last executing test programs: 1m51.425583047s ago: executing program 1 (id=48): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)="03", 0x1}], 0x1}}], 0x1, 0x4) 1m51.140296514s ago: executing program 1 (id=51): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RSTATu(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="c500"], 0xc5) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 1m50.817525212s ago: executing program 1 (id=57): syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f00000002c0)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) dup3(r0, r1, 0x0) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m50.203449398s ago: executing program 1 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x38b1012, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0) 1m49.916500094s ago: executing program 1 (id=67): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x1a8, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0x2, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0xffffff5a, 0x2, [@TCA_BASIC_EMATCHES={0x174, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="8c9b", @TCF_META_TYPE_VAR="34de"]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x0, 0x1, {0xffff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 1m49.411511427s ago: executing program 1 (id=76): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 1m49.402824217s ago: executing program 3 (id=77): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0x4, 0x2, 0x1, 0x8, r3}, &(0x7f0000000280)=0x10) 1m49.016394776s ago: executing program 32 (id=76): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 1m48.959511118s ago: executing program 3 (id=80): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 1m48.625689446s ago: executing program 3 (id=82): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b40)=""/17, 0x11}, 0x3}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 1m48.290162894s ago: executing program 3 (id=85): syz_mount_image$udf(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5c6, &(0x7f00000006c0)="$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") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400)='fusectl\x00', 0x800, 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 1m47.320863898s ago: executing program 3 (id=89): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000170a0103"], 0x20}, 0x1, 0x0, 0x0, 0x44004}, 0x8094) dup3(r0, r1, 0x0) 1m46.618641066s ago: executing program 3 (id=95): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2341}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1m46.377115041s ago: executing program 33 (id=95): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2341}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1m32.154135251s ago: executing program 4 (id=174): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='westwood', 0x8) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="89000000120081ae08060cdc030000fe7f03234e000000000001ffca1bdcfdd9fb0024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000600)="11d6cb557c849601b143d4f4f2fe4b15f1b62db6", 0x14}], 0x2}, 0x4000000) 1m31.80611359s ago: executing program 4 (id=178): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd1200e1fd0000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES64=r1], 0xfdef) 1m31.40778335s ago: executing program 4 (id=181): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000f4b000/0x1000)=nil, &(0x7f0000f4b000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000cdf000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m31.220819545s ago: executing program 4 (id=184): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1m30.413812704s ago: executing program 4 (id=189): ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 1m29.847417089s ago: executing program 4 (id=194): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&\xc1&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m29.38808379s ago: executing program 34 (id=194): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&\xc1&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 3.802714447s ago: executing program 6 (id=844): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000080)={0x105824100, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) 3.215365951s ago: executing program 2 (id=848): pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x8000}], 0x1, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) write$FUSE_ENTRY(r1, &(0x7f00000024c0)={0x90, 0xffffffffffffffda, r2, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, {0x2, 0xffff, 0x0, 0x0, 0x20000000000007f, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, r3, r4, 0x3, 0x5}}}, 0x90) 3.005742906s ago: executing program 0 (id=850): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r2, &(0x7f0000000200)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, 0x0) 2.773882792s ago: executing program 0 (id=852): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_clone(0x0, 0x0, 0xfffffffffffffed8, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 2.614544856s ago: executing program 6 (id=853): r0 = mq_open(&(0x7f00000004c0)='bata`\xde_sla\x00\x00_1\x00x!\x98\x842\x01\xa3y=\x10\xec\xb9\xfa\xc8\x96\x8d\xd1\xde\x95\x8a\"B\xbdRE\x95jl\\\xcd\r\x13\x05\x9c\x1c\b\xf5\x9d\f\xf0\x99^x.\x0f\xc3l\x9a\x9e\xdd\xca\t\x91v\x9a\xc9\'O\xcf\xb2(\xe3\x89|\xf4;\r\xa999\fzM\xb0.wy\xd8\xe4\xa35q[(\xf2)\x02.\xc5\x960x0}) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r2}, 0x10) 2.460997239s ago: executing program 6 (id=855): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 2.274308864s ago: executing program 6 (id=857): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 2.253278215s ago: executing program 2 (id=858): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24004884) 2.210619626s ago: executing program 0 (id=859): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x20008004) close(r0) 2.01666078s ago: executing program 6 (id=860): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.013553301s ago: executing program 5 (id=861): r0 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) pread64(r0, &(0x7f0000000700)=""/115, 0x73, 0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x8}) close(r0) 1.775832597s ago: executing program 0 (id=862): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14011, 0x0) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x480a8, &(0x7f0000000340)=ANY=[], 0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1.720961028s ago: executing program 2 (id=863): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto(r1, &(0x7f0000000280)='M', 0x1, 0x2000a044, 0x0, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc50}, 0x1) 1.686559849s ago: executing program 5 (id=864): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) 1.481791063s ago: executing program 2 (id=865): r0 = mq_open(&(0x7f00000004c0)='bata`\xde_sla\x00\x00_1\x00x!\x98\x842\x01\xa3y=\x10\xec\xb9\xfa\xc8\x96\x8d\xd1\xde\x95\x8a\"B\xbdRE\x95jl\\\xcd\r\x13\x05\x9c\x1c\b\xf5\x9d\f\xf0\x99^x.\x0f\xc3l\x9a\x9e\xdd\xca\t\x91v\x9a\xc9\'O\xcf\xb2(\xe3\x89|\xf4;\r\xa999\fzM\xb0.wy\xd8\xe4\xa35q[(\xf2)\x02.