483][ T3658] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 602.542834][ T3658] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 602.556270][ T3658] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 602.574857][ T3658] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 602.589087][ T3658] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 602.597029][ T3658] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 602.874789][ T4119] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 603.135521][ T4119] usb 3-1: Using ep0 maxpacket: 32 [ 603.239211][T10438] syz.4.1863[10438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 603.239723][T10438] syz.4.1863[10438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 604.005043][ T4119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.134676][ T4119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.173297][T10428] chnl_net:caif_netlink_parms(): no params data found [ 604.180504][ T4119] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 604.212341][ T4119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.265981][ T4119] usb 3-1: config 0 descriptor?? [ 604.626144][T10428] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.634924][T10448] futex_wake_op: syz.4.1866 tries to shift op by 144; fix this program [ 604.645362][T10428] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.655355][ T3648] Bluetooth: hci8: command tx timeout [ 604.676822][ T3648] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 604.689091][T10428] device bridge_slave_0 entered promiscuous mode [ 604.697591][ T3648] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 604.706743][ T3648] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 604.714657][ T3648] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 604.725792][ T3648] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 604.733107][ T3648] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 604.738629][T10428] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.757743][ T4119] ft260 0003:0403:6030.0019: unknown main item tag 0x0 [ 604.835309][ T4119] ft260 0003:0403:6030.0019: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 604.886668][T10428] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.984129][T10428] device bridge_slave_1 entered promiscuous mode [ 605.034872][ T4119] ft260 0003:0403:6030.0019: chip code: 5e81 abf2 [ 605.851442][T10428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.924164][T10428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.103834][T10428] team0: Port device team_slave_0 added [ 606.105136][ T4120] usb 3-1: reset high-speed USB device number 27 using dummy_hcd [ 606.181255][T10428] team0: Port device team_slave_1 added [ 606.418969][T10428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.439671][T10428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.524754][T10428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.670101][T10428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.681606][T10428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.734788][ T3658] Bluetooth: hci8: command tx timeout [ 606.783918][T10428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.833694][T10463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1869'. [ 606.975072][ T3658] Bluetooth: hci9: command tx timeout [ 607.009570][ T4119] usb 3-1: USB disconnect, device number 27 [ 607.163320][ T3784] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.211135][T10449] chnl_net:caif_netlink_parms(): no params data found [ 607.246895][T10428] device hsr_slave_0 entered promiscuous mode [ 607.271245][T10428] device hsr_slave_1 entered promiscuous mode [ 607.283850][T10428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 607.300403][T10428] Cannot create hsr debugfs directory [ 607.446776][T10466] loop2: detected capacity change from 0 to 128 [ 607.584714][T10466] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 607.587499][T10468] overlayfs: failed to resolve './file0': -2 [ 607.638343][ T3784] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.651174][T10466] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 607.980309][T10472] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 607.989177][T10472] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 608.076290][T10473] overlayfs: failed to resolve './file1': -2 [ 608.867583][ T27] audit: type=1326 audit(1723574851.301:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ea3799f9 code=0x7ffc0000 [ 608.879164][ T3658] Bluetooth: hci8: command tx timeout [ 608.935051][ T27] audit: type=1326 audit(1723574851.301:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ea3799f9 code=0x7ffc0000 [ 609.054864][ T3658] Bluetooth: hci9: command tx timeout [ 609.091995][ T27] audit: type=1326 audit(1723574851.801:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fc2ea3799f9 code=0x7ffc0000 [ 609.267734][ T3784] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.305461][ T27] audit: type=1326 audit(1723574851.801:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ea3799f9 code=0x7ffc0000 [ 609.345633][ T27] audit: type=1326 audit(1723574851.801:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ea3799f9 code=0x7ffc0000 [ 609.487075][ T3784] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.544726][ T27] audit: type=1326 audit(1723574851.801:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fc2ea3799f9 code=0x7ffc0000 [ 609.584969][ T27] audit: type=1326 audit(1723574851.801:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ea3799f9 code=0x7ffc0000 [ 609.611124][ T27] audit: type=1326 audit(1723574851.801:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ea3799f9 code=0x7ffc0000 [ 609.634250][ T27] audit: type=1326 audit(1723574851.811:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc2ea3799f9 code=0x7ffc0000 [ 609.658924][ T27] audit: type=1326 audit(1723574851.811:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc2ea379a33 code=0x7ffc0000 [ 609.718280][T10485] loop2: detected capacity change from 0 to 4096 [ 609.851602][T10486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1874'. [ 610.025428][T10449] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.032584][T10449] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.086044][T10449] device bridge_slave_0 entered promiscuous mode [ 610.104225][T10449] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.122151][T10449] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.140994][T10449] device bridge_slave_1 entered promiscuous mode [ 610.258990][T10449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.303569][T10492] loop2: detected capacity change from 0 to 128 [ 610.320722][T10449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.354909][T10492] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 610.472084][T10449] team0: Port device team_slave_0 added [ 610.510913][T10449] team0: Port device team_slave_1 added [ 610.858625][T10497] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1880'. [ 610.974808][ T3658] Bluetooth: hci8: command tx timeout [ 611.134850][ T3658] Bluetooth: hci9: command tx timeout [ 611.457260][T10499] loop2: detected capacity change from 0 to 256 [ 611.471544][T10449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.489094][T10449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.571891][T10449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.248025][T10449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.269757][T10449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.298903][T10449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.603378][T10505] loop2: detected capacity change from 0 to 128 [ 612.624408][T10505] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 612.658670][T10449] device hsr_slave_0 entered promiscuous mode [ 612.695761][T10449] device hsr_slave_1 entered promiscuous mode [ 612.705548][T10505] loop2: detected capacity change from 0 to 8 [ 612.724048][T10449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 612.748293][T10077] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 612.767066][T10449] Cannot create hsr debugfs directory [ 613.801919][ T3658] Bluetooth: hci9: command tx timeout [ 614.190314][T10524] batman_adv: batadv0: Adding interface: macvlan2 [ 614.214918][T10524] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.295319][T10524] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 614.617485][T10527] xt_CONNSECMARK: invalid mode: 0 [ 615.303011][T10537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1891'. [ 