last executing test programs: 2m1.419779303s ago: executing program 0 (id=338): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x129, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) getpid() ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d300987f70e06d038e7ff7fc6e5539b0d650e8b089b3f313b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) 1m59.721941172s ago: executing program 0 (id=343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="08000500060000001000178004000200040006"], 0x80}, 0x1, 0x0, 0x0, 0x40048}, 0x0) 1m59.656275632s ago: executing program 0 (id=344): socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) kexec_load(0xd0ffbf, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) 1m52.939782828s ago: executing program 0 (id=360): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000001200)='./bus\x00', 0x2000002, &(0x7f00000001c0)={[{}, {@gid}, {@gid}, {@rootdir={'rootdir', 0x3d, 0x4}}, {@uid}, {@uid}, {@nostrict}, {@anchor={'anchor', 0x3d, 0xf87a}}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}]}, 0x1, 0xc46, &(0x7f0000000580)="$eJzs3U9sHNd9B/DfG5LiSm4iJnYUJ42LTVuksmK5+hdTsQp3VdNsA8iyEIq5BeCKXKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcjIYzOxbcUmTEi2K+mN9Pgn13Z15b/a9easZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cv7EyfSgWwEA3E8Xx75+4pT7PwA8Vi77738AAAAAAAAAAAAAAHjYpSjiyUgxd3EtTVTvO2oX2gM3bo6PjG5f7WCqavZV5cuf2slTp8985YXhs9280J65Tf177fPx2tjl8/WXZ6/PzbcWFlpT9fGZ9uTsVGvXR9hr/a2OVSegfv31G1NXry7UTz1/etPum0PvDz5xZOjc8LPHn+mWHR8ZHR3bKFLrLd9/1w3p2GmGx4Eo4nikeO4HP0/NiChi7+eidn/HfquDVSeOVZ0YHxmtOjLdbs4sljsvdU9EEVHvqdTonqPtxyL6B+5rH3bWiFgqm182+FjZvbG55nzzynSrfqk5v9hebM/OXEqd1pb9qUcRZ1PEckSsDn74cANRRH+k+N7htXQlIvq65+HL1cTgndtR7GMfd6FsZ30gYrl4BMbsITYYRbwaKX7xztGYzNeZ6lrzpYhXy/xRxFtlvhSRyi/GmYj3tvke8WjqjyL+shz/c2tpqroedK8rF75R/9rM1dmest3ryke8P3zoSvGA7g8Ht+T98ZBfm2pRRLO64q+lu//DDgAAAAAAAAAAAAAAAAD32sEo4nOR4pX/+JNqXnFU89IPnxv+w6FP9M4Zf/oOxynLPh8RS8Xu5uQeyBMDL6VLKT3gucSPs1oU8ad5/t93HnRjAAAAAAAAAAAAAAAAAAAAHmtF/CxSvPju0bQcvWuKt2eu1S83r0x3VoXtrv3bXTN9fX19vZ462cg5kaqlo9eX8vvlnCs5V3NGkevnbOScyLmUcznnSs7VnNGX6+ds5JzIuZRzOedKztWcZSur+jkbOSdyLuVczrmSczVnPCRr9wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfJwUUcQHkeK731pLkSKiETERnVwZfNCtAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKg6mIH0aK+h81bm3rj4hU/b/jaPnLmWgcKPPT0Rgu86VonM/ZrLK/8Z0H0H72ZiAV8dNIMVh7+9aA5/Ef6Ly79TWIt7698e7z/Z3s6+4cen/wiSOHzw2P/sbTO71O2zXg2IX2zI2b9fGR0dGxns39+dM/3bNtKH9ucW+6TkQsvPHm683p6db83b8ovwJ7qP4IvUj9j0tPvaheRP8ej1NexR54L+6y7zwGyvv/e5Hid9/9z+4Nv3P/r8Wvdd7dusPHL/9s4/7/4tYD7fL+37+1Xr7/l/f07e7/T/ZsezH/aWSgP6K2eH1u4EhEbeGNN4+3rzevta61Zs6cOPHV4eGvnj4xcCCidrU93ep5dU9OFwAAAAAAAAAAAAAAAMD9k4r4/UjR/OlaqkfEzWq+1tC54WePP9MXfdV8q03ztl8bu3y+/vLs9bn51sJCa6o+PtOenJ1q7fbjatV0r/GR0X3pzB0d3Of2H6y9PDv3xnz72h8vbrv/UO38lYXF+ebk9rvjYBQRjd4tx6oGj4+MVo2ebjdnqqqXtp1M/9ENpCL+K1JMnqmnL+Ztef7/1hn+m+b/L2090D7N//9Uz7byM1Mq4peR4nf+6un4YtXOQ/Ghc5bL/V2kOHb2C7lcHCjLddvQea5AZ2ZgWfb/IsU/fbC5bHc+5JMbZU/u+sQ+IsrxPxwpfvgX34/fzNs2P/9h+/E/tPVA+zT+T/VsO7TpeQV77jp5/I9HipeefDt+K2+73fM/us/eOJoL33o+xz6N/2d6tg3lz/3te9N1AAAAAAAAAACAR9pAKuLvI8WPR/vTC3nbbv7939TWA+3Tv//6bM+2qXuzXtEdX+z5pAIAAADAQ2IgFfGzSHFt8e1bc6g3z//umf/5exvzP0fSlr3V3/N9snpuwL38+79eQ/lzJ/bebQAAAAAAAAAAAAAAAAAAAHiopFTEC3k99YlqPv/Ujuupr0SKV/7nuVwuHSnLddeBH6p+rV2cnTl+fnp6drK52Lwy3aqPzTUnW2XdpyLF2t9+IdctqvXVu+vNd9Z431iLfT5SjP5Dt2xnLfbu2uRPdcsutU6WZT8VKf77HzeX7a5j/ZmN454qy/5NpPjmv2xf9shG2dNl2e9Hip98s94te6gs230+6mc3yj4/OVvs5jR/8qOPDAAAAAAAAAAAAAAAAAAAAI+TgVTEn0eK/72+fGsuf17/f6DnbeWtb/es97/FzWqd/6Fq/f+dXt/N+v/VcwWWdvpUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4eEpRxJuRYu7iWloZLN931C60Z27cHB8Z3b7awVTV7KvKlz+1k6dOn/nKC8Nnu3n7+vfa5+K1scvn6y/PXp+bby0stKbq4zPtydmp1q6PsNf6Wx2rTkD9+us3pq5eXaifev70pt03h94ffOLI0LnhZ48/0yn7ifr4yOjoWE+Z/oGP8HmDt9+ddth+IIr460jx3A9+nn48GFHE3s/FHb47++1g1YljVSfGR0arjky3mzOL5c5L3RNRRNR7KjW65yiP257GYj81IpbK5pcNPlZ2b2yuOd+8Mt2qX2rOL7YX27Mzl1KntWV/6lHE2RSxHBGr23xHBqKI1yPF9w6vpX/N41+dhy9fHPv6iVM7t6PYxz7uQl/Zt4GI5eJ2Y3aH3xTEYBTxz5HiF+8cjX8bjOiPzk98KeLVMn8U8VZ0xjuVX4wzEe85rR8b/VHE/5fjf24tvTNYXg+615UL36h/bebqbE/Z7nXlkb8/xH28mD/k95NaFPGT6oq/lv7d72sAAAAAAAAAAAAAAACAh0gRvx4pXnz3aKrmB9+aU9yeuVa/3Lwy3ZnW1537150zvb6+vl5PnWzknMi5lHM550rO1ZxR5Po5G2XW1tcn8vulnMs5V3Ku5oy+XD9nI+dEzqWcyzlXcq7mjP5cP2cj50TOpZzLOVdyrua8n9MHAQAAAAAAAAAAAAAAAACAx0dR/S/Fd7+1ltYHq/Wl+7r7VqwH+rH3qwAAAP//3v/zCw==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m50.64198664s ago: executing program 0 (id=365): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1m46.667625701s ago: executing program 0 (id=375): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r1], 0x1000f) 1m46.164491623s ago: executing program 32 (id=375): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r1], 0x1000f) 15.055442761s ago: executing program 3 (id=590): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="a0725ce9403b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x60, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1b8d2069162baf34"}}}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3d}, [], "8029335287b7a081"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 14.518385673s ago: executing program 3 (id=592): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r4, 0x400, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x1000000) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)='}', 0x1) 12.120585996s ago: executing program 3 (id=595): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0xe0000, 0x0) r2 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9.645107239s ago: executing program 5 (id=602): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) 9.062192542s ago: executing program 5 (id=603): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000000c0)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) io_uring_enter(r2, 0x47bc, 0xf5, 0x0, 0x0, 0x0) 8.097634907s ago: executing program 1 (id=605): getdents64(0xffffffffffffffff, &(0x7f0000000240)=""/197, 0xfffffffffffffcb0) getdents64(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x4}}}, 0x10) 7.959413158s ago: executing program 4 (id=606): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r4, 0x400, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x1000000) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)='}', 0x1) 6.777959494s ago: executing program 4 (id=607): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = syz_open_procfs(0x0, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sched_cls, r4, 0x6}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) 6.702223954s ago: executing program 2 (id=608): sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008090}, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r0, 0x1ad72f7) accept4(r0, 0x0, 0x0, 0x80000) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/180, 0xb4}, 0x2040) r2 = accept4$netrom(r0, 0x0, 0x0, 0x80000) writev(r2, &(0x7f00000001c0), 0x7) 6.090880917s ago: executing program 2 (id=609): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="a0725ce9403b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x60, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1b8d2069162baf34"}}}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3d}, [], "8029335287b7a081"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 6.090570087s ago: executing program 3 (id=610): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) 5.758243849s ago: executing program 2 (id=611): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000580)="b3c4", 0x2}], 0x1, &(0x7f0000000640)=ANY=[], 0xf0}}], 0x1, 0x24004c41) socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x800003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5.018291413s ago: executing program 3 (id=612): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0xc, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x20, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) 4.812265224s ago: executing program 2 (id=613): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000680)={0x1c, &(0x7f00000001c0)={0x20, 0x14, 0x3, "c6a363"}, 0x0, 0x0}) 4.655335635s ago: executing program 5 (id=614): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="1957000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 4.410117136s ago: executing program 4 (id=615): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0xfff, 0x5}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x1, 0x209, &(0x7f0000000680)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) sendto$inet(r1, &(0x7f00000004c0), 0x0, 0x805, 0x0, 0x0) creat(&(0x7f0000000000)='./file2\x00', 0x149) semget$private(0x0, 0x0, 0x1c0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) 4.392350497s ago: executing program 5 (id=616): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="800000", @ANYRES16=r1, @ANYBLOB="050027bd7000fedbdf250600000008000300", @ANYRES32=r2, @ANYBLOB="08000500060000001000178004000200040006"], 0x80}, 0x1, 0x0, 0x0, 0x40048}, 0x0) 4.299943727s ago: executing program 5 (id=617): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001400)=0x7) syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x8000, &(0x7f0000000080)={[{@logbufs={'logbufs', 0x3d, 0x2}}, {@noalign}, {@sysvgroups}, {@inode64}, {@nolazytime}]}, 0x1, 0xb99f, &(0x7f0000018700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2) pwrite64(r1, &(0x7f0000000080)="cc", 0x1, 0x200980) landlock_restrict_self(0xffffffffffffffff, 0x1) creat(&(0x7f0000000540)='./file0/file0\x00', 0x8) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x89d9, 0x100000001, 0x2, 0x3}) 3.940352609s ago: executing program 1 (id=618): socket$packet(0x11, 0xa, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r5, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 2.274109648s ago: executing program 1 (id=619): connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='devtmpfs\x00', 0x800, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r0, &(0x7f0000000400)=""/159, 0x9f) 1.418187692s ago: executing program 2 (id=620): ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x1) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) 1.417998902s ago: executing program 1 (id=621): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="a0725ce9403b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x60, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1b8d2069162baf34"}}}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3d}, [], "8029335287b7a081"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 781.733965ms ago: executing program 4 (id=622): r0 = socket(0xa, 0x3, 0x87) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x18, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 561.712196ms ago: executing program 5 (id=623): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000580)="b3c4", 0x2}], 0x1, &(0x7f0000000640)=ANY=[], 0xf0}}], 0x1, 0x24004c41) socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x800003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 374.134997ms ago: executing program 2 (id=624): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) pipe(&(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB]) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x4000000) 325.494968ms ago: executing program 1 (id=625): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x700, 0x10, 0x3, 0x6, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x62, 0x0, 0x5, 0x29, 0x0, @broadcast, @multicast2}}}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{0x0, 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) accept4(r1, &(0x7f00000002c0)=@isdn, &(0x7f0000000580)=0x80, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 266.005928ms ago: executing program 4 (id=626): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @local}, 0x3, 0x3, 0x1, 0x1}}, 0x80) 78.325459ms ago: executing program 1 (id=627): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="800000", @ANYRES16=r1, @ANYBLOB="050027bd7000fedbdf250600000008000300", @ANYRES32=r2, @ANYBLOB="08000500060000001000178004000200040006"], 0x80}, 0x1, 0x0, 0x0, 0x40048}, 0x0) 68.188889ms ago: executing program 4 (id=628): getdents64(0xffffffffffffffff, &(0x7f0000000240)=""/197, 0xfffffffffffffcb0) getdents64(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x4}}}, 0x10) 0s ago: executing program 3 (id=629): socket$packet(0x11, 0xa, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000080000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.195' (ED25519) to the list of known hosts. [ 74.883543][ T4175] cgroup: Unknown subsys name 'net' [ 75.055925][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.890373][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 78.940577][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 78.983781][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 79.013071][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 79.110872][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 79.202950][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 79.257624][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.275281][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.290254][ T4192] device bridge_slave_0 entered promiscuous mode [ 79.336428][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.353849][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.372321][ T4185] device bridge_slave_0 entered promiscuous mode [ 79.395835][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.413086][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.427805][ T4185] device bridge_slave_1 entered promiscuous mode [ 79.442061][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.452036][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.464580][ T4192] device bridge_slave_1 entered promiscuous mode [ 79.525517][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.533978][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.554783][ T4191] device bridge_slave_0 entered promiscuous mode [ 79.606807][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.617053][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.632161][ T4191] device bridge_slave_1 entered promiscuous mode [ 79.672294][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.690233][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.710942][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.769440][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.806443][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.815868][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.829168][ T4195] device bridge_slave_0 entered promiscuous mode [ 79.882606][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.896171][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.906886][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.920180][ T4195] device bridge_slave_1 entered promiscuous mode [ 79.958309][ T4192] team0: Port device team_slave_0 added [ 79.971137][ T4192] team0: Port device