last executing test programs: 3.815448401s ago: executing program 0 (id=2052): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000d40)=""/207, 0xcf}, {&(0x7f0000000a00)=""/250, 0xfa}, {&(0x7f0000005680)=""/4057, 0xfd9}, {&(0x7f00000006c0)=""/225, 0xe1}, {&(0x7f0000000f00)=""/197, 0xc5}, {&(0x7f0000000500)=""/211, 0xd3}, {&(0x7f0000000240)=""/203, 0xcb}, {&(0x7f0000002180)=""/110, 0x6e}, {&(0x7f0000002f40)=""/4100, 0x1004}, {&(0x7f0000006680)=""/4097, 0x1001}], 0xa}, 0x2000) 3.602009372s ago: executing program 0 (id=2057): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff9}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x36, 0x0, &(0x7f0000000240)="e0e90947c50d85ff9782762f86ddd7b59286cbedc8b45571a859c5d3be55e85f5132639e5d7ce2d73264e3026b7e4db8b2877d6dde48", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.601922182s ago: executing program 3 (id=2058): r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 3.601816782s ago: executing program 1 (id=2060): r0 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0x3, 0x0, 0xd) 3.559530113s ago: executing program 0 (id=2061): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='siox_set_data\x00', r3}, 0xfffffffffffffe19) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x104, "06000000000020000acd00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000280)={"e50d1af80100007ea25e0100ff00f6907ff16b7e00", r5}) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xe9, 0x3}, 0x8) sendto$inet6(r4, &(0x7f0000000580)=' ', 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.545594403s ago: executing program 3 (id=2062): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="b9", 0x1}], 0x1}, 0x20048811) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000b00)='>', 0x1}], 0x1}, 0x20000040) recvmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x16040) 2.392150958s ago: executing program 1 (id=2064): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x200000c0}, 0xc808) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="b2ff", 0x2}], 0x1) readv(r0, &(0x7f0000000040), 0x10) writev(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="1d6b", 0x2}], 0x1) 2.280152849s ago: executing program 0 (id=2066): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80803, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) socket$kcm(0x2, 0x3, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d6163767461700014000280080005", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 2.244034559s ago: executing program 3 (id=2069): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002a00)={&(0x7f0000002880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@type_tag={0x5, 0x0, 0x0, 0x12, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x80000000}}]}, {0x0, [0x2e, 0x30, 0x0, 0x0, 0x30]}}, 0x0, 0x43, 0x0, 0x1, 0x10000, 0x0, @void, @value}, 0x28) 2.190809429s ago: executing program 1 (id=2072): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000b00)=""/245, 0xf5}, {&(0x7f0000000880)=""/247, 0xf7}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000380)=""/193, 0xc1}, {&(0x7f0000000700)=""/284, 0x11c}, {&(0x7f0000000c40)=""/4064, 0xfe0}], 0x6}, 0x104) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)="1400000035000b6300800000000000000224fc60", 0x14}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.179987069s ago: executing program 3 (id=2073): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f00000000c0)=""/4092, 0xffc) semget$private(0x0, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet6(0xa, 0x3, 0x35) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r4 = syz_io_uring_setup(0x65c4, &(0x7f00000004c0)={0x0, 0xcf8a, 0x0, 0x3, 0x345}, &(0x7f0000000540), &(0x7f0000000580)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f00000005c0)=[0x80000000, 0x8], 0x2) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[@ANYBLOB="0001"], 0x18) sendmmsg$inet(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.135774019s ago: executing program 2 (id=2074): r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0xc0044dff, &(0x7f0000001480)) 2.135672349s ago: executing program 4 (id=2075): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto, @ptr]}}, 0x0, 0x3e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) 2.135220039s ago: executing program 0 (id=2076): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='siox_set_data\x00', r3}, 0xfffffffffffffe19) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x104, "06000000000020000acd00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000280)={"e50d1af80100007ea25e0100ff00f6907ff16b7e00", r5}) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000580)=' ', 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.04045268s ago: executing program 4 (id=2077): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(r0, 0x0, 0x0) 2.04022954s ago: executing program 4 (id=2078): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)=""/218, 0xda}, {&(0x7f0000002140)=""/4046, 0xfce}, {&(0x7f00000005c0)=""/205, 0xcd}, {&(0x7f0000000240)=""/191, 0xbf}, {&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000000300)=""/204, 0xcc}, {&(0x7f0000000000)=""/91, 0x5b}, {&(0x7f0000000400)=""/183, 0xb7}, {&(0x7f00000004c0)=""/135, 0x87}], 0x9}, 0x0) 2.0034922s ago: executing program 2 (id=2079): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x8, 0x4b, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80000, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.270592254s ago: executing program 2 (id=2080): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) 1.270474223s ago: executing program 1 (id=2081): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a600000040000a118000200fe80000000000e1208000f0100810401a80016ea1f6006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.213819594s ago: executing program 4 (id=2082): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x79f7}}, 0x20}, 0x1, 0x0, 0x0, 0x200000c0}, 0xc808) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="b2ff", 0x2}], 0x1) readv(r0, &(0x7f0000000040), 0x10) writev(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="1d6b", 0x2}], 0x1) 1.211521294s ago: executing program 3 (id=2083): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x4007, 0x12) 1.126042084s ago: executing program 2 (id=2084): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003900000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.125858225s ago: executing program 1 (id=2085): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e7", 0x4b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x4e, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000240)=""/213, 0xd5}, {0x0}, {0x0}, {&(0x7f00000006c0)=""/226, 0xe2}, {&(0x7f00000007c0)=""/174, 0xae}, {0x0}, {&(0x7f0000000e40)=""/21, 0x15}, {&(0x7f0000000400)=""/35, 0x23}, {&(0x7f0000000940)=""/183, 0xb7}, {&(0x7f0000000c00)=""/155, 0x9b}, {&(0x7f00000008c0)=""/54, 0x36}, {&(0x7f0000000d40)=""/249, 0xf9}, {0x0}, {0x0}], 0xe}, 0x0) 1.125747274s ago: executing program 4 (id=2086): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000e80)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000006000000000000000000000902000000040000000000000700000000000000000000000b01000000000000005f"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 998.329075ms ago: executing program 3 (id=2087): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffeb1, &(0x7f00000001c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) setitimer(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e15010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) getpid() bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1}, 0x6e) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000280)=@file={0x1}, 0x6e) 928.504245ms ago: executing program 2 (id=2088): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000420000000400000002"], 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000280), 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000240)}, 0x20) 531.800407ms ago: executing program 4 (id=2089): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r3, 0x100) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x1) r5 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 531.276597ms ago: executing program 0 (id=2090): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x7}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000440)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4", 0x2a}], 0x1}, 0x0) 482.053807ms ago: executing program 2 (id=2091): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 0s ago: executing program 1 (id=2092): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x1}]}, {0x0, [0x2e]}}, 0x0, 0x27, 0x0, 0x1, 0xfffffffd, 0x0, @void, @value}, 0x28) kernel console output (not intermixed with test programs): ress (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.237788][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.248513][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.259336][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.270511][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.297412][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.304815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.314455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.323711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.332784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.342396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.349820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.359094][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.370046][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.380294][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.391053][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.401650][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.412403][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.423794][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.434096][ T4165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.442938][ T4165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.452981][ T4165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.461907][ T4165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.489831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.498923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.550677][ T4174] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.562755][ T4174] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.572112][ T4174] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.580817][ T4174] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.625138][ T4225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.642047][ T4225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.658698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.667698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.676740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.685738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.694215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.704444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.713134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.723681][ T4173] device veth0_vlan entered promiscuous mode [ 57.745447][ T4226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.753779][ T4226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.780467][ T4173] device veth1_vlan entered promiscuous mode [ 57.795780][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.805673][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.853450][ T649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.864984][ T649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.867814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.883511][ T4243] Bluetooth: hci3: command 0x040f tx timeout [ 57.884324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.897295][ T4243] Bluetooth: hci4: command 0x040f tx timeout [ 57.898815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.903687][ T4243] Bluetooth: hci1: command 0x040f tx timeout [ 57.917656][ T4243] Bluetooth: hci0: command 0x040f tx timeout [ 57.918568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.924033][ T4243] Bluetooth: hci2: command 0x040f tx timeout [ 57.945324][ T4173] device veth0_macvtap entered promiscuous mode [ 57.953466][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.976388][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.980207][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.988052][ T4173] device veth1_macvtap entered promiscuous mode [ 58.006085][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.022822][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.030922][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.039792][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.048695][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.078828][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.087999][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.109262][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.126508][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.137516][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.154476][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.164645][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.175126][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.185713][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.197107][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.209433][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.218387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.226426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.237012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.254737][ T4225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.264933][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.285414][ T4225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.293850][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.310234][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.326997][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.337103][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.347699][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.358391][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.369394][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.381034][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.399591][ T4225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.400654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.412166][ T4225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.435208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.453652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.469595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.487366][ T4173] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.505540][ T4173] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.518351][ T4173] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.538911][ T4173] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.561438][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 58.929317][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 58.941275][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 58.950264][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 58.959293][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 58.968331][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 58.977324][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 58.986337][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 58.995351][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 59.004368][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 60.553591][ T4265] ODEBUG: Out of memory. ODEBUG disabled [ 60.557238][ T4214] Bluetooth: hci2: command 0x0419 tx timeout [ 60.565592][ T4214] Bluetooth: hci0: command 0x0419 tx timeout [ 60.572105][ T4214] Bluetooth: hci1: command 0x0419 tx timeout [ 60.578144][ T4214] Bluetooth: hci4: command 0x0419 tx timeout [ 60.585250][ T4214] Bluetooth: hci3: command 0x0419 tx timeout [ 60.621164][ T4265] syz.1.2 (4265): drop_caches: 2 [ 60.875741][ T4270] loop1: detected capacity change from 0 to 512 [ 60.914914][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.955184][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.980836][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.007388][ T649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.029472][ T649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.053916][ T4270] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 61.066595][ T4270] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.085917][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.309494][ T4277] loop0: detected capacity change from 0 to 4096 [ 62.130387][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.581451][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 62.753567][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 62.883606][ T4284] loop3: detected capacity change from 0 to 32768 [ 62.982575][ T21] usb 5-1: config 2 has an invalid interface number: 233 but max is 0 [ 63.004063][ T4284] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.4 (4284) [ 63.025865][ T21] usb 5-1: config 2 has no interface number 0 [ 63.043581][ T21] usb 5-1: config 2 interface 233 has no altsetting 0 [ 63.292984][ T4302] input: syz1 as /devices/virtual/input/input5 [ 63.883103][ T4156] Bluetooth: hci1: command 0x2016 tx timeout [ 63.948172][ T4284] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 63.952287][ T21] usb 5-1: New USB device found, idVendor=0424, idProduct=7801, bcdDevice=88.cb [ 63.992238][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.017821][ T4284] BTRFS info (device loop3): enabling disk space caching [ 64.027570][ T21] usb 5-1: Product: syz [ 64.044624][ T21] usb 5-1: Manufacturer: syz [ 64.059125][ T4284] BTRFS info (device loop3): force clearing of disk cache [ 64.060934][ T21] usb 5-1: SerialNumber: syz [ 64.108616][ T4284] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 64.235632][ T4284] BTRFS info (device loop3): use zstd compression, level 3 [ 64.279246][ T4312] loop0: detected capacity change from 0 to 2048 [ 64.283089][ T4284] BTRFS info (device loop3): disk space caching is enabled [ 64.321713][ T21] usb 5-1: can't set config #2, error -71 [ 64.364076][ T21] usb 5-1: USB disconnect, device number 2 [ 64.427642][ T4312] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.429014][ T4284] BTRFS info (device loop3): has skinny extents [ 64.454510][ T4320] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.475869][ T4312] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.928029][ T4284] BTRFS error (device loop3): open_ctree failed [ 65.051326][ T4243] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 65.331300][ T4243] usb 1-1: Using ep0 maxpacket: 16 [ 65.471408][ T4243] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.490316][ T4243] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.520251][ T4243] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 65.537836][ T4243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.576518][ T4243] usb 1-1: config 0 descriptor?? [ 65.591598][ T4244] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 65.885687][ T4244] usb 4-1: Using ep0 maxpacket: 8 [ 65.951393][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 66.011882][ T4244] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 66.061199][ T4243] bigben 0003:146B:0902.0001: unexpected rdesc, please submit for review [ 66.079104][ T4244] usb 4-1: config 179 has no interface number 0 [ 66.113106][ T4244] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 66.126918][ T4243] bigben 0003:146B:0902.0001: hidraw0: USB HID v0.00 Device [HID 146b:0902] on usb-dummy_hcd.0-1/input0 [ 66.142082][ T4244] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 66.162366][ T4243] bigben 0003:146B:0902.0001: missing HID_OUTPUT_REPORT 0 [ 66.169714][ T4243] bigben 0003:146B:0902.0001: no output report found [ 66.182663][ T4244] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 66.224168][ T4244] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 66.255924][ T4244] usb 4-1: config 179 interface 65 has no altsetting 0 [ 66.328977][ T4244] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 66.342698][ T4244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.423056][ T4366] loop4: detected capacity change from 0 to 64 [ 67.075814][ T4351] usb 1-1: USB disconnect, device number 2 [ 67.082231][ T4353] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 67.117669][ T4244] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input6 [ 67.459957][ T4380] loop4: detected capacity change from 0 to 2048 [ 67.708286][ T4244] usb 4-1: USB disconnect, device number 2 [ 67.714284][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 67.714634][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 68.244803][ T4380] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.289432][ T4244] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 68.292811][ T4380] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.728441][ T4412] loop2: detected capacity change from 0 to 256 [ 69.851419][ T4211] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 70.643049][ T4412] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 71.317087][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.324869][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.383373][ T4423] loop2: detected capacity change from 0 to 4096 [ 71.442138][ T4211] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.563513][ T4211] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 71.580424][ T4425] loop3: detected capacity change from 0 to 2048 [ 71.605248][ T4211] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30062, setting to 64 [ 71.617748][ T4211] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 71.618108][ T4426] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.644332][ T4400] loop4: detected capacity change from 0 to 32768 [ 71.652758][ T4211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.691576][ T4405] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 71.723750][ T4400] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.37 (4400) [ 71.732298][ T4211] hub 2-1:1.0: bad descriptor, ignoring hub [ 71.751157][ T4425] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.861503][ T4211] hub: probe of 2-1:1.0 failed with error -5 [ 71.870583][ T4211] cdc_wdm 2-1:1.0: skipping garbage [ 71.871088][ T4425] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.898277][ T4211] cdc_wdm 2-1:1.0: skipping garbage [ 72.051094][ T4431] attempt to access beyond end of device [ 72.051094][ T4431] loop2: rw=524288, want=2097328, limit=4096 [ 72.064805][ T4400] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 72.082357][ T4431] attempt to access beyond end of device [ 72.082357][ T4431] loop2: rw=0, want=2097328, limit=4096 [ 72.140099][ T26] audit: type=1800 audit(1731548869.886:2): pid=4431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.46" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 72.406062][ T4400] BTRFS info (device loop4): force zlib compression, level 3 [ 72.456642][ T4400] BTRFS info (device loop4): force clearing of disk cache [ 72.527222][ T4400] BTRFS info (device loop4): setting nodatasum [ 72.558688][ T4211] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 72.566776][ T4211] cdc_wdm 2-1:1.0: Unknown control protocol [ 72.609211][ T4400] BTRFS info (device loop4): allowing degraded mounts [ 72.612419][ T4211] usb 2-1: USB disconnect, device number 2 [ 72.726288][ T4435] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 72.745784][ T4435] overlayfs: missing 'lowerdir' [ 73.339526][ T4400] BTRFS info (device loop4): enabling disk space caching [ 73.350729][ T4400] BTRFS info (device loop4): disk space caching is enabled [ 73.396303][ T4400] BTRFS info (device loop4): has skinny extents [ 73.598839][ T4400] BTRFS error (device loop4): open_ctree failed [ 73.685695][ T4464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.49'. [ 74.378268][ T4466] loop1: detected capacity change from 0 to 512 [ 74.486711][ T4466] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.514194][ T4466] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 74.818924][ T4466] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 74.940136][ T4466] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 74.979983][ T4466] System zones: 0-2, 18-18, 34-34 [ 75.026928][ T4466] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 75.058415][ T4466] EXT4-fs (loop1): 1 truncate cleaned up [ 75.070039][ T4466] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.096813][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 75.241661][ T4466] EXT4-fs warning (device loop1): verify_group_input:147: Cannot add at group 1986356271 (only 1 groups) [ 75.561483][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 75.572934][ T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 75.585092][ T23] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 75.692155][ T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.701585][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 75.709791][ T23] usb 4-1: SerialNumber: syz [ 75.761723][ T4468] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 75.872201][ T4496] loop1: detected capacity change from 0 to 2048 [ 76.016876][ T4468] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 76.444147][ T1107] cfg80211: failed to load regulatory.db [ 76.466714][ T4496] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.483607][ T4496] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.732896][ T23] cdc_ether 4-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.3-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 78.268314][ T4536] loop2: detected capacity change from 0 to 1024 [ 78.334115][ T4536] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 78.407048][ T4536] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 78.624268][ T4536] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2746: inode #2: comm syz.2.72: corrupted in-inode xattr [ 78.711367][ T4536] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2816: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 78.748857][ T4544] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #2: comm syz.2.72: corrupted in-inode xattr [ 79.082570][ T4556] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.70'. [ 79.174418][ T4556] netlink: zone id is out of range [ 79.197731][ T4556] netlink: zone id is out of range [ 79.198284][ T4244] usb 4-1: USB disconnect, device number 3 [ 79.244381][ T4244] cdc_ether 4-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.3-1, Mobile Broadband Network Device [ 79.249996][ T4556] netlink: del zone limit has 4 unknown bytes [ 80.026174][ T4578] device vlan2 entered promiscuous mode [ 84.086587][ T4617] netlink: 32 bytes leftover after parsing attributes in process `syz.4.85'. [ 85.584315][ T4630] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.88'. [ 85.714754][ T4630] netlink: zone id is out of range [ 85.772841][ T4634] loop4: detected capacity change from 0 to 2048 [ 85.784419][ T4630] netlink: zone id is out of range [ 86.533210][ T4637] device vlan2 entered promiscuous mode [ 86.558643][ T4630] netlink: del zone limit has 4 unknown bytes [ 86.596734][ T4634] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.631411][ T4634] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.752913][ T4210] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 92.771852][ T4210] Bluetooth: hci0: Injecting HCI hardware error event [ 92.947907][ T4180] Bluetooth: hci0: hardware error 0x00 [ 95.020327][ T4729] syz.0.119 (4729): drop_caches: 2 [ 95.026978][ T4729] syz.0.119 (4729): drop_caches: 2 [ 95.431591][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.861619][ T21] usb 1-1: config 2 has an invalid interface number: 174 but max is 0 [ 95.874018][ T21] usb 1-1: config 2 has no interface number 0 [ 95.891415][ T21] usb 1-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 779 [ 95.911282][ T21] usb 1-1: config 2 interface 174 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 95.924037][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 95.931322][ T21] usb 1-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 95.943656][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.979112][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.121901][ T21] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 96.151372][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.163931][ T21] usb 1-1: Product: syz [ 96.168413][ T21] usb 1-1: Manufacturer: syz [ 96.174115][ T21] usb 1-1: SerialNumber: syz [ 96.176291][ T4723] loop3: detected capacity change from 0 to 32768 [ 96.217429][ T4731] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 96.327156][ T4723] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.116 (4723) [ 96.399861][ T4723] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 96.451479][ T4723] BTRFS info (device loop3): setting nodatasum [ 96.458197][ T4723] BTRFS info (device loop3): force clearing of disk cache [ 96.466383][ T4723] BTRFS error (device loop3): unrecognized mount option 'smackfsdef=Ŋy(ːzu.҅R}m(ul?i)VY\Ro*h7xÂDw}݌l_"vￓ;zʐ?@xER{v8۵"Mγ1|`ItR' [ 96.578816][ T4723] BTRFS error (device loop3): open_ctree failed [ 96.641342][ T4742] tipc: Started in network mode [ 96.646566][ T4742] tipc: Node identity ac14142f, cluster identity 4711 [ 96.659693][ T4742] tipc: New replicast peer: 0.0.0.0 [ 96.680892][ T4742] tipc: Enabled bearer , priority 10 [ 96.701409][ T21] usb 1-1: probing VID:PID(0424:012C) [ 96.712482][ T21] usb 1-1: vub300 testing BULK OUT EndPoint(0) 08 [ 96.742684][ T21] usb 1-1: vub300 testing BULK IN EndPoint(1) 82 [ 96.762114][ T21] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 96.792605][ T21] vub300: probe of 1-1:2.174 failed with error -22 [ 96.813941][ T21] usb 1-1: USB disconnect, device number 3 [ 97.862009][ T1107] tipc: Node number set to 2886997039 [ 98.031377][ T4211] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.606957][ T4771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.130'. [ 98.615780][ T4771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.130'. [ 98.701358][ T13] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.011412][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 99.131792][ T13] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 99.165950][ T13] usb 4-1: config 0 has no interface number 0 [ 99.246207][ T13] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 99.261295][ T4211] usb 5-1: Using ep0 maxpacket: 16 [ 99.272877][ T13] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 99.411546][ T13] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 99.448444][ T13] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 99.517168][ T13] usb 4-1: Product: syz [ 99.532337][ T4211] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.532502][ T13] usb 4-1: SerialNumber: syz [ 99.554085][ T4211] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.621592][ T21] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 99.643183][ T4780] netlink: 32 bytes leftover after parsing attributes in process `syz.2.132'. [ 99.901564][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 100.042435][ T21] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 100.059170][ T21] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 100.094901][ T21] usb 1-1: config 135 has no interface number 0 [ 100.101412][ T21] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.121412][ T4211] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 100.122015][ T13] usb 4-1: config 0 descriptor?? [ 100.130468][ T4211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.130491][ T4211] usb 5-1: Product: syz [ 100.157597][ T4210] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 100.166501][ T4210] Bluetooth: hci2: Injecting HCI hardware error event [ 100.184059][ T4211] usb 5-1: config 0 descriptor?? [ 100.193190][ T13] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 100.203527][ T4179] Bluetooth: hci2: hardware error 0x00 [ 100.220785][ T13] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input7 [ 100.226817][ T4211] usb 5-1: can't set config #0, error -71 [ 100.281532][ T4211] usb 5-1: USB disconnect, device number 3 [ 100.351470][ T21] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 100.380826][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.389041][ T21] usb 1-1: Product: syz [ 100.409281][ T21] usb 1-1: Manufacturer: syz [ 100.416497][ T21] usb 1-1: SerialNumber: syz [ 100.441607][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 100.461256][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 100.475335][ T4210] usb 4-1: USB disconnect, device number 4 [ 100.481417][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 100.481439][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 100.498751][ T21] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 100.512679][ T4210] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 100.541477][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.544739][ T21] usb 1-1: No valid video chain found. [ 100.629290][ T21] libceph: connect (1)[c::]:6789 error -101 [ 100.638471][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 100.653785][ T4787] ceph: No mds server is up or the cluster is laggy [ 100.791273][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 100.911583][ T13] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 100.931666][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.015128][ T13] usb 2-1: config 0 descriptor?? [ 101.098439][ T13] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 101.514259][ T4796] loop3: detected capacity change from 0 to 256 [ 101.516744][ T4797] overlayfs: unrecognized mount option "verity=on" or missing value [ 101.571798][ T4796] exfat: Unknown parameter 'zero_size_dir' [ 101.759754][ T4801] syz.2.140 (4801): drop_caches: 2 [ 101.767724][ T4801] syz.2.140 (4801): drop_caches: 2 [ 102.514657][ T4212] usb 1-1: USB disconnect, device number 4 [ 104.012448][ T13] gspca_nw80x: reg_w err -71 [ 104.018542][ T13] nw80x: probe of 2-1:0.0 failed with error -71 [ 104.032336][ T13] usb 2-1: USB disconnect, device number 3 [ 104.678906][ T4824] loop3: detected capacity change from 0 to 1024 [ 104.974415][ T4839] netlink: 'syz.2.152': attribute type 10 has an invalid length. [ 105.184646][ T4839] team0: Port device netdevsim0 added [ 105.425520][ T4824] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 105.571239][ T13] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 105.579514][ T13] Bluetooth: hci1: Injecting HCI hardware error event [ 105.679665][ T4824] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 105.679818][ T4180] Bluetooth: hci1: hardware error 0x00 [ 106.497439][ T4850] loop2: detected capacity change from 0 to 1024 [ 106.514961][ T4824] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2746: inode #2: comm syz.3.148: corrupted in-inode xattr [ 106.572180][ T4830] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #2: comm syz.3.148: corrupted in-inode xattr [ 106.591295][ T4243] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 106.951377][ T4243] usb 2-1: Using ep0 maxpacket: 8 [ 107.102098][ T4243] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 107.137980][ T4243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.253152][ T4243] usb 2-1: config 0 descriptor?? [ 107.707997][ T4178] Bluetooth: hci2: unexpected event for opcode 0x0428 [ 109.511509][ T4243] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 109.559282][ T4243] asix: probe of 2-1:0.0 failed with error -71 [ 109.772446][ T4243] usb 2-1: USB disconnect, device number 4 [ 110.761004][ T4910] Process accounting resumed [ 111.561529][ T4921] loop3: detected capacity change from 0 to 1024 [ 112.963188][ T4921] ======================================================= [ 112.963188][ T4921] WARNING: The mand mount option has been deprecated and [ 112.963188][ T4921] and is ignored by this kernel. Remove the mand [ 112.963188][ T4921] option from the mount to silence this warning. [ 112.963188][ T4921] ======================================================= [ 113.044208][ T4921] EXT4-fs (loop3): Ignoring removed bh option [ 113.060958][ T4921] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 113.216958][ T4932] loop2: detected capacity change from 0 to 32768 [ 113.247779][ T4933] [U] r5Jc~v6|7kxvzzgR $ [ 113.273402][ T4932] (syz.2.178,4932,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "" or missing value [ 113.284600][ T4932] (syz.2.178,4932,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 113.303107][ T4921] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,noblock_validity,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,max_batch_time=0x0000000000000002,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 118.148838][ T4969] kvm: pic: single mode not supported [ 118.148967][ T4969] kvm: pic: level sensitive irq not supported [ 118.170763][ T4969] kvm: pic: single mode not supported [ 118.232949][ T4969] kvm: pic: level sensitive irq not supported [ 118.254897][ T4983] loop3: detected capacity change from 0 to 1024 [ 118.968053][ T4983] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 119.537571][ T4998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.196'. [ 119.673403][ T4983] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 120.226830][ T4969] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2746: inode #2: comm syz.3.187: corrupted in-inode xattr [ 121.350742][ T4983] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #2: comm syz.3.187: corrupted in-inode xattr [ 121.399909][ T5024] loop4: detected capacity change from 0 to 736 [ 123.762569][ T5048] netlink: 32 bytes leftover after parsing attributes in process `syz.3.210'. [ 124.074618][ T5061] loop4: detected capacity change from 0 to 256 [ 124.795557][ T5056] input: syz0 as /devices/virtual/input/input9 [ 126.825996][ T5075] kvm: pic: single mode not supported [ 126.826008][ T5075] kvm: pic: level sensitive irq not supported [ 126.846457][ T5075] kvm: pic: single mode not supported [ 127.051824][ T4212] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 127.476031][ T5075] kvm: pic: level sensitive irq not supported [ 127.496202][ T5079] loop3: detected capacity change from 0 to 1024 [ 127.538686][ T5079] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 127.694067][ T5079] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 127.723056][ T4212] usb 5-1: Using ep0 maxpacket: 16 [ 127.828285][ T5075] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2746: inode #2: comm syz.3.218: corrupted in-inode xattr [ 127.843206][ T4212] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 127.853866][ T5075] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #2: comm syz.3.218: corrupted in-inode xattr [ 127.869442][ T4212] usb 5-1: config 0 has no interface number 0 [ 127.881280][ T4212] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 127.901672][ T4212] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 128.061734][ T4212] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 128.081422][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 128.091175][ T4212] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 128.100059][ T4212] usb 5-1: Product: syz [ 128.114550][ T4212] usb 5-1: SerialNumber: syz [ 128.120960][ T4212] usb 5-1: config 0 descriptor?? [ 128.176797][ T4212] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 128.220084][ T4212] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input10 [ 128.461753][ T21] usb 2-1: config 0 has no interfaces? [ 128.468547][ T21] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 128.478253][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.505829][ T21] usb 2-1: config 0 descriptor?? [ 128.779407][ T1107] usb 2-1: USB disconnect, device number 5 [ 128.801257][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 128.821269][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 128.834946][ T21] usb 5-1: USB disconnect, device number 4 [ 128.851240][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 128.858396][ T21] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 129.010868][ T5110] loop2: detected capacity change from 0 to 256 [ 129.379692][ T5114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'. [ 131.747541][ T5126] loop4: detected capacity change from 0 to 2048 [ 131.824535][ T5129] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.855516][ T5130] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.231'. [ 131.948260][ T5130] netlink: zone id is out of range [ 131.957668][ T5134] loop2: detected capacity change from 0 to 2048 [ 131.972130][ T5130] netlink: zone id is out of range [ 132.009123][ T5130] netlink: del zone limit has 4 unknown bytes [ 132.104456][ T5134] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.139424][ T5134] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.163962][ T5120] loop3: detected capacity change from 0 to 32768 [ 132.276889][ T5120] XFS (loop3): Mounting V5 Filesystem [ 132.395016][ T5120] XFS (loop3): Ending clean mount [ 133.554165][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.560496][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.797791][ T4173] XFS (loop3): Unmounting Filesystem [ 134.049627][ T5165] netlink: 'syz.2.241': attribute type 10 has an invalid length. [ 134.096962][ T5165] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 135.101354][ T5178] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 135.113787][ T5178] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 136.617781][ T5209] siw: device registration error -23 [ 138.475209][ T5226] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2758444543 (5516889086 ns) > initial count (4205064 ns). Using initial count to start timer. [ 139.231107][ T5211] loop3: detected capacity change from 0 to 32768 [ 139.462202][ T5211] XFS (loop3): Mounting V5 Filesystem [ 139.615999][ T5211] XFS (loop3): Ending clean mount [ 139.742621][ T4173] XFS (loop3): Unmounting Filesystem [ 139.889374][ T5227] loop2: detected capacity change from 0 to 32768 [ 139.927881][ T5227] gfs2: Bad value for 'quota' [ 140.552244][ T5247] loop3: detected capacity change from 0 to 2048 [ 140.666073][ T5247] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 140.682765][ T5247] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.869222][ T5256] kvm: pic: single mode not supported [ 140.869240][ T5256] kvm: pic: level sensitive irq not supported [ 140.881510][ T5256] kvm: pic: single mode not supported [ 140.888817][ T5256] kvm: pic: level sensitive irq not supported [ 140.911860][ T5243] loop4: detected capacity change from 0 to 32768 [ 140.951981][ T4243] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 141.004974][ T5243] XFS: noikeep mount option is deprecated. [ 141.165734][ T5243] XFS (loop4): Mounting V5 Filesystem [ 141.411330][ T4243] usb 3-1: Using ep0 maxpacket: 16 [ 141.542354][ T4243] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 141.600087][ T4243] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.959283][ T4243] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.972718][ T5243] XFS (loop4): Ending clean mount [ 141.988069][ T5243] XFS (loop4): Quotacheck needed: Please wait. [ 142.603540][ T4243] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.610627][ T5243] XFS (loop4): Quotacheck: Done. [ 142.613394][ T4243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.629672][ T4243] usb 3-1: Product: syz [ 142.634183][ T4243] usb 3-1: Manufacturer: syz [ 142.638846][ T4243] usb 3-1: SerialNumber: syz [ 142.911269][ T21] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 144.322764][ T4167] XFS (loop4): Unmounting Filesystem [ 144.441426][ T4243] usb 3-1: 0:2 : does not exist [ 144.585250][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.604144][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.615398][ T21] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 144.624737][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.790122][ T21] usb 4-1: config 0 descriptor?? [ 145.149079][ T4243] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 145.736768][ T5324] loop4: detected capacity change from 0 to 2048 [ 146.041752][ T21] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #100: -71 [ 146.105723][ T21] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 146.231312][ T21] uclogic 0003:256C:006D.0002: failed probing pen v1 parameters: -71 [ 146.284750][ T4243] usb 3-1: USB disconnect, device number 2 [ 146.314356][ T21] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 146.386147][ T21] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 146.411703][ T5324] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 146.441722][ T5324] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.473405][ T21] usb 4-1: USB disconnect, device number 5 [ 148.242872][ T5362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.291'. [ 148.321554][ T5370] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 148.898140][ T5374] loop3: detected capacity change from 0 to 2048 [ 148.937266][ T5376] loop4: detected capacity change from 0 to 736 [ 149.039473][ T5339] loop2: detected capacity change from 0 to 40427 [ 149.090158][ T5374] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.125374][ T5374] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.315593][ T5339] F2FS-fs (loop2): invalid crc value [ 149.595584][ T5339] F2FS-fs (loop2): Found nat_bits in checkpoint [ 150.094635][ T5339] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 150.650283][ T5403] kvm: pic: single mode not supported [ 150.650303][ T5403] kvm: pic: level sensitive irq not supported [ 150.653069][ T5408] loop3: detected capacity change from 0 to 1024 [ 150.665888][ T5403] kvm: pic: single mode not supported [ 150.682542][ T5403] kvm: pic: level sensitive irq not supported [ 150.758381][ T5408] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 150.816915][ T5408] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 150.864704][ T5403] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2746: inode #2: comm syz.3.303: corrupted in-inode xattr [ 151.052930][ T5408] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #2: comm syz.3.303: corrupted in-inode xattr [ 151.645987][ T5427] loop3: detected capacity change from 0 to 736 [ 153.128376][ T5435] input: syz1 as /devices/virtual/input/input11 [ 154.152851][ T5449] loop3: detected capacity change from 0 to 512 [ 154.198425][ T5449] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 154.228858][ T5449] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 154.276709][ T5449] EXT4-fs (loop3): 1 truncate cleaned up [ 154.296615][ T5449] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 155.909580][ T5475] loop3: detected capacity change from 0 to 512 [ 156.067220][ T5475] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 156.114472][ T5475] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.151356][ T4243] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 156.740922][ T5489] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.758348][ T5489] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.771426][ T4243] usb 2-1: Using ep0 maxpacket: 16 [ 156.891463][ T4243] usb 2-1: config 0 has no interfaces? [ 156.907299][ T4243] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 156.955517][ T4243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.965513][ T4243] usb 2-1: config 0 descriptor?? [ 157.050908][ T5506] syz.4.334 (5506): drop_caches: 2 [ 157.059734][ T5506] syz.4.334 (5506): drop_caches: 2 [ 157.070270][ T5505] loop2: detected capacity change from 0 to 2048 [ 157.183346][ T5505] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.197195][ T5505] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.309356][ T5511] Zero length message leads to an empty skb [ 157.658797][ T4210] usb 2-1: USB disconnect, device number 6 [ 158.283510][ T5525] input: syz1 as /devices/virtual/input/input12 [ 161.179453][ T5560] syz.1.351 uses obsolete (PF_INET,SOCK_PACKET) [ 161.214882][ T5560] device syzkaller1 entered promiscuous mode [ 164.980273][ T5616] netlink: 'syz.2.369': attribute type 1 has an invalid length. [ 165.913129][ T5621] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.949252][ T5621] bond1: (slave bond2): making interface the new active one [ 165.974630][ T5621] bond1: (slave bond2): Enslaving as an active interface with an up link [ 166.132726][ T5635] tun0: tun_chr_ioctl cmd 1074025692 [ 169.105318][ T5668] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 169.182811][ T5676] netlink: 20 bytes leftover after parsing attributes in process `syz.1.388'. [ 169.261649][ T5676] device team_slave_0 entered promiscuous mode [ 169.268244][ T5676] device team_slave_1 entered promiscuous mode [ 169.345276][ T5676] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 169.643195][ T5689] input: syz1 as /devices/virtual/input/input13 [ 170.228174][ T5676] device team_slave_0 left promiscuous mode [ 170.234194][ T5676] device team_slave_1 left promiscuous mode [ 170.397026][ T5698] ebt_among: wrong size: 2080 against expected 2280, rounded to 2280 [ 170.842545][ T5693] crypto_alloc_aead failed rc=-2 [ 170.871847][ T5701] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 173.697953][ T5754] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 173.908163][ T5758] input: syz1 as /devices/virtual/input/input14 [ 175.733990][ T5769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.412'. [ 175.801352][ T1109] Bluetooth: hci3: command 0x0406 tx timeout [ 175.926949][ T1107] Bluetooth: hci4: command 0x0406 tx timeout [ 176.233081][ T5762] tipc: Started in network mode [ 176.246891][ T5762] tipc: Node identity ac1414aa, cluster identity 4711 [ 176.265899][ T5762] tipc: Enabling of bearer rejected, failed to enable media [ 177.178568][ T4260] tipc: Left network mode [ 177.432703][ T5808] input: syz1 as /devices/virtual/input/input15 [ 178.102323][ T5807] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 179.343931][ T5811] sctp: failed to load transform for md5: -2 [ 181.271524][ T5858] sctp: failed to load transform for md5: -2 [ 181.414431][ T5872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.436'. [ 181.958576][ T4243] libceph: connect (1)[c::]:6789 error -101 [ 181.967912][ T4243] libceph: mon0 (1)[c::]:6789 connect error [ 182.254600][ T4243] libceph: connect (1)[c::]:6789 error -101 [ 182.264461][ T4243] libceph: mon0 (1)[c::]:6789 connect error [ 182.394389][ T5883] ceph: No mds server is up or the cluster is laggy [ 184.209188][ T5925] loop4: detected capacity change from 0 to 2048 [ 184.217718][ T5926] netlink: 'syz.2.453': attribute type 9 has an invalid length. [ 184.251498][ T5926] netlink: 'syz.2.453': attribute type 7 has an invalid length. [ 184.267509][ T5926] netlink: 'syz.2.453': attribute type 8 has an invalid length. [ 184.382021][ T5925] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 184.424170][ T5925] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.466033][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.459'. [ 184.851441][ T4244] libceph: connect (1)[c::]:6789 error -101 [ 184.858597][ T4244] libceph: mon0 (1)[c::]:6789 connect error [ 185.116892][ T5954] netlink: 32 bytes leftover after parsing attributes in process `syz.4.462'. [ 185.144181][ T4244] libceph: connect (1)[c::]:6789 error -101 [ 185.157410][ T4244] libceph: mon0 (1)[c::]:6789 connect error [ 185.266461][ T5938] ceph: No mds server is up or the cluster is laggy [ 185.804812][ T5968] loop4: detected capacity change from 0 to 4096 [ 186.057081][ T5968] NILFS (loop4): invalid segment: Checksum error in segment payload [ 186.114346][ T5968] NILFS (loop4): trying rollback from an earlier position [ 186.170135][ T5968] NILFS (loop4): recovery complete [ 186.180786][ T5977] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 186.201648][ T4214] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 186.225114][ T4214] Bluetooth: hci4: Injecting HCI hardware error event [ 186.253334][ T4180] Bluetooth: hci4: hardware error 0x00 [ 186.673909][ T5994] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 186.746626][ T5985] kvm: pic: single mode not supported [ 186.746646][ T5985] kvm: pic: level sensitive irq not supported [ 186.772051][ T5985] kvm: pic: single mode not supported [ 186.799015][ T5985] kvm: pic: level sensitive irq not supported [ 187.365887][ T6013] tipc: Started in network mode [ 187.460789][ T6013] tipc: Node identity ac14140f, cluster identity 4711 [ 187.528085][ T6013] tipc: New replicast peer: 255.255.255.255 [ 187.545478][ T6013] tipc: Enabled bearer , priority 10 [ 189.415943][ T4244] tipc: Node number set to 2886997007 [ 189.639852][ T6040] kvm: pic: single mode not supported [ 189.639872][ T6040] kvm: pic: level sensitive irq not supported [ 189.651531][ T6040] kvm: pic: single mode not supported [ 189.662052][ T6040] kvm: pic: level sensitive irq not supported [ 189.893032][ T6045] team0: Port device veth0_to_hsr added [ 190.125654][ T6053] netlink: 16 bytes leftover after parsing attributes in process `syz.0.490'. [ 190.135436][ T4260] bond0: (slave bond_slave_0): interface is now down [ 190.161645][ T4260] bond0: (slave bond_slave_1): interface is now down [ 190.204908][ T4260] bond0: now running without any active interface! [ 190.583884][ T6063] syz.1.494 (6063): drop_caches: 2 [ 190.589455][ T6063] syz.1.494 (6063): drop_caches: 2 [ 190.872435][ T6069] loop4: detected capacity change from 0 to 2048 [ 191.288734][ T6069] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 191.317315][ T6069] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.971234][ T6090] kvm: pic: single mode not supported [ 191.971255][ T6090] kvm: pic: level sensitive irq not supported [ 191.976852][ T6090] kvm: pic: single mode not supported [ 192.002860][ T6090] kvm: pic: level sensitive irq not supported [ 192.028536][ T6103] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.503'. [ 192.057059][ T6095] loop4: detected capacity change from 0 to 1024 [ 192.130221][ T6095] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 192.185328][ T6095] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 192.383660][ T6090] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2746: inode #2: comm syz.4.498: corrupted in-inode xattr [ 192.425897][ T6095] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #2: comm syz.4.498: corrupted in-inode xattr [ 193.238902][ T6120] loop4: detected capacity change from 0 to 2048 [ 193.433449][ T6120] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 193.481978][ T6120] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.890985][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.514'. [ 194.197672][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.208894][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.227223][ T6153] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.509'. [ 194.236579][ T6153] netlink: zone id is out of range [ 194.241796][ T6153] netlink: zone id is out of range [ 194.250372][ T6153] netlink: del zone limit has 4 unknown bytes [ 194.273851][ T6154] syz.3.516 (6154): drop_caches: 2 [ 194.279437][ T6154] syz.3.516 (6154): drop_caches: 2 [ 194.398042][ T6156] sctp: [Deprecated]: syz.4.518 (pid 6156) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.398042][ T6156] Use struct sctp_sack_info instead [ 198.358568][ T6218] syz.0.540 (6218): drop_caches: 2 [ 198.366097][ T6218] syz.0.540 (6218): drop_caches: 2 [ 198.857153][ T6221] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.539'. [ 198.866686][ T6221] netlink: zone id is out of range [ 198.871962][ T6221] netlink: zone id is out of range [ 198.880793][ T6221] netlink: del zone limit has 4 unknown bytes [ 199.252046][ T6232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.545'. [ 199.271297][ T6232] netlink: 7 bytes leftover after parsing attributes in process `syz.2.545'. [ 199.451002][ T6235] netlink: 24 bytes leftover after parsing attributes in process `syz.2.546'. [ 199.888667][ T6244] tap0: tun_chr_ioctl cmd 1074025677 [ 199.931406][ T6244] tap0: linktype set to 825 [ 200.294207][ T4243] libceph: connect (1)[c::]:6789 error -101 [ 200.306211][ T4243] libceph: mon0 (1)[c::]:6789 connect error [ 200.601679][ T4243] libceph: connect (1)[c::]:6789 error -101 [ 200.614159][ T4243] libceph: mon0 (1)[c::]:6789 connect error [ 200.898534][ T6263] device dummy0 entered promiscuous mode [ 200.921808][ T6263] device macsec1 entered promiscuous mode [ 200.956866][ T6263] device dummy0 left promiscuous mode [ 200.963998][ T6249] ceph: No mds server is up or the cluster is laggy [ 201.671379][ T6283] tipc: Started in network mode [ 201.677927][ T6283] tipc: Node identity ac14140f, cluster identity 4711 [ 201.703896][ T6283] tipc: New replicast peer: 255.255.255.255 [ 201.717134][ T6283] tipc: Enabled bearer , priority 10 [ 203.218321][ T4244] tipc: Node number set to 2886997007 [ 203.978812][ T6332] device syzkaller0 entered promiscuous mode [ 205.164055][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.586'. [ 205.669500][ T6361] netlink: 165 bytes leftover after parsing attributes in process `syz.0.589'. [ 205.685372][ T6356] ceph: No mds server is up or the cluster is laggy [ 206.653916][ T6389] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 206.779569][ T6397] device vlan2 entered promiscuous mode [ 207.889352][ T6423] netlink: 36 bytes leftover after parsing attributes in process `syz.0.606'. [ 208.753119][ T6439] device vlan2 entered promiscuous mode [ 208.777075][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'. [ 208.952966][ T4214] libceph: connect (1)[c::]:6789 error -101 [ 208.959672][ T4214] libceph: mon0 (1)[c::]:6789 connect error [ 208.995257][ T6459] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.002898][ T6459] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.707559][ T4214] libceph: connect (1)[c::]:6789 error -101 [ 209.721305][ T4214] libceph: mon0 (1)[c::]:6789 connect error [ 209.765997][ T6449] ceph: No mds server is up or the cluster is laggy [ 209.891334][ T6467] netlink: 104 bytes leftover after parsing attributes in process `syz.2.625'. [ 210.054084][ T6470] netlink: 36 bytes leftover after parsing attributes in process `syz.0.624'. [ 210.246338][ T4214] libceph: connect (1)[c::]:6789 error -101 [ 210.262157][ T4214] libceph: mon0 (1)[c::]:6789 connect error [ 210.802047][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.632'. [ 210.844378][ T6482] device dummy0 entered promiscuous mode [ 210.869627][ T6482] device macvtap1 entered promiscuous mode [ 210.925555][ T6488] device dummy0 left promiscuous mode [ 211.167068][ T6511] netlink: 16 bytes leftover after parsing attributes in process `syz.3.641'. [ 211.363687][ T6519] netlink: 36 bytes leftover after parsing attributes in process `syz.1.640'. [ 212.047751][ T6522] netlink: 32 bytes leftover after parsing attributes in process `syz.0.645'. [ 212.364768][ T6541] input: syz1 as /devices/virtual/input/input16 [ 212.435531][ T6548] openvswitch: netlink: Key 0 has unexpected len 3 expected 0 [ 212.591029][ T6555] x_tables: duplicate underflow at hook 1 [ 212.629717][ T4214] libceph: connect (1)[c::]:6789 error -101 [ 212.640192][ T4214] libceph: mon0 (1)[c::]:6789 connect error [ 212.913884][ T4244] libceph: connect (1)[c::]:6789 error -101 [ 212.921386][ T4244] libceph: mon0 (1)[c::]:6789 connect error [ 213.024239][ T6554] ceph: No mds server is up or the cluster is laggy [ 213.293970][ T6567] netlink: 36 bytes leftover after parsing attributes in process `syz.3.659'. [ 214.320242][ T6591] tipc: Enabling of bearer rejected, already enabled [ 214.389573][ T6587] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 214.679236][ T6614] netlink: 36 bytes leftover after parsing attributes in process `syz.3.675'. [ 215.397130][ T6628] syz.2.683 sent an empty control message without MSG_MORE. [ 215.500786][ T6639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.685'. [ 215.862114][ T6657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.893232][ T1109] libceph: connect (1)[c::]:6789 error -101 [ 215.899245][ T1109] libceph: mon0 (1)[c::]:6789 connect error [ 216.188659][ T1109] libceph: connect (1)[c::]:6789 error -101 [ 216.257956][ T6667] netlink: 36 bytes leftover after parsing attributes in process `syz.1.695'. [ 216.890187][ T6658] ceph: No mds server is up or the cluster is laggy [ 216.939140][ T1109] libceph: mon0 (1)[c::]:6789 connect error [ 216.974648][ T6674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.698'. [ 217.285614][ T6682] rdma_op ffff8880260681f0 conn xmit_rdma 0000000000000000 [ 218.826272][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.718'. [ 218.863505][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'. [ 218.930661][ T6726] device erspan0 entered promiscuous mode [ 218.944979][ T6726] device macvtap2 entered promiscuous mode [ 219.050576][ T6730] device erspan0 left promiscuous mode [ 219.338148][ T6741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.723'. [ 219.357497][ T6741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.723'. [ 219.508263][ T6746] tipc: Started in network mode [ 219.537158][ T6746] tipc: Node identity 00000000000000010000000000000001, cluster identity 4711 [ 219.566879][ T6746] tipc: Enabling of bearer rejected, failed to enable media [ 219.637791][ T1109] libceph: connect (1)[c::]:6789 error -101 [ 219.647075][ T1109] libceph: mon0 (1)[c::]:6789 connect error [ 219.651426][ T6759] tipc: Enabling of bearer rejected, already enabled [ 219.921723][ T1109] libceph: connect (1)[c::]:6789 error -101 [ 219.936862][ T1109] libceph: mon0 (1)[c::]:6789 connect error [ 220.094495][ T6755] ceph: No mds server is up or the cluster is laggy [ 220.290748][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.735'. [ 220.369583][ T6773] device erspan0 entered promiscuous mode [ 220.414869][ T6773] device macvtap1 entered promiscuous mode [ 220.464717][ T6776] device erspan0 left promiscuous mode [ 220.739231][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 220.979812][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 221.034617][ T6804] device bridge_slave_0 left promiscuous mode [ 221.094980][ T6804] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.128952][ T6804] device bridge_slave_1 left promiscuous mode [ 221.139292][ T6804] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.560861][ T6804] bond0: (slave bond_slave_0): Releasing backup interface [ 221.579039][ T6804] bond0: (slave bond_slave_1): Releasing backup interface [ 221.620020][ T6804] team0: Port device team_slave_0 removed [ 221.640586][ T6804] team0: Port device team_slave_1 removed [ 221.744037][ T6804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.865565][ T6804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.896922][ T6804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.926642][ T6804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.085818][ T6806] team0: Port device wg2 added [ 222.091123][ T6809] netlink: 20 bytes leftover after parsing attributes in process `syz.0.749'. [ 222.101743][ T6812] netlink: 67 bytes leftover after parsing attributes in process `syz.3.750'. [ 222.331109][ T6835] device syzkaller0 entered promiscuous mode [ 223.765156][ T6857] netlink: 32 bytes leftover after parsing attributes in process `syz.3.765'. [ 223.954748][ T6863] netlink: 104 bytes leftover after parsing attributes in process `syz.3.768'. [ 228.444156][ T4244] libceph: connect (1)[c::]:6789 error -101 [ 228.452002][ T4244] libceph: mon0 (1)[c::]:6789 connect error [ 228.566697][ T6936] ceph: No mds server is up or the cluster is laggy [ 228.928085][ T6943] kvm: pic: single mode not supported [ 228.930816][ T6943] kvm: pic: non byte write [ 229.927528][ T6983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.807'. [ 230.104263][ T6980] kvm: pic: single mode not supported [ 230.148871][ T6980] kvm: pic: non byte write [ 230.714395][ T7012] syz.4.814 (7012): drop_caches: 2 [ 230.721964][ T7012] syz.4.814 (7012): drop_caches: 2 [ 231.134010][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.819'. [ 231.317898][ T7018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.820'. [ 231.551508][ T7028] tipc: Enabling of bearer rejected, already enabled [ 232.914878][ T7050] input: syz1 as /devices/virtual/input/input17 [ 232.989442][ T7053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.834'. [ 234.294620][ T7095] input: syz1 as /devices/virtual/input/input18 [ 234.946006][ T7094] ip6t_srh: unknown srh match flags 4000 [ 234.957971][ T7085] kvm: pic: non byte write [ 234.972683][ T7103] netlink: 68 bytes leftover after parsing attributes in process `syz.3.851'. [ 234.994807][ T7085] kvm: pic: single mode not supported [ 234.994826][ T7085] kvm: pic: level sensitive irq not supported [ 235.000452][ T7085] kvm: pic: single mode not supported [ 235.006610][ T7085] kvm: pic: level sensitive irq not supported [ 235.320530][ T7116] netlink: 56 bytes leftover after parsing attributes in process `syz.0.858'. [ 235.479667][ T4244] Bluetooth: hci3: command 0x0405 tx timeout [ 236.125173][ T7125] input: syz1 as /devices/virtual/input/input19 [ 237.397462][ T7142] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.521882][ T7156] input: syz1 as /devices/virtual/input/input20 [ 237.834527][ T7142] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.077054][ T7142] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.252625][ T7142] team0: Port device netdevsim0 removed [ 238.263690][ T7142] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.369175][ T7142] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.386745][ T7142] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.405233][ T7142] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.416774][ T7142] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.626205][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.881'. [ 238.673654][ T7185] tipc: Enabling of bearer rejected, already enabled [ 239.283324][ T7201] input: syz1 as /devices/virtual/input/input21 [ 239.462913][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.886'. [ 239.575380][ T7210] sctp: [Deprecated]: syz.0.891 (pid 7210) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.575380][ T7210] Use struct sctp_sack_info instead [ 239.724403][ T7210] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 239.748045][ T7210] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 240.510257][ T7226] tipc: New replicast peer: 255.255.255.255 [ 240.548739][ T7226] tipc: Enabled bearer , priority 10 [ 240.935632][ T7233] input: syz1 as /devices/virtual/input/input22 [ 241.070823][ T7250] netlink: 44 bytes leftover after parsing attributes in process `syz.2.904'. [ 241.205466][ T7251] netlink: 224 bytes leftover after parsing attributes in process `syz.2.904'. [ 241.249620][ T7251] netlink: 16 bytes leftover after parsing attributes in process `syz.2.904'. [ 241.368843][ T7251] netlink: 40 bytes leftover after parsing attributes in process `syz.2.904'. [ 241.561814][ T1107] tipc: Node number set to 1 [ 241.830808][ T7257] netlink: 32 bytes leftover after parsing attributes in process `syz.1.905'. [ 242.543622][ T7262] netlink: 'syz.2.906': attribute type 10 has an invalid length. [ 243.387387][ T7272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.913'. [ 243.506091][ T7272] device team_slave_0 entered promiscuous mode [ 243.512345][ T7272] device team_slave_1 entered promiscuous mode [ 243.553327][ T7272] device macvtap1 entered promiscuous mode [ 243.565844][ T7272] device team0 entered promiscuous mode [ 243.588206][ T7272] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 243.610171][ T7274] tipc: Enabling of bearer rejected, already enabled [ 243.659077][ T7279] device team0 left promiscuous mode [ 243.692523][ T7279] device team_slave_0 left promiscuous mode [ 243.698526][ T7279] device team_slave_1 left promiscuous mode [ 244.129090][ T7303] netlink: 32 bytes leftover after parsing attributes in process `syz.3.918'. [ 245.713949][ T7321] tipc: Enabling of bearer rejected, already enabled [ 245.771371][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.929'. [ 245.912669][ T7327] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 246.954989][ T7359] tipc: Enabling of bearer rejected, already enabled [ 247.108263][ T7367] xt_nfacct: accounting object `syz1' does not exists [ 247.126542][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.944'. [ 247.169120][ T7368] device team_slave_0 entered promiscuous mode [ 247.175367][ T7368] device team_slave_1 entered promiscuous mode [ 247.181866][ T7368] device macvtap2 entered promiscuous mode [ 247.187681][ T7368] device team0 entered promiscuous mode [ 247.194795][ T7368] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 247.266718][ T7373] device team0 left promiscuous mode [ 247.278137][ T7373] device team_slave_0 left promiscuous mode [ 247.284189][ T7373] device team_slave_1 left promiscuous mode [ 247.329342][ T7380] netlink: 28 bytes leftover after parsing attributes in process `syz.3.952'. [ 247.356998][ T7380] netlink: 28 bytes leftover after parsing attributes in process `syz.3.952'. [ 247.394937][ T7380] device veth0 entered promiscuous mode [ 247.414719][ T7380] device bridge0 entered promiscuous mode [ 247.440738][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.953'. [ 247.480654][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 247.536654][ T7385] openvswitch: netlink: Key 0 has unexpected len 3 expected 0 [ 247.643048][ T7389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.955'. [ 248.405869][ T7415] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 248.470551][ T7421] netlink: 44 bytes leftover after parsing attributes in process `syz.1.967'. [ 248.496081][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.965'. [ 248.609293][ T7426] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 248.663527][ T7429] openvswitch: netlink: Key 0 has unexpected len 3 expected 0 [ 248.767479][ T7437] x_tables: duplicate underflow at hook 1 [ 249.327234][ T7451] tipc: Can't bind to reserved service type 0 [ 250.773302][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.990'. [ 250.945985][ T7522] openvswitch: netlink: Key 0 has unexpected len 3 expected 0 [ 250.961862][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.990'. [ 251.007148][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.990'. [ 251.066399][ T7518] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 251.126736][ T7522] x_tables: duplicate underflow at hook 1 [ 251.479509][ T7542] device wlan0 entered promiscuous mode [ 251.507200][ T7541] device wlan0 left promiscuous mode [ 253.234483][ T7597] __nla_validate_parse: 71 callbacks suppressed [ 253.234499][ T7597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1015'. [ 253.276397][ T7599] openvswitch: netlink: Key 0 has unexpected len 3 expected 0 [ 253.368305][ T7611] x_tables: duplicate underflow at hook 1 [ 254.514615][ T7633] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 254.626389][ T7637] x_tables: duplicate underflow at hook 2 [ 255.159558][ T7665] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1037'. [ 255.207295][ T7667] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 255.230749][ T7670] syz.2.1032 (7670): drop_caches: 2 [ 255.236849][ T7670] syz.2.1032 (7670): drop_caches: 2 [ 255.252638][ T7667] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 255.271837][ T7667] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 255.280840][ T7667] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 255.290362][ T7667] device geneve2 entered promiscuous mode [ 255.320260][ T7667] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 255.339703][ T7667] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 255.378274][ T7667] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 255.387687][ T7667] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 255.635924][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.645015][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.088028][ T7760] syz.2.1065 (7760): drop_caches: 2 [ 259.094181][ T7760] syz.2.1065 (7760): drop_caches: 2 [ 260.152552][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1080'. [ 260.948084][ T7817] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1089'. [ 261.006156][ T7822] syz.2.1087 (7822): drop_caches: 2 [ 261.012850][ T7822] syz.2.1087 (7822): drop_caches: 2 [ 261.383044][ T7826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.401360][ T7826] device batadv_slave_0 entered promiscuous mode [ 263.256836][ T7875] syz.0.1111 (7875): drop_caches: 2 [ 263.263175][ T7875] syz.0.1111 (7875): drop_caches: 2 [ 264.299961][ T7894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1119'. [ 266.833371][ T7967] input: syz1 as /devices/virtual/input/input23 [ 267.052028][ T7978] syz.1.1147 (7978): drop_caches: 2 [ 267.060557][ T7978] syz.1.1147 (7978): drop_caches: 2 [ 267.749901][ T7992] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1153'. [ 269.487548][ T8020] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1162'. [ 269.960343][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1167'. [ 269.991805][ T8031] device team_slave_0 entered promiscuous mode [ 269.998039][ T8031] device team_slave_1 entered promiscuous mode [ 270.021860][ T8031] device macvtap3 entered promiscuous mode [ 270.049144][ T8031] device team0 entered promiscuous mode [ 270.063763][ T8039] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1168'. [ 270.073942][ T8031] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 270.106680][ T8036] device team0 left promiscuous mode [ 270.122619][ T8036] device team_slave_0 left promiscuous mode [ 270.128608][ T8036] device team_slave_1 left promiscuous mode [ 271.027831][ T8060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.071788][ T8060] device batadv_slave_0 entered promiscuous mode [ 271.697767][ T8076] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1185'. [ 272.663317][ T8093] openvswitch: netlink: Key 0 has unexpected len 3 expected 0 [ 272.917569][ T8102] tipc: Enabling of bearer rejected, already enabled [ 273.634624][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1202'. [ 273.729916][ T8122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1202'. [ 277.675979][ T8207] openvswitch: netlink: Key 0 has unexpected len 3 expected 0 [ 278.496857][ T8223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1237'. [ 278.534339][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1238'. [ 278.598613][ T8225] device hsr_slave_1 left promiscuous mode [ 278.688638][ T8230] netlink: 'syz.1.1240': attribute type 1 has an invalid length. [ 279.121540][ T8234] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 280.827099][ T8291] syz.2.1258 (8291): drop_caches: 2 [ 280.842500][ T8291] syz.2.1258 (8291): drop_caches: 2 [ 282.746582][ T8311] openvswitch: netlink: Key 0 has unexpected len 3 expected 0 [ 282.861813][ T8311] x_tables: duplicate underflow at hook 1 [ 282.873306][ T8320] xt_l2tp: unknown flags: 10 [ 284.580459][ T8342] netlink: 'syz.1.1276': attribute type 1 has an invalid length. [ 284.670854][ T8342] 8021q: adding VLAN 0 to HW filter on device bond4 [ 284.771184][ T8346] 8021q: adding VLAN 0 to HW filter on device bond4 [ 284.798556][ T8346] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 284.812301][ T8346] bond4: (slave vcan1): Error -22 calling dev_set_mtu [ 285.135787][ T8364] openvswitch: netlink: Key 0 has unexpected len 3 expected 0 [ 285.227638][ T8367] x_tables: duplicate underflow at hook 1 [ 286.562070][ T8397] device netdevsim0 entered promiscuous mode [ 286.577291][ T8396] device netdevsim0 left promiscuous mode [ 286.891708][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1303'. [ 286.910288][ T8409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.001883][ T8409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.125536][ T8409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.315704][ T8409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.618422][ T8411] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1303'. [ 287.888830][ T8429] syz.2.1306 (8429): drop_caches: 2 [ 287.894581][ T8429] syz.2.1306 (8429): drop_caches: 2 [ 288.244268][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1310'. [ 288.285503][ T8435] device bond_slave_0 entered promiscuous mode [ 288.292122][ T8435] device bond_slave_1 entered promiscuous mode [ 288.299871][ T8435] device macvtap1 entered promiscuous mode [ 288.309369][ T8435] device bond0 entered promiscuous mode [ 288.322173][ T8435] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 288.350587][ T8436] device bond0 left promiscuous mode [ 288.369567][ T8436] device bond_slave_0 left promiscuous mode [ 288.375631][ T8436] device bond_slave_1 left promiscuous mode [ 290.703973][ T8472] bridge0: port 3(gretap0) entered blocking state [ 290.755685][ T8472] bridge0: port 3(gretap0) entered disabled state [ 290.800045][ T8472] device gretap0 entered promiscuous mode [ 290.869973][ T8479] syz.1.1324 (8479): drop_caches: 2 [ 290.876404][ T8479] syz.1.1324 (8479): drop_caches: 2 [ 291.138870][ T8475] device gretap0 left promiscuous mode [ 291.152070][ T8475] bridge0: port 3(gretap0) entered disabled state [ 292.693281][ T8504] netlink: 'syz.0.1333': attribute type 7 has an invalid length. [ 292.743403][ T8504] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 292.955036][ T4260] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.067089][ T8525] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1342'. [ 293.114645][ T8525] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1342'. [ 293.263011][ T8528] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1342'. [ 294.416453][ T8559] device syzkaller1 entered promiscuous mode [ 294.428906][ T8562] openvswitch: netlink: Key 0 has unexpected len 3 expected 0 [ 294.654880][ T8565] x_tables: duplicate underflow at hook 1 [ 294.786430][ T8572] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1357'. [ 295.497439][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1361'. [ 295.562776][ T8579] device team_slave_0 entered promiscuous mode [ 295.569073][ T8579] device team_slave_1 entered promiscuous mode [ 295.598865][ T8583] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1362'. [ 295.818471][ T8579] device macvtap2 entered promiscuous mode [ 295.824690][ T8579] device team0 entered promiscuous mode [ 295.843958][ T8579] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 296.619430][ T8603] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1369'. [ 296.813706][ T8614] openvswitch: netlink: Key 0 has unexpected len 3 expected 0 [ 297.063606][ T8614] x_tables: duplicate underflow at hook 1 [ 297.225301][ T8619] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1375'. [ 298.210110][ T8635] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1379'. [ 298.614298][ T8653] input: syz1 as /devices/virtual/input/input24 [ 302.374612][ T8741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1416'. [ 302.388069][ T8741] device team_slave_0 entered promiscuous mode [ 302.394375][ T8741] device team_slave_1 entered promiscuous mode [ 302.400553][ T8741] device veth0_to_hsr entered promiscuous mode [ 302.407119][ T8741] device macvtap2 entered promiscuous mode [ 302.414180][ T8741] device team0 entered promiscuous mode [ 302.423508][ T8741] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 302.443135][ T8742] device team0 left promiscuous mode [ 302.532291][ T8742] device team_slave_0 left promiscuous mode [ 302.538319][ T8742] device team_slave_1 left promiscuous mode [ 302.544307][ T8742] device veth0_to_hsr left promiscuous mode [ 303.356150][ T8763] input: syz1 as /devices/virtual/input/input25 [ 304.643331][ T8783] netlink: 'syz.4.1428': attribute type 4 has an invalid length. [ 304.737318][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1430'. [ 304.781341][ T8787] device macvtap3 entered promiscuous mode [ 304.818974][ T8787] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 305.020952][ T8802] syz.1.1436 (8802): drop_caches: 2 [ 305.026751][ T8802] syz.1.1436 (8802): drop_caches: 2 [ 305.697248][ T8809] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.753527][ T8809] netlink: 'syz.3.1437': attribute type 10 has an invalid length. [ 306.968149][ T8833] device vlan2 entered promiscuous mode [ 306.973868][ T8833] device vlan0 entered promiscuous mode [ 306.983204][ T8833] device vlan0 left promiscuous mode [ 307.118345][ T8843] netlink: 'syz.0.1450': attribute type 11 has an invalid length. [ 307.417072][ T8852] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1453'. [ 308.105754][ T8882] input: syz1 as /devices/virtual/input/input26 [ 308.520838][ T8873] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.528387][ T8873] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.590928][ T8897] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1470'. [ 309.657547][ T8873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.683486][ T8873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.783784][ T8873] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.803843][ T8873] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.813312][ T8873] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.822685][ T8873] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.905688][ T8873] device macvtap1 left promiscuous mode [ 309.918349][ T8873] device macvtap2 left promiscuous mode [ 310.171336][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1476'. [ 310.185312][ T8913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1476'. [ 310.200581][ T8915] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1477'. [ 310.212953][ T8915] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1477'. [ 310.336439][ T8923] syz.0.1478 (8923): drop_caches: 2 [ 310.343210][ T8923] syz.0.1478 (8923): drop_caches: 2 [ 310.404806][ T8926] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1482'. [ 310.990992][ T8936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1483'. [ 311.006754][ T8936] device syz_tun entered promiscuous mode [ 311.014165][ T8936] device macvtap4 entered promiscuous mode [ 311.036689][ T8933] device syz_tun left promiscuous mode [ 311.438483][ T8961] tipc: Enabling of bearer rejected, already enabled [ 311.541796][ T8963] kvm: pic: single mode not supported [ 311.541815][ T8963] kvm: pic: level sensitive irq not supported [ 311.547372][ T8963] kvm: pic: level sensitive irq not supported [ 311.559114][ T8963] kvm: pic: level sensitive irq not supported [ 311.567107][ T8963] kvm: pic: single mode not supported [ 311.578226][ T8963] kvm: pic: level sensitive irq not supported [ 311.584256][ T8963] kvm: pic: non byte read [ 311.864675][ T8971] openvswitch: netlink: Key 0 has unexpected len 3 expected 0 [ 311.892618][ T8971] x_tables: duplicate underflow at hook 1 [ 312.045188][ T8974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1498'. [ 312.500803][ T8989] tipc: Enabling of bearer rejected, already enabled [ 312.538254][ T8993] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1507'. [ 312.782109][ T8999] openvswitch: netlink: Key 0 has unexpected len 3 expected 0 [ 312.817816][ T9003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1511'. [ 312.896082][ T8999] x_tables: duplicate underflow at hook 1 [ 313.778278][ T9023] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1515'. [ 313.851930][ T9019] kvm: pic: single mode not supported [ 313.851948][ T9019] kvm: pic: level sensitive irq not supported [ 313.857470][ T9019] kvm: pic: level sensitive irq not supported [ 313.885570][ T9019] kvm: pic: level sensitive irq not supported [ 313.896841][ T9026] tipc: Enabling of bearer rejected, already enabled [ 313.905973][ T9019] kvm: pic: single mode not supported [ 313.910697][ T9019] kvm: pic: level sensitive irq not supported [ 313.975896][ T9019] kvm: pic: single mode not supported [ 313.982129][ T9019] kvm: pic: level sensitive irq not supported [ 314.757812][ T9040] openvswitch: netlink: Key 0 has unexpected len 3 expected 0 [ 315.096859][ T9042] x_tables: duplicate underflow at hook 1 [ 315.282479][ T9051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1526'. [ 315.330913][ T9054] tipc: Enabling of bearer rejected, already enabled [ 315.411759][ T9058] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1528'. [ 315.658563][ T9070] syz.1.1534 (9070): drop_caches: 2 [ 315.667937][ T9070] syz.1.1534 (9070): drop_caches: 2 [ 316.557146][ T9078] kvm: pic: single mode not supported [ 316.557173][ T9078] kvm: pic: level sensitive irq not supported [ 316.600038][ T9078] kvm: pic: level sensitive irq not supported [ 316.712604][ T9078] kvm: pic: level sensitive irq not supported [ 317.073856][ T9078] kvm: pic: single mode not supported [ 317.080175][ T9078] kvm: pic: level sensitive irq not supported [ 317.092061][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.111428][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.308053][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1539'. [ 317.361518][ T9078] kvm: pic: single mode not supported [ 317.361536][ T9078] kvm: pic: level sensitive irq not supported [ 317.479863][ T9090] openvswitch: netlink: Key 0 has unexpected len 3 expected 0 [ 317.505600][ T9092] tipc: Enabling of bearer rejected, already enabled [ 317.578186][ T9097] x_tables: duplicate underflow at hook 1 [ 317.590514][ T9099] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1543'. [ 317.843891][ T9112] syz.4.1547 (9112): drop_caches: 2 [ 317.851649][ T9112] syz.4.1547 (9112): drop_caches: 2 [ 318.774700][ T9126] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.783005][ T9122] kvm: pic: single mode not supported [ 318.783023][ T9122] kvm: pic: level sensitive irq not supported [ 318.809645][ T9126] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.811350][ T9122] kvm: pic: level sensitive irq not supported [ 318.841900][ T9122] kvm: pic: level sensitive irq not supported [ 318.872954][ T9122] kvm: pic: single mode not supported [ 318.879093][ T9122] kvm: pic: level sensitive irq not supported [ 318.913102][ T9135] tipc: Started in network mode [ 318.934667][ T9122] kvm: pic: single mode not supported [ 318.934685][ T9122] kvm: pic: level sensitive irq not supported [ 318.961220][ T9135] tipc: Node identity ac14140f, cluster identity 4711 [ 318.996973][ T9135] tipc: New replicast peer: 255.255.255.255 [ 319.044900][ T9135] tipc: Enabled bearer , priority 10 [ 319.199559][ T9147] openvswitch: netlink: Key 0 has unexpected len 3 expected 0 [ 319.306411][ T9157] x_tables: duplicate underflow at hook 1 [ 319.617061][ T9170] kvm: pic: single mode not supported [ 319.619358][ T9170] kvm: pic: single mode not supported [ 319.688545][ T9176] tipc: Enabling of bearer rejected, already enabled [ 319.719384][ T9170] kvm: pic: single mode not supported [ 320.062879][ T4208] tipc: Node number set to 2886997007 [ 320.376535][ T9202] tipc: Enabling of bearer rejected, already enabled [ 320.819043][ T9228] tipc: Enabling of bearer rejected, already enabled [ 320.938048][ T9234] kvm: pic: single mode not supported [ 320.968488][ T9232] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.108716][ T9232] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.252073][ T9232] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.293191][ T9251] syz.2.1600 (9251): drop_caches: 2 [ 321.300996][ T9251] syz.2.1600 (9251): drop_caches: 2 [ 321.983107][ T9232] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.088644][ T9232] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.106679][ T9232] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.120202][ T9232] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.138248][ T9232] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.159347][ T9259] netlink: 'syz.2.1606': attribute type 11 has an invalid length. [ 322.187019][ T9259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1606'. [ 322.517750][ T9291] syz.3.1616 (9291): drop_caches: 2 [ 322.529329][ T9291] syz.3.1616 (9291): drop_caches: 2 [ 323.222424][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1618'. [ 323.656136][ T9326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1632'. [ 323.960496][ T9344] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1640'. [ 323.991478][ T8005] libceph: connect (1)[c::]:6789 error -101 [ 323.997782][ T8005] libceph: mon0 (1)[c::]:6789 connect error [ 324.040402][ T9342] pic_ioport_write: 2 callbacks suppressed [ 324.040418][ T9342] kvm: pic: single mode not supported [ 324.046897][ T9342] pic_ioport_write: 10 callbacks suppressed [ 324.046910][ T9342] kvm: pic: level sensitive irq not supported [ 324.107649][ T9342] kvm: pic: level sensitive irq not supported [ 324.245557][ T9359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1645'. [ 324.281414][ T4211] libceph: connect (1)[c::]:6789 error -101 [ 324.287648][ T4211] libceph: mon0 (1)[c::]:6789 connect error [ 324.410193][ T9375] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1652'. [ 324.496610][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 324.537026][ T9383] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 324.544647][ T9383] tipc: Enabled bearer , priority 10 [ 324.552968][ T9385] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.573752][ T9343] ceph: No mds server is up or the cluster is laggy [ 324.615083][ T9381] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 324.671955][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 324.774046][ T9399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1661'. [ 324.941252][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 324.947863][ T9416] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1664'. [ 325.471396][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 325.552761][ T9434] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 325.573680][ T9434] tipc: Enabled bearer , priority 10 [ 325.699102][ T9436] kvm: pic: single mode not supported [ 325.699122][ T9436] kvm: pic: level sensitive irq not supported [ 325.701344][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 325.717409][ T9436] kvm: pic: level sensitive irq not supported [ 325.717581][ T9436] kvm: pic: level sensitive irq not supported [ 325.734400][ T9448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1677'. [ 325.757444][ T9436] kvm: pic: single mode not supported [ 325.757465][ T9436] kvm: pic: level sensitive irq not supported [ 325.763843][ T9436] kvm: pic: single mode not supported [ 325.769950][ T9436] kvm: pic: level sensitive irq not supported [ 325.825431][ T9436] kvm: pic: single mode not supported [ 325.831705][ T9436] kvm: pic: level sensitive irq not supported [ 325.971276][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 326.336197][ T9469] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1685'. [ 326.460948][ T9473] device bridge_slave_1 left promiscuous mode [ 326.476179][ T9473] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.501309][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 326.509673][ T9473] device bridge_slave_0 left promiscuous mode [ 326.516728][ T9473] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.521232][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 326.613725][ T9475] tipc: Enabling of bearer rejected, already enabled [ 326.694033][ T9481] netlink: 'syz.3.1690': attribute type 1 has an invalid length. [ 326.746745][ T9481] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 327.561220][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 327.603659][ T9519] tipc: Enabling of bearer rejected, already enabled [ 328.365200][ T9551] __nla_validate_parse: 2 callbacks suppressed [ 328.365219][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1712'. [ 328.388708][ T9551] device macvtap1 entered promiscuous mode [ 328.421476][ T9551] device bond0 entered promiscuous mode [ 328.435852][ T8005] Bluetooth: hci3: command 0x0405 tx timeout [ 328.444615][ T9551] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 328.464054][ T9552] tipc: Enabled bearer , priority 10 [ 328.557407][ T9557] tipc: Enabled bearer , priority 10 [ 329.641250][ C1] net_ratelimit: 3 callbacks suppressed [ 329.641269][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 329.654052][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 329.798894][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1728'. [ 329.845731][ T9593] device macvtap3 entered promiscuous mode [ 329.851755][ T9593] device bond0 entered promiscuous mode [ 329.857325][ T9593] device bond_slave_0 entered promiscuous mode [ 329.864648][ T9593] device bond_slave_1 entered promiscuous mode [ 329.873764][ T9593] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 330.671267][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 330.678394][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 331.739423][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1743'. [ 331.767361][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 331.774487][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 331.902299][ T9635] device macvtap2 entered promiscuous mode [ 331.929690][ T9635] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 331.977204][ T9638] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 332.272205][ T9661] device bond0 left promiscuous mode [ 332.293354][ T9663] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 332.391169][ T9661] device bond_slave_0 left promiscuous mode [ 332.399975][ T9661] device bond_slave_1 left promiscuous mode [ 332.473657][ T9661] device macvtap3 left promiscuous mode [ 332.831319][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 332.831527][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 335.438138][ T9696] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1766'. [ 336.551403][ C1] net_ratelimit: 2 callbacks suppressed [ 336.551421][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 336.564164][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 337.159214][ T9712] device ip6gretap0 entered promiscuous mode [ 337.166870][ T9712] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 337.178454][ T9712] Cannot create hsr debugfs directory [ 337.297400][ T9715] netlink: 'syz.4.1768': attribute type 10 has an invalid length. [ 337.330829][ T9720] openvswitch: netlink: Key 0 has unexpected len 3 expected 0 [ 337.363245][ T9715] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 337.439664][ T9730] x_tables: duplicate underflow at hook 1 [ 337.632619][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 337.639767][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 338.681258][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 338.688396][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 339.721939][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 339.729050][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 339.988080][ T9759] serio: Serial port ptm0 [ 340.711006][ T9778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1785'. [ 340.761243][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 341.258815][ T9793] x_tables: duplicate underflow at hook 1 [ 341.265299][ T1109] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 341.577675][ T9791] ceph: No mds server is up or the cluster is laggy [ 341.706160][ T1109] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 341.736157][ T1109] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 341.771496][ T9800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1794'. [ 341.791936][ C1] net_ratelimit: 2 callbacks suppressed [ 341.791955][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 341.804700][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 341.878569][ T1109] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 341.971516][ T1109] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 342.098717][ T1109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 342.209030][ T1109] usb 3-1: SerialNumber: syz [ 342.443315][ T9776] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 342.659406][ T9810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.720704][ T9776] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 342.738395][ T9809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.770056][ T9814] netlink: 'syz.3.1799': attribute type 