615.464972][T10428] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 615.556485][T10428] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 615.840231][T10449] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.907612][T10428] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 615.945984][T10428] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 616.353325][T10449] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.587070][T10449] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.594670][ T4120] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 616.984755][ T4120] usb 3-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 617.004048][ T4120] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.053095][ T4120] usb 3-1: config 0 descriptor?? [ 617.079842][T10449] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.106306][ T4120] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 617.209433][ T3784] device hsr_slave_0 left promiscuous mode [ 617.236760][ T3784] device hsr_slave_1 left promiscuous mode [ 617.250247][ T3784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.261957][ T3784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.277764][ T3784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.291274][ T3784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.315574][ T3784] device bridge_slave_1 left promiscuous mode [ 617.324135][ T3784] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.421302][ T3784] device bridge_slave_0 left promiscuous mode [ 617.434118][ T3784] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.540416][ T3784] device veth1_macvtap left promiscuous mode [ 617.564696][ T3784] device veth0_macvtap left promiscuous mode [ 617.571896][ T3784] device veth1_vlan left promiscuous mode [ 617.584759][ T3784] device veth0_vlan left promiscuous mode [ 617.974766][ T4120] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 617.987801][ T4120] gspca_pac7302: probe of 3-1:0.0 failed with error -71 [ 618.032016][ T4120] usb 3-1: USB disconnect, device number 28 [ 618.931292][T10560] syz.2.1897[10560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 618.931801][T10560] syz.2.1897[10560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 619.941510][T10564] loop2: detected capacity change from 0 to 2048 [ 620.014522][T10564] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 620.087233][T10564] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 620.110561][T10564] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 620.139542][T10564] UDF-fs: Scanning with blocksize 512 failed [ 620.187371][T10564] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 621.060494][ T3784] team0 (unregistering): Port device team_slave_1 removed [ 621.218542][ T3784] team0 (unregistering): Port device team_slave_0 removed [ 621.356748][ T3784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.375172][ T4704] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 621.545677][ T3784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.785009][ T4704] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 621.814122][ T4704] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 621.844638][ T4704] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 622.035044][ T4704] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 622.064628][ T4704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.072736][ T4704] usb 3-1: Product: syz [ 622.084611][ T4704] usb 3-1: Manufacturer: syz [ 622.089322][ T4704] usb 3-1: SerialNumber: syz [ 622.604976][ T4704] usb 3-1: 0:2 : does not exist [ 622.855676][ T4120] usb 3-1: USB disconnect, device number 29 [ 623.550175][ T3784] bond0 (unregistering): Released all slaves [ 623.887459][T10428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.031358][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 624.049345][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 624.087016][T10428] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.180810][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 624.198216][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 624.233456][ T4068] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.240709][ T4068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.267498][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.273843][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.319614][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 624.330984][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 624.366701][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 624.385168][ T4122] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.392311][ T4122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.423574][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 624.479860][T10449] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 624.511929][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 624.530445][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 624.558291][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 624.589247][T10449] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 624.612599][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 624.635800][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 624.692330][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 624.816910][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 624.906403][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 624.974216][T10449] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 625.095883][T10428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 625.185704][T10428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 625.207128][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 625.227412][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 625.265813][T10449] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 625.486854][T10585] loop2: detected capacity change from 0 to 8192 [ 625.635396][T10449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.724512][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 625.733404][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 625.788513][T10449] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.825876][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 625.865599][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 625.887575][ T3648] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 625.899161][ T4122] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.906333][ T4122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.916954][ T3648] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 625.926529][ T3648] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 625.937171][ T3648] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 625.944911][ T3648] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 625.952218][ T3648] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 626.016800][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 626.035444][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 626.044359][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 626.053524][ T3688] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.060708][ T3688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.073324][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 626.185136][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 626.214251][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 626.238733][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 626.238751][ T27] audit: type=1804 audit(1723574869.191:489): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1908" name="/newroot/92/bus/file0" dev="loop2" ino=1048759 res=1 errno=0 [ 626.293454][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 626.417713][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 626.427557][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 626.466731][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 626.515588][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 626.562106][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 626.619068][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 626.655554][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 626.691968][T10449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 626.771363][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 626.795043][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 626.813690][T10428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.911814][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 626.934177][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 626.975989][ T27] audit: type=1326 audit(1723574869.931:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.2.