team_slave_1 added [ 79.982208][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.008277][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.016096][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.026440][ T4189] device bridge_slave_0 entered promiscuous mode [ 80.038668][ T4185] team0: Port device team_slave_0 added [ 80.076970][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.088849][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.102505][ T4189] device bridge_slave_1 entered promiscuous mode [ 80.114494][ T4185] team0: Port device team_slave_1 added [ 80.149640][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.180118][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.189502][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.228616][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.249215][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.267499][ T4191] team0: Port device team_slave_0 added [ 80.278145][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 80.299678][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.309802][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.347028][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.356985][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 80.362022][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 80.379158][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 80.407421][ T4191] team0: Port device team_slave_1 added [ 80.419419][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.433766][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.446451][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.447513][ T4186] Bluetooth: hci2: command 0x0409 tx timeout [ 80.497185][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.518580][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.529932][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.586276][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.643625][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.708695][ T4195] team0: Port device team_slave_0 added [ 80.741887][ T4189] team0: Port device team_slave_0 added [ 80.770212][ T4195] team0: Port device team_slave_1 added [ 80.784403][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.796105][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.859326][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.892306][ T4189] team0: Port device team_slave_1 added [ 80.910568][ T4185] device hsr_slave_0 entered promiscuous mode [ 80.927754][ T4185] device hsr_slave_1 entered promiscuous mode [ 80.950861][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.969271][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.013642][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.034744][ T4192] device hsr_slave_0 entered promiscuous mode [ 81.048816][ T4192] device hsr_slave_1 entered promiscuous mode [ 81.057462][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.076995][ T4192] Cannot create hsr debugfs directory [ 81.147295][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.158184][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.208248][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.227185][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.235413][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.284049][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.299709][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.312050][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.352774][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.425260][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.439952][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.487439][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.542972][ T4191] device hsr_slave_0 entered promiscuous mode [ 81.553809][ T4191] device hsr_slave_1 entered promiscuous mode [ 81.567127][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.579966][ T4191] Cannot create hsr debugfs directory [ 81.669277][ T4189] device hsr_slave_0 entered promiscuous mode [ 81.679620][ T4189] device hsr_slave_1 entered promiscuous mode [ 81.699345][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.716947][ T4189] Cannot create hsr debugfs directory [ 81.762265][ T4195] device hsr_slave_0 entered promiscuous mode [ 81.778916][ T4195] device hsr_slave_1 entered promiscuous mode [ 81.791214][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.807150][ T4195] Cannot create hsr debugfs directory [ 82.201263][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.228134][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.250726][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.274053][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.371738][ T4192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.373456][ T4186] Bluetooth: hci0: command 0x041b tx timeout [ 82.404364][ T4192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.447087][ T4186] Bluetooth: hci4: command 0x041b tx timeout [ 82.456113][ T4192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.468129][ T4186] Bluetooth: hci3: command 0x041b tx timeout [ 82.480073][ T4186] Bluetooth: hci1: command 0x041b tx timeout [ 82.498183][ T4192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.514513][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.527039][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 82.539428][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.562914][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.597657][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.613440][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.635015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.652134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.718228][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.736443][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.752834][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.771907][ T605] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.785558][ T605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.814735][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.828143][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.875105][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.895630][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.909375][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.947371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.961001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.974126][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.985010][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.021645][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.045964][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.056576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.073423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.102200][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.121909][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.141314][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.163765][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.185157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.259305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.273132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.290904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.303852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.343305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.356451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.378487][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.411508][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.426012][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.449559][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.463343][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.486435][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.518353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.533537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.576498][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.612040][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.631982][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.645823][ T1225] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.656609][ T1225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.674407][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.696105][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.711872][ T1225] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.722669][ T1225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.738616][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.763594][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.826353][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.841053][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.858533][ T1225] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.869548][ T1225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.880450][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.893433][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.905490][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.921527][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.934369][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.951396][ T1225] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.962569][ T1225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.974285][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.987354][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.997717][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.007156][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.070088][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.083987][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.105103][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.117319][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.131508][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.152092][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.170837][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.180178][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.196469][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.219202][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.243829][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.265152][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.295864][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.315110][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.375203][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.394767][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.411347][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.429470][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.443602][ T4255] Bluetooth: hci0: command 0x040f tx timeout [ 84.475905][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.496612][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.521462][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.534930][ T4255] Bluetooth: hci1: command 0x040f tx timeout [ 84.556861][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.570884][ T4255] Bluetooth: hci3: command 0x040f tx timeout [ 84.580437][ T4255] Bluetooth: hci4: command 0x040f tx timeout [ 84.580952][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.607154][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.607529][ T4255] Bluetooth: hci2: command 0x040f tx timeout [ 84.616472][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.639800][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.660369][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.714755][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.732714][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.750972][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.770223][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.787810][ T605] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.798874][ T605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.811146][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.824941][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.841530][ T605] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.852642][ T605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.866811][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.878305][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.892470][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.909582][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.923355][ T605] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.932933][ T605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.945194][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.957294][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.971506][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.982659][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.005986][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.037626][ T4185] device veth0_vlan entered promiscuous mode [ 85.051780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.065366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.080239][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.091058][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.101960][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.114569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.128477][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.140879][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.153473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.168196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.187999][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.210386][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.237660][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.261257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.280423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.299867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.313671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.325515][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.336078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.348282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.358906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.384101][ T4185] device veth1_vlan entered promiscuous mode [ 