last executing test programs: 33.712505711s ago: executing program 3 (id=3093): close(0xffffffffffffffff) timerfd_create(0x2, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0185502, &(0x7f0000000340)={0x1, 0x1}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r3, &(0x7f00000004c0)="cf", 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 32.160504654s ago: executing program 3 (id=3097): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x7, &(0x7f0000000000)=0xfffffff9, 0x4) 31.697626954s ago: executing program 3 (id=3101): syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000000000000070000"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 30.247875478s ago: executing program 2 (id=3104): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040eeeff1a04"], 0x7) r1 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 30.038132956s ago: executing program 3 (id=3105): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r1, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000) 29.800322926s ago: executing program 2 (id=3107): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 28.862436826s ago: executing program 3 (id=3113): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000280)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r2}, 0x10) arch_prctl$ARCH_SHSTK_ENABLE(0x1003, 0xf0ff1f00000000) ioctl$TUNSETLINK(0xffffffffffffffff, 0x541b, 0x0) iopl(0x3) init_module(0x0, 0x0, 0x0) 27.934929296s ago: executing program 3 (id=3116): socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$vcsn(&(0x7f0000000340), 0x25, 0x4580) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001100)={'syztnl2\x00', &(0x7f0000001300)={'ip6tnl0\x00', 0x0, 0x2f, 0x80, 0x9, 0x15c, 0x34, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x1, 0x8, 0x1ff, 0x60000}}) syz_open_dev$mouse(0x0, 0x6, 0x10000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) close_range(r2, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) 12.516622568s ago: executing program 1 (id=3162): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket(0x200000100000011, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r3}, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 12.269691409s ago: executing program 0 (id=3165): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000700)={'geneve0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) close(r1) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 12.209593724s ago: executing program 1 (id=3166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 7.406621826s ago: executing program 0 (id=3172): userfaultfd(0x80801) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = socket$packet(0x11, 0x2, 0x300) syz_open_procfs(r1, &(0x7f000001aa80)='stack\x00') setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffe}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.time\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @dev}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1de) socket$nl_generic(0x10, 0x3, 0x10) 7.037876307s ago: executing program 1 (id=3174): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d0102030109021200"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000002d40)=ANY=[@ANYRESOCT], 0x4c) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) write$cgroup_devices(r3, &(0x7f0000003080)={'a', ' *:* ', 'r\x00'}, 0x17) 6.53700756s ago: executing program 0 (id=3177): close(0xffffffffffffffff) timerfd_create(0x2, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0185502, &(0x7f0000000340)={0x1, 0x1}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r5, &(0x7f00000004c0)="cf", 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 6.340432417s ago: executing program 2 (id=3109): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe0}}, 0x4004) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 5.60512878s ago: executing program 0 (id=3179): bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x37, 0xd416a90e1556646a, 0x0, @prog_fd}, 0x20) 5.426110125s ago: executing program 0 (id=3180): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000700)={'geneve0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) close(r1) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 4.842930635s ago: executing program 2 (id=3181): r0 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x3}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) close(0xffffffffffffffff) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000180)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) syz_emit_ethernet(0x72, &(0x7f0000001580)={@broadcast, @random="0cd96dd8b13e", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x3c, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x3, {0x6, 0x6, "6ad2ff", 0x658, 0x2f, 0xaff1dce8ecd63fc0, @private2, @dev={0xfe, 0x80, '\x00', 0x26}, [@fragment={0x3c, 0x0, 0x4, 0x0, 0x0, 0x1d, 0x68}], "95e72217"}}}}}}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000005c0)={0x1c, 0x0, 0xa29, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, 0x0, 0x0) bind$xdp(r6, &(0x7f00000002c0)={0x2c, 0x8, r8}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) 4.574832158s ago: executing program 4 (id=3182): syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010800ff623140fd0704005026010203010902120001000000000904000000"], 0x0) 3.818056334s ago: executing program 1 (id=3183): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x0, 0x31}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89fe, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) connect$tipc(r1, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x43, 0x2}, 0x3}}, 0x10) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'wlan1\x00'}) unshare(0x20000400) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000140)="5f96565e14027386aa93a303c44b5b3b", 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) close(r5) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000c80)={'wlan1\x00'}) 2.434388812s ago: executing program 4 (id=3184): syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000000000000070000"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.242045339s ago: executing program 4 (id=3185): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00', 0x0, 0x6b, &(0x7f00000004c0)=""/153}, 0x15) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000480), &(0x7f00000004c0)=r2}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) close(0xffffffffffffffff) 2.176352964s ago: executing program 4 (id=3186): userfaultfd(0x80801) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = socket$packet(0x11, 0x2, 0x300) syz_open_procfs(r1, &(0x7f000001aa80)='stack\x00') setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffe}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.time\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @dev}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1de) socket$nl_generic(0x10, 0x3, 0x10) 1.440993727s ago: executing program 2 (id=3187): close(0xffffffffffffffff) timerfd_create(0x2, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0185502, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) umount2(&(0x7f0000000180)='./file0/file0/file0/file0/file0\x00', 0x8) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 1.366370444s ago: executing program 0 (id=3188): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) getsockopt$inet_mreq(r1, 0x0, 0x23, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x680}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.352741284s ago: executing program 1 (id=3189): close(0xffffffffffffffff) timerfd_create(0x2, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) open(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0185502, &(0x7f0000000340)={0x1, 0x1}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r5, &(0x7f00000004c0)="cf", 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 1.159381661s ago: executing program 4 (id=3190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x10000000}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) 165.055686ms ago: executing program 2 (id=3191): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='mm_page_alloc\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, 0x0, 0x0) 37.422357ms ago: executing program 4 (id=3192): socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000d80), 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c8002600220001000101020000000503"], 0x2b) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x67, 0x33, @beacon={{{}, {}, @device_b, @device_b}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @val={0x76, 0x6}, [{0xdd, 0x25, "31851c27f0515dccb7554d54162c7b9db37edff2415d5589b53027d4db2f9527a9858f2910"}]}}]}, 0x84}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x2, 0x0) 0s ago: executing program 1 (id=3193): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r1, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000) kernel console output (not intermixed with test programs): ] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 823.846868][ T153] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 823.940735][T12713] usb usb8: usbfs: process 12713 (syz.2.2487) did not claim interface 0 before use [ 824.016020][ T153] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 824.224604][ T153] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 824.291290][ T153] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 824.363763][ T153] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 824.417680][ T153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.472765][T12693] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 824.515557][T12693] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 824.535575][T12154] EXT4-fs (loop2): unmounting filesystem. [ 824.697028][T12723] futex_wake_op: syz.1.2496 tries to shift op by 32; fix this program [ 824.709449][T12722] loop2: detected capacity change from 0 to 256 [ 824.790054][T12725] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 824.822598][T12725] FAT-fs (loop2): Filesystem has been set read-only [ 824.837868][ T153] usb 4-1: USB disconnect, device number 12 [ 824.852778][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 824.853259][T12725] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 824.893270][T12699] loop4: detected capacity change from 0 to 32768 [ 824.960154][T12725] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 824.999955][ T26] audit: type=1800 audit(1724734681.437:328): pid=12725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2495" name="file1" dev="loop2" ino=1048677 res=0 errno=0 [ 825.020384][T12699] XFS (loop4): Mounting V5 Filesystem [ 825.122994][T12699] XFS (loop4): Ending clean mount [ 825.142085][T12154] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 825.166599][T12154] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 825.285616][T10130] XFS (loop4): Unmounting Filesystem [ 826.021670][T12749] usb usb8: usbfs: process 12749 (syz.1.2503) did not claim interface 0 before use [ 827.475234][T12761] loop3: detected capacity change from 0 to 128 [ 827.556042][T12761] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 827.595156][T12761] ext4 filesystem being mounted at /151/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 827.720836][T12768] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2511'. [ 827.801127][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 827.813804][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 827.834594][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 827.847358][ T9791] EXT4-fs (loop3): unmounting filesystem. [ 827.856913][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 827.879354][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 827.887686][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 828.024491][ T5497] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 828.426248][ T5493] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 828.530007][ T5497] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 828.596467][ T5497] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.794670][ T5497] usb 5-1: config 0 descriptor?? [ 828.891516][ T5493] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 828.936394][ T5497] cp210x 5-1:0.0: cp210x converter detected [ 828.951790][ T5493] usb 4-1: config 179 has no interface number 0 [ 829.028207][ T5493] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 829.112027][ T5493] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 829.126357][T12770] chnl_net:caif_netlink_parms(): no params data found [ 829.141544][ T5493] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 829.158116][ T5497] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 829.169212][ T5497] cp210x 5-1:0.0: querying part number failed [ 829.200020][ T5493] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 829.223461][ T5497] usb 5-1: cp210x converter now attached to ttyUSB0 [ 829.259496][ T5493] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 829.281692][ T5493] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 829.290882][ T5493] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.334203][T12773] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 829.341685][T12773] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 829.452044][T12770] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.481854][T12770] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.490350][T12770] device bridge_slave_0 entered promiscuous mode [ 829.500397][T12770] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.524060][T12770] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.553579][T12770] device bridge_slave_1 entered promiscuous mode [ 829.805790][T12792] usb usb8: usbfs: process 12792 (syz.0.2515) did not claim interface 0 before use [ 830.047083][ T3657] Bluetooth: hci4: command tx timeout [ 830.703136][ T153] usb 5-1: USB disconnect, device number 22 [ 830.760338][ T3751] usb 4-1: USB disconnect, device number 13 [ 830.797501][ T153] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 830.848524][ T153] cp210x 5-1:0.0: device disconnected [ 830.891048][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 830.923168][ T26] audit: type=1326 audit(1724734687.652:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12800 comm="syz.1.2518" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b05579e79 code=0x0 [ 830.953921][T12770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.973417][T12770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 831.042322][T12770] team0: Port device team_slave_0 added [ 831.059054][T12770] team0: Port device team_slave_1 added [ 831.140448][T12770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.153479][T12770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.179809][T12770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.192766][T12770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.200909][T12770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.242802][T12770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.339794][T12770] device hsr_slave_0 entered promiscuous mode [ 831.362034][T12770] device hsr_slave_1 entered promiscuous mode [ 831.378802][T12770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 831.400976][T12770] Cannot create hsr debugfs directory [ 831.662876][ T153] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 831.707650][T12770] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.858368][T12770] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.960529][T12770] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.018609][ T153] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 832.097860][T12770] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.196881][ T153] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 832.217727][ T153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.240187][ T153] usb 4-1: Product: syz [ 832.256043][ T153] usb 4-1: Manufacturer: syz [ 832.270982][ T153] usb 4-1: SerialNumber: syz [ 832.322387][ T153] cdc_ether 4-1:1.0: skipping garbage [ 832.348236][ T153] cdc_ether 4-1:1.0: skipping garbage [ 832.374969][ T153] usb 4-1: bad CDC descriptors [ 832.489742][T12770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 832.562910][T12247] usb 4-1: USB disconnect, device number 14 [ 832.606211][ T3657] Bluetooth: hci4: command tx timeout [ 833.297641][T12810] loop4: detected capacity change from 0 to 65536 [ 833.349300][T12770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 833.394047][T12770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 833.415369][T12810] XFS (loop4): Mounting V5 Filesystem [ 833.478665][T12770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 833.563976][T12810] XFS (loop4): Ending clean mount [ 833.886224][T12770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.923979][T12770] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.039314][T10130] XFS (loop4): Unmounting Filesystem [ 834.049221][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 834.064304][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 834.143189][T12845] usb usb8: usbfs: process 12845 (syz.1.2530) did not claim interface 0 before use [ 834.619654][ T3657] Bluetooth: hci4: command tx timeout [ 834.756915][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 834.787608][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 834.814350][ T3865] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.821713][ T3865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.868071][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 834.897126][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 834.925946][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 834.957821][ T3865] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.965018][ T3865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.093103][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 835.110040][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 835.140850][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 835.182018][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 835.209817][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 835.301348][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 835.310223][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 835.343766][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 835.397090][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 835.405625][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 835.410360][T12861] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 835.435794][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 835.473099][T12770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 836.158180][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 836.168582][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 836.205369][T12770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.262791][ T4019] device hsr_slave_0 left promiscuous mode [ 836.289778][ T4019] device hsr_slave_1 left promiscuous mode [ 836.307397][ T4019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 836.330054][ T4019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 836.358631][ T4019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 836.366104][ T4019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.477483][ T4019] device veth1_macvtap left promiscuous mode [ 836.492325][T12877] loop4: detected capacity change from 0 to 2048 [ 836.493078][ T4019] device veth0_macvtap left promiscuous mode [ 836.509744][ T4019] device veth1_vlan left promiscuous mode [ 836.535268][ T4019] device veth0_vlan left promiscuous mode [ 836.545514][T12877] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 836.568664][ T3646] Bluetooth: hci4: command tx timeout [ 836.589552][T12877] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 836.986596][T12883] loop4: detected capacity change from 0 to 2048 [ 837.067710][T12883] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 837.700223][T12890] usb usb8: usbfs: process 12890 (syz.4.2544) did not claim interface 0 before use [ 839.122106][ T4019] team0 (unregistering): Port device team_slave_1 removed [ 839.237215][ T4019] team0 (unregistering): Port device team_slave_0 removed [ 839.341756][ T4019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.473347][ T4019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.495722][T12905] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 839.636542][T10130] EXT4-fs (loop4): unmounting filesystem. [ 840.728771][ T4019] bond0 (unregistering): Released all slaves [ 840.800715][T12898] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 840.837027][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 840.857934][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 840.887437][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 840.979359][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 841.005897][T12770] device veth0_vlan entered promiscuous mode [ 841.014730][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 841.026659][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 841.062035][T12770] device veth1_vlan entered promiscuous mode [ 841.178218][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 841.186512][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 841.210719][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 841.243740][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 841.277494][T12770] device veth0_macvtap entered promiscuous mode [ 841.313435][T12770] device veth1_macvtap entered promiscuous mode [ 841.369933][T12770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 841.397125][T12770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.420621][T12770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.451238][T10206] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 841.460424][T10206] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 841.498590][T10206] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 841.517454][T10206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 841.540502][T12770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.559359][T12770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.587680][T12770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.607022][T12770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.628533][T12770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.659664][T12770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.673470][T12770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.694125][T12770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.720258][T12770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.738149][T10206] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 841.753544][T10206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 841.801861][T12770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.823249][T12770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.842071][T12935] usb usb8: usbfs: process 12935 (syz.0.2561) did not claim interface 0 before use [ 841.844591][T12770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.872889][T12770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.913553][T12937] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 842.096907][T10206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.131954][T10206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.182021][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 842.200757][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.233916][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.297605][T10206] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 842.567610][T12942] loop2: detected capacity change from 0 to 2048 [ 842.576049][T12944] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2566'. [ 842.759022][T12942] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 843.165859][T12961] syz.4.2570[12961] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 843.166008][T12961] syz.4.2570[12961] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 843.529866][T12963] usb usb8: usbfs: process 12963 (syz.2.2505) did not claim interface 0 before use [ 843.856362][T12965] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2571'. [ 843.936506][T12770] EXT4-fs (loop2): unmounting filesystem. [ 843.999096][T12965] netlink: 'syz.4.2571': attribute type 10 has an invalid length. [ 844.066580][T12965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 844.095442][T12965] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 844.101740][T12953] loop3: detected capacity change from 0 to 32768 [ 844.535723][T12953] XFS (loop3): Mounting V5 Filesystem [ 845.853152][T12979] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2575'. [ 845.870004][T12953] XFS (loop3): log mount failed [ 845.888078][T12988] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 847.261847][T13008] loop2: detected capacity change from 0 to 2048 [ 847.337386][T13008] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 848.701340][T13028] usb usb8: usbfs: process 13028 (syz.2.2585) did not claim interface 0 before use [ 848.817417][T13039] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 849.587866][T13041] loop3: detected capacity change from 0 to 32768 [ 849.651694][T13041] XFS (loop3): Mounting V5 Filesystem [ 850.593092][T13041] XFS (loop3): Ending clean mount [ 850.601854][T13068] loop4: detected capacity change from 0 to 512 [ 850.650612][T13041] XFS (loop3): User initiated shutdown received. [ 850.671873][T13068] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 850.687939][T13041] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 850.732618][T13041] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 850.827765][T13068] EXT4-fs (loop4): orphan cleanup on readonly fs [ 850.844408][T13068] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:511: comm syz.4.2600: Block bitmap for bg 0 marked uninitialized [ 850.850935][T13075] binder: 13074:13075 unknown command 64 [ 850.863275][T13075] binder: 13074:13075 ioctl c0306201 20000780 returned -22 [ 851.125089][T13068] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 851.314627][T13068] EXT4-fs (loop4): 1 orphan inode deleted [ 851.323423][T13068] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 851.384041][ T9791] XFS (loop3): Unmounting Filesystem [ 851.447431][T12770] EXT4-fs (loop2): unmounting filesystem. [ 851.821433][T13087] syz.0.2606 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 852.051294][T13098] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 852.290224][T13103] loop3: detected capacity change from 0 to 256 [ 852.904152][T10130] EXT4-fs (loop4): unmounting filesystem. [ 853.109077][T13119] loop4: detected capacity change from 0 to 2048 [ 853.175726][T13119] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 853.573266][T13128] usb usb8: usbfs: process 13128 (syz.4.2615) did not claim interface 0 before use [ 854.622455][ T3657] Bluetooth: hci2: Malformed HCI Event [ 854.689730][T13096] loop2: detected capacity change from 0 to 65536 [ 854.747598][T10130] EXT4-fs (loop4): unmounting filesystem. [ 854.875672][T13153] loop3: detected capacity change from 0 to 128 [ 854.992552][T13153] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 855.019284][T13153] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 855.035888][T13156] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 855.793960][T13153] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 855.875683][T13153] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 855.922421][T13152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2619'. [ 855.939576][T13153] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 855.977467][T13153] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 856.056244][T13153] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 856.080861][T13153] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 856.098335][T13153] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 856.118241][T13153] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 856.131380][ T5493] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 857.174669][ T5493] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.186086][ T5493] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.197034][ T5493] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 857.206618][ T5493] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.216976][ T5493] usb 5-1: config 0 descriptor?? [ 857.440466][T13186] loop3: detected capacity change from 0 to 512 [ 857.466612][T13186] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 857.561626][T13186] EXT4-fs (loop3): 1 truncate cleaned up [ 857.568451][T13186] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 857.613533][T13186] EXT4-fs (loop3): shut down requested (2) [ 857.694712][ T26] audit: type=1326 audit(1724734715.748:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13181 comm="syz.0.2634" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f694a579e79 code=0x0 [ 857.746539][ T5493] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 857.998100][ T5493] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0003/input/input11 [ 858.258848][ T9791] EXT4-fs (loop3): unmounting filesystem. [ 858.460212][ T5493] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 858.542090][T13200] usb usb8: usbfs: process 13200 (syz.1.2633) did not claim interface 0 before use [ 858.914539][ T5493] usb 5-1: USB disconnect, device number 23 [ 859.007266][T13202] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 859.199345][ T5498] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 859.207356][T13196] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2639'. [ 859.218157][T13196] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2639'. [ 859.970179][ T5498] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 859.989045][ T5498] usb 4-1: config 179 has no interface number 0 [ 859.996409][ T5498] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 860.168934][ T5498] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 860.180191][ T5498] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 860.191474][ T5498] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 860.202781][ T5498] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 860.234949][ T5498] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 860.300326][ T5498] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.501692][T13198] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 860.523265][T13198] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 861.538437][T10554] usb 4-1: USB disconnect, device number 15 [ 861.544464][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 861.544519][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 861.877371][T13234] loop3: detected capacity change from 0 to 2048 [ 862.036831][T13234] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 862.105437][T13250] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2655'. [ 863.853903][T13259] usb usb8: usbfs: process 13259 (syz.3.2650) did not claim interface 0 before use [ 867.759103][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 867.773287][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 868.974207][ T9791] EXT4-fs (loop3): unmounting filesystem. [ 868.991392][T13284] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 869.206123][T13293] xt_hashlimit: overflow, rate too high: 0 [ 871.962312][T12247] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 872.467426][T12247] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 872.533389][T12247] usb 2-1: config 179 has no interface number 0 [ 872.659696][T12247] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 872.875202][T12247] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 872.961360][T12247] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 873.010489][T12247] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 873.042821][T13331] loop2: detected capacity change from 0 to 2048 [ 873.066584][T12247] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 873.095767][T12247] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 873.123097][T12247] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.158292][T13331] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 873.210851][T13316] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 873.275983][T13316] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 873.410624][ T5498] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 873.445523][T13342] usb usb8: usbfs: process 13342 (syz.2.2676) did not claim interface 0 before use [ 873.715222][ T5498] usb 4-1: Using ep0 maxpacket: 32 [ 873.880896][ T5498] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 873.955546][T12770] EXT4-fs (loop2): unmounting filesystem. [ 