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ea3799f9 code=0x7ffc0000 [ 627.053699][T10428] device veth0_vlan entered promiscuous mode [ 627.115471][ T27] audit: type=1326 audit(1723574869.961:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.2.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc2ea3799f9 code=0x7ffc0000 [ 627.136896][T10599] loop2: detected capacity change from 0 to 512 [ 627.155731][T10599] EXT4-fs: Ignoring removed nomblk_io_submit option [ 627.168234][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 627.177921][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 627.188633][T10599] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 627.196841][T10599] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 627.226467][T10599] EXT4-fs (loop2): 1 truncate cleaned up [ 627.232158][T10599] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 627.271693][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 627.290725][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 627.313010][ T27] audit: type=1326 audit(1723574869.961:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.2.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ea3799f9 code=0x7ffc0000 [ 627.378233][T10428] device veth1_vlan entered promiscuous mode [ 627.420464][ T27] audit: type=1326 audit(1723574869.961:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.2.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ea3799f9 code=0x7ffc0000 [ 627.545210][ T27] audit: type=1326 audit(1723574869.961:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.2.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc2ea3799f9 code=0x7ffc0000 [ 627.616814][ T9629] EXT4-fs (loop2): unmounting filesystem. [ 627.636846][ T27] audit: type=1326 audit(1723574869.961:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.2.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ea3799f9 code=0x7ffc0000 [ 627.744629][ T27] audit: type=1326 audit(1723574869.961:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.2.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ea3799f9 code=0x7ffc0000 [ 627.793194][T10611] loop2: detected capacity change from 0 to 256 [ 627.834667][ T27] audit: type=1326 audit(1723574869.961:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.2.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fc2ea3799f9 code=0x7ffc0000 [ 627.878518][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 627.895566][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 627.898207][ T27] audit: type=1326 audit(1723574869.961:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.2.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 627.937015][T10591] chnl_net:caif_netlink_parms(): no params data found [ 627.956117][T10077] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 628.000394][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 628.014752][ T3648] Bluetooth: hci3: command tx timeout [ 628.049616][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 628.218377][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 628.234919][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 628.250234][T10449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.265979][T10428] device veth0_macvtap entered promiscuous mode [ 628.369299][T10428] device veth1_macvtap entered promiscuous mode [ 628.394745][ T4577] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 628.428347][T10591] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.456077][T10591] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.493237][T10591] device bridge_slave_0 entered promiscuous mode [ 628.536901][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 628.565700][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 628.574122][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 628.585726][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 628.613793][T10428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.664698][T10428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.695096][T10428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.744859][T10428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.775005][ T4577] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.786025][T10428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.796637][ T4577] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.814893][T10428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.834656][ T4577] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 628.847914][T10428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.870289][ T4577] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 628.879594][T10428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.902824][ T4577] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.914755][T10428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.946317][ T4577] usb 3-1: config 0 descriptor?? [ 628.951507][T10428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.973664][T10428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.988045][T10428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.014706][T10428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.034626][T10428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.074859][T10428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.082341][T10591] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.094735][T10591] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.121382][T10591] device bridge_slave_1 entered promiscuous mode [ 629.159457][T10449] device veth0_vlan entered promiscuous mode [ 629.181689][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 629.195773][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 629.225540][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 629.263626][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 629.278112][T10428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.309425][T10428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.334694][T10428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.355520][T10428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.385163][T10428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.404676][T10428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.425653][T10428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.455500][T10428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.485745][T10428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.525425][T10428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.544640][T10428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.564624][T10428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.584650][T10428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.604685][T10428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.637285][T10428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.804957][ T4577] usbhid 3-1:0.0: can't add hid device: -71 [ 629.811207][ T4577] usbhid: probe of 3-1:0.0 failed with error -71 [ 629.826161][T10591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.855340][ T4577] usb 3-1: USB disconnect, device number 30 [ 629.874520][T10591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.044905][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 630.053907][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 630.096847][ T3648] Bluetooth: hci3: command tx timeout [ 630.125470][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 630.535415][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 630.591512][T10428] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.601669][T10428] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.611452][T10428] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.642975][T10428] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.673876][T10449] device veth1_vlan entered promiscuous mode [ 630.802289][T10591] team0: Port device team_slave_0 added [ 630.901636][T10591] team0: Port device team_slave_1 added [ 631.013675][T10591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.045029][T10591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.128500][T10591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.189115][T10591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.214753][T10591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.244859][T10591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.257433][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 