\xc5\x960x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) prctl$PR_GET_ENDIAN(0x13, 0x0) 1.289765439s ago: executing program 0 (id=867): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x10020006, r0, 0x2}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.23828654s ago: executing program 2 (id=868): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0x9f, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.236130369s ago: executing program 5 (id=869): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 763.397221ms ago: executing program 5 (id=870): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000001c0)=ANY=[], 0xfe, 0xc24, &(0x7f0000001480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x6ff) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x2, 0x0, &(0x7f0000001a00)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x105) unlinkat(r1, &(0x7f0000000040)='./bus\x00', 0x200) 282.64µs ago: executing program 2 (id=871): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0x0, 0xb}, 0x7, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0x838, 0x9, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x5, 0x8001, 0x5, 0x2, 0xd4a, 0xffefe87a, 0x1, 0x8, 0x9, 0x5a, 0x8, 0x9, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x80000001, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x1df, 0xffff, 0x0, 0x2, 0x9, 0xf, 0x101, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x10000, 0x7, 0x4, 0x8, 0x30, 0x1, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x6, 0x0, 0xfff, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x0, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x6, 0xfff, 0x4], [0xfffffffd, 0x9, 0x6, 0x10000, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x0, 0x9, 0x74, 0x283, 0x2, 0x4d, 0x6, 0x4, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x2, 0x80008001, 0x9, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x5, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x420, 0xfe6c, 0x2, 0xfffffff6], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x101, 0x4, 0x9, 0x7, 0xce, 0x2, 0x8001, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x2, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x5, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0x80000001, 0xee6, 0x800, 0x7, 0x3, 0x1, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0xb, 0xf, 0x4, 0x6, 0x7, 0xd, 0x400]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x6, 0x101}, 0xfffffffd, [0x8, 0x4, 0x0, 0x4, 0x1, 0x1, 0x401, 0x0, 0x4, 0x2, 0x2000, 0x3, 0x0, 0x7, 0x2000007e, 0x5, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x77, 0x90, 0x801, 0x0, 0x2, 0x1000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3, 0x0, 0x8, 0x0, 0x0, 0xfffffff9, 0x0, 0x3, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0xffff1e06, 0x3], [0xfffffffd, 0x3, 0x6, 0x4, 0x0, 0x2, 0x3, 0xff, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x6189fbd8, 0x0, 0x400000, 0x0, 0x40000fff, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x9e2b, 0x0, 0xfffffffa, 0x5, 0x7aae62b1, 0x100000, 0x0, 0x40002, 0xffffffff, 0x1c, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x7, 0xfd5], [0x0, 0xfffffffc, 0x0, 0xd1, 0x0, 0x914, 0x0, 0xfa, 0x0, 0x0, 0x7, 0x7, 0x4, 0x1, 0x0, 0x3, 0x0, 0xf, 0x0, 0xfffffffc, 0x0, 0x74d3, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x3, 0x8800000, 0x4, 0x0, 0x0, 0x99, 0xfffffffd, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x836, 0x1, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xf, 0x0, 0x0, 0x0, 0xe9cb], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdf, 0x4a92, 0xf152, 0x0, 0x10004, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffff9bf, 0x0, 0x8000, 0x0, 0x800, 0x81, 0x0, 0x7fffffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x8, 0x0, 0x735, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb6, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0xcfb0]}, 0x45c) 0s ago: executing program 5 (id=872): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r2, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)='p', 0x8200, 0x600}]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.158' (ED25519) to the list of known hosts. [ 83.015591][ T5763] cgroup: Unknown subsys name 'net' [ 83.166574][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.840781][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.549805][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.610988][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.629551][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.637688][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.645710][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.653454][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.660567][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.663501][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.673935][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.683139][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.687829][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.697902][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.702239][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.705746][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.719499][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.728243][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.736465][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.743660][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.751299][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.758788][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.763969][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.773691][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.781514][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.789179][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.345249][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 87.505955][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 87.560522][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 87.625096][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 87.757960][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.765825][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.773516][ T5776] bridge_slave_0: entered allmulticast mode [ 87.781326][ T5776] bridge_slave_0: entered promiscuous mode [ 87.814843][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.822144][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.829700][ T5776] bridge_slave_1: entered allmulticast mode [ 87.837133][ T5776] bridge_slave_1: entered promiscuous mode [ 87.934786][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.942775][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.950882][ T5777] bridge_slave_0: entered allmulticast mode [ 87.958714][ T5777] bridge_slave_0: entered promiscuous mode [ 87.977359][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.984734][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.992398][ T5777] bridge_slave_1: entered allmulticast mode [ 88.000204][ T5777] bridge_slave_1: entered promiscuous mode [ 