85.422742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.445253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.467704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.494704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.536922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.559314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.573078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.587009][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.603917][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.633833][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.668871][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.700149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.723091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.787544][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.826488][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.873750][ T4185] device veth0_macvtap entered promiscuous mode [ 85.922581][ T4185] device veth1_macvtap entered promiscuous mode [ 85.961440][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.987565][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.002520][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.018174][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.068018][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.078135][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.090735][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.134518][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.155117][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.174599][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.189821][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.204395][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.215350][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.237732][ T4191] device veth0_vlan entered promiscuous mode [ 86.253836][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.269798][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.300990][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.314208][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.333498][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.352952][ T4191] device veth1_vlan entered promiscuous mode [ 86.387710][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.400508][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.419834][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.435159][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.456248][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.471151][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.492789][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.507953][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.524475][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.528220][ T4242] Bluetooth: hci0: command 0x0419 tx timeout [ 86.541388][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.607810][ T4232] Bluetooth: hci4: command 0x0419 tx timeout [ 86.616958][ T4232] Bluetooth: hci3: command 0x0419 tx timeout [ 86.633789][ T4192] device veth0_vlan entered promiscuous mode [ 86.644090][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 86.661594][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.673059][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.689752][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.698851][ T4186] Bluetooth: hci2: command 0x0419 tx timeout [ 86.702816][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.725999][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.738311][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.778017][ T4192] device veth1_vlan entered promiscuous mode [ 86.802987][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.824282][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.836562][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.852105][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.902532][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.913471][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.926447][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.943099][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.955543][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.988931][ T4192] device veth0_macvtap entered promiscuous mode [ 87.007388][ T4189] device veth0_vlan entered promiscuous mode [ 87.019108][ T4191] device veth0_macvtap entered promiscuous mode [ 87.028602][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.039737][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.051149][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.062971][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.076570][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.090259][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.123724][ T4192] device veth1_macvtap entered promiscuous mode [ 87.154122][ T4191] device veth1_macvtap entered promiscuous mode [ 87.221570][ T4189] device veth1_vlan entered promiscuous mode [ 87.258548][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.276178][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.303050][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.353461][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.371571][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.386486][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.400159][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.411385][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.445412][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.474082][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.501881][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.548091][ T4287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.553028][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.564693][ T4287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.595375][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.612486][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.629059][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.661847][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.681423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.700458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.725550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.749751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.774930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.788982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.802258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.815787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.828628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.859778][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.889949][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.904141][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.922091][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.960008][ T4195] device veth0_vlan entered promiscuous mode [ 88.005015][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.022664][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.054081][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.073801][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.092288][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.108976][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.130240][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.148558][ T4195] device veth1_vlan entered promiscuous mode [ 88.158520][ T4287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.185328][ T4287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.209408][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.228183][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.247474][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.263008][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.277379][ T4189] device veth0_macvtap entered promiscuous mode [ 88.312966][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.336165][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.356716][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.372631][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.393378][ T4189] device veth1_macvtap entered promiscuous mode [ 88.421449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.449454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.463500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.522560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.546591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.603854][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.615206][ T4306] loop0: detected capacity change from 0 to 512 [ 88.619167][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.638943][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.653775][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.667907][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.682329][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.700322][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.728456][ T4195] device veth0_macvtap entered promiscuous mode [ 88.745788][ T4306] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.767896][ T4306] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 88.788296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.798207][ T4294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.830655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.840320][ T4294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.864926][ T4306] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 88.868197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.894763][ T4306] EXT4-fs (loop0): 1 truncate cleaned up [ 88.910712][ T4306] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 88.911825][ T4195] device veth1_macvtap entered promiscuous mode [ 89.000860][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.016530][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.029632][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.046171][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.058009][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.073451][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.121128][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.140616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.183612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.196556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.248092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.290313][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.326380][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.347279][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.364168][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.403214][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.425987][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.451388][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.468837][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.481369][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.494768][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.507369][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.520451][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.534563][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.553355][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.586169][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.612906][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.645934][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.659516][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.673019][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.685524][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.702442][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.723441][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.739339][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.752236][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.769882][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.781439][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.805075][ T4294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.820688][ T4294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.828279][ T4313] device syzkaller0 entered promiscuous mode [ 89.840879][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.851925][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.861935][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.873251][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.886432][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.906579][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.926984][ T4314] tipc: Started in network mode [ 89.932985][ T4314] tipc: Node identity b28181da007c, cluster identity 4711 [ 89.944324][ T4314] tipc: Enabled bearer , priority 0 [ 89.958986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.976042][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.029919][ T4314] tipc: Resetting bearer [ 90.126363][ T4311] tipc: Resetting bearer [ 90.142586][ T4311] tipc: Disabling bearer [ 90.195298][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.232077][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.300134][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.306875][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.333257][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.376180][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.401175][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.443176][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.455505][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.467607][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.548412][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.567358][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.619200][ T4287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.646609][ T4287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.750404][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.858157][ T4327] Zero length message leads to an empty skb [ 90.925577][ T4330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 90.937176][ T4330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 91.150047][ T4332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10'. [ 91.863185][ T4345] loop4: detected capacity change from 0 to 512 [ 92.028612][ T4345] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 92.158661][ T4345] EXT4-fs (loop4): 1 truncate cleaned up [ 92.290864][ T7] cfg80211: failed to load regulatory.db [ 92.346952][ T4345] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 92.615827][ T4351] loop3: detected capacity change from 0 to 1024 [ 92.752926][ T4351] EXT4-fs (loop3): Unsupported blocksize for fs-verity [ 93.173992][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 93.174216][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 93.317724][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 93.333113][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 93.350939][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 93.368709][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 93.471900][ T4350] ODEBUG: Out of memory. ODEBUG disabled [ 93.480994][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 93.487259][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 93.511700][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 93.525440][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 94.758917][ T4357] tipc: Started in network mode [ 94.807650][ T4357] tipc: Node identity ca9f3ece798, cluster identity 4711 [ 94.935228][ T4357] tipc: Enabled bearer , priority 0 [ 95.188627][ T4360] device syzkaller0 entered promiscuous mode [ 95.518584][ T4356] tipc: Resetting bearer [ 96.008553][ T4356] tipc: Disabling bearer [ 96.029300][ T4239] tipc: Node number set to 3005169358 [ 96.615173][ T4379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'. [ 96.661923][ T4378] netlink: 28 bytes leftover after parsing attributes in process `syz.3.22'. [ 96.673166][ T4379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21'. [ 96.749290][ T4381] tipc: Enabled bearer , priority 0 [ 96.788377][ T4375] device syzkaller0 entered promiscuous mode [ 96.883446][ T4375] tipc: Resetting bearer [ 96.934980][ T4374] tipc: Resetting bearer [ 98.990398][ T4374] tipc: Disabling bearer [ 99.303761][ T4405] loop1: detected capacity change from 0 to 512 [ 99.341534][ T4405] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 99.496614][ T4405] EXT4-fs (loop1): 1 truncate cleaned up [ 99.516715][ T4405] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 100.251633][ T4424] netlink: 28 bytes leftover after parsing attributes in process `syz.0.35'. [ 100.736243][ T4440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'. [ 100.776069][ T4440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.37'. [ 101.049822][ T4447] netlink: 'syz.0.41': attribute type 1 has an invalid length. [ 101.070420][ T4446] tipc: Started in network mode [ 101.081955][ T4446] tipc: Node identity 0698c83d8d06, cluster identity 4711 [ 101.093132][ T4446] tipc: Enabled bearer , priority 0 [ 101.110746][ T4447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 101.131152][ T4447] device macvlan2 entered promiscuous mode [ 101.152180][ T4448] device syzkaller0 entered promiscuous mode [ 101.231863][ T4446] tipc: Resetting bearer [ 101.304808][ T4445] tipc: Resetting bearer [ 101.384646][ T4445] tipc: Disabling bearer [ 103.481326][ T4469] loop3: detected capacity change from 0 to 128 [ 103.500360][ T4468] netlink: 28 bytes leftover after parsing attributes in process `syz.1.48'. [ 103.551120][ T4469] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.631597][ T4469] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 104.871290][ T4487] tipc: Enabled bearer , priority 0 [ 105.251144][ T4492] device syzkaller0 entered promiscuous mode [ 105.872567][ T4487] tipc: Resetting bearer [ 106.018584][ T21] tipc: Node number set to 2342438973 [ 106.158163][ T4496] loop3: detected capacity change from 0 to 32768 [ 106.207289][ T4496] gfs2: Bad value for 'quota' [ 106.569471][ T4486] tipc: Resetting bearer [ 107.239628][ T4486] tipc: Disabling bearer [ 108.503391][ T4513] netlink: 28 bytes leftover after parsing attributes in process `syz.1.63'. [ 109.057043][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 109.326986][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 109.737086][ T21] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 110.534341][ T21] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 110.986770][ T21] usb 1-1: config 135 has no interface number 0 [ 111.005635][ T21] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.247064][ T21] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 111.288621][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.336187][ T21] usb 1-1: Product: syz [ 111.351143][ T4530] loop1: detected capacity change from 0 to 1024 [ 111.370681][ T21] usb 1-1: Manufacturer: syz [ 111.413115][ T21] usb 1-1: SerialNumber: syz [ 111.635641][ T4534] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 111.757678][ T21] usb 1-1: USB disconnect, device number 2 [ 111.869302][ T4536] netlink: 76 bytes leftover after parsing attributes in process `syz.4.73'. [ 111.972988][ T4542] netlink: 'syz.1.74': attribute type 1 has an invalid length. [ 112.236087][ T4548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.79'. [ 112.669362][ T4552] loop0: detected capacity change from 0 to 65536 [ 112.839609][ T4553] tipc: Started in network mode [ 112.873199][ T4552] XFS (loop0): Mounting V5 Filesystem [ 112.890662][ T4553] tipc: Node identity 52896f028d1f, cluster identity 4711 [ 112.905021][ T4553] tipc: Enabled bearer , priority 0 [ 112.915822][ T4555] device syzkaller0 entered promiscuous mode [ 112.917875][ T4565] netlink: 28 bytes leftover after parsing attributes in process `syz.2.83'. [ 113.023906][ T4553] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 113.128058][ T4555] tipc: Resetting bearer [ 113.272904][ T4547] tipc: Resetting bearer [ 113.313024][ T4552] XFS (loop0): Ending clean mount [ 113.373278][ T4302] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x240, xfs_agfl block 0x3 [ 113.435723][ T4302] XFS (loop0): Unmount and run xfs_repair [ 113.463731][ T4302] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 113.490078][ T4302] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be XAFL.........]F. [ 113.552027][ T4302] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00 ................ [ 113.630880][ T4302] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06 5.\%............ [ 113.762851][ T4302] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 113.899484][ T4302] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 113.953345][ T4302] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 113.998264][ T4302] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 114.057007][ T4302] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 114.107740][ T4552] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x1b9/0x350" at daddr 0x3 len 1 error 74 [ 114.124260][ T4552] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1556/0x1b60 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 114.152397][ T4552] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 114.157740][ T7] tipc: Node number set to 3751177986 [ 114.208281][ T4547] tipc: Disabling bearer [ 114.282957][ T4185] XFS (loop0): Unmounting Filesystem [ 116.610792][ T4596] netlink: 80 bytes leftover after parsing attributes in process `syz.3.90'. [ 116.928642][ T4598] netlink: 76 bytes leftover after parsing attributes in process `syz.3.91'. [ 117.181038][ T4600] netlink: 'syz.1.92': attribute type 1 has an invalid length. [ 117.322419][ T4602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.93'. [ 117.585096][ T4610] netlink: 28 bytes leftover after parsing attributes in process `syz.4.95'. [ 118.164055][ T4622] tipc: Enabled bearer , priority 0 [ 119.015074][ T4628] device syzkaller0 entered promiscuous mode [ 119.045630][ T4629] loop2: detected capacity change from 0 to 512 [ 119.051243][ T4630] netlink: 80 bytes leftover after parsing attributes in process `syz.3.101'. [ 119.124911][ T4622] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 119.262294][ T4622] tipc: Resetting bearer [ 119.332951][ T4615] tipc: Resetting bearer [ 119.350195][ T4636] netlink: 76 bytes leftover after parsing attributes in process `syz.3.105'. [ 119.542967][ T4629] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 120.340149][ T4629] EXT4-fs (loop2): 1 truncate cleaned up [ 120.374604][ T4615] tipc: Disabling bearer [ 120.403587][ T4629] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 120.468557][ T4634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.104'. [ 121.330137][ T4645] netlink: 'syz.3.107': attribute type 1 has an invalid length. [ 121.582567][ T4657] netlink: 28 bytes leftover after parsing attributes in process `syz.4.110'. [ 121.909269][ T4665] netlink: 80 bytes leftover after parsing attributes in process `syz.4.116'. [ 122.476302][ T4672] netlink: 24 bytes leftover after parsing attributes in process `syz.4.118'. [ 122.572650][ T4674] tipc: Enabled bearer , priority 0 [ 122.612405][ T4677] device syzkaller0 entered promiscuous mode [ 122.654179][ T4674] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 122.755047][ T4674] tipc: Resetting bearer [ 122.792780][ T4673] tipc: Resetting bearer [ 122.836480][ T4673] tipc: Disabling bearer [ 122.858419][ T4682] loop2: detected capacity change from 0 to 512 [ 122.904704][ T4682] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 123.000162][ T4683] netlink: 76 bytes leftover after parsing attributes in process `syz.0.121'. [ 123.054512][ T4682] EXT4-fs (loop2): 1 truncate cleaned up [ 123.079273][ T4683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.121'. [ 123.091516][ T4196] Bluetooth: unknown link type 128 [ 123.097697][ T4682] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 123.139202][ T4689] netlink: 'syz.1.125': attribute type 1 has an invalid length. [ 123.542498][ T4697] netlink: 80 bytes leftover after parsing attributes in process `syz.2.127'. [ 123.561288][ T4695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.128'. [ 123.692743][ T4700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.130'. [ 125.157300][ T4272] Bluetooth: hci2: command 0x0409 tx timeout [ 126.257041][ T4720] tipc: Enabling of bearer rejected, failed to enable media [ 126.607942][ T4733] netlink: 76 bytes leftover after parsing attributes in process `syz.4.138'. [ 126.680293][ T4733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.138'. [ 126.747054][ T4737] netlink: 'syz.1.139': attribute type 1 has an invalid length. [ 126.972753][ T4738] bond1: (slave gretap1): making interface the new active one [ 127.100055][ T4738] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 127.248869][ T4747] netlink: 80 bytes leftover after parsing attributes in process `syz.4.141'. [ 127.511524][ T4751] netlink: 24 bytes leftover after parsing attributes in process `syz.0.142'. [ 127.518316][ T4752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.143'. [ 128.430246][ T4762] loop0: detected capacity change from 0 to 256 [ 128.487260][ T4764] tipc: Enabled bearer , priority 0 [ 128.507670][ T4762] exfat: Unknown parameter 'keep_last_dots' [ 128.545502][ T4765] device syzkaller0 entered promiscuous mode [ 128.620721][ T4764] sch_tbf: peakrate 786 is lower than or equals to rate 19658 ! [ 128.716323][ T4765] tipc: Resetting bearer [ 128.806437][ T4763] tipc: Resetting bearer [ 128.832544][ T4769] netlink: 76 bytes leftover after parsing attributes in process `syz.1.150'. [ 128.888636][ T4763] tipc: Disabling bearer [ 128.920829][ T4769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'. [ 130.008705][ T4776] netlink: 80 bytes leftover after parsing attributes in process `syz.1.154'. [ 130.102754][ T4778] netlink: 'syz.4.153': attribute type 1 has an invalid length. [ 130.263662][ T4779] bond1: (slave gretap1): making interface the new active one [ 130.274109][ T4779] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 130.369302][ T4783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.155'. [ 130.557523][ T4786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.156'. [ 131.015160][ T4798] tipc: Enabled bearer , priority 0 [ 131.046608][ T4798] device syzkaller0 entered promiscuous mode [ 131.088805][ T4798] sch_tbf: peakrate 786 is lower than or equals to rate 19658 ! [ 131.161762][ T4798] tipc: Resetting bearer [ 131.220552][ T4797] tipc: Resetting bearer [ 131.286485][ T4797] tipc: Disabling bearer [ 131.359387][ T4767] loop0: detected capacity change from 0 to 65536 [ 131.407379][ T4767] ======================================================= [ 131.407379][ T4767] WARNING: The mand mount option has been deprecated and [ 131.407379][ T4767] and is ignored by this kernel. Remove the mand [ 131.407379][ T4767] option from the mount to silence this warning. [ 131.407379][ T4767] ======================================================= [ 131.425524][ T4802] netlink: 76 bytes leftover after parsing attributes in process `syz.1.163'. [ 131.452522][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.477924][ T4802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'. [ 131.810828][ T4811] netlink: 80 bytes leftover after parsing attributes in process `syz.4.165'. [ 133.100894][ T4814] netlink: 28 bytes leftover after parsing attributes in process `syz.1.166'. [ 133.117782][ T4817] netlink: 'syz.3.167': attribute type 1 has an invalid length. [ 133.243430][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.250669][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.345775][ T4822] bond1: (slave gretap1): making interface the new active one [ 133.418959][ T4822] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 134.302766][ T4836] tipc: Enabled bearer , priority 0 [ 134.348187][ T4836] device syzkaller0 entered promiscuous mode [ 134.436608][ T4836] tipc: Resetting bearer [ 134.504643][ T4835] tipc: Resetting bearer [ 134.506345][ T4842] netlink: 76 bytes leftover after parsing attributes in process `syz.1.176'. [ 134.551331][ T4835] tipc: Disabling bearer [ 134.614706][ T4842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'. [ 135.040743][ T4852] netlink: 80 bytes leftover after parsing attributes in process `syz.1.179'. [ 136.319394][ T4861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.181'. [ 136.687009][ T4239] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 137.180769][ T4864] netlink: 16 bytes leftover after parsing attributes in process `syz.0.183'. [ 137.226823][ T4239] usb 4-1: Using ep0 maxpacket: 8 [ 137.347245][ T4239] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.407278][ T4239] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.490348][ T4239] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 137.546007][ T4868] netlink: 'syz.0.185': attribute type 1 has an invalid length. [ 137.556195][ T4239] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.656773][ T4239] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 137.671158][ T4239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.715633][ T4870] bond1: (slave gretap1): making interface the new active one [ 137.733718][ T4870] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 137.861530][ T4876] netlink: 76 bytes leftover after parsing attributes in process `syz.1.189'. [ 137.895370][ T4875] tipc: Enabled bearer , priority 0 [ 137.909979][ T4876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 137.933923][ T4875] device syzkaller0 entered promiscuous mode [ 137.967430][ T4239] usb 4-1: GET_CAPABILITIES returned 0 [ 137.993447][ T4239] usbtmc 4-1:16.0: can't read capabilities [ 138.017461][ T4880] tipc: Resetting bearer [ 138.065617][ T4874] tipc: Resetting bearer [ 138.152145][ T4874] tipc: Disabling bearer [ 138.178261][ T4276] usb 4-1: USB disconnect, device number 2 [ 138.332980][ T4888] netlink: 