631.270206][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 631.384813][T10449] device veth0_macvtap entered promiscuous mode [ 631.501581][ T3784] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.545784][T10449] device veth1_macvtap entered promiscuous mode [ 631.560716][T10591] device hsr_slave_0 entered promiscuous mode [ 631.591934][T10591] device hsr_slave_1 entered promiscuous mode [ 631.616101][T10591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 631.623728][T10591] Cannot create hsr debugfs directory [ 631.650985][ T3670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.684727][ T3670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.779898][ T3784] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.844080][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.884581][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.894442][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.916626][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.936079][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.954582][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.964449][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.988880][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.011024][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.027713][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.044709][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.066900][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.092100][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.108384][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.131411][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.154693][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.175245][ T3648] Bluetooth: hci3: command tx timeout [ 632.184252][T10449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 632.211639][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 632.235672][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 632.263182][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 632.295615][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 632.335507][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 632.439630][ T3784] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.507136][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.533678][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.555286][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.574951][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.594599][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.616426][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.635615][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.661705][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.680683][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.698940][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.721067][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.738429][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.764669][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.784608][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.804591][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.824592][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.849123][T10449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.882739][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 632.896596][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 632.966719][ T3784] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.003630][T10449] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.006281][ T7675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.025860][T10449] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.041985][ T7675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.044606][T10449] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.069640][T10449] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.122934][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 633.598346][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.625293][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.647145][T10631] loop3: detected capacity change from 0 to 256 [ 634.211825][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 634.265824][ T3648] Bluetooth: hci3: command tx timeout [ 635.605730][ T3905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.660545][ T3905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.779488][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 635.874639][ T4704] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 636.134821][ T4704] usb 3-1: Using ep0 maxpacket: 8 [ 636.148794][ T3648] Bluetooth: hci9: unexpected event 0x2f length: 509 > 260 [ 636.265287][ T4704] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 636.372566][ T4704] usb 3-1: config 0 has no interface number 0 [ 636.387813][ T4704] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 636.454265][ T4704] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 636.512661][ T4704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.580430][ T4704] usb 3-1: config 0 descriptor?? [ 636.673462][ T4704] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 636.857941][ T4577] usb 3-1: USB disconnect, device number 31 [ 636.877987][ T4577] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 637.666948][T10591] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 638.000609][T10659] __sock_release: fasync list not empty! [ 638.127349][T10591] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 638.168543][T10591] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 638.209938][T10591] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 639.995787][T10678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1934'. [ 640.066287][ T3658] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 640.082545][ T3658] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 640.095528][ T3658] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 640.106053][ T3658] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 640.115448][ T3658] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 640.122838][ T3658] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 640.220693][T10591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.287274][T10685] syz.3.1937 sent an empty control message without MSG_MORE. [ 640.329962][ T3784] device hsr_slave_0 left promiscuous mode [ 640.367023][ T3784] device hsr_slave_1 left promiscuous mode [ 640.386908][ T3784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.394402][ T3784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.443037][ T3784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.454852][ T3784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.474681][ T3784] device bridge_slave_1 left promiscuous mode [ 640.480944][ T3784] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.528590][ T3784] device bridge_slave_0 left promiscuous mode [ 640.565191][ T3784] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.689514][ T3784] device veth1_macvtap left promiscuous mode [ 640.715426][ T3784] device veth0_macvtap left promiscuous mode [ 640.721593][ T3784] device veth1_vlan left promiscuous mode [ 640.754794][ T3784] device veth0_vlan left promiscuous mode [ 640.874888][ T3689] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 641.264896][ T3689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.284790][ T3689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.306825][ T3689] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 641.335209][ T3689] usb 4-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 641.354782][ T3689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.406231][ T3689] usb 4-1: config 0 descriptor?? [ 641.897069][ T3689] betop 0003:11C2:2208.001A: item fetching failed at offset 4/5 [ 641.918495][ T3689] betop 0003:11C2:2208.001A: parse failed [ 641.924302][ T3689] betop: probe of 0003:11C2:2208.001A failed with error -22 [ 642.126516][ T4068] usb 4-1: USB disconnect, device number 14 [ 642.175245][ T3658] Bluetooth: hci1: command tx timeout [ 642.915500][ T3784] team0 (unregistering): Port device team_slave_1 removed [ 643.202014][T10700] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 643.329529][ T3784] team0 (unregistering): Port device team_slave_0 removed [ 643.900417][ T3784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.075806][ T3784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.257855][ T3658] Bluetooth: hci1: command tx timeout [ 646.037709][ T3784] bond0 (unregistering): Released all slaves [ 646.276623][T10591] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.316838][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 646.334700][ T3648] Bluetooth: hci1: command tx timeout [ 646.342432][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 646.365903][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 646.424868][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 646.464923][ T4579] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.472149][ T4579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.673505][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 646.685374][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 646.694286][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 646.754387][ T4703] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.761581][ T4703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.814965][ T3648] Bluetooth: hci2: command 0x0406 tx timeout [ 646.918425][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 646.939082][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 646.976165][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 647.019672][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 647.185060][T10714] loop2: detected capacity change from 0 to 1024 [ 647.240856][T10591] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 647.267454][T10714] EXT4-fs: Ignoring removed nomblk_io_submit option [ 647.275266][T10591] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 647.334888][T10714] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 647.356639][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 647.365857][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 647.396116][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 647.426452][T10714] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 647.438326][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 647.495937][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 647.564640][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 647.595448][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 647.628322][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 647.682728][T10714] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 648.036673][T10729] ebt_among: wrong size: 1048 against expected 1006634004, rounded to 1006634008 [ 648.160290][ T9629] EXT4-fs (loop2): unmounting filesystem. [ 648.414759][ T3658] Bluetooth: hci1: command tx timeout [ 648.952284][T10679] chnl_net:caif_netlink_parms(): no params data found [ 649.321286][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 649.340509][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 649.402228][T10591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.540191][T10679] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.556737][T10679] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.591014][T10679] device bridge_slave_0 entered promiscuous mode [ 649.619931][T10679] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.663558][T10679] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.704844][T10679] device bridge_slave_1 entered promiscuous mode [ 649.838033][T10679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.918438][T10679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.084255][ T4068] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 650.167825][T10679] team0: Port device team_slave_0 added [ 650.217360][T10679] team0: Port device team_slave_1 added [ 650.311368][T10679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.335027][ T4068] usb 4-1: Using ep0 maxpacket: 16 [ 650.344997][T10679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.455021][T10679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.467303][ T4068] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 650.494965][ T4068] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 650.529705][T10764] loop2: detected capacity change from 0 to 8192 [ 650.534913][ T4068] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 650.546785][T10679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.553766][T10679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.568777][T10764] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 650.637436][T10679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.667674][T10764] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 650.680695][T10764] REISERFS (device loop2): using ordered data mode [ 650.703933][T10764] reiserfs: using flush barriers [ 650.745360][T10764] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 650.774828][ T4068] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 650.783925][ T4068] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.797576][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 650.817232][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 650.834808][ T4068] usb 4-1: Product: syz [ 650.839079][ T4068] usb 4-1: Manufacturer: syz [ 650.843694][ T4068] usb 4-1: SerialNumber: syz [ 650.849638][T10764] REISERFS (device loop2): checking transaction log (loop2) [ 650.906195][ T4068] usb 4-1: config 0 descriptor?? [ 650.911503][T10764] REISERFS (device loop2): Using r5 hash to sort names [ 650.935340][T10764] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 650.954259][ T4068] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 650.969569][T10679] device hsr_slave_0 entered promiscuous mode [ 650.997492][T10764] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 651.010033][T10679] device hsr_slave_1 entered promiscuous mode [ 651.045320][T10679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 651.068109][T10679] Cannot create hsr debugfs directory [ 651.080975][T10764] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 651.120065][T10591] device veth0_vlan entered promiscuous mode [ 651.129752][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 651.146120][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 651.198425][T10764] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 651.213949][ T8371] usb 4-1: USB disconnect, device number 15 [ 651.261675][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 651.275634][T10764] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 651.290729][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 651.314356][T10591] device veth1_vlan entered promiscuous mode [ 651.558667][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 651.575332][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 651.595606][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 651.636044][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 651.654715][T10591] device veth0_macvtap entered promiscuous mode [ 651.705332][T10591] device veth1_macvtap entered promiscuous mode [ 651.825091][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.874691][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.914648][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.964762][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.984620][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.012956][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.034755][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.084694][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.129180][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.175821][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.208195][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.244266][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.295905][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.343109][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.379728][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.412631][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.457955][T10591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.650229][T10679] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.720193][T10778] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1959'. [ 652.796758][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 652.820411][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 652.855498][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 652.896055][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 