10 has an invalid length. [ 342.800640][ T9814] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 342.841216][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 342.848378][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 343.291275][ T4455] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 343.389273][ T1109] cdc_ether 3-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.2-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 343.587408][ T4212] usb 3-1: USB disconnect, device number 3 [ 343.594519][ T4212] cdc_ether 3-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.2-1, Mobile Broadband Network Device [ 343.651433][ T4455] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 343.694874][ T4455] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.717802][ T9837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1805'. [ 343.739687][ T4455] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 343.791816][ T4455] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xF7, skipping [ 343.871901][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 343.879076][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 343.952074][ T4455] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 343.970335][ T4455] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 343.992042][ T4455] usb 2-1: Product: syz [ 344.007768][ T4455] usb 2-1: Manufacturer: syz [ 344.050084][ T9846] openvswitch: netlink: Key 0 has unexpected len 3 expected 0 [ 344.208958][ T9851] x_tables: duplicate underflow at hook 1 [ 344.223672][ T4455] cdc_wdm 2-1:1.0: skipping garbage [ 344.228993][ T4455] cdc_wdm 2-1:1.0: skipping garbage [ 344.242646][ T4455] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 344.362092][ T4212] usb 2-1: USB disconnect, device number 7 [ 344.911240][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 344.918375][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 345.962063][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 346.246273][ T9891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1816'. [ 346.306807][ T9907] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 346.382525][ T9907] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 346.519220][ T9920] overlayfs: missing 'lowerdir' [ 346.544944][ T9931] x_tables: duplicate underflow at hook 1 [ 346.645460][ T9935] afs: Unknown parameter 'ections fusectl rw' [ 347.001192][ C1] net_ratelimit: 2 callbacks suppressed [ 347.001205][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 347.013891][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 347.598315][ T9954] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1833'. [ 347.737440][ T9958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1836'. [ 347.769693][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1836'. [ 347.799912][ T9958] device bridge_slave_1 left promiscuous mode [ 347.822871][ T9958] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.836485][ T9958] device bridge_slave_0 left promiscuous mode [ 347.848014][ T9961] mmap: syz.0.1837 (9961) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 347.849343][ T9958] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.964815][ T4455] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 348.032026][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 348.039226][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 348.175725][ T9971] openvswitch: netlink: Key 0 has unexpected len 3 expected 0 [ 348.245826][ T9976] x_tables: duplicate underflow at hook 1 [ 348.374221][ T4455] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 348.387234][ T4455] usb 5-1: config 0 has no interface number 0 [ 348.397299][ T4455] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 348.807945][ T4455] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 348.995964][ T4455] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 349.026152][ T4455] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=243 [ 349.069039][ T4455] usb 5-1: Product: syz [ 349.081255][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 349.082360][ T4455] usb 5-1: Manufacturer: syz [ 349.088426][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 349.113367][ T4455] usb 5-1: SerialNumber: syz [ 349.177122][ T9991] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1845'. [ 349.859961][ T9990] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1846'. [ 349.860942][ T4455] usb 5-1: config 0 descriptor?? [ 349.893357][ T9956] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 349.938812][ T4455] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 349.960268][T10003] autofs4:pid:10003:autofs_fill_super: called with bogus options [ 350.112052][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 350.119299][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 350.186699][ T1107] usb 5-1: USB disconnect, device number 5 [ 350.416804][ T1107] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 351.161236][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 351.881092][ C0] sched: RT throttling activated [ 352.027004][T10032] x_tables: duplicate underflow at hook 1 [ 352.098140][T10042] netlink: 'syz.0.1857': attribute type 10 has an invalid length. [ 352.164059][T10042] device wlan1 entered promiscuous mode [ 352.201952][ C1] net_ratelimit: 2 callbacks suppressed [ 352.201971][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 352.214823][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 352.229768][T10045] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1858'. [ 352.562187][T10042] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 352.961887][T10058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1865'. [ 353.051052][T10062] netlink: 'syz.1.1866': attribute type 10 has an invalid length. [ 353.097950][T10062] bond0: (slave wlan1): Opening slave failed [ 353.241232][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 353.248443][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 353.874220][T10072] capability: warning: `syz.1.1869' uses deprecated v2 capabilities in a way that may be insecure [ 354.038406][T10078] openvswitch: netlink: Key 0 has unexpected len 3 expected 0 [ 354.204383][T10082] rtc_cmos 00:00: Alarms can be up to one day in the future [ 354.272072][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 354.279452][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 354.516357][T10089] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1874'. [ 355.311242][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 355.318357][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 355.522707][T10083] x_tables: duplicate underflow at hook 1 [ 355.577782][T10097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1877'. [ 356.352049][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 357.401366][ C1] net_ratelimit: 1 callbacks suppressed [ 357.401406][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 357.414314][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 357.911401][T10136] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1885'. [ 358.910682][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 358.917828][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 359.017945][T10139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1888'. [ 359.107448][T10142] openvswitch: netlink: Key 0 has unexpected len 3 expected 0 [ 359.398505][T10155] syz.2.1891 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 359.961369][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 359.968506][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 360.073130][T10153] x_tables: duplicate underflow at hook 1 [ 360.157793][T10154] netlink: 'syz.0.1892': attribute type 10 has an invalid length. [ 360.563404][T10146] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 360.849705][ T8005] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 360.991754][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 360.998868][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 361.131234][ T8005] usb 5-1: Using ep0 maxpacket: 8 [ 361.291443][ T8005] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.627214][ T8005] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 362.031282][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 362.831320][ T8005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.945089][ T8005] usb 5-1: config 0 descriptor?? [ 363.081981][ C1] net_ratelimit: 1 callbacks suppressed [ 363.082000][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 363.094690][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 364.279965][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 364.280087][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 364.314665][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1901'. [ 364.323796][T10187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1901'. [ 364.402461][ T8005] ldusb 5-1:0.0: Interrupt in endpoint not found [ 364.410862][ T8005] usb 5-1: USB disconnect, device number 6 [ 364.468416][T10193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1904'. [ 364.676587][T10199] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1905'. [ 365.708379][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 365.715494][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 366.714113][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1917'. [ 366.735256][T10244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1917'. [ 366.751711][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 366.758787][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 367.081349][ T1107] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 367.801708][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 367.808877][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 368.831299][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 368.838452][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 369.062247][ T1107] usb 1-1: New USB device found, idVendor=07ca, idProduct=a801, bcdDevice=b7.a7 [ 369.170148][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.184463][T10281] openvswitch: netlink: Key 0 has unexpected len 3 expected 0 [ 369.200634][ T1107] usb 1-1: Product: syz [ 369.217727][ T1107] usb 1-1: Manufacturer: syz [ 369.236634][ T1107] usb 1-1: SerialNumber: syz [ 369.268563][ T1107] usb 1-1: config 0 descriptor?? [ 369.329871][T10293] x_tables: duplicate underflow at hook 1 [ 369.342850][ T1107] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in warm state. [ 369.396141][ T1107] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 369.441779][ T1107] dvbdev: DVB: registering new adapter (AVerMedia AverTV DVB-T USB 2.0 (A800)) [ 369.461691][ T1107] usb 1-1: media controller created [ 369.519018][ T1107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 369.572024][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1931'. [ 369.611322][T10303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1931'. [ 369.626010][ T1107] dvb-usb: bulk message failed: -22 (6/0) [ 369.640609][ T1107] dvb-usb: bulk message failed: -22 (6/0) [ 369.653915][ T1107] dvb-usb: no frontend was attached by 'AVerMedia AverTV DVB-T USB 2.0 (A800)' [ 369.872036][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 369.879242][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 369.951339][ T1107] rc_core: IR keymap rc-avermedia-m135a not found [ 369.957807][ T1107] Registered IR keymap rc-empty [ 369.997628][ T1107] rc rc0: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 370.039596][ T1107] input: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input27 [ 370.075408][ T1107] dvb-usb: schedule remote query interval to 150 msecs. [ 370.100758][ T1107] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully initialized and connected. [ 370.144398][ T1107] usb 1-1: USB disconnect, device number 5 [ 370.280228][T10324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1935'. [ 370.708269][ T1107] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully deinitialized and disconnected. [ 370.890890][T10351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1941'. [ 370.906169][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1941'. [ 370.915347][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 370.915489][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 371.241840][T10356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1942'. [ 371.269128][T10356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1942'. [ 371.951924][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 371.959021][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 372.991315][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 373.887531][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1953'. [ 373.938956][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1953'. [ 373.969252][T10390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1955'. [ 374.020942][T10392] net_ratelimit: 1 callbacks suppressed [ 374.020959][T10392] openvswitch: netlink: Key 0 has unexpected len 3 expected 0 [ 374.042328][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 374.049517][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 374.109882][T10396] x_tables: duplicate underflow at hook 1 [ 375.123983][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 375.131139][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 375.441189][T10414] input: syz1 as /devices/virtual/input/input28 [ 376.201760][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 376.208879][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 376.817604][T10426] __nla_validate_parse: 1 callbacks suppressed [ 376.817623][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1968'. [ 376.861358][T10426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1968'. [ 377.231210][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 377.238376][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 377.558928][T10438] capability: warning: `syz.3.1972' uses 32-bit capabilities (legacy support in use) [ 378.036036][ T4212] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 378.272147][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 378.567978][T10455] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1976'. [ 378.581517][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.866270][T10465] serio: Serial port ptm0 [ 379.181753][ T4212] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 379.321202][ C1] net_ratelimit: 1 callbacks suppressed [ 379.321222][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 379.334033][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 379.557158][ T4212] usb 5-1: config 0 has no interface number 0 [ 379.579086][ T4212] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 379.692334][ T4212] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 380.351907][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 380.359129][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 380.581254][ T4212] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 380.658225][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1981'. [ 380.681245][ T4212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=243 [ 380.711237][ T4212] usb 5-1: Product: syz [ 380.715434][ T4212] usb 5-1: Manufacturer: syz [ 380.804566][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1981'. [ 381.039003][T10479] input: syz1 as /devices/virtual/input/input29 [ 381.055680][ T4212] usb 5-1: config 0 descriptor?? [ 381.082000][ T4212] usb 5-1: can't set config #0, error -71 [ 381.304628][ T4212] usb 5-1: USB disconnect, device number 7 [ 381.348155][ T9875] udevd[9875]: setting owner of /dev/bus/usb/005/007 to uid=0, gid=0 failed: No such file or directory [ 381.391194][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 381.398412][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 381.641304][ T4212] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 381.667860][ T4212] Bluetooth: hci3: Injecting HCI hardware error event [ 381.682879][T10497] kvm: pic: non byte write [ 381.716678][ T4180] Bluetooth: hci3: hardware error 0x00 [ 