88.007317][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.014938][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.022343][ T5775] bridge_slave_0: entered allmulticast mode [ 88.030486][ T5775] bridge_slave_0: entered promiscuous mode [ 88.041533][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.050970][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.059251][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.066479][ T5778] bridge_slave_0: entered allmulticast mode [ 88.074048][ T5778] bridge_slave_0: entered promiscuous mode [ 88.092599][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.099950][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.107159][ T5775] bridge_slave_1: entered allmulticast mode [ 88.115100][ T5775] bridge_slave_1: entered promiscuous mode [ 88.124533][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.135612][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.143206][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.151002][ T5778] bridge_slave_1: entered allmulticast mode [ 88.158533][ T5778] bridge_slave_1: entered promiscuous mode [ 88.219423][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.232382][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.255401][ T5776] team0: Port device team_slave_0 added [ 88.266115][ T5776] team0: Port device team_slave_1 added [ 88.295864][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.308461][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.345953][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.369108][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.394003][ T5777] team0: Port device team_slave_0 added [ 88.425649][ T5775] team0: Port device team_slave_0 added [ 88.433644][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.440999][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.467160][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.481673][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.489000][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.515425][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.529645][ T5777] team0: Port device team_slave_1 added [ 88.549036][ T5775] team0: Port device team_slave_1 added [ 88.582243][ T5778] team0: Port device team_slave_0 added [ 88.632605][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.640068][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.666499][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.679929][ T5778] team0: Port device team_slave_1 added [ 88.697082][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.704380][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.730700][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.743627][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.751054][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.777143][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.789244][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.796334][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.822587][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.830453][ T5085] Bluetooth: hci2: command tx timeout [ 88.833350][ T51] Bluetooth: hci0: command tx timeout [ 88.840490][ T5784] Bluetooth: hci1: command tx timeout [ 88.898365][ T5085] Bluetooth: hci3: command tx timeout [ 88.918940][ T5776] hsr_slave_0: entered promiscuous mode [ 88.925769][ T5776] hsr_slave_1: entered promiscuous mode [ 88.960146][ T5777] hsr_slave_0: entered promiscuous mode [ 88.966882][ T5777] hsr_slave_1: entered promiscuous mode [ 88.973968][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.982816][ T5777] Cannot create hsr debugfs directory [ 88.990241][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.997256][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.023322][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.036067][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.043202][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.069450][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.100081][ T5775] hsr_slave_0: entered promiscuous mode [ 89.106595][ T5775] hsr_slave_1: entered promiscuous mode [ 89.113427][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.121357][ T5775] Cannot create hsr debugfs directory [ 89.276604][ T5778] hsr_slave_0: entered promiscuous mode [ 89.283554][ T5778] hsr_slave_1: entered promiscuous mode [ 89.293353][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.301169][ T5778] Cannot create hsr debugfs directory [ 89.671747][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.695028][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.711135][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.722691][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.810871][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.842947][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.855127][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.891965][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.955313][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.993564][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.016084][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.049214][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.091026][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.130595][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.163094][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.170894][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.185959][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.215011][ T2937] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.222474][ T2937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.235978][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.256929][ T4362] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.264188][ T4362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.361288][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.429248][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.466343][ T2937] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.473594][ T2937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.512688][ T2937] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.519882][ T2937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.619688][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.691514][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.740123][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.758904][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.795042][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.802329][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.856151][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.875855][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.883177][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.899456][ T5085] Bluetooth: hci2: command tx timeout [ 90.904945][ T5085] Bluetooth: hci0: command tx timeout [ 90.911065][ T5784] Bluetooth: hci1: command tx timeout [ 90.979191][ T51] Bluetooth: hci3: command tx timeout [ 