873.994789][T12247] usb 2-1: USB disconnect, device number 23 [ 874.000937][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 874.000984][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 874.066547][ T5498] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 874.096362][ T5498] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.124587][ T5498] usb 4-1: Product: syz [ 874.141796][ T5498] usb 4-1: Manufacturer: syz [ 874.181995][ T5498] usb 4-1: SerialNumber: syz [ 874.211837][ T5498] usb 4-1: config 0 descriptor?? [ 874.230253][T13335] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 874.990114][ T5498] usb 4-1: USB disconnect, device number 16 [ 875.138819][T13364] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 877.103032][T13383] loop4: detected capacity change from 0 to 2048 [ 877.237534][T13383] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 877.510310][T13397] usb usb8: usbfs: process 13397 (syz.4.2691) did not claim interface 0 before use [ 878.472695][T10130] EXT4-fs (loop4): unmounting filesystem. [ 878.963731][T12110] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 879.345094][T12110] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 879.400891][T12110] usb 2-1: config 179 has no interface number 0 [ 879.479364][T12110] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 879.497487][T12110] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 879.509524][T12110] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 879.731487][T12110] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 879.743308][T12110] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 879.757023][T12110] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 879.767285][T12110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.802505][T13405] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 879.811561][T13405] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 880.673513][ T14] usb 2-1: USB disconnect, device number 24 [ 880.678633][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 880.798423][T13426] loop3: detected capacity change from 0 to 1024 [ 882.386836][T13441] loop3: detected capacity change from 0 to 2048 [ 882.892004][T13441] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 883.187287][T13454] usb usb8: usbfs: process 13454 (syz.3.2705) did not claim interface 0 before use [ 883.628728][ T9791] EXT4-fs (loop3): unmounting filesystem. [ 884.429498][T13472] loop2: detected capacity change from 0 to 512 [ 884.545385][T13472] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.2712: inode #1: comm syz.2.2712: iget: illegal inode # [ 884.604872][T13472] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.2712: error while reading EA inode 1 err=-117 [ 884.632756][T13472] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.2712: inode #1: comm syz.2.2712: iget: illegal inode # [ 884.660532][T13472] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.2712: error while reading EA inode 1 err=-117 [ 884.690652][T13472] EXT4-fs (loop2): 1 orphan inode deleted [ 884.696688][T13472] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 885.050651][ T5555] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 885.060732][ T5493] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 885.079690][T13459] loop3: detected capacity change from 0 to 65536 [ 885.097565][T13459] XFS (loop3): Mounting V5 Filesystem [ 885.185301][T13459] XFS (loop3): Ending clean mount [ 885.203286][T12247] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 885.254870][ T9791] XFS (loop3): Unmounting Filesystem [ 885.307989][ T5493] usb 5-1: Using ep0 maxpacket: 32 [ 885.406156][ T5555] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.441669][ T5555] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 885.460517][ T5493] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.477221][ T5555] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 885.486447][ T5493] usb 5-1: config 0 has no interfaces? [ 885.519285][ T5555] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.567051][ T5555] usb 3-1: config 0 descriptor?? [ 885.575205][T12247] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 885.583457][T12247] usb 2-1: config 179 has no interface number 0 [ 885.604895][ T5555] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 885.622464][T12247] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 885.654492][T12247] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 885.670228][ T5493] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 885.698575][T12247] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 885.705343][ T5493] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.723666][T12247] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 885.736176][ T5493] usb 5-1: Product: syz [ 885.752236][ T5493] usb 5-1: Manufacturer: syz [ 885.761098][T12247] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 885.771136][ T5493] usb 5-1: SerialNumber: syz [ 885.787193][ T5493] usb 5-1: config 0 descriptor?? [ 885.790024][T12247] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 885.840248][T12247] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.898618][T13481] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 885.915512][T13481] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 886.085246][ T5493] usb 5-1: USB disconnect, device number 24 [ 886.648870][ T5493] usb 2-1: USB disconnect, device number 25 [ 886.657815][T13503] usb usb8: usbfs: process 13503 (syz.0.2718) did not claim interface 0 before use [ 886.660211][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 887.124527][T12247] usb 3-1: USB disconnect, device number 22 [ 887.181700][T12770] EXT4-fs (loop2): unmounting filesystem. [ 888.194371][T12110] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 888.279738][T13526] loop2: detected capacity change from 0 to 2048 [ 888.393854][T13526] UDF-fs: bad mount option "uid=foQget2gid=00000000000000000000" or missing value [ 888.699799][T12110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.764972][T12110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.079330][T12110] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 889.171164][T12110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.219941][T12110] usb 2-1: config 0 descriptor?? [ 889.285466][T13523] loop2: detected capacity change from 0 to 512 [ 889.351466][T13523] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 889.368874][T13523] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038 (0x7fffffff) [ 889.686640][T12770] EXT4-fs (loop2): unmounting filesystem. [ 889.692379][T12110] hid-led 0003:27B8:01ED.0004: unknown main item tag 0x0 [ 889.910089][T12110] hid-led: probe of 0003:27B8:01ED.0004 failed with error -71 [ 889.954062][T12110] usb 2-1: USB disconnect, device number 26 [ 890.287838][T13525] loop4: detected capacity change from 0 to 65536 [ 890.295132][ T3657] Bluetooth: Unexpected continuation frame (len 10) [ 890.350395][T13550] Bluetooth: MGMT ver 1.22 [ 890.353239][T13525] XFS (loop4): Mounting V5 Filesystem [ 890.499023][T13558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2733'. [ 890.505491][T13525] XFS (loop4): Ending clean mount [ 890.948860][T10130] XFS (loop4): Unmounting Filesystem [ 890.968168][T13560] loop2: detected capacity change from 0 to 1024 [ 891.036593][T13560] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 891.242871][T12247] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 891.657916][T13574] loop3: detected capacity change from 0 to 2048 [ 891.869176][T13574] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 891.880199][T12770] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 891.928581][T12770] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 891.946381][T12770] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 891.965810][T12770] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 891.983535][T12770] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 891.995018][T12770] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 892.014081][T12770] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 892.051443][T12770] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 892.086051][T12770] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 892.113548][T12770] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 892.119191][T12247] usb 2-1: device descriptor read/64, error -71 [ 892.404957][T12247] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 892.614743][T13586] usb usb8: usbfs: process 13586 (syz.3.2740) did not claim interface 0 before use [ 892.661805][T12247] usb 2-1: device descriptor read/64, error -71 [ 892.778147][T12247] usb usb2-port1: attempt power cycle [ 893.172477][T12247] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 893.199284][T12770] EXT4-fs (loop2): unmounting filesystem. [ 893.299798][T12247] usb 2-1: device descriptor read/8, error -71 [ 893.350658][ T4025] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.520356][ T4025] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.557205][T12247] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 893.652733][T12247] usb 2-1: device descriptor read/8, error -71 [ 893.701757][ T4025] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.767187][T12247] usb usb2-port1: unable to enumerate USB device [ 893.899461][T13606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2752'. [ 894.236746][ T9791] EXT4-fs (loop3): unmounting filesystem. [ 894.302018][ T4025] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.327709][ T3646] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 895.392191][ T3646] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 895.404150][ T3646] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 895.420753][ T3646] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 895.428743][ T3646] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 895.436382][ T3646] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 895.567037][T13628] loop4: detected capacity change from 0 to 2048 [ 895.619790][T13628] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 896.409442][T10130] EXT4-fs (loop4): unmounting filesystem. [ 896.439391][T13624] chnl_net:caif_netlink_parms(): no params data found [ 896.544891][T13652] loop4: detected capacity change from 0 to 2048 [ 896.594852][T13652] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 896.595327][T13624] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.603639][ T5555] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 896.618311][T13624] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.619329][T13624] device bridge_slave_0 entered promiscuous mode [ 896.660309][T13624] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.668514][T13624] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.677581][T13624] device bridge_slave_1 entered promiscuous mode [ 896.708020][T13624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.869396][T13624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.986654][ T5555] usb 2-1: device descriptor read/64, error -71 [ 897.648142][ T3657] Bluetooth: hci4: command tx timeout [ 898.062756][T13669] usb usb8: usbfs: process 13669 (syz.4.2763) did not claim interface 0 before use [ 898.091621][ T5555] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 898.151333][T13624] team0: Port device team_slave_0 added [ 898.190028][T13624] team0: Port device team_slave_1 added [ 898.291538][ T5555] usb 2-1: device descriptor read/64, error -71 [ 898.374492][T13624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 898.381979][T13624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 898.460695][T13624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 898.482341][T13624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 898.489358][T13624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 899.033451][ T5555] usb usb2-port1: attempt power cycle [ 899.134064][T13624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 899.331718][T13624] device hsr_slave_0 entered promiscuous mode [ 899.340478][T13624] device hsr_slave_1 entered promiscuous mode [ 899.370397][T13624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 899.411693][T13624] Cannot create hsr debugfs directory [ 899.596116][ T3646] Bluetooth: hci4: command tx timeout [ 900.228592][ T4025] device hsr_slave_0 left promiscuous mode [ 900.245184][ T4025] device hsr_slave_1 left promiscuous mode [ 900.268404][ T4025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 900.294472][ T4025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 900.324293][ T4025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 900.356484][ T4025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 900.398736][ T4025] device bridge_slave_1 left promiscuous mode [ 900.426297][ T4025] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.435637][ T4025] device bridge_slave_0 left promiscuous mode [ 900.443653][T10130] EXT4-fs (loop4): unmounting filesystem. [ 900.461096][ T4025] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.557288][ T4025] device veth1_macvtap left promiscuous mode [ 900.573874][ T4025] device veth0_macvtap left promiscuous mode [ 900.616981][T13693] loop4: detected capacity change from 0 to 1024 [ 900.626621][ T4025] device veth1_vlan left promiscuous mode [ 900.632460][ T4025] device veth0_vlan left promiscuous mode [ 900.665585][T13693] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 900.712129][T13693] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 902.025355][ T3646] Bluetooth: hci4: command tx timeout [ 902.074738][T10130] EXT4-fs (loop4): unmounting filesystem. [ 902.611602][T13709] loop4: detected capacity change from 0 to 1024 [ 902.781801][ T35] hfsplus: b-tree write err: -5, ino 4 [ 903.884503][T13726] loop3: detected capacity change from 0 to 256 [ 903.929272][T13726] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 903.942677][ T5497] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 904.014729][ T3657] Bluetooth: hci4: command tx timeout [ 904.255964][ T5497] usb 5-1: device descriptor read/64, error -71 [ 904.539993][ T5497] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 904.796359][ T4025] team0 (unregistering): Port device team_slave_1 removed [ 904.831750][ T5497] usb 5-1: device descriptor read/64, error -71 [ 904.866913][ T4025] team0 (unregistering): Port device team_slave_0 removed [ 904.949663][ T5497] usb usb5-port1: attempt power cycle [ 904.961400][ T4025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 905.047049][ T4025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 905.359021][ T5497] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 905.473450][ T5497] usb 5-1: device descriptor read/8, error -71 [ 905.688970][T13749] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2789'. [ 905.760610][ T5497] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 905.997033][T13747] loop3: detected capacity change from 0 to 65536 [ 906.005579][ T5497] usb 5-1: device not accepting address 28, error -71 [ 906.016937][ T5497] usb usb5-port1: unable to enumerate USB device [ 906.080387][T13747] XFS (loop3): Mounting V5 Filesystem [ 906.081391][ T4025] bond0 (unregistering): Released all slaves [ 906.135753][T13747] XFS (loop3): Ending clean mount [ 906.293012][T13754] netlink: 'syz.4.2792': attribute type 10 has an invalid length. [ 906.371481][T13754] 8021q: adding VLAN 0 to HW filter on device team0 [ 906.420450][T13754] bond0: (slave team0): Enslaving as an active interface with an up link [ 906.584135][T13768] futex_wake_op: syz.1.2793 tries to shift op by 32; fix this program [ 908.047009][T13776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2794'. [ 908.852406][T13624] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 909.590229][T13624] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 909.607921][T13624] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 909.652997][ T9791] XFS (loop3): Unmounting Filesystem [ 909.749526][T13624] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 910.389164][T13624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.492546][T10206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 910.513053][T10206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 911.046568][ T5555] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 911.341124][ T5555] usb 4-1: Using ep0 maxpacket: 8 [ 911.455723][ T5555] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 911.495308][ T5555] usb 4-1: config 0 has no interfaces? [ 911.655754][ T5555] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 911.675065][ T5555] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.683097][ T5555] usb 4-1: Product: syz [ 911.706261][ T5555] usb 4-1: Manufacturer: syz [ 911.707715][T13821] futex_wake_op: syz.4.2808 tries to shift op by 32; fix this program [ 911.721632][ T5555] usb 4-1: SerialNumber: syz [ 911.758210][ T5555] usb 4-1: config 0 descriptor?? [ 913.705110][T13837] usb usb8: usbfs: process 13837 (syz.0.2812) did not claim interface 0 before use [ 914.344404][ T5555] usb 4-1: USB disconnect, device number 17 [ 914.562925][T13828] loop4: detected capacity change from 0 to 65536 [ 914.836094][T13828] XFS (loop4): Mounting V5 Filesystem [ 914.911978][T13828] XFS (loop4): Ending clean mount [ 916.926739][T13875] overlayfs: failed to resolve './file1': -2 [ 917.498483][T10130] XFS (loop4): Unmounting Filesystem [ 917.847872][T13881] futex_wake_op: syz.0.2820 tries to shift op by 32; fix this program [ 919.063785][T13890] loop4: detected capacity change from 0 to 2048 [ 919.115790][T13890] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 919.395104][T13898] usb usb8: usbfs: process 13898 (syz.4.2822) did not claim interface 0 before use [ 920.025340][T10130] EXT4-fs (loop4): unmounting filesystem. [ 920.224185][T13624] 8021q: adding VLAN 0 to HW filter on device team0 [ 920.430483][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 920.447986][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 920.493133][ T3657] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 920.496813][ T3822] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.507597][ T3822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 920.511403][ T3657] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 920.581752][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 920.655386][ T3657] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 920.665309][ T48] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 920.692101][ T3657] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 920.700433][ T3657] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 920.884318][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 920.903565][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 920.951031][ T4007] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.958349][ T4007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.056827][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 921.066104][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 921.103250][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 921.141804][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 921.159775][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 921.169866][T13917] loop3: detected capacity change from 0 to 256 [ 921.185094][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 921.313231][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 921.340361][T13624] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 921.357790][T13918] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 921.370190][T13918] FAT-fs (loop3): Filesystem has been set read-only [ 921.372747][T13624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 921.380832][T13918] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 921.422719][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 921.433792][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 921.453655][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 921.454322][T13918] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 921.473504][T13923] futex_wake_op: syz.0.2832 tries to shift op by 32; fix this program [ 921.482235][ T26] audit: type=1800 audit(1724735038.721:331): pid=13918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2831" name="file1" dev="loop3" ino=1048690 res=0 errno=0 [ 921.525263][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 921.553164][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 921.574159][ T9791] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 921.609337][ T9791] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 921.747250][ T4025] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.911426][ T4025] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.016405][T13905] loop4: detected capacity change from 0 to 65536 [ 922.050029][ T4025] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.113134][T13908] chnl_net:caif_netlink_parms(): no params data found [ 922.125097][T13905] XFS (loop4): Mounting V5 Filesystem [ 922.159229][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 922.167064][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 922.229315][T13905] XFS (loop4): Ending clean mount [ 922.386508][ T4025] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.469461][T13624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.603264][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 922.621048][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 922.665566][ T3646] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 922.676902][ T3646] Bluetooth: hci6: command tx timeout [ 922.682041][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 922.694385][T13950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 922.695911][T13908] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.711580][T13950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 922.716149][T13908] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.728359][T13950] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 922.735798][T13950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 922.736031][T13908] device bridge_slave_0 entered promiscuous mode [ 922.839160][T13908] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.846293][T13908] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.868483][T13908] device bridge_slave_1 entered promiscuous mode [ 922.885541][T13624] device veth0_vlan entered promiscuous mode [ 922.914929][T10206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 922.931907][T10206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 922.941910][T10206] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 922.958206][T10206] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 923.044848][T13908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 923.070545][T13624] device veth1_vlan entered promiscuous mode [ 923.085605][T13908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 923.190269][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 923.201491][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 923.213583][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 923.223265][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 923.243480][T13908] team0: Port device team_slave_0 added [ 923.293094][T10130] XFS (loop4): Unmounting Filesystem [ 923.303577][T13908] team0: Port device team_slave_1 added [ 923.376098][T13624] device veth0_macvtap entered promiscuous mode [ 923.407147][T13624] device veth1_macvtap entered promiscuous mode [ 923.484245][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 923.500551][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 923.573986][T13624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 923.593462][T13624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.613185][T13624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 923.637593][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 923.654378][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 923.721041][T13908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.740075][T13908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 923.797553][T13960] loop4: detected capacity change from 0 to 256 [ 923.812011][T13908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.835440][T13960] FAT-fs (loop4): Directory bread(block 64) failed [ 923.843790][T13960] FAT-fs (loop4): Directory bread(block 65) failed [ 923.858203][T13960] FAT-fs (loop4): Directory bread(block 66) failed [ 923.866325][T13960] FAT-fs (loop4): Directory bread(block 67) failed [ 923.873184][T13960] FAT-fs (loop4): Directory bread(block 68) failed [ 923.880693][T13960] FAT-fs (loop4): Directory bread(block 69) failed [ 923.891670][T13960] FAT-fs (loop4): Directory bread(block 70) failed [ 923.901823][T13960] FAT-fs (loop4): Directory bread(block 71) failed [ 923.912816][T13960] FAT-fs (loop4): Directory bread(block 72) failed [ 923.922599][T13960] FAT-fs (loop4): Directory bread(block 73) failed [ 923.959038][T13908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 923.971728][T13908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 924.195537][T13908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 924.217182][T13624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.227786][T13624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.270876][T13624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.299420][T13624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.342291][T13624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.390710][T13624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.401938][T13624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.412518][T13624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.428758][T13624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 924.438669][T13948] chnl_net:caif_netlink_parms(): no params data found [ 924.686244][T13950] Bluetooth: hci6: command tx timeout [ 924.885632][ T3657] Bluetooth: hci0: command tx timeout [ 924.919158][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 924.928401][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 925.252836][T13972] futex_wake_op: syz.4.2843 tries to shift op by 32; fix this program [ 925.643394][T13624] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.652483][T13624] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.661685][T13624] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.670453][T13624] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.934626][T13908] device hsr_slave_0 entered promiscuous mode [ 925.942112][T13908] device hsr_slave_1 entered promiscuous mode [ 925.948897][T13908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 925.959431][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 925.968662][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 926.146230][T13908] Cannot create hsr debugfs directory [ 926.672013][T13950] Bluetooth: hci6: command tx timeout [ 926.868409][T13950] Bluetooth: hci0: command tx timeout [ 926.921602][T13948] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.945069][T13948] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.952905][T13948] device bridge_slave_0 entered promiscuous mode [ 926.998641][ T3852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.009713][ T3852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.059003][T13948] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.067960][T13948] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.080604][T13948] device bridge_slave_1 entered promiscuous mode [ 927.088942][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 927.233137][T13948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.277724][ T4007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.286015][ T4007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.295004][T13948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.362587][T13978] loop4: detected capacity change from 0 to 65536 [ 927.428976][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 927.453108][T13978] XFS (loop4): Mounting V5 Filesystem [ 927.454491][T13948] team0: Port device team_slave_0 added [ 927.490517][T13948] team0: Port device team_slave_1 added [ 927.574531][T13948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 927.581594][T13948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 927.586222][T13978] XFS (loop4): Ending clean mount [ 927.612877][T13948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 927.629556][T13948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 927.720983][T13948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 927.928201][T13948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.006866][ T4025] device hsr_slave_0 left promiscuous mode [ 928.025734][ T4025] device hsr_slave_1 left promiscuous mode [ 928.035367][ T4025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 928.059031][ T4025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 928.076984][ T4025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 928.482956][ T4025] device veth1_macvtap left promiscuous mode [ 928.489349][ T4025] device veth0_macvtap left promiscuous mode [ 928.495459][ T4025] device veth1_vlan left promiscuous mode [ 928.501510][ T4025] device veth0_vlan left promiscuous mode [ 928.621392][T13950] Bluetooth: hci6: command tx timeout [ 928.856385][ T3657] Bluetooth: hci0: command tx timeout [ 929.058154][T10130] XFS (loop4): Unmounting Filesystem [ 929.248234][ T4025] team0 (unregistering): Port device team_slave_1 removed [ 929.295532][ T4025] team0 (unregistering): Port device team_slave_0 removed [ 929.345608][ T4025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 929.399635][ T4025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 929.948201][ T4025] bond0 (unregistering): Released all slaves [ 930.156226][T14006] loop2: detected capacity change from 0 to 128 [ 930.185239][T13948] device hsr_slave_0 entered promiscuous mode [ 930.209959][T13948] device hsr_slave_1 entered promiscuous mode [ 930.278638][T13948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 930.286228][T13948] Cannot create hsr debugfs directory [ 930.447236][T13908] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 930.493340][T13908] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 930.540366][T13908] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 930.616753][T13908] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 930.830928][ T3657] Bluetooth: hci0: command tx timeout [ 931.635835][T13948] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.856348][T13908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 932.687011][T14021] futex_wake_op: syz.2.2853 tries to shift op by 32; fix this program [ 932.749240][T13948] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.808819][T13908] 8021q: adding VLAN 0 to HW filter on device team0 [ 932.834690][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 932.851218][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 933.100056][T13948] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.122520][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 933.354224][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 933.452103][ T4007] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.459238][ T4007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 933.896029][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 933.916201][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 933.945889][ T4007] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.953012][ T4007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 933.983557][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 934.005219][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 934.089504][T13948] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.136525][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 934.152915][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 934.191271][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 934.229841][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 934.262552][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 934.280799][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 934.305009][T13908] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 934.324663][T13908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 934.349616][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 934.386158][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 934.400103][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 934.414350][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 934.461791][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 934.825688][T13948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 934.871036][T13948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 