80 bytes leftover after parsing attributes in process `syz.4.191'. [ 138.856561][ T4896] netlink: 28 bytes leftover after parsing attributes in process `syz.3.194'. [ 139.109501][ T4900] netlink: 16 bytes leftover after parsing attributes in process `syz.3.195'. [ 139.572114][ T26] audit: type=1800 audit(1761735373.314:2): pid=4897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.193" name="file1" dev="fuse" ino=5 res=0 errno=0 [ 139.589364][ T4897] syz.4.193 (4897) used greatest stack depth: 20896 bytes left [ 140.028848][ T4907] netlink: 'syz.4.198': attribute type 1 has an invalid length. [ 140.367290][ T4911] netlink: 76 bytes leftover after parsing attributes in process `syz.3.200'. [ 140.828371][ T4911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.200'. [ 140.853328][ T4921] loop4: detected capacity change from 0 to 2048 [ 141.014444][ T4921] NILFS (loop4): invalid segment: Magic number mismatch [ 141.024069][ T4921] NILFS (loop4): trying rollback from an earlier position [ 141.049137][ T4923] tipc: Started in network mode [ 141.055455][ T4923] tipc: Node identity 327013f5eeb, cluster identity 4711 [ 141.083418][ T4921] NILFS (loop4): recovery complete [ 141.108463][ T4923] tipc: Enabled bearer , priority 0 [ 141.116309][ T4925] netlink: 80 bytes leftover after parsing attributes in process `syz.0.204'. [ 141.152231][ T4926] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.194910][ T4923] device syzkaller0 entered promiscuous mode [ 141.457010][ T4929] process 'syz.4.202' launched './file0' with NULL argv: empty string added [ 141.588931][ T4927] tipc: Resetting bearer [ 141.918038][ T4922] tipc: Resetting bearer [ 141.957289][ T4922] tipc: Disabling bearer [ 142.026316][ T4932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.206'. [ 143.561243][ T4954] netlink: 24 bytes leftover after parsing attributes in process `syz.3.210'. [ 143.811218][ T4959] netlink: 76 bytes leftover after parsing attributes in process `syz.0.213'. [ 143.827869][ T4960] netlink: 'syz.2.212': attribute type 1 has an invalid length. [ 143.979338][ T4959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'. [ 144.062545][ T4965] bond1: (slave gretap1): making interface the new active one [ 144.130415][ T4965] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 144.141296][ T4973] netlink: 28 bytes leftover after parsing attributes in process `syz.0.218'. [ 144.167197][ T4969] netlink: 80 bytes leftover after parsing attributes in process `syz.4.216'. [ 144.194499][ T4975] tipc: Enabled bearer , priority 0 [ 144.229239][ T4971] device syzkaller0 entered promiscuous mode [ 144.293150][ T4971] tipc: Resetting bearer [ 144.332931][ T4970] tipc: Resetting bearer [ 144.355991][ T4979] loop4: detected capacity change from 0 to 256 [ 144.399920][ T4970] tipc: Disabling bearer [ 144.486288][ T4979] FAT-fs (loop4): Directory bread(block 64) failed [ 144.574014][ T4979] FAT-fs (loop4): Directory bread(block 65) failed [ 144.633060][ T4979] FAT-fs (loop4): Directory bread(block 66) failed [ 144.711646][ T4979] FAT-fs (loop4): Directory bread(block 67) failed [ 144.737959][ T4979] FAT-fs (loop4): Directory bread(block 68) failed [ 144.757727][ T4979] FAT-fs (loop4): Directory bread(block 69) failed [ 144.870157][ T263] block nbd2: Attempted send on invalid socket [ 144.879548][ T263] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 144.904820][ T4990] hpfs: hpfs_map_sector(): read error [ 145.345050][ T4979] FAT-fs (loop4): Directory bread(block 70) failed [ 145.386858][ T4979] FAT-fs (loop4): Directory bread(block 71) failed [ 145.429723][ T4979] FAT-fs (loop4): Directory bread(block 72) failed [ 145.507996][ T4979] FAT-fs (loop4): Directory bread(block 73) failed [ 147.149821][ T26] audit: type=1800 audit(1761735380.174:3): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.221" name="bus" dev="loop4" ino=1048590 res=0 errno=0 [ 147.440049][ T5005] netlink: 76 bytes leftover after parsing attributes in process `syz.3.228'. [ 147.637628][ T5005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 147.733175][ T5009] netlink: 'syz.4.230': attribute type 1 has an invalid length. [ 147.853638][ T5014] netlink: 28 bytes leftover after parsing attributes in process `syz.0.231'. [ 147.948525][ T5019] netlink: 80 bytes leftover after parsing attributes in process `syz.3.232'. [ 149.217124][ T5027] tipc: Enabled bearer , priority 0 [ 149.317258][ T5032] device syzkaller0 entered promiscuous mode [ 149.472143][ T5027] tipc: Resetting bearer [ 149.564870][ T5023] tipc: Resetting bearer [ 149.628085][ T5023] tipc: Disabling bearer [ 149.677054][ T5040] netlink: 24 bytes leftover after parsing attributes in process `syz.0.238'. [ 150.979341][ T5049] loop0: detected capacity change from 0 to 8 [ 151.278924][ T5049] SQUASHFS error: zlib decompression failed, data probably corrupt [ 151.389113][ T5057] netlink: 28 bytes leftover after parsing attributes in process `syz.4.244'. [ 151.417784][ T5049] SQUASHFS error: Failed to read block 0x4de: -5 [ 151.463981][ T5055] SQUASHFS error: Unable to read directory block [631:26] [ 151.541648][ T5049] SQUASHFS error: zlib decompression failed, data probably corrupt [ 151.576986][ T5049] SQUASHFS error: Failed to read block 0x4df: -5 [ 151.706946][ T5049] SQUASHFS error: zlib decompression failed, data probably corrupt [ 151.778083][ T5059] netlink: 'syz.4.245': attribute type 1 has an invalid length. [ 151.816803][ T5049] SQUASHFS error: Failed to read block 0x4e0: -5 [ 151.859726][ T26] audit: type=1800 audit(1761735385.604:4): pid=5049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.241" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 152.163608][ T5066] vivid-008: ================= START STATUS ================= [ 152.180601][ T5044] loop1: detected capacity change from 0 to 32768 [ 152.180804][ T5066] vivid-008: Enable Output Cropping: true [ 152.211627][ T5066] vivid-008: Enable Output Composing: true [ 152.261818][ T5067] loop0: detected capacity change from 0 to 8 [ 152.326376][ T5067] squashfs: Unknown parameter 'euid>00000000000000000000' [ 152.375841][ T5066] vivid-008: Enable Output Scaler: true [ 152.426350][ T5066] vivid-008: Tx RGB Quantization Range: Automatic [ 152.446925][ T5066] vivid-008: Transmit Mode: HDMI [ 152.454637][ T5066] vivid-008: Display Present: true inactive [ 152.470795][ T5044] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.239 (5044) [ 152.487091][ T5066] vivid-008: Hotplug Present: 0x00000001 [ 152.516235][ T5066] vivid-008: RxSense Present: 0x00000001 [ 152.537989][ T5066] vivid-008: EDID Present: 0x00000001 [ 152.550920][ T5066] vivid-008: ================== END STATUS ================== [ 153.347654][ T5044] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 153.371490][ T5073] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 153.416823][ T5044] BTRFS info (device loop1): using free space tree [ 153.465460][ T5044] BTRFS info (device loop1): has skinny extents [ 153.708220][ T5094] loop2: detected capacity change from 0 to 2048 [ 153.748849][ T5099] device syzkaller0 entered promiscuous mode [ 153.947736][ T5044] BTRFS error (device loop1): open_ctree failed: -12 [ 153.997215][ T5094] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,lazytime,barrier=0x0000000000000007,quota,norecovery,i_version,errors=remount-ro,. Quota mode: writeback. [ 154.174719][ T5106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 154.438714][ T5112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.255'. [ 154.685795][ T5117] loop4: detected capacity change from 0 to 512 [ 154.794020][ T5117] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 154.826323][ T5119] netlink: 'syz.0.258': attribute type 1 has an invalid length. [ 154.837427][ T5117] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 154.966747][ T5117] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 155.533990][ T5117] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 155.665514][ T5117] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 155.738299][ T5117] EXT4-fs (loop4): orphan cleanup on readonly fs [ 155.816949][ T5117] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.257: bg 0: block 34: padding at end of block bitmap is not set [ 155.895098][ T5133] loop0: detected capacity change from 0 to 128 [ 155.917577][ T5117] Quota error (device loop4): write_blk: dquota write failed [ 155.952066][ T5117] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 155.975150][ T5133] EXT4-fs (loop0): Unrecognized mount option "audit" or missing value [ 156.230020][ T5117] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.257: Failed to acquire dquot type 1 [ 156.329172][ T5117] EXT4-fs (loop4): 1 truncate cleaned up [ 157.636297][ T5117] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,barrier,,errors=continue. Quota mode: writeback. [ 159.128390][ T5146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 159.210883][ T5148] tipc: Enabled bearer , priority 0 [ 159.292150][ T5149] device syzkaller0 entered promiscuous mode [ 159.371972][ T5148] tipc: Resetting bearer [ 159.413391][ T5153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.268'. [ 159.611960][ T5147] tipc: Resetting bearer [ 159.795630][ T5164] Can't find ip_set type h]sh:ip, [ 159.861741][ T5147] tipc: Disabling bearer [ 159.978015][ T5163] netlink: 'syz.4.271': attribute type 1 has an invalid length. [ 161.469796][ T4257] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 161.898993][ T4257] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.277094][ T4257] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 162.467170][ T4257] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.514988][ T4257] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.567840][ T4257] usb 1-1: Product: syz [ 162.589664][ T4257] usb 1-1: Manufacturer: syz [ 162.616431][ T4257] usb 1-1: SerialNumber: syz [ 163.027198][ T4304] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 163.596931][ T4257] usb 1-1: can't set config #1, error -71 [ 163.617066][ T4304] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 163.617161][ T4257] usb 1-1: USB disconnect, device number 3 [ 163.663305][ T5198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'. [ 163.692901][ T4304] usb 4-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 163.720704][ T4304] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 163.869839][ T4304] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.890192][ T5201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.283'. [ 163.890511][ T4304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 163.919681][ T4304] usb 4-1: SerialNumber: syz [ 163.973367][ T5187] loop2: detected capacity change from 0 to 32768 [ 164.058403][ T5205] tipc: Enabled bearer , priority 0 [ 164.090199][ T5205] device syzkaller0 entered promiscuous mode [ 164.103349][ T5207] netlink: 'syz.0.286': attribute type 1 has an invalid length. [ 164.153742][ T5187] XFS (loop2): Mounting V5 Filesystem [ 164.224345][ T5213] tipc: Resetting bearer [ 164.301717][ T5204] tipc: Resetting bearer [ 164.317189][ T4304] rndis_wlan 4-1:253.0: RNDIS init failed, -71 [ 164.348841][ T4304] rndis_wlan: probe of 4-1:253.0 failed with error -71 [ 164.371226][ T5204] tipc: Disabling bearer [ 164.414518][ T5187] XFS (loop2): Ending clean mount [ 164.455208][ T4304] rndis_host 4-1:253.0: RNDIS init failed, -71 [ 164.487816][ T4304] rndis_host: probe of 4-1:253.0 failed with error -71 [ 164.529823][ T4304] usb 4-1: USB disconnect, device number 3 [ 164.670597][ T5224] loop4: detected capacity change from 0 to 128 [ 164.883762][ T4189] XFS (loop2): Unmounting Filesystem [ 165.216947][ T4304] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 165.509683][ T5230] loop0: detected capacity change from 0 to 4096 [ 165.616739][ T5230] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 165.667020][ T4304] usb 4-1: device descriptor read/all, error -71 [ 165.875073][ T5239] netlink: 16 bytes leftover after parsing attributes in process `syz.4.293'. [ 166.042292][ T5230] EXT4-fs (loop0): Test dummy encryption mode enabled [ 166.120385][ T5230] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,test_dummy_encryption,errors=continue,,errors=continue. Quota mode: writeback. [ 166.202761][ T5230] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 80: comm syz.0.291: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 166.247918][ T5230] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz.0.291: directory missing '..' [ 166.566069][ T5255] netlink: 28 bytes leftover after parsing attributes in process `syz.4.296'. [ 166.594766][ T5258] netlink: 'syz.2.297': attribute type 1 has an invalid length. [ 166.964676][ T5268] tipc: Enabled bearer , priority 0 [ 167.076945][ T5274] tipc: Disabling bearer [ 167.086911][ T5277] loop2: detected capacity change from 0 to 512 [ 167.190032][ T5277] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 167.253545][ T5235] loop3: detected capacity change from 0 to 40427 [ 167.613149][ T5235] F2FS-fs (loop3): Invalid log sectorsize (14) [ 167.928057][ T5235] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 168.178286][ T5235] F2FS-fs (loop3): Unrecognized mount option "errors=continue" or missing value [ 168.376853][ T5277] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 168.415628][ T5291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.304'. [ 168.452839][ T5277] FAT-fs (loop2): Filesystem has been set read-only [ 168.759844][ T5300] netlink: 28 bytes leftover after parsing attributes in process `syz.1.308'. [ 168.770177][ T4189] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 168.874273][ T5292] sctp: failed to load transform for md5: -4 [ 168.915341][ T5289] sctp: failed to load transform for md5: -2 [ 169.360048][ T4257] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 169.782030][ T4257] usb 3-1: Using ep0 maxpacket: 32 [ 169.988718][ T4257] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 170.069123][ T4257] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 170.233376][ T4257] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 170.253210][ T5321] netlink: 'syz.3.312': attribute type 1 has an invalid length. [ 170.290116][ T4257] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 170.361259][ T4257] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 170.414162][ T4257] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 170.436762][ T5326] tipc: Enabled bearer , priority 0 [ 170.469396][ T5328] tipc: Resetting bearer [ 170.484299][ T4257] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 170.524928][ T5325] tipc: Disabling bearer [ 170.533764][ T4257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.573585][ T4257] usb 3-1: config 0 descriptor?? [ 171.329677][ T4257] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 171.405887][ T4257] usb 3-1: USB disconnect, device