382.441781][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 382.448821][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 383.231180][ T21] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 383.471196][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 383.478352][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 384.144696][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1996'. [ 384.190283][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1996'. [ 384.201265][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 384.321369][ T21] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 384.340541][ T21] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 384.367857][ T21] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 384.481480][ T21] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 384.506631][ T21] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.520584][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 384.520707][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 384.535866][ T21] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 384.545934][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.556849][T10534] input: syz1 as /devices/virtual/input/input30 [ 384.841197][ T21] usb 2-1: usb_control_msg returned -32 [ 384.846926][ T21] usbtmc 2-1:16.0: can't read capabilities [ 385.129210][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2003'. [ 385.245835][T10546] usbtmc 2-1:16.0: stb usb_control_msg returned -32 [ 385.266182][T10544] device macvtap3 entered promiscuous mode [ 385.275266][ T4349] usb 2-1: USB disconnect, device number 8 [ 385.300467][T10544] device bridge0 entered promiscuous mode [ 385.385024][T10545] device bridge0 left promiscuous mode [ 385.551365][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 385.558560][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 386.321010][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2008'. [ 386.373178][T10559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2008'. [ 386.601981][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 386.609137][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 387.298268][T10573] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2013'. [ 387.627222][T10581] netlink: 'syz.4.2016': attribute type 29 has an invalid length. [ 387.641211][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 387.648510][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 387.660287][T10581] netlink: 'syz.4.2016': attribute type 29 has an invalid length. [ 388.314376][T10591] input: syz1 as /devices/virtual/input/input31 [ 388.443874][T10596] netlink: 'syz.2.2021': attribute type 17 has an invalid length. [ 388.476308][T10596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2021'. [ 388.666108][T10608] openvswitch: netlink: Key 0 has unexpected len 3 expected 0 [ 388.674442][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 389.474931][T10608] x_tables: duplicate underflow at hook 1 [ 389.711245][ C1] net_ratelimit: 1 callbacks suppressed [ 389.711258][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 389.723872][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 390.524252][T10637] netlink: 'syz.4.2035': attribute type 29 has an invalid length. [ 390.585194][T10637] netlink: 'syz.4.2035': attribute type 29 has an invalid length. [ 390.623916][T10640] netlink: 'syz.0.2036': attribute type 17 has an invalid length. [ 390.646109][T10640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2036'. [ 390.677613][T10642] netlink: 'syz.4.2035': attribute type 29 has an invalid length. [ 390.751730][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 390.758891][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 390.844039][T10650] netlink: 'syz.0.2040': attribute type 10 has an invalid length. [ 391.659178][T10650] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2040'. [ 391.801294][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 391.808377][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 391.938593][T10664] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2046'. [ 391.954336][T10662] netlink: 61747 bytes leftover after parsing attributes in process `syz.4.2045'. [ 391.970637][T10662] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2045'. [ 392.767664][T10675] netlink: 'syz.4.2050': attribute type 17 has an invalid length. [ 392.779951][T10675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2050'. [ 392.818444][T10681] netlink: 'syz.0.2052': attribute type 29 has an invalid length. [ 392.831820][T10685] netlink: 4093 bytes leftover after parsing attributes in process `syz.1.2048'. [ 392.842063][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 392.848287][T10685] netlink: 4093 bytes leftover after parsing attributes in process `syz.1.2048'. [ 392.849259][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 392.859332][T10672] netlink: 4093 bytes leftover after parsing attributes in process `syz.1.2048'. [ 392.874969][T10679] netlink: 4093 bytes leftover after parsing attributes in process `syz.1.2048'. [ 392.900717][T10681] netlink: 'syz.0.2052': attribute type 29 has an invalid length. [ 392.930627][T10690] netlink: 'syz.0.2052': attribute type 29 has an invalid length. [ 393.881203][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 393.888326][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 394.553603][T10739] netlink: 'syz.4.2078': attribute type 29 has an invalid length. [ 394.564228][T10732] netlink: 'syz.1.2072': attribute type 29 has an invalid length. [ 394.595064][T10739] netlink: 'syz.4.2078': attribute type 29 has an invalid length. [ 394.624001][T10732] netlink: 'syz.1.2072': attribute type 29 has an invalid length. [ 394.642437][T10744] netlink: 'syz.4.2078': attribute type 29 has an invalid length. [ 394.922132][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 394.929317][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 395.961207][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 395.968337][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 396.567589][T10774] Dead loop on virtual device ip6_vti0, fix it urgently! [ 396.774229][ T4174] ------------[ cut here ]------------ [ 396.780593][ T4174] WARNING: CPU: 1 PID: 4174 at kernel/trace/bpf_trace.c:1411 bpf_get_stack_raw_tp+0x1d3/0x220 [ 396.791188][ T4174] Modules linked in: [ 396.795120][ T4174] CPU: 1 PID: 4174 Comm: syz-executor Not tainted 5.15.171-syzkaller #0 [ 396.803482][ T4174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 396.813574][ T4174] RIP: 0010:bpf_get_stack_raw_tp+0x1d3/0x220 [ 396.819571][ T4174] Code: f1 45 31 c0 e8 ae 97 14 00 65 ff 0d 9f ce 78 7e 4c 63 e8 4c 89 e8 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 0d 05 f6 ff <0f> 0b 65 ff 0d 7c ce 78 7e 49 c7 c5 f0 ff ff ff eb d7 e8 f6 04 f6 [ 396.839232][ T4174] RSP: 0000:ffffc90002ea6bf0 EFLAGS: 00010293 [ 396.845352][ T4174] RAX: ffffffff818a6ea3 RBX: 0000000000000003 RCX: ffff88802a25d940 [ 396.853392][ T4174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000fffffffc [ 396.861408][ T4174] RBP: ffffc90002ea6c30 R08: ffffffff818a6d63 R09: fffffbfff20ec621 [ 396.869392][ T4174] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90002ea6c48 [ 396.877430][ T4174] R13: 0000000000000000 R14: 0000000000000900 R15: ffff8880b9133b30 [ 396.885444][ T4174] FS: 0000555566802500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 396.894434][ T4174] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 396.901033][ T4174] CR2: 00007ffc0ed63bf8 CR3: 0000000065112000 CR4: 00000000003506e0 [ 396.909081][ T4174] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 396.917114][ T4174] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 396.925128][ T4174] Call Trace: [ 396.928417][ T4174] [ 396.931391][ T4174] ? __warn+0x15b/0x300 [ 396.935567][ T4174] ? bpf_get_stack_raw_tp+0x1d3/0x220 [ 396.940964][ T4174] ? report_bug+0x1b7/0x2e0 [ 396.945531][ T4174] ? handle_bug+0x3d/0x70 [ 396.949887][ T4174] ? exc_invalid_op+0x16/0x40 [ 396.954617][ T4174] ? asm_exc_invalid_op+0x16/0x20 [ 396.959663][ T4174] ? bpf_get_stack_raw_tp+0x93/0x220 [ 396.965004][ T4174] ? bpf_get_stack_raw_tp+0x1d3/0x220 [ 396.970392][ T4174] ? bpf_get_stack_raw_tp+0x1d3/0x220 [ 396.975844][ T4174] ? bpf_trace_run4+0x1ea/0x390 [ 396.980711][ T4174] ? bpf_trace_run3+0x380/0x380 [ 396.985639][ T4174] ? get_mm_memcg_path+0x24a/0x330 [ 396.990759][ T4174] ? __mmap_lock_do_trace_acquire_returned+0x24d/0x2c0 [ 396.997640][ T4174] ? read_lock_is_recursive+0x10/0x10 [ 397.003044][ T4174] ? get_mm_memcg_path+0x330/0x330 [ 397.008165][ T4174] ? __init_rwsem+0x160/0x160 [ 397.012891][ T4174] ? stack_map_get_build_id_offset+0x612/0x930 [ 397.019076][ T4174] ? __bpf_get_stackid+0x910/0x910 [ 397.024247][ T4174] ? __bpf_get_stack+0x495/0x570 [ 397.029195][ T4174] ? stack_map_get_build_id_offset+0x930/0x930 [ 397.035381][ T4174] ? __cant_sleep+0x270/0x270 [ 397.040059][ T4174] ? bpf_get_stack_raw_tp+0x1b2/0x220 [ 397.045461][ T4174] ? bpf_trace_run4+0x1ea/0x390 [ 397.050346][ T4174] ? bpf_trace_run3+0x380/0x380 [ 397.055252][ T4174] ? get_mm_memcg_path+0x24a/0x330 [ 397.060496][ T4174] ? __mmap_lock_do_trace_acquire_returned+0x24d/0x2c0 [ 397.067394][ T4174] ? read_lock_is_recursive+0x10/0x10 [ 397.072809][ T4174] ? get_mm_memcg_path+0x330/0x330 [ 397.077944][ T4174] ? __init_rwsem+0x160/0x160 [ 397.082666][ T4174] ? stack_map_get_build_id_offset+0x612/0x930 [ 397.088839][ T4174] ? __bpf_get_stackid+0x910/0x910 [ 397.094006][ T4174] ? __bpf_get_stack+0x495/0x570 [ 397.098950][ T4174] ? stack_map_get_build_id_offset+0x930/0x930 [ 397.105141][ T4174] ? __cant_sleep+0x270/0x270 [ 397.110029][ T4174] ? bpf_get_stack_raw_tp+0x1b2/0x220 [ 397.115458][ T4174] ? bpf_trace_run4+0x1ea/0x390 [ 397.120320][ T4174] ? bpf_trace_run3+0x380/0x380 [ 397.125214][ T4174] ? get_mm_memcg_path+0x24a/0x330 [ 397.130333][ T4174] ? __mmap_lock_do_trace_acquire_returned+0x24d/0x2c0 [ 397.137228][ T4174] ? read_lock_is_recursive+0x10/0x10 [ 397.142669][ T4174] ? get_mm_memcg_path+0x330/0x330 [ 397.147803][ T4174] ? __init_rwsem+0x160/0x160 [ 397.152540][ T4174] ? stack_map_get_build_id_offset+0x612/0x930 [ 397.158704][ T4174] ? __bpf_get_stackid+0x910/0x910 [ 397.163849][ T4174] ? mark_lock+0x98/0x340 [ 397.168186][ T4174] ? __bpf_get_stack+0x495/0x570 [ 397.173175][ T4174] ? stack_map_get_build_id_offset+0x930/0x930 [ 397.179331][ T4174] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 397.185518][ T4174] ? lockdep_hardirqs_on+0x94/0x130 [ 397.190729][ T4174] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 397.196938][ T4174] ? bpf_get_stack_raw_tp+0x1b2/0x220 [ 397.202363][ T4174] ? bpf_trace_run4+0x1ea/0x390 [ 397.207207][ T4174] ? bpf_trace_run3+0x380/0x380 [ 397.212106][ T4174] ? get_mm_memcg_path+0x24a/0x330 [ 397.217250][ T4174] ? __mmap_lock_do_trace_acquire_returned+0x24d/0x2c0 [ 397.224134][ T4174] ? read_lock_is_recursive+0x10/0x10 [ 397.229525][ T4174] ? get_mm_memcg_path+0x330/0x330 [ 397.234701][ T4174] ? exc_page_fault+0x553/0x700 [ 397.239659][ T4174] ? exc_page_fault+0x564/0x700 [ 397.244558][ T4174] ? asm_exc_page_fault+0x22/0x30 [ 397.249596][ T4174] [ 397.252823][ T4174] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 397.260093][ T4174] CPU: 1 PID: 4174 Comm: syz-executor Not tainted 5.15.171-syzkaller #0 [ 397.268403][ T4174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 397.278442][ T4174] Call Trace: [ 397.281712][ T4174] [ 397.284645][ T4174] dump_stack_lvl+0x1e3/0x2d0 [ 397.289328][ T4174] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 397.294941][ T4174] ? panic+0x860/0x860 [ 397.299000][ T4174] ? bpf_get_stack_raw_tp+0x130/0x220 [ 397.304366][ T4174] ? bpf_get_stack_raw_tp+0x130/0x220 [ 397.309720][ T4174] panic+0x318/0x860 [ 397.313618][ T4174] ? __warn+0x16a/0x300 [ 397.317776][ T4174] ? fb_is_primary_device+0xd0/0xd0 [ 397.322974][ T4174] ? bpf_get_stack_raw_tp+0x1d3/0x220 [ 397.328332][ T4174] __warn+0x2b2/0x300 [ 397.332310][ T4174] ? bpf_get_stack_raw_tp+0x1d3/0x220 [ 397.337677][ T4174] report_bug+0x1b7/0x2e0 [ 397.342004][ T4174] handle_bug+0x3d/0x70 [ 397.346171][ T4174] exc_invalid_op+0x16/0x40 [ 397.350657][ T4174] asm_exc_invalid_op+0x16/0x20 [ 397.355519][ T4174] RIP: 0010:bpf_get_stack_raw_tp+0x1d3/0x220 [ 397.361489][ T4174] Code: f1 45 31 c0 e8 ae 97 14 00 65 ff 0d 9f ce 78 7e 4c 63 e8 4c 89 e8 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 0d 05 f6 ff <0f> 0b 65 ff 0d 7c ce 78 7e 49 c7 c5 f0 ff ff ff eb d7 e8 f6 04 f6 [ 397.381099][ T4174] RSP: 0000:ffffc90002ea6bf0 EFLAGS: 00010293 [ 397.387172][ T4174] RAX: ffffffff818a6ea3 RBX: 0000000000000003 RCX: ffff88802a25d940 [ 397.395125][ T4174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000fffffffc [ 397.403083][ T4174] RBP: ffffc90002ea6c30 R08: ffffffff818a6d63 R09: fffffbfff20ec621 [ 397.411036][ T4174] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90002ea6c48 [ 397.419002][ T4174] R13: 0000000000000000 R14: 0000000000000900 R15: ffff8880b9133b30 [ 397.426981][ T4174] ? bpf_get_stack_raw_tp+0x93/0x220 [ 397.432257][ T4174] ? bpf_get_stack_raw_tp+0x1d3/0x220 [ 397.437641][ T4174] ? bpf_trace_run4+0x1ea/0x390 [ 397.442482][ T4174] ? bpf_trace_run3+0x380/0x380 [ 397.447319][ T4174] ? get_mm_memcg_path+0x24a/0x330 [ 397.452417][ T4174] ? __mmap_lock_do_trace_acquire_returned+0x24d/0x2c0 [ 397.459267][ T4174] ? read_lock_is_recursive+0x10/0x10 [ 397.464626][ T4174] ? get_mm_memcg_path+0x330/0x330 [ 397.469745][ T4174] ? __init_rwsem+0x160/0x160 [ 397.474420][ T4174] ? stack_map_get_build_id_offset+0x612/0x930 [ 397.480582][ T4174] ? __bpf_get_stackid+0x910/0x910 [ 397.485687][ T4174] ? __bpf_get_stack+0x495/0x570 [ 397.490618][ T4174] ? stack_map_get_build_id_offset+0x930/0x930 [ 397.496771][ T4174] ? __cant_sleep+0x270/0x270 [ 397.501439][ T4174] ? bpf_get_stack_raw_tp+0x1b2/0x220 [ 397.506820][ T4174] ? bpf_trace_run4+0x1ea/0x390 [ 397.511662][ T4174] ? bpf_trace_run3+0x380/0x380 [ 397.516514][ T4174] ? get_mm_memcg_path+0x24a/0x330 [ 397.521614][ T4174] ? __mmap_lock_do_trace_acquire_returned+0x24d/0x2c0 [ 397.528473][ T4174] ? read_lock_is_recursive+0x10/0x10 [ 397.533833][ T4174] ? get_mm_memcg_path+0x330/0x330 [ 397.538956][ T4174] ? __init_rwsem+0x160/0x160 [ 397.543619][ T4174] ? stack_map_get_build_id_offset+0x612/0x930 [ 397.549759][ T4174] ? __bpf_get_stackid+0x910/0x910 [ 397.554859][ T4174] ? __bpf_get_stack+0x495/0x570 [ 397.559785][ T4174] ? stack_map_get_build_id_offset+0x930/0x930 [ 397.565932][ T4174] ? __cant_sleep+0x270/0x270 [ 397.570608][ T4174] ? bpf_get_stack_raw_tp+0x1b2/0x220 [ 397.575969][ T4174] ? bpf_trace_run4+0x1ea/0x390 [ 397.580802][ T4174] ? bpf_trace_run3+0x380/0x380 [ 397.585635][ T4174] ? get_mm_memcg_path+0x24a/0x330 [ 397.590727][ T4174] ? __mmap_lock_do_trace_acquire_returned+0x24d/0x2c0 [ 397.597554][ T4174] ? read_lock_is_recursive+0x10/0x10 [ 397.602906][ T4174] ? get_mm_memcg_path+0x330/0x330 [ 397.608014][ T4174] ? __init_rwsem+0x160/0x160 [ 397.612690][ T4174] ? stack_map_get_build_id_offset+0x612/0x930 [ 397.618846][ T4174] ? __bpf_get_stackid+0x910/0x910 [ 397.623943][ T4174] ? mark_lock+0x98/0x340 [ 397.628263][ T4174] ? __bpf_get_stack+0x495/0x570 [ 397.633197][ T4174] ? stack_map_get_build_id_offset+0x930/0x930 [ 397.639345][ T4174] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 397.645484][ T4174] ? lockdep_hardirqs_on+0x94/0x130 [ 397.650665][ T4174] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 397.656806][ T4174] ? bpf_get_stack_raw_tp+0x1b2/0x220 [ 397.662184][ T4174] ? bpf_trace_run4+0x1ea/0x390 [ 397.667036][ T4174] ? bpf_trace_run3+0x380/0x380 [ 397.671883][ T4174] ? get_mm_memcg_path+0x24a/0x330 [ 397.676998][ T4174] ? __mmap_lock_do_trace_acquire_returned+0x24d/0x2c0 [ 397.683827][ T4174] ? read_lock_is_recursive+0x10/0x10 [ 397.689178][ T4174] ? get_mm_memcg_path+0x330/0x330 [ 397.694311][ T4174] ? exc_page_fault+0x553/0x700 [ 397.699153][ T4174] ? exc_page_fault+0x564/0x700 [ 397.704000][ T4174] ? asm_exc_page_fault+0x22/0x30 [ 397.709021][ T4174] [ 397.712243][ T4174] Kernel Offset: disabled [ 397.717012][ T4174] Rebooting in 86400 seconds..