934.981825][T13948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 935.507430][T13948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 936.574246][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 936.584462][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 936.592998][T14058] futex_wake_op: syz.0.2864 tries to shift op by 32; fix this program [ 937.300899][T13908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 937.340211][T13948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 937.378630][T13948] 8021q: adding VLAN 0 to HW filter on device team0 [ 937.393856][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 937.405047][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 937.415725][T14061] syz.4.2866[14061] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 937.415822][T14061] syz.4.2866[14061] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 937.441953][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 937.488293][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 937.507822][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 937.524860][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 937.534237][T13908] device veth0_vlan entered promiscuous mode [ 937.558091][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 937.568576][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 937.590193][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 937.637606][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 937.783288][T10564] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.790612][T10564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.079653][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 938.107862][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 938.148669][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 938.169968][T10564] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.177195][T10564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 938.210864][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 938.239948][T13908] device veth1_vlan entered promiscuous mode [ 938.258167][T14075] loop4: detected capacity change from 0 to 512 [ 938.268906][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 938.282209][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 938.305114][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 938.316253][T14075] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2872: inode #1: comm syz.4.2872: iget: illegal inode # [ 938.323830][T13948] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 938.341115][T13948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 938.365601][T14075] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2872: error while reading EA inode 1 err=-117 [ 938.382173][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 938.391132][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 938.400667][T14075] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2872: inode #1: comm syz.4.2872: iget: illegal inode # [ 938.416200][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 938.425232][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 938.434091][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 938.442643][T14075] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2872: error while reading EA inode 1 err=-117 [ 938.456873][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 938.466053][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 938.475653][T14075] EXT4-fs (loop4): 1 orphan inode deleted [ 938.489621][T14075] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 938.501982][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 938.558094][T14075] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2872: invalid indirect mapped block 234881024 (level 0) [ 938.741502][ T4025] tipc: Disabling bearer [ 938.747276][ T4025] tipc: Left network mode [ 939.009407][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 939.088394][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 939.269058][T13908] device veth0_macvtap entered promiscuous mode [ 939.615293][T13908] device veth1_macvtap entered promiscuous mode [ 939.631249][T10206] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 939.648524][T10206] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 939.665541][T14090] usb usb8: usbfs: process 14090 (syz.0.2871) did not claim interface 0 before use [ 939.680066][T14089] netlink: 'syz.2.2874': attribute type 15 has an invalid length. [ 939.715445][T13908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 939.757227][T13908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 939.785263][T13908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 939.803565][T13908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 939.906568][T13908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 940.008901][T13948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 940.128851][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 940.225435][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 940.363441][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 940.471764][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 940.801983][T13908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 940.815315][T10130] EXT4-fs (loop4): unmounting filesystem. [ 940.825869][T13908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.840640][T13908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 940.878409][T13908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.898556][T13908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 940.918646][T13908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.925594][T14101] loop4: detected capacity change from 0 to 512 [ 940.947141][T13908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 940.949840][T14101] EXT4-fs: Ignoring removed mblk_io_submit option [ 940.965119][T13908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.980845][T14101] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a024e01c, mo2=0002] [ 940.989112][T14101] EXT4-fs (loop4): failed to initialize system zone (-117) [ 940.996442][T14101] EXT4-fs (loop4): mount failed [ 941.014715][T13908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 941.066840][T10206] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 941.091237][T10206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 941.101769][T10206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 941.119389][T10206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 941.148393][T10206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 941.163918][T10206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 941.649488][T13948] device veth0_vlan entered promiscuous mode [ 941.672724][T10206] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 941.698385][T10206] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 941.712790][T13908] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.754237][T13908] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.770832][T13908] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.787856][T13908] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.833596][T13948] device veth1_vlan entered promiscuous mode [ 942.355082][ T3849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.379940][ T3849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.438839][ T4025] device gretap0 left promiscuous mode [ 942.444736][ T4025] bridge0: port 1(gretap0) entered disabled state [ 942.986783][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 942.998319][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 943.007728][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 944.173600][ T3849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.191526][ T3849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.229526][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 944.273714][T13948] device veth0_macvtap entered promiscuous mode [ 944.311035][T14140] loop4: detected capacity change from 0 to 512 [ 944.355664][T13948] device veth1_macvtap entered promiscuous mode [ 944.381648][T14140] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2889: inode #1: comm syz.4.2889: iget: illegal inode # [ 944.397158][T14140] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2889: error while reading EA inode 1 err=-117 [ 944.410350][T14140] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2889: inode #1: comm syz.4.2889: iget: illegal inode # [ 944.423965][T14140] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2889: error while reading EA inode 1 err=-117 [ 944.439895][T14140] EXT4-fs (loop4): 1 orphan inode deleted [ 944.449543][T14140] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 944.466072][T14140] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2889: invalid indirect mapped block 234881024 (level 0) [ 944.533464][T10130] EXT4-fs (loop4): unmounting filesystem. [ 944.663724][T13948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.693972][T13948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.715210][T13948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.743247][T13948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.763470][T13948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.784202][T13948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.807235][T13948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 944.823432][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 944.862865][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 944.886762][T13948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 944.915683][T13948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.966812][T13948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 944.994628][T13948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.012417][T13948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.028346][T13948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.047409][T13948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.061417][T13948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.089068][T13948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.117208][T13948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.147317][T13948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.311093][T14159] usb usb8: usbfs: process 14159 (syz.0.2891) did not claim interface 0 before use [ 946.312410][T14166] loop4: detected capacity change from 0 to 512 [ 946.373472][T14166] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 946.397790][T14166] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038 (0x7fffffff) [ 946.593151][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 946.615444][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 947.828303][T10130] EXT4-fs (loop4): unmounting filesystem. [ 947.890452][T13948] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.932547][T13948] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.985921][ T26] audit: type=1326 audit(1724735066.541:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14178 comm="syz.0.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694a579e79 code=0x7ffc0000 [ 948.014065][T13948] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.054359][T13948] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.158235][ T26] audit: type=1326 audit(1724735066.541:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14178 comm="syz.0.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f694a579e79 code=0x7ffc0000 [ 948.227044][T14184] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2901'. [ 948.229298][ T26] audit: type=1326 audit(1724735066.541:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14178 comm="syz.0.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694a579e79 code=0x7ffc0000 [ 948.943188][ T4025] device hsr_slave_0 left promiscuous mode [ 948.968752][ T4025] device hsr_slave_1 left promiscuous mode [ 948.986926][ T26] audit: type=1326 audit(1724735066.541:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14178 comm="syz.0.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f694a579e79 code=0x7ffc0000 [ 949.010963][ T26] audit: type=1326 audit(1724735066.541:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14178 comm="syz.0.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694a579e79 code=0x7ffc0000 [ 949.038697][ T26] audit: type=1326 audit(1724735066.541:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14178 comm="syz.0.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694a579e79 code=0x7ffc0000 [ 949.075325][ T26] audit: type=1326 audit(1724735066.541:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14178 comm="syz.0.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f694a579e79 code=0x7ffc0000 [ 949.109339][ T4025] device veth1_macvtap left promiscuous mode [ 949.117768][ T26] audit: type=1326 audit(1724735066.572:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14178 comm="syz.0.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694a579e79 code=0x7ffc0000 [ 949.134457][ T4025] device veth0_macvtap left promiscuous mode [ 949.160856][ T26] audit: type=1326 audit(1724735066.572:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14178 comm="syz.0.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694a579e79 code=0x7ffc0000 [ 949.192114][ T26] audit: type=1326 audit(1724735066.572:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14178 comm="syz.0.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f694a579e79 code=0x7ffc0000 [ 949.232858][ T4025] device veth1_vlan left promiscuous mode [ 949.511027][T14204] binder: Unknown parameter 'defcontext' [ 950.536789][T14212] loop2: detected capacity change from 0 to 128 [ 951.312406][T14219] usb usb8: usbfs: process 14219 (syz.1.2906) did not claim interface 0 before use [ 951.993932][T14230] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2913'. [ 952.700047][ T4025] bond0 (unregistering): Released all slaves [ 952.812040][T14225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 952.848316][T14225] device batadv_slave_0 entered promiscuous mode [ 953.044346][ T153] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 953.511971][ T153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 953.586893][ T153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.725280][ T153] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 953.764374][ T153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.854717][ T153] usb 1-1: config 0 descriptor?? [ 954.055223][T10564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.072720][T10564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.092157][ T3751] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 954.185134][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 954.203490][ T3859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.215498][ T3859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.285667][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 954.320806][ T3751] usb 2-1: Using ep0 maxpacket: 8 [ 954.326081][ T153] usbhid 1-1:0.0: can't add hid device: -71 [ 954.340112][ T153] usbhid: probe of 1-1:0.0 failed with error -71 [ 954.369232][ T153] usb 1-1: USB disconnect, device number 15 [ 954.445053][ T3751] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 954.470285][ T3751] usb 2-1: config 0 has no interfaces? [ 955.273807][ T3751] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 955.311807][ T3751] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.340402][ T3751] usb 2-1: Product: syz [ 955.344609][ T3751] usb 2-1: Manufacturer: syz [ 955.505513][ T3751] usb 2-1: SerialNumber: syz [ 955.526267][ T3751] usb 2-1: config 0 descriptor?? [ 956.151510][T14267] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2924'. [ 956.841542][ T3762] usb 2-1: USB disconnect, device number 34 [ 958.588686][T14302] device veth0_vlan left promiscuous mode [ 958.594534][T14302] device veth0_vlan entered promiscuous mode [ 958.794593][T14273] loop4: detected capacity change from 0 to 40427 [ 958.851047][T14273] F2FS-fs (loop4): Mismatch start address, segment0(134218240) cp_blkaddr(0) [ 958.911735][T14273] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 959.134945][T14273] F2FS-fs (loop4): Found nat_bits in checkpoint [ 959.908858][T14329] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2939'. [ 961.385580][ T3762] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 