number 2 [ 171.481065][ T4257] usblp0: removed [ 171.504899][ T5340] netlink: 16 bytes leftover after parsing attributes in process `syz.3.318'. [ 171.594265][ T5344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.320'. [ 171.817225][ T1111] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 172.076783][ T4257] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 172.337098][ T4256] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 172.528660][ T4257] usb 3-1: Using ep0 maxpacket: 32 [ 172.974492][ T1111] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 172.996380][ T5354] netlink: 'syz.2.324': attribute type 1 has an invalid length. [ 173.066505][ T1111] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 173.086971][ T4257] usb 3-1: device descriptor read/all, error -71 [ 173.165733][ T1111] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 173.268345][ T1111] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 173.345254][ T1111] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 173.347186][ T4256] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 173.429545][ T5364] tipc: Enabled bearer , priority 0 [ 173.486941][ T4256] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 173.502681][ T1111] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 173.526226][ T5365] device syzkaller0 entered promiscuous mode [ 173.546995][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 173.564206][ T4256] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 173.571169][ T1111] usb 2-1: Product: syz [ 173.615700][ T1111] usb 2-1: Manufacturer: syz [ 173.665695][ T5365] tipc: Resetting bearer [ 173.707648][ T4256] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 173.732727][ T1111] cdc_wdm 2-1:1.0: skipping garbage [ 173.752747][ T1111] cdc_wdm 2-1:1.0: skipping garbage [ 173.761380][ T4256] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 173.799866][ T1111] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 173.810088][ T4256] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 173.829049][ T1111] cdc_wdm 2-1:1.0: Unknown control protocol [ 173.884418][ T5363] tipc: Resetting bearer [ 173.936384][ T5363] tipc: Disabling bearer [ 173.976987][ T4256] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 174.056076][ T4256] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 174.153169][ T4256] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 174.225039][ T5370] loop0: detected capacity change from 0 to 16 [ 174.307776][ T5370] erofs: (device loop0): mounted with root inode @ nid 36. [ 174.504635][ T4256] usb 4-1: string descriptor 0 read error: -22 [ 174.611997][ T4256] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 174.716707][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE [ 175.488165][ T4256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.507394][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.670045][ T4256] usb 4-1: can't set config #168, error -71 [ 175.781893][ T4256] usb 4-1: USB disconnect, device number 6 [ 175.834044][ T4302] usb 2-1: USB disconnect, device number 2 [ 175.855206][ T5380] netlink: 28 bytes leftover after parsing attributes in process `syz.3.333'. [ 176.001787][ T5384] loop0: detected capacity change from 0 to 1024 [ 176.126858][ T4186] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 176.157072][ T5384] EXT4-fs (loop0): Test dummy encryption mode enabled [ 176.226131][ T5384] EXT4-fs (loop0): inline encryption not supported [ 176.333381][ T5384] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 176.374436][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.452526][ T4186] usb 5-1: Using ep0 maxpacket: 8 [ 176.653046][ T1111] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 177.800488][ T4186] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 177.824280][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.847010][ T1111] usb 4-1: Using ep0 maxpacket: 16 [ 177.915089][ T5397] netlink: 'syz.0.337': attribute type 1 has an invalid length. [ 177.979135][ T4186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.007006][ T4186] usb 5-1: Product: syz [ 178.010822][ T1111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 178.013800][ T4186] usb 5-1: Manufacturer: syz [ 178.045386][ T4186] usb 5-1: SerialNumber: syz [ 178.067086][ T4186] usb 5-1: config 0 descriptor?? [ 178.310320][ T1111] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 178.327138][ T4186] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 178.333313][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.391828][ T1111] usb 4-1: Product: syz [ 178.422804][ T1111] usb 4-1: Manufacturer: syz [ 178.422836][ T1111] usb 4-1: SerialNumber: syz [ 178.451761][ T1111] usb 4-1: config 0 descriptor?? [ 178.508645][ T1111] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 178.508730][ T1111] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 178.511586][ T5409] tipc: Enabled bearer , priority 0 [ 178.512291][ T5409] device syzkaller0 entered promiscuous mode [ 178.551913][ T5409] tipc: Resetting bearer [ 178.740694][ T5408] tipc: Resetting bearer [ 178.810130][ T5408] tipc: Disabling bearer [ 179.147184][ T1111] em28xx 4-1:0.0: chip ID is em2765 [ 179.868070][ T1111] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 179.910304][ T1111] em28xx 4-1:0.0: board has no eeprom [ 180.069187][ T5423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.345'. [ 180.567813][ T4186] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 181.398146][ T5388] em28xx 4-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 181.438652][ T1111] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 181.453265][ T4186] usb 5-1: USB disconnect, device number 2 [ 181.596438][ T5435] netlink: 'syz.1.349': attribute type 1 has an invalid length. [ 181.672283][ T1111] em28xx 4-1:0.0: dvb set to bulk mode. [ 181.694504][ T21] em28xx 4-1:0.0: Binding DVB extension [ 182.571024][ T1111] usb 4-1: USB disconnect, device number 7 [ 182.639456][ T1111] em28xx 4-1:0.0: Disconnecting em28xx [ 182.838296][ T5445] loop3: detected capacity change from 0 to 128 [ 183.605144][ T5451] tipc: Enabled bearer , priority 0 [ 183.623959][ T21] em28xx 4-1:0.0: Registering input extension [ 183.762375][ T1111] em28xx 4-1:0.0: Closing input extension [ 184.001190][ T5454] tipc: Disabling bearer [ 184.323299][ T1111] em28xx 4-1:0.0: Freeing device [ 185.473288][ T5467] netlink: 28 bytes leftover after parsing attributes in process `syz.3.356'. [ 186.733317][ T5476] mmap: syz.1.359 (5476) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 187.015422][ T5479] loop0: detected capacity change from 0 to 2048 [ 187.974468][ T5479] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=26504, location=26504 [ 188.077206][ T5479] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.353117][ T5479] overlayfs: upper fs needs to support d_type. [ 188.514901][ T5479] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 188.602592][ T5479] overlayfs: failed to set xattr on upper [ 188.842872][ T5485] loop3: detected capacity change from 0 to 8192 [ 188.863957][ T5479] overlayfs: ...falling back to index=off,metacopy=off. [ 189.139333][ T4185] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 189.209405][ T5488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.363'. [ 191.016535][ T4185] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 191.350417][ T5493] tipc: Enabled bearer , priority 0 [ 191.449964][ T5496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.367'. [ 191.488189][ T5493] device syzkaller0 entered promiscuous mode [ 192.150286][ T5503] loop4: detected capacity change from 0 to 128 [ 192.226203][ T5507] tipc: Resetting bearer [ 192.370779][ T5503] EXT4-fs (loop4): Test dummy encryption mode enabled [ 192.471875][ T5503] EXT4-fs (loop4): Test dummy encryption mode enabled [ 192.587524][ T5503] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 192.611593][ T5492] tipc: Resetting bearer [ 192.681992][ T5492] tipc: Disabling bearer [ 192.735276][ T5503] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 192.871529][ T5503] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 192.945435][ T4185] syz-executor (4185) used greatest stack depth: 20800 bytes left [ 192.980969][ T5503] EXT4-fs (loop4): Test dummy encryption mode enabled [ 193.080367][ T1225] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.166450][ T5503] EXT4-fs (loop4): Test dummy encryption mode enabled [ 193.237994][ T5503] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 193.301768][ T5503] EXT4-fs (loop4): re-mounted. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,. Quota mode: none. [ 193.474708][ T1225] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.569377][ T1225] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.774769][ T1225] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.028100][ T26] audit: type=1326 audit(1761735427.774:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5470ffc9 code=0x7fc00000 [ 194.116728][ T26] audit: type=1326 audit(1761735427.794:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7efc5470ffc9 code=0x7fc00000 [ 194.314201][ T26] audit: type=1326 audit(1761735427.794:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5470ffc9 code=0x7fc00000 [ 194.437733][ T4257] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 194.686056][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.695511][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.986508][ T26] audit: type=1326 audit(1761735427.794:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5470ffc9 code=0x7fc00000 [ 195.090968][ T1225] tipc: Left network mode [ 195.145984][ T26] audit: type=1326 audit(1761735427.794:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5470ffc9 code=0x7fc00000 [ 195.177203][ T4257] usb 2-1: Using ep0 maxpacket: 8 [ 195.186511][ T26] audit: type=1326 audit(1761735427.794:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5470ffc9 code=0x7fc00000 [ 195.270688][ T26] audit: type=1326 audit(1761735427.794:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5470ffc9 code=0x7fc00000 [ 195.360087][ T26] audit: type=1326 audit(1761735427.794:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5470ffc9 code=0x7fc00000 [ 195.404413][ T26] audit: type=1326 audit(1761735427.794:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5470ffc9 code=0x7fc00000 [ 195.447930][ T26] audit: type=1326 audit(1761735427.794:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5470ffc9 code=0x7fc00000 [ 195.577268][ T4257] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 195.618628][ T4257] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.686762][ T4257] usb 2-1: Product: syz [ 195.692136][ T4257] usb 2-1: Manufacturer: syz [ 195.711875][ T4257] usb 2-1: SerialNumber: syz [ 195.744644][ T4257] usb 2-1: config 0 descriptor?? [ 195.839853][ T4257] gspca_main: se401-2.14.0 probing 047d:5003 [ 195.934130][ T5541] tipc: Enabled bearer , priority 0 [ 195.994907][ T5544] device syzkaller0 entered promiscuous mode [ 196.045938][ T5526] udc-core: couldn't find an available UDC or it's busy [ 196.079374][ T5550] netlink: 28 bytes leftover after parsing attributes in process `syz.3.381'. [ 196.095842][ T5526] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 196.272055][ T5552] tipc: Resetting bearer [ 196.361282][ T5540] tipc: Resetting bearer [ 196.417835][ T5540] tipc: Disabling bearer [ 196.601195][ T5535] chnl_net:caif_netlink_parms(): no params data found [ 196.752884][ T1225] bond1: (slave gretap1): Releasing active interface [ 196.836831][ T4257] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 196.897321][ T4257] usb 2-1: device reset changed ep0 maxpacket size! [ 196.936124][ T4257] gspca_se401: read req failed req 0x06 error -19 [ 196.971741][ T4257] usb 2-1: USB disconnect, device number 3 [ 197.035936][ T5567] netlink: 'syz.3.385': attribute type 1 has an invalid length. [ 197.176974][ T4257] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 197.432224][ T5102] Bluetooth: hci0: command 0x0409 tx timeout [ 198.257709][ T4257] usb 2-1: device not accepting address 4, error -71 [ 198.572917][ T5535] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.659266][ T5535] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.690110][ T5594] netlink: 36 bytes leftover after parsing attributes in process `syz.2.392'. [ 198.708658][ T5535] device bridge_slave_0 entered promiscuous mode [ 198.754459][ T5535] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.778259][ T5597] netlink: 28 bytes leftover after parsing attributes in process `syz.4.393'. [ 198.791362][ T5535] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.862487][ T5535] device bridge_slave_1 entered promiscuous mode [ 199.327376][ T5611] tipc: Enabled bearer , priority 0 [ 199.371033][ T5535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.458706][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.487398][ T4257] Bluetooth: hci0: command 0x041b tx timeout [ 199.538213][ T5611] tipc: Disabling bearer [ 199.691311][ T5535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.709674][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.019187][ T1225] device hsr_slave_0 left promiscuous mode [ 200.045663][ T1225] device hsr_slave_1 left promiscuous mode [ 200.072289][ T1225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.090760][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.117163][ T1225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.130069][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.160895][ T1225] device bridge_slave_1 left promiscuous mode [ 200.174304][ T1225] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.289134][ T1225] device bridge_slave_0 left promiscuous mode [ 200.307015][ T4257] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 200.317883][ T1225] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.415302][ T1225] device veth1_macvtap left promiscuous mode [ 200.429534][ T1225] device veth0_macvtap left promiscuous mode [ 200.443646][ T1225] device veth1_vlan left promiscuous mode [ 200.453021][ T1225] device veth0_vlan left promiscuous mode [ 200.711041][ T4257] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 200.735399][ T4257] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 200.754310][ T4257] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 201.650089][ T4257] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 201.664589][ T4257] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 201.689671][ T4256] Bluetooth: hci0: command 0x040f tx timeout [ 201.775662][ T1225] bond4 (unregistering): Released all slaves [ 201.822839][ T1225] bond3 (unregistering): Released all slaves [ 201.836981][ T4257] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 201.870538][ T4257] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 201.873239][ T1225] bond2 (unregistering): Released all slaves [ 201.892364][ T4257] usb 2-1: Product: syz [ 201.896722][ T4239] Bluetooth: hci1: command 0x0406 tx timeout [ 201.902793][ T4257] usb 2-1: Manufacturer: syz [ 201.922530][ T4239] Bluetooth: hci2: command 0x0406 tx timeout [ 201.935556][ T4256] Bluetooth: hci4: command 0x0406 tx timeout [ 201.956443][ T1225] bond1 (unregistering): Released all slaves [ 201.973004][ T4239] Bluetooth: hci3: command 0x0406 tx timeout [ 201.988346][ T4257] cdc_wdm 2-1:1.0: skipping garbage [ 202.004616][ T4257] cdc_wdm 2-1:1.0: skipping garbage [ 202.034228][ T4257] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 202.066861][ T4257] cdc_wdm 2-1:1.0: Unknown control protocol [ 202.479774][ T5648] netlink: 28 bytes leftover after parsing attributes in process `syz.3.405'. [ 202.514041][ T1225] team0 (unregistering): Port device team_slave_1 removed [ 202.609404][ T1225] team0 (unregistering): Port device team_slave_0 removed [ 202.645334][ T1225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.670958][ T5651] netlink: 36 bytes leftover after parsing attributes in process `syz.3.406'. [ 202.717403][ T1225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.836746][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE [ 202.838604][ T1225] bond0 (unregistering): Released all slaves [ 202.855969][ T4257] usb 2-1: USB disconnect, device number 6 [ 202.953285][ T5535] team0: Port device team_slave_0 added [ 202.968387][ T5635] netlink: 'syz.2.400': attribute type 1 has an invalid length. [ 203.061867][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.148748][ T5535] team0: Port device team_slave_1 added [ 203.326905][ T5662] loop3: detected capacity change from 0 to 16 [ 203.462158][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.597707][ T5662] erofs: (device loop3): mounted with root inode @ nid 36. [ 204.184876][ T5535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.209379][ T4302] Bluetooth: hci0: command 0x0419 tx timeout [ 204.249372][ T5535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.516439][ T5535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.044505][ T5671] loop2: detected capacity change from 0 to 512 [ 205.451269][ T5671] FAT-fs (loop2): bogus logical sector size 0 [ 205.462482][ T5671] FAT-fs (loop2): Can't find a valid FAT filesystem [ 205.503736][ T5663] tipc: Enabled bearer , priority 0 [ 205.569338][ T5535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.746438][ T5535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.830744][ T5535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.871760][ T5663] tipc: Disabling bearer [ 206.134296][ T5691] netlink: 36 bytes leftover after parsing attributes in process `syz.2.416'. [ 206.140838][ T5535] device hsr_slave_0 entered promiscuous mode [ 206.205460][ T5690] netlink: 28 bytes leftover after parsing attributes in process `syz.4.415'. [ 206.253836][ T5535] device hsr_slave_1 entered promiscuous mode [ 206.597289][ T5700] netlink: 'syz.2.419': attribute type 1 has an invalid length. [ 208.120204][ T5535] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 208.293105][ T5535] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 210.143204][ T5535] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 210.248600][ T5535] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 211.257709][ T5734] device syzkaller0 entered promiscuous mode [ 212.448757][ T5535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.527473][ T5751] netlink: 28 bytes leftover after parsing attributes in process `syz.2.427'. [ 212.541701][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.574926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.654569][ T5535] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.809078][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.832870][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.897673][ T4479] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.906189][ T4479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.993128][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.059507][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.126287][ T4479] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.135055][ T4479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.248514][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.358125][ T5760] netlink: 'syz.2.429': attribute type 1 has an invalid length. [ 213.689515][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.704622][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.754149][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.830632][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.854436][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.936220][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.372544][ T5535] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 214.484325][ T5535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.552355][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.835040][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.030585][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.206143][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.225517][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.281975][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.664111][ T5795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.435'. [ 218.132680][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.211642][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.674615][ T5535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.860090][ T5802] netlink: 28 bytes leftover after parsing attributes in process `syz.4.437'. [ 219.768297][ T5814] netlink: 'syz.1.439': attribute type 1 has an invalid length. [ 220.701341][ T5826] loop1: detected capacity change from 0 to 1024 [ 220.848909][ T5826] EXT4-fs (loop1): Test dummy encryption mode enabled [ 220.856563][ T5826] EXT4-fs (loop1): inline encryption not supported [ 220.915743][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 220.972670][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.035240][ T5826] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 222.093627][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 222.200989][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 222.265328][ T5535] device veth0_vlan entered promiscuous mode [ 222.297721][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 222.360687][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 222.448991][ T5535] device veth1_vlan entered promiscuous mode [ 222.604751][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 222.634821][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 222.708773][ T5535] device veth0_macvtap entered promiscuous mode [ 222.914525][ T5535] device veth1_macvtap entered promiscuous mode [ 223.105453][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 223.148781][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 223.214130][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.274130][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.315670][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.353186][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.382599][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.516295][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.529103][ T5861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.447'. [ 223.573174][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.796818][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.853606][ T5535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.747308][ T5865] tipc: Enabled bearer , priority 0 [ 224.782962][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 224.827919][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 224.870670][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.928296][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.961550][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.012782][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.077093][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.129870][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.173784][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.216843][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.270419][ T5535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.345247][ T5865] tipc: Disabling bearer [ 225.372990][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 225.408986][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 225.461515][ T5535] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.543924][ T5535] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.587032][ T5535] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.647062][ T5535] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.825182][ T5882] netlink: 'syz.1.451': attribute type 1 has an invalid length. [ 226.190769][ T5891] loop4: detected capacity change from 0 to 1024 [ 227.368145][ T5889] sched: RT throttling activated [ 228.391886][ T5893] loop3: detected capacity change from 0 to 128 [ 228.410513][ T5891] EXT4-fs (loop4): Unsupported blocksize for fs-verity [ 229.302180][ T4479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.517324][ T4479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.554331][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 230.119241][ T5907] netlink: 28 bytes leftover after parsing attributes in process `syz.1.457'. [ 230.316104][ T4255] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 230.436569][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.494302][ T4255] Bluetooth: hci3: Injecting HCI hardware error event [ 230.508110][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.515073][ T5909] loop4: detected capacity change from 0 to 512 [ 230.576180][ T5915] netlink: 100 bytes leftover after parsing attributes in process `syz.3.459'. [ 230.605889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 230.658942][ T4198] Bluetooth: hci3: hardware error 0x00 [ 231.032755][ T5909] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.458: casefold flag without casefold feature [ 231.084010][ T5926] tipc: Enabling of bearer rejected, failed to enable media [ 231.119201][ T5909] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.458: couldn't read orphan inode 15 (err -117) [ 231.214370][ T5909] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 231.943382][ T5946] loop3: detected capacity change from 0 to 256 [ 232.038353][ T5946] exfat: Unknown parameter 'keep_last_dots' [ 233.826030][ T5961] netlink: 'syz.4.466': attribute type 1 has an invalid length. [ 234.872308][ T5962] bond6: (slave vlan2): Opening slave failed [ 235.385811][ T5974] netlink: 28 bytes leftover after parsing attributes in process `syz.4.469'. [ 235.772482][ T5983] netlink: 100 bytes leftover after parsing attributes in process `syz.4.470'. [ 236.467492][ T5991] tipc: Enabled bearer , priority 0 [ 236.538071][ T5992] device syzkaller0 entered promiscuous mode [ 236.647692][ T5991] tipc: Resetting bearer [ 236.682323][ T5996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.474'. [ 236.705289][ T5989] tipc: Resetting bearer [ 236.769302][ T5989] tipc: Disabling bearer [ 236.992140][ T5997] loop3: detected capacity change from 0 to 512 [ 238.202023][ T5997] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.475: casefold flag without casefold feature [ 238.297258][ T5997] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.475: couldn't read orphan inode 15 (err -117) [ 238.327904][ T5997] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 239.793511][ T6020] netlink: 'syz.2.480': attribute type 1 has an invalid length. [ 239.811724][ T4255] Bluetooth: hci5: command 0x1003 tx timeout [ 239.955119][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 240.035942][ T6024] bond6: (slave vlan3): Opening slave failed [ 240.847534][ T6031] netlink: 100 bytes leftover after parsing attributes in process `syz.4.483'. [ 241.059071][ T6038] loop1: detected capacity change from 0 to 2048 [ 241.590157][ T6038] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 242.037158][ T5102] Bluetooth: hci5: command 0x1001 tx timeout [ 242.091206][ T6054] netlink: 16 bytes leftover after parsing attributes in process `syz.3.489'. [ 242.105964][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 242.472830][ T6056] tipc: Enabled bearer , priority 0 [ 243.418436][ T6069] device syzkaller0 entered promiscuous mode [ 244.148536][ T4255] Bluetooth: hci5: command 0x1009 tx timeout [ 244.616776][ T6072] loop1: detected capacity change from 0 to 512 [ 244.667778][ T6074] tipc: Resetting bearer [ 244.724324][ T6055] tipc: Resetting bearer [ 244.907270][ T6055] tipc: Disabling bearer [ 244.924250][ T6072] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.491: casefold flag without casefold feature [ 245.987270][ T6072] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.491: couldn't read orphan inode 15 (err -117) [ 246.157324][ T6072] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 246.461708][ T6093] loop4: detected capacity change from 0 to 1024 [ 246.529239][ T6095] netlink: 'syz.3.497': attribute type 1 has an invalid length. [ 246.576308][ T6093] EXT4-fs (loop4): Unrecognized mount option "euid=00000000000000000000" or missing value [ 246.810308][ T6093] usb usb8: usbfs: process 6093 (syz.4.496) did not claim interface 0 before use [ 247.375389][ T6098] bond3: (slave vlan2): Opening slave failed [ 247.587196][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.811859][ T6132] tipc: Enabled bearer , priority 0 [ 249.886263][ T6138] device syzkaller0 entered promiscuous mode [ 250.012585][ T6130] tipc: Resetting bearer [ 250.135187][ T6130] tipc: Disabling bearer [ 254.591305][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.515'. [ 256.119994][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.131552][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.311677][ T6180] tipc: Enabled bearer , priority 0 [ 256.355432][ T6180] device syzkaller0 entered promiscuous mode [ 256.417269][ T6178] tipc: Resetting bearer [ 256.801653][ T6178] tipc: Disabling bearer [ 256.813212][ T4272] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 257.326843][ T4272] usb 4-1: Using ep0 maxpacket: 16 [ 258.036937][ T4272] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.105406][ T4272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 258.499543][ T4272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 258.526385][ T4272] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 258.545228][ T4272] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.647530][ T4272] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 259.180389][ T4272] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 259.306738][ T4272] usb 4-1: Manufacturer: syz [ 