652.939537][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.994815][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.047743][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.084802][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.122866][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.149206][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.193276][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.224615][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.234487][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.304686][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.335273][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.364799][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.391028][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.414661][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.434680][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.454669][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.479971][T10591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.641614][T10679] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.715449][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 653.739553][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 653.774476][T10591] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.814097][T10591] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.825395][T10806] loop2: detected capacity change from 0 to 1024 [ 653.834911][T10591] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.843663][T10591] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.045293][ T3986] hfsplus: b-tree write err: -5, ino 4 [ 654.060012][T10679] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.169092][ C1] eth0: bad gso: type: 1, size: 1408 [ 655.250442][T10679] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.430275][ T3833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.449067][ T3833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.519695][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 655.527456][T10823] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 655.829330][T10827] loop3: detected capacity change from 0 to 512 [ 655.858503][ T3739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.875858][ T3739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.958734][ T8371] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 656.020038][T10827] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 656.046672][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 656.183823][T10827] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 656.199670][T10827] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038 (0x7fffffff) [ 656.224628][ T8371] usb 3-1: Using ep0 maxpacket: 32 [ 656.407564][T10679] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 656.441679][T10679] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 656.524956][ T8371] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=3a.75 [ 656.559241][ T8371] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.559716][T10679] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 656.584492][ T8371] usb 3-1: Product: syz [ 656.604900][ T8371] usb 3-1: Manufacturer: syz [ 656.616885][ T8371] usb 3-1: SerialNumber: syz [ 656.646959][ T8371] usb 3-1: config 0 descriptor?? [ 656.718707][T10428] EXT4-fs (loop3): unmounting filesystem. [ 656.726035][T10679] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 656.749070][ T8371] usb_ehset_test: probe of 3-1:0.0 failed with error -32 [ 657.006683][ T3727] usb 3-1: USB disconnect, device number 32 [ 657.138442][ T3658] Bluetooth: hci7: command 0x0406 tx timeout [ 659.085140][T10679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.154528][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 659.162722][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 659.375862][T10679] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.564788][ T8371] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 659.604979][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 659.614999][ T14] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 659.635288][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 659.644164][ T4119] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.651350][ T4119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.695446][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 659.704402][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 659.765659][ T4119] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.772893][ T4119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.795062][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 659.816650][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 659.887104][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 659.916425][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 659.925583][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 659.935451][ T8371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 659.955420][ T8371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 659.976811][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 660.005071][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 660.015997][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 660.175302][ T8371] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=74.c4 [ 660.199298][ T14] usb 4-1: New USB device found, idVendor=9dab, idProduct=cd84, bcdDevice= 4.75 [ 660.224649][ T8371] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.232748][ T8371] usb 3-1: Product: syz [ 660.238479][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 660.264631][ T14] usb 4-1: Product: syz [ 660.268852][ T14] usb 4-1: Manufacturer: syz [ 660.273485][ T14] usb 4-1: SerialNumber: syz [ 660.284660][ T8371] usb 3-1: Manufacturer: syz [ 660.289306][ T8371] usb 3-1: SerialNumber: syz [ 660.319251][ T14] usb 4-1: config 0 descriptor?? [ 660.326814][ T8371] usb 3-1: config 0 descriptor?? [ 660.377832][ T8371] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 660.386096][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 660.394305][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 660.418427][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 660.445252][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 660.475199][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 660.495445][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 660.535239][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 660.576730][T10679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 660.594987][ T3688] usb 3-1: USB disconnect, device number 33 [ 660.609278][ T14] usb 4-1: USB disconnect, device number 16 [ 660.711999][ T3784] device hsr_slave_0 left promiscuous mode [ 660.737802][ T3784] device hsr_slave_1 left promiscuous mode [ 660.755721][ T3784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.773389][ T3784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.788166][T10865] kAFS: unparsable volume name [ 660.813600][ T3784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 660.833807][ T3784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.885372][ T3784] device bridge_slave_1 left promiscuous mode [ 660.891646][ T3784] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.936436][ T3784] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.062980][ T3784] device virt_wifi0 left promiscuous mode [ 661.195440][ T3784] device veth1_macvtap left promiscuous mode [ 661.201568][ T3784] device veth0_macvtap left promiscuous mode [ 661.250172][ T3784] device veth1_vlan left promiscuous mode [ 661.256195][ T3784] device veth0_vlan left promiscuous mode [ 661.416017][T10869] ebt_limit: overflow, try lower: 0/0 [ 662.259597][T10872] loop3: detected capacity change from 0 to 512 [ 662.299834][T10872] EXT4-fs: Ignoring removed nomblk_io_submit option [ 662.350245][T10877] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 662.508942][T10872] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 662.518028][ T3784] team0 (unregistering): Port device vlan2 removed [ 662.537892][T10872] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 662.614504][T10872] EXT4-fs (loop3): 1 truncate cleaned up [ 662.648119][T10872] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 662.911991][T10428] EXT4-fs (loop3): unmounting filesystem. [ 663.661291][T10891] loop3: detected capacity change from 0 to 16 [ 664.887064][T10891] erofs: (device loop3): mounted with root inode @ nid 36. [ 664.974976][T10891] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 665.004583][T10891] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 665.019156][T10891] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 666.545818][ T3784] team0 (unregistering): Port device team_slave_1 removed [ 666.725400][ T3784] team0 (unregistering): Port device team_slave_0 