962.695390][T14364] loop3: detected capacity change from 0 to 2048 [ 962.704605][T14361] loop2: detected capacity change from 0 to 512 [ 962.723633][T14361] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 962.735237][ T3762] usb 5-1: Using ep0 maxpacket: 8 [ 962.757063][T14364] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 962.960582][ T3762] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 962.968034][T14361] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2950: bg 0: block 248: padding at end of block bitmap is not set [ 962.974426][ T3762] usb 5-1: config 0 has no interfaces? [ 963.051800][T14373] usb usb8: usbfs: process 14373 (syz.3.2951) did not claim interface 0 before use [ 963.346005][T14361] __quota_error: 32 callbacks suppressed [ 963.346903][T14361] Quota error (device loop2): write_blk: dquota write failed [ 963.405208][T14361] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 963.545800][T13948] EXT4-fs (loop3): unmounting filesystem. [ 963.552316][T14361] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.2950: Failed to acquire dquot type 1 [ 963.577740][T14361] EXT4-fs (loop2): 1 truncate cleaned up [ 963.583844][ T3762] usb 5-1: string descriptor 0 read error: -71 [ 963.589870][T14361] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 963.617440][ T3762] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 963.639341][T14361] ext4 filesystem being mounted at /35/bus supports timestamps until 2038 (0x7fffffff) [ 963.656381][ T3762] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.684145][ T3762] usb 5-1: config 0 descriptor?? [ 963.732134][ T3762] usb 5-1: can't set config #0, error -71 [ 963.742155][ T3762] usb 5-1: USB disconnect, device number 29 [ 964.090634][T14388] device veth0_vlan left promiscuous mode [ 964.096509][T14388] device veth0_vlan entered promiscuous mode [ 964.427446][T13624] EXT4-fs (loop2): unmounting filesystem. [ 965.275736][T14402] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2959'. [ 965.746471][T14403] device veth0_vlan left promiscuous mode [ 965.752330][T14403] device veth0_vlan entered promiscuous mode [ 965.790076][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 965.845014][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 965.869691][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 966.728835][T14418] loop3: detected capacity change from 0 to 2048 [ 966.921300][T14418] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 968.188909][T14430] usb usb8: usbfs: process 14430 (syz.3.2964) did not claim interface 0 before use [ 968.200087][T12247] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 968.511818][T13948] EXT4-fs (loop3): unmounting filesystem. [ 968.841549][T14442] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2972'. [ 968.842686][T12247] usb 3-1: Using ep0 maxpacket: 8 [ 968.990784][T12247] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 969.001085][T12247] usb 3-1: config 0 has no interfaces? [ 969.152718][T12247] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 969.165635][T12247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.194738][T12247] usb 3-1: Product: syz [ 969.198939][T12247] usb 3-1: Manufacturer: syz [ 969.209494][T12247] usb 3-1: SerialNumber: syz [ 969.232220][T12247] usb 3-1: config 0 descriptor?? [ 970.086751][ T26] audit: type=1326 audit(1724735089.752:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14461 comm="syz.4.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24e4d79e79 code=0x7ffc0000 [ 970.649764][ T26] audit: type=1326 audit(1724735089.752:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14461 comm="syz.4.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24e4d79e79 code=0x7ffc0000 [ 970.782149][T10554] usb 3-1: USB disconnect, device number 23 [ 970.876572][ T26] audit: type=1326 audit(1724735089.783:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14461 comm="syz.4.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24e4d79e79 code=0x7ffc0000 [ 970.979133][ T26] audit: type=1326 audit(1724735089.783:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14461 comm="syz.4.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24e4d79e79 code=0x7ffc0000 [ 971.128816][ T26] audit: type=1326 audit(1724735089.783:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14461 comm="syz.4.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24e4d79e79 code=0x7ffc0000 [ 971.193159][ T26] audit: type=1326 audit(1724735089.794:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14461 comm="syz.4.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24e4d79e79 code=0x7ffc0000 [ 971.280675][ T26] audit: type=1326 audit(1724735089.794:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14461 comm="syz.4.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24e4d79e79 code=0x7ffc0000 [ 971.382464][ T26] audit: type=1326 audit(1724735089.794:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14461 comm="syz.4.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24e4d79e79 code=0x7ffc0000 [ 971.490745][ T26] audit: type=1326 audit(1724735089.794:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14461 comm="syz.4.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f24e4d79e79 code=0x7ffc0000 [ 971.598560][ T26] audit: type=1326 audit(1724735089.794:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14461 comm="syz.4.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24e4d79e79 code=0x7ffc0000 [ 973.681617][T14488] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2986'. [ 974.345669][T14492] usb usb8: usbfs: process 14492 (syz.0.2982) did not claim interface 0 before use [ 974.511434][T14496] syz.3.2988[14496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 974.511537][T14496] syz.3.2988[14496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 975.679867][ T5497] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 975.928738][ T5497] usb 3-1: Using ep0 maxpacket: 8 [ 976.525825][T14521] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 976.532382][T14521] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 976.552251][T14521] vhci_hcd vhci_hcd.0: Device attached [ 976.577098][ T5497] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.617279][ T5497] usb 3-1: config 0 has no interfaces? [ 976.783417][T14524] vhci_hcd: connection closed [ 976.790411][ T4012] vhci_hcd: stop threads [ 976.811950][ T4012] vhci_hcd: release socket [ 976.820051][ T4012] vhci_hcd: disconnect device [ 977.029070][ T5092] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 978.048991][ T5092] usb 4-1: Using ep0 maxpacket: 8 [ 978.106338][ T5497] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 978.119895][ T5497] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.130673][ T5497] usb 3-1: Product: syz [ 978.139821][ T5497] usb 3-1: config 0 descriptor?? [ 978.165132][ T5497] usb 3-1: can't set config #0, error -71 [ 978.180434][ T5497] usb 3-1: USB disconnect, device number 24 [ 978.287711][ T5092] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 978.299022][ T5092] usb 4-1: config 0 has no interfaces? [ 978.612019][ T5092] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 978.637813][ T5092] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.718522][ T5092] usb 4-1: Product: syz [ 978.758266][ T5092] usb 4-1: Manufacturer: syz [ 978.810685][ T5092] usb 4-1: SerialNumber: syz [ 978.983791][ T5092] usb 4-1: config 0 descriptor?? [ 979.189847][T14563] loop2: detected capacity change from 0 to 2048 [ 979.568672][T14563] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 980.122815][T14575] usb usb8: usbfs: process 14575 (syz.2.3008) did not claim interface 0 before use [ 980.233571][T10554] usb 4-1: USB disconnect, device number 18 [ 980.678237][ T5497] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 980.916397][ T5497] usb 1-1: Using ep0 maxpacket: 8 [ 981.030911][ T5497] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.104771][ T5497] usb 1-1: config 0 has no interfaces? [ 981.364255][ T5497] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 981.383497][ T5497] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.419034][ T5497] usb 1-1: Product: syz [ 981.438026][ T5497] usb 1-1: Manufacturer: syz [ 981.468984][ T5497] usb 1-1: SerialNumber: syz [ 981.482258][ T5497] usb 1-1: config 0 descriptor?? [ 983.375962][T13624] EXT4-fs (loop2): unmounting filesystem. [ 983.431149][ T5555] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 983.473132][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 983.473149][ T26] audit: type=1326 audit(1724735103.798:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14626 comm="syz.1.3028" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55fcf79e79 code=0x0 [ 983.840627][ T5555] usb 5-1: Using ep0 maxpacket: 8 [ 984.383912][ T5555] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 984.487333][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 984.584141][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 984.653406][ T5555] usb 5-1: config 0 has no interfaces? [ 984.712055][T10554] usb 1-1: USB disconnect, device number 16 [ 984.873001][T14646] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3033'. [ 984.941897][ T5555] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 984.963973][ T5555] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.002026][ T5555] usb 5-1: Product: syz [ 985.022485][ T5555] usb 5-1: Manufacturer: syz [ 985.044745][ T5555] usb 5-1: SerialNumber: syz [ 985.406560][ T5555] usb 5-1: config 0 descriptor?? [ 985.440936][ T5555] usb 5-1: can't set config #0, error -71 [ 985.450954][ T5555] usb 5-1: USB disconnect, device number 30 [ 985.501311][T14654] futex_wake_op: syz.0.3034 tries to shift op by 32; fix this program [ 985.735317][T14658] loop4: detected capacity change from 0 to 2048 [ 985.760094][T14658] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 985.962254][T14670] overlayfs: conflicting options: userxattr,redirect_dir=on [ 986.022529][T14672] usb usb8: usbfs: process 14672 (syz.4.3037) did not claim interface 0 before use [ 987.081833][T14655] block nbd3: shutting down sockets [ 987.440088][T14690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3047'. [ 987.642084][ T153] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 988.880081][ T153] usb 2-1: Using ep0 maxpacket: 8 [ 989.013199][ T153] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 989.035565][ T153] usb 2-1: config 0 has no interfaces? [ 989.413680][ T153] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 989.490545][ T153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.649491][ T153] usb 2-1: Product: syz [ 989.739213][ T153] usb 2-1: Manufacturer: syz [ 989.838295][ T153] usb 2-1: SerialNumber: syz [ 989.986023][ T153] usb 2-1: config 0 descriptor?? [ 990.012161][T14720] futex_wake_op: syz.0.3056 tries to shift op by 32; fix this program [ 990.239192][T10130] EXT4-fs (loop4): unmounting filesystem. [ 990.256142][ T5497] usb 2-1: USB disconnect, device number 35 [ 990.288850][T14729] xt_addrtype: ipv6 does not support BROADCAST matching [ 990.546672][ T5498] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 990.937495][ T5498] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 990.950454][ T5498] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 990.964656][ T5498] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 990.979833][ T5498] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.989853][ T5498] usb 4-1: config 0 descriptor?? [ 991.034593][ T5498] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 991.447042][ T5498] usb 4-1: USB disconnect, device number 19 [ 991.611876][T14756] netlink: 'syz.4.3069': attribute type 11 has an invalid length. [ 991.628491][T14756] netlink: 9396 bytes leftover after parsing attributes in process `syz.4.3069'. [ 991.697032][T14759] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3068'. [ 992.095466][T14763] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3070'. [ 992.494449][T14766] loop3: detected capacity change from 0 to 2048 [ 992.631208][T14766] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 992.788701][T14766] usb usb8: usbfs: process 14766 (syz.3.3071) did not claim interface 0 before use [ 992.884950][T13948] EXT4-fs (loop3): unmounting filesystem. [ 993.160926][T14773] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3072'. [ 993.195282][T14773] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3072'. [ 993.284311][T14778] futex_wake_op: syz.0.3074 tries to shift op by 32; fix this program [ 993.297728][ T26] audit: type=1326 audit(1724735343.112:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14774 comm="syz.1.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55fcf79e79 code=0x7ffc0000 [ 993.426019][ T26] audit: type=1326 audit(1724735343.144:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14774 comm="syz.1.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55fcf79e79 code=0x7ffc0000 [ 993.512423][ T26] audit: type=1326 audit(1724735343.154:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14774 comm="syz.1.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f55fcf79e79 code=0x7ffc0000 [ 993.638840][ T26] audit: type=1326 audit(1724735343.154:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14774 comm="syz.1.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55fcf79e79 code=0x7ffc0000 [ 993.668665][ T26] audit: type=1326 audit(1724735343.154:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14774 comm="syz.1.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55fcf79e79 code=0x7ffc0000 [ 993.723719][ T26] audit: type=1326 audit(1724735343.154:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14774 comm="syz.1.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f55fcf79e79 code=0x7ffc0000 [ 993.790222][ T26] audit: type=1326 audit(1724735343.154:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14774 comm="syz.1.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55fcf79e79 code=0x7ffc0000 [ 993.836493][ T26] audit: type=1326 audit(1724735343.154:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14774 comm="syz.1.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55fcf79e79 code=0x7ffc0000 [ 993.893295][ T26] audit: type=1326 audit(1724735343.165:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14774 comm="syz.1.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f55fcf79e79 code=0x7ffc0000 [ 994.000380][ T26] audit: type=1326 audit(1724735343.165:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14774 comm="syz.1.