259.486549][ T4272] usb 4-1: config 0 descriptor?? [ 259.524357][ T4272] usb 4-1: can't set config #0, error -71 [ 259.694689][ T4272] usb 4-1: USB disconnect, device number 8 [ 263.281773][ T6265] tipc: Started in network mode [ 263.316871][ T6265] tipc: Node identity 4a0860df069d, cluster identity 4711 [ 263.347898][ T6265] tipc: Enabled bearer , priority 0 [ 263.397434][ T6269] device syzkaller0 entered promiscuous mode [ 263.440808][ T6263] tipc: Resetting bearer [ 263.510884][ T6263] tipc: Disabling bearer [ 265.194574][ T6304] loop5: detected capacity change from 0 to 64 [ 267.502505][ T6325] loop5: detected capacity change from 0 to 32768 [ 267.530499][ T6327] netlink: 'syz.2.552': attribute type 16 has an invalid length. [ 267.630920][ T6327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.552'. [ 268.554906][ T6343] loop5: detected capacity change from 0 to 512 [ 269.786842][ T6343] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 271.886083][ T6360] loop1: detected capacity change from 0 to 1024 [ 271.979177][ T6371] syz.4.564 uses obsolete (PF_INET,SOCK_PACKET) [ 272.126391][ T6377] loop2: detected capacity change from 0 to 512 [ 272.307361][ T6360] hfsplus: unable to parse mount options [ 274.495784][ T6395] input: syz0 as /devices/virtual/input/input6 [ 278.235548][ T6423] loop5: detected capacity change from 0 to 512 [ 278.808469][ T6423] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 279.098288][ T6423] EXT4-fs (loop5): 1 truncate cleaned up [ 279.187502][ T6423] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 280.751196][ T6456] loop4: detected capacity change from 0 to 256 [ 281.655594][ T6456] exfat: Deprecated parameter 'namecase' [ 281.852183][ T6456] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d) [ 284.347645][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.588'. [ 284.958779][ T6486] loop4: detected capacity change from 0 to 65536 [ 285.420370][ T6486] XFS (loop4): Mounting V5 Filesystem [ 287.442124][ T6486] XFS (loop4): Ending clean mount [ 287.480056][ T2284] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x240, xfs_agfl block 0x3 [ 287.592183][ T2284] XFS (loop4): Unmount and run xfs_repair [ 287.618011][ T6514] loop1: detected capacity change from 0 to 512 [ 287.624973][ T2284] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 287.625107][ T2284] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be XAFL.........]F. [ 287.625126][ T2284] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00 ................ [ 287.625140][ T2284] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06 5.\%............ [ 287.625153][ T2284] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 287.625166][ T2284] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 287.625178][ T2284] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 287.625191][ T2284] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 287.625206][ T2284] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 287.722558][ T6486] XFS (loop4): metadata I/O error in "xfs_alloc_read_agfl+0x1b9/0x350" at daddr 0x3 len 1 error 74 [ 287.746291][ T4255] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 287.773549][ T6486] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1556/0x1b60 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 287.793703][ T6486] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 287.843286][ T6514] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 287.901721][ T4191] XFS (loop4): Unmounting Filesystem [ 288.071000][ T4255] usb 6-1: Using ep0 maxpacket: 32 [ 288.194364][ T6514] EXT4-fs (loop1): 1 truncate cleaned up [ 288.364968][ T6514] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 288.567554][ T4255] usb 6-1: New USB device found, idVendor=2770, idProduct=9051, bcdDevice=d9.3e [ 288.616693][ T4255] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.627396][ T4255] usb 6-1: Product: syz [ 288.633579][ T4255] usb 6-1: Manufacturer: syz [ 288.639899][ T4255] usb 6-1: SerialNumber: syz [ 288.653791][ T4255] usb 6-1: config 0 descriptor?? [ 288.749631][ T4255] gspca_main: sq905c-2.14.0 probing 2770:9051 [ 289.046962][ T4255] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 289.576783][ T4255] sq905c 6-1:0.0: Get version command failed [ 289.624663][ T4255] sq905c: probe of 6-1:0.0 failed with error -71 [ 289.684374][ T4255] usb 6-1: USB disconnect, device number 2 [ 289.936730][ T5674] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 290.360214][ T5674] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 290.590304][ T5674] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 290.605877][ T5674] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 290.618124][ T5674] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 290.634443][ T5674] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 291.837058][ T5674] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 292.719639][ T5674] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 292.733444][ T5674] usb 3-1: Product: syz [ 292.758356][ T5674] usb 3-1: Manufacturer: syz [ 292.901908][ T5674] usb 3-1: can't set config #1, error -71 [ 292.934695][ T5674] usb 3-1: USB disconnect, device number 5 [ 293.800527][ T6593] netlink: 'syz.3.610': attribute type 10 has an invalid length. [ 293.999292][ T6593] team0: Port device netdevsim0 added [ 294.936999][ T4255] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 295.039707][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.5.614'. [ 295.085804][ T6616] device team_slave_0 entered promiscuous mode [ 295.094080][ T6616] device team_slave_1 entered promiscuous mode [ 295.111495][ T6616] device macsec1 entered promiscuous mode [ 295.123544][ T6616] device team0 entered promiscuous mode [ 295.182297][ T2284] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 295.304354][ T6618] loop4: detected capacity change from 0 to 512 [ 295.390858][ T4255] usb 4-1: config 1 interface 0 has no altsetting 0 [ 295.505052][ T6618] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 295.558913][ T4255] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 295.592673][ T6618] EXT4-fs (loop4): 1 truncate cleaned up [ 295.622017][ T4255] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.635714][ T6618] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 295.711731][ T4255] usb 4-1: Product: syz [ 295.743489][ T4255] usb 4-1: Manufacturer: syz [ 295.771721][ T4255] usb 4-1: SerialNumber: syz [ 295.934888][ T6622] loop5: detected capacity change from 0 to 65536 [ 297.377897][ T2284] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.433205][ T2284] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 297.606708][ T2284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.696387][ T2284] usb 3-1: config 0 descriptor?? [ 297.701691][ T4255] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 297.799078][ T2284] pwc: Askey VC010 type 2 USB webcam detected. [ 298.167236][ T2284] pwc: send_video_command error -71 [ 298.174577][ T2284] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 298.213174][ T2284] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 298.428193][ T2284] usb 3-1: USB disconnect, device number 6 [ 298.515010][ T6622] XFS (loop5): Mounting V5 Filesystem [ 298.653833][ T6622] XFS (loop5): log mount failed [ 299.303105][ T6649] loop2: detected capacity change from 0 to 512 [ 299.475810][ T6649] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 299.502664][ T4255] usb 4-1: USB disconnect, device number 9 [ 299.552832][ T6649] ext4 filesystem being mounted at /114/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.567834][ T4255] usblp0: removed [ 404.706607][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 404.715455][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P144/1:b..l [ 404.727745][ C0] (detected by 0, t=10502 jiffies, g=27697, q=34) [ 404.736378][ C0] task:kworker/u4:1 state:R running task stack:23104 pid: 144 ppid: 2 flags:0x00004000 [ 404.752686][ C0] Workqueue: bat_events batadv_nc_worker [ 404.758710][ C0] Call Trace: [ 404.762693][ C0] [ 404.765858][ C0] __schedule+0x11bb/0x4390 [ 404.771957][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 404.778041][ C0] ? release_firmware_map_entry+0x190/0x190 [ 404.784040][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 404.790482][ C0] ? lock_chain_count+0x20/0x20 [ 404.795682][ C0] preempt_schedule_notrace+0xca/0x110 [ 404.801311][ C0] ? preempt_schedule_common+0xd0/0xd0 [ 404.808711][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 404.814705][ C0] preempt_schedule_notrace_thunk+0x16/0x18 [ 404.822587][ C0] rcu_is_watching+0x72/0xa0 [ 404.827867][ C0] batadv_nc_worker+0x1dc/0x5c0 [ 404.833409][ C0] process_one_work+0x863/0x1000 [ 404.839084][ C0] ? worker_detach_from_pool+0x240/0x240 [ 404.844876][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 404.850668][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 404.857182][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 404.863332][ C0] ? wq_worker_running+0x97/0x170 [ 404.869761][ C0] worker_thread+0xaa8/0x12a0 [ 404.875169][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 404.880687][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 404.887289][ C0] kthread+0x436/0x520 [ 404.892681][ C0] ? rcu_lock_release+0x20/0x20 [ 404.898148][ C0] ? kthread_blkcg+0xd0/0xd0 [ 404.903427][ C0] ret_from_fork+0x1f/0x30 [ 404.908758][ C0] [ 404.911854][ C0] rcu: rcu_preempt kthread starved for 10518 jiffies! g27697 f0x0 RCU_GP_DOING_FQS(6) ->state=0x0 ->cpu=0 [ 404.929447][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 404.943616][ C0] rcu: RCU grace-period kthread stack dump: [ 404.951622][ C0] task:rcu_preempt state:R running task stack:27464 pid: 15 ppid: 2 flags:0x00004000 [ 404.964890][ C0] Call Trace: [ 404.969555][ C0] [ 404.973785][ C0] __schedule+0x11bb/0x4390 [ 404.980378][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 404.987752][ C0] ? release_firmware_map_entry+0x190/0x190 [ 404.994923][ C0] ? preempt_schedule_irq+0xa6/0x150 [ 405.001257][ C0] preempt_schedule_irq+0xb1/0x150 [ 405.007777][ C0] ? __cond_resched+0xb0/0xb0 [ 405.013233][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 405.020235][ C0] irqentry_exit+0x63/0x70 [ 405.025258][ C0] asm_sysvec_reschedule_ipi+0x16/0x20 [ 405.031172][ C0] RIP: 0010:rcu_gp_fqs_loop+0x566/0x11b0 [ 405.039188][ C0] Code: e9 43 ff ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 4c ff ff ff 4c 89 f7 e8 e9 76 57 00 48 ba 00 00 00 00 00 fc ff df e9 35 ff ff ff <8b> 1d 5c 57 ad 0a 41 80 3c 14 00 74 16 48 c7 c7 80 f1 e0 8b e8 a1 [ 405.065614][ C0] RSP: 0018:ffffc90000d47cc0 EFLAGS: 00000202 [ 405.074070][ C0] RAX: 0000000000001575 RBX: 0000000000000000 RCX: 0000000000000000 [ 405.083240][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b18a0 RDI: 00000000ffffffff [ 405.095137][ C0] RBP: ffffc90000d47e10 R08: dffffc0000000000 R09: fffffbfff18241fd [ 405.108525][ C0] R10: fffffbfff18241fd R11: 1ffffffff18241fc R12: 1ffffffff17c1e30 [ 405.118397][ C0] R13: ffffc90000d47d88 R14: 0000000000000000 R15: 0000000000000001 [ 405.128762][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 405.135261][ C0] ? rcu_gp_init+0xd58/0x10e0 [ 405.141278][ C0] ? rcu_gp_init+0x10e0/0x10e0 [ 405.148658][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 405.155116][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 405.164767][ C0] rcu_gp_kthread+0x98/0x350 [ 405.172326][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 405.179266][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 405.187798][ C0] ? __kthread_parkme+0x157/0x1b0 [ 405.199462][ C0] kthread+0x436/0x520 [ 405.206242][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 405.221838][ C0] ? kthread_blkcg+0xd0/0xd0 [ 405.227397][ C0] ret_from_fork+0x1f/0x30 [ 405.232431][ C0] [ 405.235657][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 405.250148][ C0] NMI backtrace for cpu 0 [ 405.256705][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 405.268371][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 405.280480][ C0] Call Trace: [ 405.284575][ C0] [ 405.288598][ C0] dump_stack_lvl+0x168/0x230 [ 405.294975][ C0] ? show_regs_print_info+0x20/0x20 [ 405.301466][ C0] ? load_image+0x3b0/0x3b0 [ 405.308400][ C0] ? irq_work_queue+0xbf/0x140 [ 405.313734][ C0] nmi_cpu_backtrace+0x397/0x3d0 [ 405.319447][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 405.330098][ C0] ? _printk+0xcc/0x110 [ 405.335110][ C0] ? cpu_online+0x1d/0x30 [ 405.345829][ C0] ? load_image+0x3b0/0x3b0 [ 405.351580][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 405.358644][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 405.369915][ C0] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 405.377659][ C0] print_other_cpu_stall+0x10c8/0x1220 [ 405.384757][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 405.392121][ C0] ? timekeeping_advance+0x7f6/0xac0 [ 405.398770][ C0] rcu_sched_clock_irq+0x831/0x1110 [ 405.404732][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 405.412364][ C0] ? account_process_tick+0x227/0x3a0 [ 405.423230][ C0] update_process_times+0x193/0x200 [ 405.433462][ C0] tick_sched_timer+0x37d/0x560 [ 405.439823][ C0] __hrtimer_run_queues+0x4fe/0xc40 [ 405.448448][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 405.455535][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 405.463533][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 405.471090][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 405.476729][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 405.487153][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 405.493068][ C0] [ 405.496461][ C0] [ 405.499570][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 405.509635][ C0] RIP: 0010:default_idle+0xb/0x10 [ 405.515661][ C0] Code: bf 48 89 df e8 96 94 09 f8 eb b5 e8 9f af f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d 57 24 53 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 405.545165][ C0] RSP: 0018:ffffffff8be07dc8 EFLAGS: 000002c6 [ 405.554227][ C0] RAX: 3724eeb051035e00 RBX: ffffffff8bebc480 RCX: 3724eeb051035e00 [ 405.569339][ C0] RDX: 0000000000000001 RSI: ffffffff8a0b18a0 RDI: ffffffff8a59a880 [ 405.580088][ C0] RBP: ffffffff8be07ef8 R08: dffffc0000000000 R09: ffffed1017207662 [ 405.593816][ C0] R10: ffffed1017207662 R11: 1ffff11017207661 R12: ffffffff8d699a68 [ 405.603685][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff17d7890 [ 405.611858][ C0] default_idle_call+0x81/0xc0 [ 405.617453][ C0] do_idle+0x21b/0x5b0 [ 405.622917][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 405.631610][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 405.639526][ C0] cpu_startup_entry+0x14/0x20 [ 405.646060][ C0] ? time_init+0x40/0x40 [ 405.652232][ C0] start_kernel+0x486/0x530 [ 405.657289][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 405.667530][ C0]