removed [ 666.885931][ T3784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.098909][ T3784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.077527][ T3784] bond0 (unregistering): Released all slaves [ 669.143996][ T3658] Bluetooth: hci9: Controller not accepting commands anymore: ncmd = 0 [ 669.153164][ T3658] Bluetooth: hci9: Injecting HCI hardware error event [ 669.165429][ T3648] Bluetooth: hci9: hardware error 0x00 [ 669.570750][T10909] loop2: detected capacity change from 0 to 512 [ 669.703357][T10909] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 669.741237][T10909] ext4 filesystem being mounted at /116/bus supports timestamps until 2038 (0x7fffffff) [ 669.869310][ T27] kauditd_printk_skb: 46 callbacks suppressed [ 669.869327][ T27] audit: type=1326 audit(1723574912.821:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.0.2003" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff51f9799f9 code=0x0 [ 670.051746][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 670.068335][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 670.099280][T10679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.151325][T10928] netlink: 'syz.4.2005': attribute type 2 has an invalid length. [ 670.209497][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 670.229990][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 670.304677][ T4068] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 670.327985][T10679] device veth0_vlan entered promiscuous mode [ 670.358469][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 670.368720][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 670.411634][T10679] device veth1_vlan entered promiscuous mode [ 670.429421][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 670.438070][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 670.476531][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 670.497976][ T9629] EXT4-fs (loop2): unmounting filesystem. [ 670.564628][ T4068] usb 4-1: Using ep0 maxpacket: 8 [ 670.608066][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 670.625939][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 670.656944][T10932] loop2: detected capacity change from 0 to 64 [ 670.663343][T10679] device veth0_macvtap entered promiscuous mode [ 670.684877][ T4068] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.714663][ T4068] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.716463][T10679] device veth1_macvtap entered promiscuous mode [ 670.763327][ T4068] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 670.803506][ T4068] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.825812][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.845764][ T4068] usb 4-1: config 0 descriptor?? [ 670.869281][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.904977][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.945330][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.976893][ T28] INFO: task syz.0.1612:9681 blocked for more than 143 seconds. [ 671.004605][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.021797][ T28] Not tainted 6.1.104-syzkaller #0 [ 671.053885][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 671.101689][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.111838][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.124317][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.144834][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.155443][ T28] task:syz.0.1612 state:D stack:23360 pid:9681 ppid:8512 flags:0x00004004 [ 671.167687][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.179016][ T28] Call Trace: [ 671.182413][ T28] [ 671.392859][ T3648] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 671.560261][ T28] __schedule+0x143f/0x4570 [ 671.653757][ T4068] elo 0003:04E7:0009.001B: unknown main item tag 0x0 [ 671.868043][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.881393][ T28] ? __mutex_lock+0x6b4/0xd80 [ 671.886534][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.896789][ T4068] elo 0003:04E7:0009.001B: unknown main item tag 0x0 [ 671.903761][ T4068] elo 0003:04E7:0009.001B: item fetching failed at offset 2/7 [ 671.914574][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.916489][ T4068] elo 0003:04E7:0009.001B: parse failed [ 671.931272][ T4068] elo: probe of 0003:04E7:0009.001B failed with error -22 [ 671.943566][ T4068] usb 4-1: USB disconnect, device number 17 [ 671.944606][ T28] ? release_firmware_map_entry+0x186/0x186 [ 671.955482][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 671.960994][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 671.967175][ T28] schedule+0xbf/0x180 [ 671.971305][ T28] schedule_preempt_disabled+0xf/0x20 [ 671.976882][ T28] __mutex_lock+0x6b9/0xd80 [ 671.981437][ T28] ? __mutex_lock+0x53c/0xd80 [ 671.986260][ T28] ? exfat_sync_fs+0x67/0x100 [ 671.991154][ T28] ? mutex_lock_nested+0x10/0x10 [ 672.010261][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 672.023061][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.034300][ T28] exfat_sync_fs+0x67/0x100 [ 672.039061][ T28] iterate_supers+0x127/0x1e0 [ 672.043788][ T28] ? sync_inodes_one_sb+0x60/0x60 [ 672.049172][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.059825][ T28] ksys_sync+0xd7/0x1c0 [ 672.064027][ T28] ? sync_filesystem+0x220/0x220 [ 672.069285][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.104684][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 672.110752][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 672.120257][T10679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.135795][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 672.143461][ T28] __do_sys_sync+0xa/0x10 [ 672.150100][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 672.157896][ T28] do_syscall_64+0x3b/0xb0 [ 672.162370][ T28] ? clear_bhb_loop+0x45/0xa0 [ 672.174962][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 672.180938][ T28] RIP: 0033:0x7fd0545799f9 [ 672.186923][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 672.194607][ T28] RSP: 002b:00007fd055447038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 672.203639][ T28] RAX: ffffffffffffffda RBX: 00007fd054715f80 RCX: 00007fd0545799f9 [ 672.224169][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 672.232660][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 672.262556][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.284606][ T28] RBP: 00007fd0545e78ee R08: 0000000000000000 R09: 0000000000000000 [ 672.289895][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.292788][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 672.292809][ T28] R13: 0000000000000000 R14: 00007fd054715f80 R15: 00007ffcba6443f8 [ 672.344770][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.354585][ T28] [ 672.358934][ T28] [ 672.358934][ T28] Showing all locks held in the system: [ 672.374590][ T28] 1 lock held by rcu_tasks_kthre/12: [ 672.380090][ T28] #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 672.401204][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.411592][ T28] 1 lock held by rcu_tasks_trace/13: [ 672.422109][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.443674][ T28] #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 672.467270][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.483558][ T28] 3 locks held by kworker/0:1/14: [ 672.513783][ T28] #0: ffff88802862d538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 672.524773][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.544792][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.564893][ T28] #1: ffffc90000137d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 672.580500][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.614798][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.627640][ T28] #2: ffffffff8e4f7ce8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 [ 672.644706][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.664660][ T28] 1 lock held by khungtaskd/28: [ 672.669696][ T28] #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 672.687281][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.704671][ T28] 2 locks held by getty/3399: [ 672.709520][ T28] #0: ffff88802919b098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 672.719426][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.742958][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 672.754639][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.774636][ T28] 4 locks held by kworker/u4:7/3784: [ 672.780127][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.800960][ T28] 3 locks held by kworker/1:11/4577: [ 672.811427][ T28] #0: ffff88802862d538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 672.823106][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.845276][ T28] #1: ffffc9000323fd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 672.862209][T10679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.884797][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 672.897100][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 672.905607][ T28] #2: ffff8880b9928358 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 672.925787][ T28] 3 locks held by syz-executor/5294: [ 672.936561][T10679] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.963549][ T28] 2 locks held by kworker/u4:16/6823: [ 672.974109][T10679] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.975036][ T28] 2 locks held by syz.1.1237/8504: [ 673.002535][ T28] 2 locks held by syz.0.1612/9681: [ 673.012232][T10679] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.013370][ T28] #0: ffff8880239c20e0 (&type->s_umount_key#99){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 673.040981][T10679] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.077813][ T28] #1: ffff8880240720e0 (&sbi->s_lock){+.