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55fcf79e79 code=0x7ffc0000 [ 994.375534][T14804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3081'. [ 994.483294][T14805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3081'. [ 994.766911][T14807] usb usb8: usbfs: process 14807 (syz.0.3082) did not claim interface 0 before use [ 995.945748][T14791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 997.269399][T14843] futex_wake_op: syz.2.3090 tries to shift op by 32; fix this program [ 998.265218][T14851] bond0: (slave bond_slave_0): Releasing backup interface [ 998.331320][T14845] loop3: detected capacity change from 0 to 2048 [ 998.406269][T14845] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 998.641128][T14845] usb usb8: usbfs: process 14845 (syz.3.3093) did not claim interface 0 before use [ 998.722908][T13948] EXT4-fs (loop3): unmounting filesystem. [ 999.175984][T14873] loop2: detected capacity change from 0 to 256 [ 1000.084169][T14882] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1000.512097][T14882] FAT-fs (loop2): Filesystem has been set read-only [ 1000.549813][T14882] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1000.560625][T14882] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1000.572524][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 1000.572540][ T26] audit: type=1800 audit(1724735350.755:449): pid=14882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3099" name="file1" dev="loop2" ino=1048709 res=0 errno=0 [ 1000.624870][T13624] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 1000.634933][T13624] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 1000.747194][T14877] bpf: Bad value for 'mode' [ 1000.931143][T14892] futex_wake_op: syz.3.3105 tries to shift op by 32; fix this program [ 1001.188173][ T3865] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.440565][T14901] usb usb8: usbfs: process 14901 (syz.1.3108) did not claim interface 0 before use [ 1002.624994][ T3865] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.161482][ T3865] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.426313][T14918] fuse: Unknown parameter 'grou00000000000000000000' [ 1003.584998][T13950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1003.596832][T13950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1003.605911][T13950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1003.626397][T13950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1003.638337][ T3865] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.654843][T13950] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1003.662175][T13950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1004.515045][T14930] chnl_net:caif_netlink_parms(): no params data found [ 1005.475489][T14950] usb usb8: usbfs: process 14950 (syz.0.3121) did not claim interface 0 before use [ 1005.673812][T13950] Bluetooth: hci2: command tx timeout [ 1005.856622][T14958] futex_wake_op: syz.0.3122 tries to shift op by 32; fix this program [ 1006.008227][T14930] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.035390][T14930] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.096656][T14930] device bridge_slave_0 entered promiscuous mode [ 1006.134465][T14930] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.165992][T14930] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.211999][T14930] device bridge_slave_1 entered promiscuous mode [ 1006.366714][T14930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1006.429588][T14930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1007.140930][T14930] team0: Port device team_slave_0 added [ 1007.311789][T14930] team0: Port device team_slave_1 added [ 1007.417500][T14970] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3127'. [ 1007.521646][T14930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1007.538504][T14930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1007.578247][T14930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1007.600484][T14930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1007.607661][T14930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1007.646078][T13950] Bluetooth: hci2: command tx timeout [ 1007.726208][T14930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1008.018750][T14930] device hsr_slave_0 entered promiscuous mode [ 1008.043245][T14930] device hsr_slave_1 entered promiscuous mode [ 1008.066762][T14930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1008.079306][ T26] audit: type=1326 audit(1724735358.628:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14988 comm="syz.0.3132" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f694a579e79 code=0x0 [ 1008.087065][T14930] Cannot create hsr debugfs directory [ 1008.190310][T14991] loop0: detected capacity change from 128 to 64 [ 1008.641550][ T3865] device hsr_slave_0 left promiscuous mode [ 1008.653126][ T3865] device hsr_slave_1 left promiscuous mode [ 1008.673287][ T3865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1008.708765][ T3865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1008.756648][ T3865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1008.796818][ T3865] device bridge_slave_1 left promiscuous mode [ 1008.811415][ T3865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.842925][ T3865] device bridge_slave_0 left promiscuous mode [ 1008.878728][ T3865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.010048][ T3865] device veth1_macvtap left promiscuous mode [ 1009.022895][ T3865] device veth0_macvtap left promiscuous mode [ 1009.045310][ T3865] device veth1_vlan left promiscuous mode [ 1009.298000][T15004] futex_wake_op: syz.0.3135 tries to shift op by 32; fix this program [ 1009.637733][T13950] Bluetooth: hci2: command tx timeout [ 1010.601484][ T3865] team0 (unregistering): Port device team_slave_1 removed [ 1010.645692][T12247] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1010.654733][ T3865] team0 (unregistering): Port device team_slave_0 removed [ 1010.700464][ T3865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1010.752073][ T3865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1010.988723][T12247] usb 2-1: Using ep0 maxpacket: 8 [ 1011.112667][T12247] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.129664][T12247] usb 2-1: config 0 has no interfaces? [ 1011.303114][T12247] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1011.314153][ T3865] bond0 (unregistering): Released all slaves [ 1011.319173][T12247] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.328707][T12247] usb 2-1: Product: syz [ 1011.332955][T12247] usb 2-1: Manufacturer: syz [ 1011.337574][T12247] usb 2-1: SerialNumber: syz [ 1011.352413][T12247] usb 2-1: config 0 descriptor?? [ 1011.591670][T15018] Driver unsupported XDP return value 0 on prog (id 1061) dev N/A, expect packet loss! [ 1011.617547][T13950] Bluetooth: hci2: command tx timeout [ 1011.739417][T15022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3143'. [ 1013.037225][ T5092] usb 2-1: USB disconnect, device number 36 [ 1013.444665][T14930] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1013.477729][T14930] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1013.554376][T14930] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1013.578015][T14930] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1013.810907][ T3657] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1013.823910][ T3657] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1013.834893][ T3657] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1013.848940][ T3657] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1013.858837][ T3657] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1013.866624][ T3657] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1014.393153][T14930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1014.413554][T14930] 8021q: adding VLAN 0 to HW filter on device team0 [ 1014.426633][T15053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3152'. [ 1014.447709][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1014.455765][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1014.469865][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1014.482293][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1014.501720][ T4019] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.508906][ T4019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1014.549279][T15054] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3152'. [ 1014.555962][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1014.610089][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1014.637932][ T4019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.645069][ T4019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.724468][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1014.738948][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1014.749224][T15059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3154'. [ 1014.768505][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1015.666051][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1015.686411][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1015.695689][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1015.714171][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1015.723913][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1015.749090][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1015.761817][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1015.809428][ T3657] Bluetooth: hci0: command tx timeout [ 1015.839549][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1015.849469][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1015.880072][T14930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1015.926170][T15037] loop4: detected capacity change from 0 to 65536 [ 1016.104066][T10554] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1016.342374][T10554] usb 1-1: Using ep0 maxpacket: 8 [ 1016.457141][T10554] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.563912][T10554] usb 1-1: config 0 has no interfaces? [ 1016.819684][T15045] chnl_net:caif_netlink_parms(): no params data found [ 1017.006252][T15045] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.029528][T10554] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1017.039953][T10554] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.048154][T10554] usb 1-1: Product: syz [ 1017.052456][T10554] usb 1-1: Manufacturer: syz [ 1017.057192][T10554] usb 1-1: SerialNumber: syz [ 1017.058237][T15045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.105741][T15045] device bridge_slave_0 entered promiscuous mode [ 1017.154820][T10554] usb 1-1: config 0 descriptor?? [ 1017.158513][T15045] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.209087][T15045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.250897][T15045] device bridge_slave_1 entered promiscuous mode [ 1017.301503][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1017.333390][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1017.373510][T14930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1017.413649][T15045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1017.450938][T15045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1017.469671][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1017.492052][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1017.561391][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1017.653850][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1017.665745][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1017.674516][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1017.683638][T14930] device veth0_vlan entered promiscuous mode [ 1017.711394][T15045] team0: Port device team_slave_0 added [ 1017.729213][T15045] team0: Port device team_slave_1 added [ 1017.847440][ T3657] Bluetooth: hci0: command tx timeout [ 1018.385456][T14930] device veth1_vlan entered promiscuous mode [ 1018.461406][T14930] device veth0_macvtap entered promiscuous mode [ 1018.470709][T15045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1018.487036][T15045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.538944][T15045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1018.575223][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1018.582785][ T5498] usb 1-1: USB disconnect, device number 17 [ 1018.585518][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1018.599227][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1018.622596][T14930] device veth1_macvtap entered promiscuous mode [ 1018.634942][T15045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1018.659465][T15045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.710334][T15103] loop4: detected capacity change from 0 to 2048 [ 1018.714711][T15045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1018.750029][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1018.781636][T15045] device hsr_slave_0 entered promiscuous mode [ 1018.788719][T15045] device hsr_slave_1 entered promiscuous mode [ 1018.795648][T15045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1018.802836][T15103] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1018.805377][T15045] Cannot create hsr debugfs directory [ 1019.023279][T14930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1019.038725][T14930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.050745][T14930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1019.061956][T14930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.073215][T14930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1019.109257][T14930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.247691][T14930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1019.604500][T10130] EXT4-fs (loop4): unmounting filesystem. [ 1019.726740][T13950] Bluetooth: hci3: unexpected event for opcode 0x041a [ 1019.970760][T13950] Bluetooth: hci0: command tx timeout [ 1020.754262][T15126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3169'. [ 1020.764481][T15126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3169'. [ 1021.907153][T13950] Bluetooth: hci0: command tx timeout [ 1023.451408][ T4012] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.476046][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1023.485235][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1023.506948][T14930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1023.518740][T14930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.528758][T14930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1023.539344][T14930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.549533][T14930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1023.560097][T14930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.569961][T14930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1023.581813][T14930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.595862][T14930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1023.606367][T14930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.619459][T14930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1023.821791][ T4012] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.837127][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1023.855041][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1023.919104][ T4012] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.944519][T14930] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.959059][T14930] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.970814][T14930] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.979997][T14930] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.056000][ T4012] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.124484][ T5092] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1024.210939][ T4009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.226600][ T4009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.269296][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1024.302733][ T4009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.340936][T15160] loop4: detected capacity change from 0 to 2048 [ 1024.357497][ T4009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.385630][ T5092] usb 2-1: Using ep0 maxpacket: 8 [ 1024.407173][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1024.417099][T15160] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1024.832045][ T5092] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.882019][T15171] usb usb8: usbfs: process 15171 (syz.0.3177) did not claim interface 0 before use [ 1025.189827][ T5092] usb 2-1: config 0 has no interfaces? [ 1025.269802][T10130] EXT4-fs (loop4): unmounting filesystem. [ 1025.348651][T15173] tipc: Started in network mode [ 1025.357502][T15173] tipc: Node identity ac1414aa, cluster identity 4711 [ 1025.367896][T15173] tipc: Enabled bearer , priority 10 [ 1025.458350][ T5092] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1025.485492][ T5092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.508228][ T5092] usb 2-1: Product: syz [ 1025.518401][ T5092] usb 2-1: Manufacturer: syz [ 1025.537043][ T5092] usb 2-1: SerialNumber: syz [ 1025.545042][ T5092] usb 2-1: config 0 descriptor?? [ 1026.960171][ T5493] tipc: Node number set to 2886997162 [ 1026.980901][T12247] usb 2-1: USB disconnect, device number 37 [ 1027.113482][ T3762] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1027.612507][ T3762] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1027.628246][ T3762] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.636379][ T3762] usb 5-1: Product: syz [ 1027.641013][ T3762] usb 5-1: Manufacturer: syz [ 1027.646148][ T3762] usb 5-1: SerialNumber: syz [ 1027.671719][ T3762] usb 5-1: config 0 descriptor?? [ 1027.910291][ T3762] usb 5-1: USB disconnect, device number 31 [ 1029.480492][T15206] loop2: detected capacity change from 0 to 2048 [ 1029.531513][T15206] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1030.590003][T15221] usb usb8: usbfs: process 15221 (syz.1.3189) did not claim interface 0 before use [ 1030.865189][T13950] Bluetooth: Unexpected start frame (len 38) [ 1030.878225][T13950] Bluetooth: hci3: link tx timeout [ 