+.}-{3:3}, at: exfat_sync_fs+0x67/0x100 [ 673.112449][ T28] 2 locks held by syz.0.1825/10331: [ 673.132710][ T28] #0: ffff8880239c20e0 (&type->s_umount_key#99){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 673.177521][ T28] #1: ffff8880240720e0 (&sbi->s_lock){+.+.}-{3:3}, at: exfat_sync_fs+0x67/0x100 [ 673.204716][ T28] 1 lock held by syz-executor/10591: [ 673.210676][ T28] #0: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 673.255755][ T28] 3 locks held by syz-executor/10679: [ 673.273790][ T28] #0: ffffffff8e4f7ce8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 673.304043][ T28] #1: ffff8880215213e8 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_open+0x224/0x410 [ 673.345095][ T28] #2: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 673.384703][ T28] 1 lock held by syz.0.2003/10917: [ 673.389879][ T28] #0: ffff888074604410 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x98/0x230 [ 673.434848][ T28] 2 locks held by syz.2.2007/10932: [ 673.440120][ T28] #0: ffff8880239c20e0 (&type->s_umount_key#99){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 673.464622][ T28] #1: ffff8880240720e0 (&sbi->s_lock){+.+.}-{3:3}, at: exfat_sync_fs+0x67/0x100 [ 673.484675][ T28] [ 673.487058][ T28] ============================================= [ 673.487058][ T28] [ 673.524784][ T28] NMI backtrace for cpu 0 [ 673.529186][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.104-syzkaller #0 [ 673.537119][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 673.547211][ T28] Call Trace: [ 673.550524][ T28] [ 673.553480][ T28] dump_stack_lvl+0x1e3/0x2cb [ 673.558205][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 673.563705][ T28] ? panic+0x764/0x764 [ 673.567813][ T28] ? vprintk_emit+0x622/0x740 [ 673.572542][ T28] ? printk_sprint+0x490/0x490 [ 673.577350][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 673.582506][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 673.587508][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 673.593707][ T28] ? _printk+0xd1/0x111 [ 673.597896][ T28] ? panic+0x764/0x764 [ 673.602001][ T28] ? __wake_up_klogd+0xcc/0x100 [ 673.606886][ T28] ? panic+0x764/0x764 [ 673.610994][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 673.617109][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 673.623225][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 673.629256][ T28] watchdog+0xf88/0xfd0 [ 673.633458][ T28] ? watchdog+0x1f8/0xfd0 [ 673.637832][ T28] kthread+0x28d/0x320 [ 673.641927][ T28] ? hungtask_pm_notify+0x50/0x50 [ 673.646984][ T28] ? kthread_blkcg+0xd0/0xd0 [ 673.651610][ T28] ret_from_fork+0x1f/0x30 [ 673.656083][ T28] [ 673.660594][ T28] Sending NMI from CPU 0 to CPUs 1: [ 673.666248][ C1] NMI backtrace for cpu 1 [ 673.666261][ C1] CPU: 1 PID: 3784 Comm: kworker/u4:7 Not tainted 6.1.104-syzkaller #0 [ 673.666279][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 673.666290][ C1] Workqueue: netns cleanup_net [ 673.666317][ C1] RIP: 0010:lock_release+0x33d/0xa20 [ 673.666344][ C1] Code: 4c 89 e7 48 89 d3 e8 e2 7f 77 00 48 89 da 4d 8b 34 24 48 8b 5c 24 10 48 81 c3 d0 0a 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 <74> 14 48 89 df 4d 89 fc 49 89 d7 e8 33 80 77 00 4c 89 fa 4d 89 e7 [ 673.666360][ C1] RSP: 0018:ffffc90004747900 EFLAGS: 00000046 [ 673.666373][ C1] RAX: 1ffff11004bc68ca RBX: ffff888025e34650 RCX: ffffc90004747903 [ 673.666387][ C1] RDX: 0000000000000003 RSI: ffff888025e34658 RDI: ffff888025e346d8 [ 673.666399][ C1] RBP: ffffc90004747a30 R08: dffffc0000000000 R09: fffffbfff1d338d6 [ 673.666413][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888025e346d8 [ 673.666425][ C1] R13: 0000000000000003 R14: f87d7ba3bc7a9dde R15: dffffc0000000000 [ 673.666438][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 673.666457][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 673.666469][ C1] CR2: 00007f93948e7ab8 CR3: 00000000784ca000 CR4: 00000000003506e0 [ 673.666485][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 673.666495][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 673.666506][ C1] Call Trace: [ 673.666512][ C1] [ 673.666518][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 673.666545][ C1] ? read_lock_is_recursive+0x10/0x10 [ 673.666576][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 673.666612][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 673.666640][ C1] ? nmi_handle+0x12e/0x440 [ 673.666675][ C1] ? nmi_handle+0x25/0x440 [ 673.666701][ C1] ? lock_release+0x33d/0xa20 [ 673.666725][ C1] ? default_do_nmi+0x62/0x150 [ 673.666752][ C1] ? exc_nmi+0xa8/0x100 [ 673.666777][ C1] ? end_repeat_nmi+0x16/0x31 [ 673.666806][ C1] ? lock_release+0x33d/0xa20 [ 673.666831][ C1] ? lock_release+0x33d/0xa20 [ 673.666856][ C1] ? lock_release+0x33d/0xa20 [ 673.666881][ C1] [ 673.666886][ C1] [ 673.666895][ C1] ? inet_twsk_purge+0x12f/0xa40 [ 673.666920][ C1] ? __rcu_read_unlock+0x100/0x100 [ 673.666941][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 673.666972][ C1] ? inet_twsk_purge+0x12f/0xa40 [ 673.666998][ C1] inet_twsk_purge+0x97c/0xa40 [ 673.667024][ C1] ? inet_twsk_purge+0x12f/0xa40 [ 673.667053][ C1] ? rcu_force_quiescent_state+0x230/0x230 [ 673.667071][ C1] ? __inet_twsk_schedule+0x1c0/0x1c0 [ 673.667096][ C1] ? evict+0x56e/0x620 [ 673.667123][ C1] ? dccp_v4_exit_net+0x80/0x80 [ 673.667146][ C1] cleanup_net+0x763/0xb60 [ 673.667171][ C1] ? ops_free_list+0x3b0/0x3b0 [ 673.667197][ C1] ? process_one_work+0x7a9/0x11d0 [ 673.667218][ C1] process_one_work+0x8a9/0x11d0 [ 673.667245][ C1] ? worker_detach_from_pool+0x260/0x260 [ 673.667267][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 673.667286][ C1] ? kthread_data+0x4e/0xc0 [ 673.667313][ C1] ? wq_worker_running+0x97/0x190 [ 673.667342][ C1] worker_thread+0xa47/0x1200 [ 673.667367][ C1] ? _raw_spin_unlock+0x40/0x40 [ 673.667391][ C1] kthread+0x28d/0x320 [ 673.667406][ C1] ? worker_clr_flags+0x190/0x190 [ 673.667425][ C1] ? kthread_blkcg+0xd0/0xd0 [ 673.667441][ C1] ret_from_fork+0x1f/0x30 [ 673.667471][ C1] [ 674.280717][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 674.287639][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.104-syzkaller #0 [ 674.295559][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 674.305635][ T28] Call Trace: [ 674.308931][ T28] [ 674.311890][ T28] dump_stack_lvl+0x1e3/0x2cb [ 674.314834][T10679] ieee80211 phy68: Selected rate control algorithm 'minstrel_ht' [ 674.324318][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 674.329916][ T28] ? panic+0x764/0x764 [ 674.334020][ T28] ? vscnprintf+0x59/0x80 [ 674.338376][ T28] panic+0x318/0x764 [ 674.342295][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 674.348486][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 674.353896][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 674.360086][ T28] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 674.366275][ T28] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 674.372470][ T28] watchdog+0xfc7/0xfd0 [ 674.376670][ T28] ? watchdog+0x1f8/0xfd0 [ 674.381130][ T28] kthread+0x28d/0x320 [ 674.385244][ T28] ? hungtask_pm_notify+0x50/0x50 [ 674.390293][ T28] ? kthread_blkcg+0xd0/0xd0 [ 674.394906][ T28] ret_from_fork+0x1f/0x30 [ 674.399363][ T28] [ 674.402651][ T28] Kernel Offset: disabled [ 674.406983][ T28] Rebooting in 86400 seconds..