1030.883786][T13950] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1030.891941][T13950] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:580 [ 1030.901378][T13950] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 13950, name: kworker/u5:1 [ 1030.910766][T13950] preempt_count: 0, expected: 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1030.915629][T13950] RCU nest depth: 1, expected: 0 [ 1030.920632][T13950] 3 locks held by kworker/u5:1/13950: [ 1030.926554][T13950] #0: ffff8880791dc138 ((wq_completion)hci3#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1030.937321][T13950] #1: ffffc90003207d20 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1030.948813][T13950] #2: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: __check_timeout+0x181/0x460 [ 1030.973709][T13950] CPU: 0 PID: 13950 Comm: kworker/u5:1 Not tainted 6.1.106-syzkaller #0 [ 1030.982087][T13950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1030.992154][T13950] Workqueue: hci3 hci_tx_work [ 1030.996839][T13950] Call Trace: [ 1031.000117][T13950] [ 1031.003038][T13950] dump_stack_lvl+0x1e3/0x2cb [ 1031.007713][T13950] ? nf_tcp_handle_invalid+0x642/0x642 [ 1031.013167][T13950] ? panic+0x764/0x764 [ 1031.017223][T13950] ? preempt_schedule_common+0xa6/0xd0 [ 1031.022693][T13950] __might_resched+0x5cb/0x780 [ 1031.027453][T13950] ? _printk+0xd1/0x111 [ 1031.031617][T13950] ? __wake_up_klogd+0x1c/0x100 [ 1031.036462][T13950] ? __might_sleep+0xb0/0xb0 [ 1031.041047][T13950] ? _printk+0xd1/0x111 [ 1031.045192][T13950] ? vprintk_emit+0x622/0x740 [ 1031.049954][T13950] ? printk_sprint+0x490/0x490 [ 1031.054710][T13950] ? mark_lock+0x9a/0x340 [ 1031.059037][T13950] __mutex_lock+0xbd/0xd80 [ 1031.063459][T13950] ? _printk+0xd1/0x111 [ 1031.067602][T13950] ? hci_cmd_sync_submit+0x3b/0x2e0 [ 1031.072803][T13950] ? mutex_lock_nested+0x10/0x10 [ 1031.077755][T13950] ? hci_conn_get_phy+0x370/0x370 [ 1031.082772][T13950] hci_cmd_sync_submit+0x3b/0x2e0 [ 1031.087788][T13950] hci_disconnect+0xe6/0x2c0 [ 1031.092365][T13950] ? hci_conn_hash_lookup_handle+0x240/0x240 [ 1031.098354][T13950] ? __lock_acquire+0x1f80/0x1f80 [ 1031.103375][T13950] __check_timeout+0x333/0x460 [ 1031.108123][T13950] ? __check_timeout+0x181/0x460 [ 1031.113065][T13950] hci_tx_work+0x138b/0x1ec0 [ 1031.117663][T13950] ? hci_cmd_work+0x660/0x660 [ 1031.122338][T13950] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1031.128220][T13950] ? do_raw_spin_unlock+0x137/0x8a0 [ 1031.133422][T13950] ? process_one_work+0x7a9/0x11d0 [ 1031.138519][T13950] process_one_work+0x8a9/0x11d0 [ 1031.143716][T13950] ? worker_detach_from_pool+0x260/0x260 [ 1031.149444][T13950] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1031.154977][T13950] ? kthread_data+0x4e/0xc0 [ 1031.159475][T13950] ? wq_worker_running+0x97/0x190 [ 1031.164492][T13950] worker_thread+0xa47/0x1200 [ 1031.169158][T13950] ? _raw_spin_unlock+0x40/0x40 [ 1031.174001][T13950] ? release_firmware_map_entry+0x186/0x186 [ 1031.179887][T13950] ? _raw_spin_unlock+0x40/0x40 [ 1031.184736][T13950] kthread+0x28d/0x320 [ 1031.188790][T13950] ? worker_clr_flags+0x190/0x190 [ 1031.193800][T13950] ? kthread_blkcg+0xd0/0xd0 [ 1031.198374][T13950] ret_from_fork+0x1f/0x30 [ 1031.202798][T13950] [ 1031.207770][T13950] [ 1031.208944][T15227] futex_wake_op: syz.1.3193 tries to shift op by 32; fix this program [ 1031.210096][T13950] ============================= [ 1031.210103][T13950] [ BUG: Invalid wait context ] [ 1031.227918][T13950] 6.1.106-syzkaller #0 Tainted: G W [ 1031.234502][T13950] ----------------------------- [ 1031.239350][T13950] kworker/u5:1/13950 is trying to lock: [ 1031.244898][T13950] ffff888078ef09b0 (&hdev->unregister_lock){+.+.}-{3:3}, at: hci_cmd_sync_submit+0x3b/0x2e0 [ 1031.255008][T13950] other info that might help us debug this: [ 1031.260898][T13950] context-{4:4} [ 1031.264358][T13950] 3 locks held by kworker/u5:1/13950: [ 1031.269729][T13950] #0: ffff8880791dc138 ((wq_completion)hci3#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1031.280115][T13950] #1: ffffc90003207d20 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1031.291531][T13950] #2: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: __check_timeout+0x181/0x460 [ 1031.301006][T13950] stack backtrace: [ 1031.304707][T13950] CPU: 0 PID: 13950 Comm: kworker/u5:1 Tainted: G W 6.1.106-syzkaller #0 [ 1031.314501][T13950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1031.324554][T13950] Workqueue: hci3 hci_tx_work [ 1031.329227][T13950] Call Trace: [ 1031.332496][T13950] [ 1031.335412][T13950] dump_stack_lvl+0x1e3/0x2cb [ 1031.340081][T13950] ? nf_tcp_handle_invalid+0x642/0x642 [ 1031.345526][T13950] ? panic+0x764/0x764 [ 1031.349580][T13950] __lock_acquire+0x14b1/0x1f80 [ 1031.354426][T13950] lock_acquire+0x1f8/0x5a0 [ 1031.358917][T13950] ? hci_cmd_sync_submit+0x3b/0x2e0 [ 1031.365139][T13950] ? read_lock_is_recursive+0x10/0x10 [ 1031.370498][T13950] ? __wake_up_klogd+0x1c/0x100 [ 1031.375353][T13950] ? __might_sleep+0xb0/0xb0 [ 1031.380014][T13950] ? _printk+0xd1/0x111 [ 1031.384150][T13950] ? vprintk_emit+0x622/0x740 [ 1031.388814][T13950] ? printk_sprint+0x490/0x490 [ 1031.393565][T13950] ? mark_lock+0x9a/0x340 [ 1031.397881][T13950] __mutex_lock+0x132/0xd80 [ 1031.402371][T13950] ? hci_cmd_sync_submit+0x3b/0x2e0 [ 1031.407552][T13950] ? _printk+0xd1/0x111 [ 1031.411688][T13950] ? hci_cmd_sync_submit+0x3b/0x2e0 [ 1031.416906][T13950] ? mutex_lock_nested+0x10/0x10 [ 1031.421834][T13950] ? hci_conn_get_phy+0x370/0x370 [ 1031.426841][T13950] hci_cmd_sync_submit+0x3b/0x2e0 [ 1031.431851][T13950] hci_disconnect+0xe6/0x2c0 [ 1031.436425][T13950] ? hci_conn_hash_lookup_handle+0x240/0x240 [ 1031.442388][T13950] ? __lock_acquire+0x1f80/0x1f80 [ 1031.447400][T13950] __check_timeout+0x333/0x460 [ 1031.452145][T13950] ? __check_timeout+0x181/0x460 [ 1031.457064][T13950] hci_tx_work+0x138b/0x1ec0 [ 1031.461646][T13950] ? hci_cmd_work+0x660/0x660 [ 1031.466308][T13950] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1031.472196][T13950] ? do_raw_spin_unlock+0x137/0x8a0 [ 1031.477379][T13950] ? process_one_work+0x7a9/0x11d0 [ 1031.482484][T13950] process_one_work+0x8a9/0x11d0 [ 1031.487410][T13950] ? worker_detach_from_pool+0x260/0x260 [ 1031.493033][T13950] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1031.498566][T13950] ? kthread_data+0x4e/0xc0 [ 1031.503098][T13950] ? wq_worker_running+0x97/0x190 [ 1031.508111][T13950] worker_thread+0xa47/0x1200 [ 1031.512775][T13950] ? _raw_spin_unlock+0x40/0x40 [ 1031.517614][T13950] ? release_firmware_map_entry+0x186/0x186 [ 1031.523493][T13950] ? _raw_spin_unlock+0x40/0x40 [ 1031.528331][T13950] kthread+0x28d/0x320 [ 1031.532381][T13950] ? worker_clr_flags+0x190/0x190 [ 1031.537389][T13950] ? kthread_blkcg+0xd0/0xd0 [ 1031.541961][T13950] ret_from_fork+0x1f/0x30 [ 1031.546367][T13950] [ 1031.563271][T14930] EXT4-fs (loop2): unmounting filesystem. [ 1032.167345][ T4012] device hsr_slave_0 left promiscuous mode [ 1032.173684][ T4012] device hsr_slave_1 left promiscuous mode [ 1032.180170][ T4012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1032.188315][ T4012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1032.195842][ T4012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1032.203811][ T4012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.211272][ T4012] device bridge_slave_1 left promiscuous mode [ 1032.218061][ T4012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.225990][ T4012] device bridge_slave_0 left promiscuous mode [ 1032.232688][ T4012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.241870][ T4012] device veth1_macvtap left promiscuous mode [ 1032.247890][ T4012] device veth0_macvtap left promiscuous mode [ 1032.254093][ T4012] device veth1_vlan left promiscuous mode [ 1032.261437][ T4012] device veth0_vlan left promiscuous mode [ 1032.389071][ T4012] team0 (unregistering): Port device team_slave_1 removed [ 1032.415966][ T4012] team0 (unregistering): Port device team_slave_0 removed [ 1032.429320][ T4012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1032.456830][ T4012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1032.528546][ T4012] bond0 (unregistering): Released all slaves [ 1033.188495][ T4012] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.224477][ T4012] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.282737][ T4012] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.358155][ T4012] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.408739][ T4012] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.435583][ T4012] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.479236][T13950] Bluetooth: hci3: command 0x0406 tx timeout [ 1033.505322][T15223] bridge0: port 4(syz_tun) entered disabled state [ 1033.521790][T15223] device syz_tun left promiscuous mode [ 1033.527719][T15223] bridge0: port 4(syz_tun) entered disabled state [ 1033.539661][ T4012] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.605938][ T4012] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.658202][ T4012] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.701081][ T4012] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.778028][ T4012] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.843946][ T4012] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.904828][ T4012] tipc: Disabling bearer [ 1033.910248][ T4012] tipc: Left network mode [ 1033.946533][ T4012] device ip6gretap0 left promiscuous mode [ 1033.952360][ T4012] bridge0: port 3(ip6gretap0) entered disabled state [ 1034.287695][ T4012] device gretap0 left promiscuous mode [ 1034.293396][ T4012] bridge0: port 4(gretap0) entered disabled state [ 1034.816256][ T4012] device hsr_slave_0 left promiscuous mode [ 1034.822716][ T4012] device hsr_slave_1 left promiscuous mode [ 1034.829014][ T4012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1034.836633][ T4012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1034.844225][ T4012] device bridge_slave_1 left promiscuous mode [ 1034.850451][ T4012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.858260][ T4012] device bridge_slave_0 left promiscuous mode [ 1034.864527][ T4012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.874268][ T4012] device hsr_slave_0 left promiscuous mode [ 1034.880611][ T4012] device hsr_slave_1 left promiscuous mode [ 1034.886704][ T4012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1034.894141][ T4012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1034.901717][ T4012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1034.909175][ T4012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1034.916637][ T4012] device bridge_slave_1 left promiscuous mode [ 1034.922927][ T4012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.930814][ T4012] device bridge_slave_0 left promiscuous mode [ 1034.937179][ T4012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.946977][ T4012] device hsr_slave_0 left promiscuous mode [ 1034.953069][ T4012] device hsr_slave_1 left promiscuous mode [ 1034.959254][ T4012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1034.966934][ T4012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1034.974500][ T4012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1034.981900][ T4012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1034.989687][ T4012] device bridge_slave_1 left promiscuous mode [ 1034.995985][ T4012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.004611][ T4012] device bridge_slave_0 left promiscuous mode [ 1035.010755][ T4012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.020378][ T4012] device hsr_slave_0 left promiscuous mode [ 1035.026563][ T4012] device hsr_slave_1 left promiscuous mode [ 1035.032813][ T4012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1035.040246][ T4012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1035.047725][ T4012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1035.055294][ T4012] device batadv0 left promiscuous mode [ 1035.060930][ T4012] bridge0: port 5(batadv0) entered disabled state [ 1035.067953][ T4012] device bridge_slave_1 left promiscuous mode [ 1035.074200][ T4012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.082418][ T4012] device bridge_slave_0 left promiscuous mode [ 1035.088540][ T4012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.099744][ T4012] device veth1_macvtap left promiscuous mode [ 1035.105776][ T4012] device veth0_macvtap left promiscuous mode [ 1035.111862][ T4012] device veth1_vlan left promiscuous mode [ 1035.118390][ T4012] device veth1_macvtap left promiscuous mode [ 1035.124371][ T4012] device veth0_macvtap left promiscuous mode [ 1035.130474][ T4012] device veth1_vlan left promiscuous mode [ 1035.136566][ T4012] device veth0_vlan left promiscuous mode [ 1035.142782][ T4012] device veth1_macvtap left promiscuous mode [ 1035.148971][ T4012] device veth0_macvtap left promiscuous mode [ 1035.154979][ T4012] device veth1_vlan left promiscuous mode [ 1035.160992][ T4012] device veth0_vlan left promiscuous mode [ 1035.316713][ T4012] team0 (unregistering): Port device team_slave_1 removed [ 1035.331114][ T4012] team0 (unregistering): Port device team_slave_0 removed [ 1035.357241][ T4012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1035.382645][ T4012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1035.417985][ T4012] bond0 (unregistering): Released all slaves [ 1035.532387][ T4012] team0 (unregistering): Port device team_slave_1 removed [ 1035.564300][ T4012] team0 (unregistering): Port device team_slave_0 removed [ 1035.590142][ T4012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1035.619413][ T4012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1035.665568][ T4012] bond0 (unregistering): Released all slaves [ 1035.803844][ T4012] team0 (unregistering): Port device team_slave_1 removed [ 1035.830921][ T4012] team0 (unregistering): Port device team_slave_0 removed [ 1035.861705][ T4012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1035.888520][ T4012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1035.931426][ T4012] bond0 (unregistering): Released all slaves [ 1036.051161][ T4012] team0 (unregistering): Port device team_slave_1 removed [ 1036.078018][ T4012] team0 (unregistering): Port device team_slave_0 removed [ 1036.104942][ T4012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1036.185536][ T4012] bond0 (unregistering): Released all slaves [ 1037.425996][ T4012] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.463688][ T4012] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.511211][ T4012] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.567986][ T4012] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.635064][ T4012] tipc: Disabling bearer [ 1037.640464][ T4012] tipc: Left network mode [ 1037.967212][ T4012] bridge0: port 3(gretap0) entered disabled state [ 1037.974771][ T4012] device gretap0 left promiscuous mode [ 1037.980327][ T4012] bridge0: port 3(gretap0) entered disabled state [ 1038.264074][ T4012] device hsr_slave_0 left promiscuous mode [ 1038.270199][ T4012] device hsr_slave_1 left promiscuous mode [ 1038.276805][ T4012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1038.284319][ T4012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1038.291758][ T4012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1038.299367][ T4012] device bridge_slave_1 left promiscuous mode [ 1038.305508][ T4012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.313748][ T4012] device bridge_slave_0 left promiscuous mode [ 1038.319940][ T4012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.329081][ T4012] device veth1_macvtap left promiscuous mode [ 1038.335077][ T4012] device veth0_macvtap left promiscuous mode [ 1038.341159][ T4012] device veth1_vlan left promiscuous mode [ 1038.347092][ T4012] device veth0_vlan left promiscuous mode [ 1038.381404][ T4012] bond1 (unregistering): Released all slaves [ 1038.455022][ T4012] team0 (unregistering): Port device team_slave_1 removed [ 1038.483446][ T4012] team0 (unregistering): Port device team_slave_0 removed [ 1038.511356][ T4012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1038.538169][ T4012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1038.569777][ T4012] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1038.689092][ T4012] bond0 (unregistering): (slave team0): Releasing backup interface [ 1038.709498][ T4012] bond0 (unregistering): Released all slaves