90.994292][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.001622][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.050261][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.057621][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.097176][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.165300][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.274551][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.397036][ T5775] veth0_vlan: entered promiscuous mode [ 91.414613][ T5777] veth0_vlan: entered promiscuous mode [ 91.445769][ T5775] veth1_vlan: entered promiscuous mode [ 91.465179][ T5777] veth1_vlan: entered promiscuous mode [ 91.584929][ T5777] veth0_macvtap: entered promiscuous mode [ 91.594378][ T5775] veth0_macvtap: entered promiscuous mode [ 91.612087][ T5777] veth1_macvtap: entered promiscuous mode [ 91.632672][ T5775] veth1_macvtap: entered promiscuous mode [ 91.683921][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.707353][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.721117][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.732917][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.746303][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.773955][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.785242][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.797044][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.810791][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.826180][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.835212][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.843983][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.854334][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.876412][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.897119][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.909186][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.918127][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.926891][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.000801][ T5778] veth0_vlan: entered promiscuous mode [ 92.080211][ T5778] veth1_vlan: entered promiscuous mode [ 92.186618][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.195953][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.216063][ T5776] veth0_vlan: entered promiscuous mode [ 92.261138][ T791] cfg80211: failed to load regulatory.db [ 92.315525][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.326672][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.336331][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.353194][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.367135][ T5776] veth1_vlan: entered promiscuous mode [ 92.424296][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.438066][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.450252][ T5778] veth0_macvtap: entered promiscuous mode [ 92.483031][ T5778] veth1_macvtap: entered promiscuous mode [ 92.541341][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.562159][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.576922][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.595928][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.608906][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.635777][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.679957][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.697614][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.720536][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.749983][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.770933][ T5776] veth0_macvtap: entered promiscuous mode [ 92.804444][ T5776] veth1_macvtap: entered promiscuous mode [ 92.827285][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.841336][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.853364][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.863881][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.922180][ T5849] syz.2.5[5849]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.948726][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.959514][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.976972][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.988477][ T51] Bluetooth: hci0: command tx timeout [ 92.989945][ T5085] Bluetooth: hci1: command tx timeout [ 92.993934][ T51] Bluetooth: hci2: command tx timeout [ 93.016101][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.027066][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.038754][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.058965][ T51] Bluetooth: hci3: command tx timeout [ 93.064563][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.107161][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.127216][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.137440][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.149027][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.159248][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.170014][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.182888][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.204789][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.214170][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.224755][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.236536][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.405734][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.427280][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.475559][ T4362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.489090][ T4362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.555632][ T5855] netlink: 'syz.2.8': attribute type 13 has an invalid length. [ 93.571548][ T5855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'. [ 93.594672][ T5855] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.604106][ T5855] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.613826][ T5855] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.622828][ T5855] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.665197][ T5855] netlink: 'syz.2.8': attribute type 13 has an invalid length. [ 93.675660][ T5855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'. [ 93.688705][ T4362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.696628][ T4362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.750670][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.763341][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.104636][ T5864] overlayfs: failed to clone upperpath [ 94.142713][ T5819] IPVS: starting estimator thread 0... [ 94.268587][ T5870] IPVS: using max 19 ests per chain, 45600 per kthread [ 94.567989][ T791] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.772857][ T791] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.787727][ T791] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 94.807463][ T791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.816862][ T5869] loop0: detected capacity change from 0 to 32768 [ 94.868137][ T5869] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (5869) [ 94.925267][ T791] as10x_usb: device has been detected [ 94.970449][ T5869] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 94.989046][ T791] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 95.006015][ T5869] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 95.037469][ T5869] BTRFS info (device loop0): setting nodatasum [ 95.058400][ T51] Bluetooth: hci1: command tx timeout [ 95.058998][ T5085] Bluetooth: hci0: command tx timeout [ 95.064259][ T51] Bluetooth: hci2: command tx timeout [ 95.078438][ T5869] BTRFS info (device loop0): force zlib compression, level 3 [ 95.101248][ T791] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 95.102619][ T5869] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 95.138390][ T51] Bluetooth: hci3: command tx timeout [ 95.187830][ T5869] BTRFS info (device loop0): use lzo compression, level 0 [ 95.195295][ T5869] BTRFS info (device loop0): turning on flush-on-commit [ 95.202597][ T5869] BTRFS info (device loop0): enabling auto defrag [ 95.209441][ T5869] BTRFS info (device loop0): max_inline at 4096 [ 95.215850][ T5869] BTRFS info (device loop0): force zlib compression, level 3 [ 95.231069][ T5869] BTRFS info (device loop0): using free space tree [ 95.244291][ T791] as10x_usb: error during firmware upload part1 [ 95.260243][ T791] Registered device Abilis Systems DVB-Titan [ 95.379746][ T5869] BTRFS info (device loop0): enabling ssd optimizations [ 95.393043][ T5869] BTRFS info (device loop0): auto enabling async discard [ 95.587380][ T5869] fs-verity: sha512 using implementation "sha512-avx2" [ 95.666757][ T5869] BTRFS info (device loop0): setting compat-ro feature flag for VERITY (0x4) [ 95.994521][ T5778] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.038374][ T5906] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 96.843124][ T5765] usb 4-1: USB disconnect, device number 2 [ 96.897156][ T5765] Unregistered device Abilis Systems DVB-Titan [ 96.926740][ T5765] as10x_usb: device has been disconnected [ 97.267758][ T5817] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 97.487059][ T5817] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 97.513722][ T5817] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.534394][ T5817] usb 2-1: config 0 interface 0 has no altsetting 0 [ 97.542951][ T5817] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 97.552663][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.568917][ T5817] usb 2-1: config 0 descriptor?? [ 98.013628][ T5817] mcp2221 0003:04D8:00DD.0001: unbalanced delimiter at end of report description [ 98.048940][ T5817] mcp2221 0003:04D8:00DD.0001: can't parse reports [ 98.065945][ T5817] mcp2221: probe of 0003:04D8:00DD.0001 failed with error -22 [ 98.123299][ T5935] loop0: detected capacity change from 0 to 40427 [ 98.165313][ T5935] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 98.203944][ T5935] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 98.232609][ T5935] F2FS-fs (loop0): invalid crc value [ 98.270565][ T5935] F2FS-fs (loop0): Found nat_bits in checkpoint [ 98.289184][ T791] usb 2-1: USB disconnect, device number 2 [ 98.467006][ T5935] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 98.483459][ T5935] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 99.709124][ T5978] loop3: detected capacity change from 0 to 256 [ 99.733322][ T5978] ======================================================= [ 99.733322][ T5978] WARNING: The mand mount option has been deprecated and [ 99.733322][ T5978] and is ignored by this kernel. Remove the mand [ 99.733322][ T5978] option from the mount to silence this warning. [ 99.733322][ T5978] ======================================================= [ 99.912787][ T5978] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 100.136367][ T28] audit: type=1800 audit(1785808057.065:2): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.46" name="file1" dev="loop3" ino=1048593 res=0 errno=0 [ 100.453830][ T5992] overlayfs: failed to clone upperpath [ 100.610851][ T5999] process 'syz.3.55' launched './file1' with NULL argv: empty string added [ 102.008437][ T6041] netlink: 16 bytes leftover after parsing attributes in process `syz.2.74'. [ 102.082354][ T2937] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.305214][ T2937] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.457446][ T2937] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.517358][ T6049] loop0: detected capacity change from 0 to 128 [ 102.629839][ T2937] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.654481][ T6049] EXT4-fs (loop0): Test dummy encryption mode enabled [ 102.736806][ T6049] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.829099][ T6049] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.292548][ T6070] loop3: detected capacity change from 0 to 512 [ 103.364715][ T6070] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 103.390669][ T6070] UDF-fs: Scanning with blocksize 512 failed [ 103.437639][ T6070] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 103.446079][ T6070] UDF-fs: Scanning with blocksize 1024 failed [ 103.492990][ T5085] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.507905][ T5085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.516074][ T5085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.527711][ T6070] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 103.538357][ T5085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.561358][ T5085] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 103.577891][ T5085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.578208][ T6070] UDF-fs: Scanning with blocksize 2048 failed [ 103.646416][ T6049] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 103.689954][ T6070] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 103.743997][ T6070] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.910799][ T5778] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.123406][ T6095] loop0: detected capacity change from 0 to 256 [ 104.307851][ T6098] Zero length message leads to an empty skb [ 104.747733][ T5777] syz-executor (5777) used greatest stack depth: 20616 bytes left [ 105.392572][ T6075] chnl_net:caif_netlink_parms(): no params data found [ 105.620845][ T51] Bluetooth: hci3: command tx timeout [ 105.745761][ T6133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.101'. [ 105.801750][ T6133] xfrm1: entered promiscuous mode [ 105.819359][ T6133] xfrm1: entered allmulticast mode [ 105.836687][ T5085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.856728][ T5085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.866493][ T5085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.883346][ T5085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.892649][ T5085] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 105.902949][ T5085] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.966757][ T6133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.101'. [ 106.046241][ T2937] hsr_slave_0: left promiscuous mode [ 106.068342][ T2937] hsr_slave_1: left promiscuous mode [ 106.078224][ T2937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.085759][ T2937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.118281][ T2937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.125824][ T2937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.170698][ T2937] bridge_slave_1: left allmulticast mode [ 106.186726][ T2937] bridge_slave_1: left promiscuous mode [ 106.199961][ T2937] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.254709][ T2937] bridge_slave_0: left allmulticast mode [ 106.274901][ T2937] bridge_slave_0: left promiscuous mode [ 106.285380][ T2937] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.352251][ T2937] veth1_macvtap: left promiscuous mode [ 106.367880][ T2937] veth0_macvtap: left promiscuous mode [ 106.375348][ T2937] veth1_vlan: left promiscuous mode [ 106.381890][ T2937] veth0_vlan: left promiscuous mode [ 106.876716][ T6167] loop0: detected capacity change from 0 to 2048 [ 106.989113][ T6167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.101893][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.641919][ T2937] team0 (unregistering): Port device team_slave_1 removed [ 107.691942][ T2937] team0 (unregistering): Port device team_slave_0 removed [ 107.700003][ T51] Bluetooth: hci3: command tx timeout [ 107.741561][ T2937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.819101][ T2937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.939213][ T51] Bluetooth: hci0: command tx timeout [ 108.299699][ T2937] bond0 (unregistering): Released all slaves [ 108.465001][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'. [ 108.498465][ T6075] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.528357][ T6075] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.535664][ T6075] bridge_slave_0: entered allmulticast mode [ 108.549159][ T6075] bridge_slave_0: entered promiscuous mode [ 108.559800][ T6075] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.567099][ T6075] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.574816][ T6075] bridge_slave_1: entered allmulticast mode [ 108.583249][ T6075] bridge_slave_1: entered promiscuous mode [ 108.703341][ T6075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.776065][ T6075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.980762][ T6075] team0: Port device team_slave_0 added [ 109.026646][ T6075] team0: Port device team_slave_1 added [ 109.293274][ T6075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.317503][ T6075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.377749][ T6075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.401815][ T6075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.419288][ T6075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.477681][ T6075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.534858][ T6216] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.128'. [ 109.734256][ T2937] IPVS: stop unused estimator thread 0... [ 109.778310][ T51] Bluetooth: hci3: command tx timeout [ 109.795631][ T6075] hsr_slave_0: entered promiscuous mode [ 109.831278][ T6231] overlayfs: failed to clone upperpath [ 109.847135][ T6075] hsr_slave_1: entered promiscuous mode [ 109.851665][ T6233] loop0: detected capacity change from 0 to 512 [ 109.864777][ T6231] overlayfs: failed to clone upperpath [ 109.896159][ T6233] EXT4-fs: Ignoring removed bh option [ 109.926364][ T6233] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 109.969457][ T6233] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 109.994301][ T6138] chnl_net:caif_netlink_parms(): no params data found [ 110.013053][ T6233] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 110.027091][ T51] Bluetooth: hci0: command tx timeout [ 110.041685][ T6233] EXT4-fs (loop0): 1 truncate cleaned up [ 110.052825][ T6233] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.241399][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.374261][ T6239] syz.2.133 (6239) used greatest stack depth: 20488 bytes left [ 110.509496][ T2937] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.615055][ T2937] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.723580][ T2937] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.782483][ T5817] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.822918][ T6138] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.850596][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.866825][ T6138] bridge_slave_0: entered allmulticast mode [ 110.883131][ T6138] bridge_slave_0: entered promiscuous mode [ 110.918616][ T2937] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.949924][ T6138] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.957226][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.976622][ T6138] bridge_slave_1: entered allmulticast mode [ 110.989204][ T6138] bridge_slave_1: entered promiscuous mode [ 111.010977][ T5817] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 111.033682][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.067923][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.106427][ T6138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.116604][ T5817] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.150662][ T5817] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.162015][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.168147][ T6138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.193405][ T5817] usb 1-1: config 0 descriptor?? [ 111.344997][ T6138] team0: Port device team_slave_0 added [ 111.391488][ T6075] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 111.435054][ T6138] team0: Port device team_slave_1 added [ 111.491295][ T6075] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 111.568668][ T6075] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 111.607444][ T6138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.617420][ T6138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.646927][ T6138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.661819][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 111.673428][ T6138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.689707][ T5817] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 111.706029][ T6138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.763271][ T5817] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 111.772793][ T6138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.844407][ T6075] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 111.865187][ T51] Bluetooth: hci3: command tx timeout [ 112.054379][ T5817] usb 1-1: USB disconnect, device number 2 [ 112.097638][ T51] Bluetooth: hci0: command tx timeout [ 112.173197][ T6138] hsr_slave_0: entered promiscuous mode [ 112.194753][ T6138] hsr_slave_1: entered promiscuous mode [ 112.203869][ T6138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.211614][ T6138] Cannot create hsr debugfs directory [ 112.589021][ T6138] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 112.682200][ T6138] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 112.870624][ T6075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.908407][ T6138] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 112.955569][ T6138] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 113.151416][ T6075] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.207578][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.214811][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.248791][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.256148][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.296878][ T6299] dccp_xmit_packet: Payload too large (65475) for featneg. [ 113.518484][ T2937] hsr_slave_0: left promiscuous mode [ 113.553330][ T2937] hsr_slave_1: left promiscuous mode [ 113.609152][ T2937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.616688][ T2937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.632715][ T2937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.643003][ T2937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.678447][ T2937] bridge_slave_1: left allmulticast mode [ 113.684752][ T2937] bridge_slave_1: left promiscuous mode [ 113.708378][ T2937] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.738941][ T2937] bridge_slave_0: left allmulticast mode [ 113.747612][ T2937] bridge_slave_0: left promiscuous mode [ 113.758209][ T2937] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.832454][ T2937] veth1_macvtap: left promiscuous mode [ 113.838208][ T2937] veth0_macvtap: left promiscuous mode [ 113.843909][ T2937] veth1_vlan: left promiscuous mode [ 113.858243][ T2937] veth0_vlan: left promiscuous mode [ 114.177923][ T51] Bluetooth: hci0: command tx timeout [ 114.958815][ T2937] team0 (unregistering): Port device team_slave_1 removed [ 115.043447][ T2937] team0 (unregistering): Port device team_slave_0 removed [ 115.094314][ T2937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.158019][ T2937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.456759][ T6325] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 115.665085][ T2937] bond0 (unregistering): Released all slaves [ 115.996308][ T6138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.063259][ T6138] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.095474][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.102737][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.162247][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.169502][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.323273][ T6138] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.565529][ T6075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.933881][ T6138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.371448][ T6075] veth0_vlan: entered promiscuous mode [ 117.430667][ T6075] veth1_vlan: entered promiscuous mode [ 117.535435][ T6075] veth0_macvtap: entered promiscuous mode [ 117.562619][ T6075] veth1_macvtap: entered promiscuous mode [ 117.653992][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.687908][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.707765][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.727797][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.751510][ T6075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.796891][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.824256][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.839296][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.854446][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.874514][ T6075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.904811][ T6075] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.917462][ T6075] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.936949][ T6075] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.946166][ T6075] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.986247][ T6138] veth0_vlan: entered promiscuous mode [ 118.049247][ T6138] veth1_vlan: entered promiscuous mode [ 118.180655][ T6138] veth0_macvtap: entered promiscuous mode [ 118.214093][ T6138] veth1_macvtap: entered promiscuous mode [ 118.257244][ T6138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.270670][ T6138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.288271][ T6138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.304039][ T6138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.314133][ T6138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.329654][ T6138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.343618][ T6138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.352983][ T4362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.372108][ T4362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.436057][ T6138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.458952][ T6138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.473567][ T6138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.484333][ T6138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.502993][ T6138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.522170][ T6138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.538288][ T6138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.555129][ T6138] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.567054][ T6138] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.591133][ T6138] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.621043][ T6138] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.673958][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.687723][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.915766][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.948225][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.066283][ T6412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.171'. [ 119.090588][ T6412] netlink: 108 bytes leftover after parsing attributes in process `syz.2.171'. [ 119.100716][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.117607][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.750742][ T6433] syz.4.178 uses obsolete (PF_INET,SOCK_PACKET) [ 120.364048][ T6455] loop4: detected capacity change from 0 to 1024 [ 120.377645][ T6455] EXT4-fs: Ignoring removed bh option [ 120.406849][ T6455] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 120.484175][ T6455] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.548876][ T6464] af_packet: tpacket_rcv: packet too big, clamped from 417 to 4294967272. macoff=96 [ 120.779327][ T6455] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #12: block 7: comm syz.4.184: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 120.826504][ T6455] EXT4-fs (loop4): Remounting filesystem read-only [ 120.852428][ T6467] overlayfs: failed to get metacopy (-5) [ 121.415995][ T6075] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.613937][ T6487] loop5: detected capacity change from 0 to 1024 [ 121.728858][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.946939][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.159394][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.219947][ T6498] netlink: 51 bytes leftover after parsing attributes in process `syz.2.197'. [ 122.302181][ T6138] hfsplus: node 4:3 still has 1 user(s)! [ 122.373079][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.705399][ T6512] loop0: detected capacity change from 0 to 256 [ 123.163590][ T5085] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.174659][ T5085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.186239][ T6518] loop5: detected capacity change from 0 to 1024 [ 123.193323][ T5085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.206796][ T5085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.217514][ T5085] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 123.225998][ T5085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.453161][ T28] audit: type=1800 audit(1785808080.405:3): pid=6518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.203" name="bus" dev="loop5" ino=25 res=0 errno=0 [ 123.676261][ T6526] netlink: 'syz.0.205': attribute type 10 has an invalid length. [ 123.704910][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.734620][ T6526] bridge_slave_1: left allmulticast mode [ 123.744204][ T6526] bridge_slave_1: left promiscuous mode [ 123.765448][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.746419][ T6519] chnl_net:caif_netlink_parms(): no params data found [ 125.239665][ T6565] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 125.286726][ T59] hsr_slave_0: left promiscuous mode [ 125.296024][ T59] hsr_slave_1: left promiscuous mode [ 125.302492][ T51] Bluetooth: hci3: command tx timeout [ 125.320010][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.358260][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.390000][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.400052][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.425059][ T59] bridge_slave_1: left allmulticast mode [ 125.437727][ T59] bridge_slave_1: left promiscuous mode [ 125.448166][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.497018][ T59] bridge_slave_0: left allmulticast mode [ 125.507628][ T59] bridge_slave_0: left promiscuous mode [ 125.521455][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.592074][ T59] veth1_macvtap: left promiscuous mode [ 125.600093][ T59] veth0_macvtap: left promiscuous mode [ 125.605845][ T59] veth1_vlan: left promiscuous mode [ 125.611674][ T59] veth0_vlan: left promiscuous mode [ 126.593349][ T59] team0 (unregistering): Port device team_slave_1 removed [ 126.651520][ T59] team0 (unregistering): Port device team_slave_0 removed [ 126.703203][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.755588][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.132603][ T59] bond0 (unregistering): Released all slaves [ 127.271463][ T6589] netlink: 'syz.0.222': attribute type 1 has an invalid length. [ 127.296189][ T6589] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 127.304114][ T6589] IPv6: NLM_F_CREATE should be set when creating new route [ 127.311467][ T6589] IPv6: NLM_F_CREATE should be set when creating new route [ 127.387809][ T51] Bluetooth: hci3: command tx timeout [ 127.438153][ T6590] netlink: 'syz.0.222': attribute type 1 has an invalid length. [ 127.446602][ T6590] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 127.453981][ T6590] IPv6: NLM_F_CREATE should be set when creating new route [ 127.717046][ T6519] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.767762][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.775101][ T6519] bridge_slave_0: entered allmulticast mode [ 127.805428][ T6519] bridge_slave_0: entered promiscuous mode [ 127.853727][ T6519] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.876894][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.909007][ T6519] bridge_slave_1: entered allmulticast mode [ 127.934092][ T6519] bridge_slave_1: entered promiscuous mode [ 128.052173][ T6519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.105396][ T6519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.226816][ T6519] team0: Port device team_slave_0 added [ 128.267878][ T6519] team0: Port device team_slave_1 added [ 128.541833][ T6519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.580201][ T6519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.677615][ T6519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.700122][ T6519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.707258][ T6519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.787658][ T6519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.847490][ T6643] mmap: syz.2.236 (6643) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 129.018323][ T6519] hsr_slave_0: entered promiscuous mode [ 129.030548][ T6519] hsr_slave_1: entered promiscuous mode [ 129.461848][ T51] Bluetooth: hci3: command tx timeout [ 129.530481][ T6656] Bluetooth: MGMT ver 1.22 [ 129.994239][ T6519] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 130.066833][ T6662] ip_tables: iptables: counters copy to user failed while replacing table [ 130.102883][ T6519] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 130.157430][ T6519] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 130.263447][ T6519] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 130.711085][ T6519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.785765][ T6519] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.819168][ T6679] overlayfs: failed to decode file handle (len=13, type=251, flags=0, err=-22) [ 130.845721][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.853113][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.904670][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.911982][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.537794][ T51] Bluetooth: hci3: command tx timeout [ 131.637716][ T5765] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 131.731486][ T6706] loop5: detected capacity change from 0 to 64 [ 131.786638][ T6703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.828139][ T5765] usb 1-1: Using ep0 maxpacket: 32 [ 131.843058][ T5765] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.845180][ T6703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.874351][ T5765] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.895241][ T6703] bond0 (unregistering): Released all slaves [ 131.903604][ T5765] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 131.919856][ T5765] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.967009][ T5765] usb 1-1: config 0 descriptor?? [ 131.992155][ T5765] hub 1-1:0.0: USB hub found [ 132.035696][ T6519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.217700][ T5765] hub 1-1:0.0: 1 port detected [ 132.873666][ T23] hub 1-1:0.0: activate --> -90 [ 132.944099][ T6519] veth0_vlan: entered promiscuous mode [ 132.994587][ T6519] veth1_vlan: entered promiscuous mode [ 133.112038][ T6519] veth0_macvtap: entered promiscuous mode [ 133.142763][ T6519] veth1_macvtap: entered promiscuous mode [ 133.207136][ T6519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.225331][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.225615][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.285845][ T5820] usb 1-1: USB disconnect, device number 3 [ 133.311597][ T6519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.344779][ T6519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.377045][ T6519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.397856][ T6519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.418873][ T6519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.445726][ T6519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.476683][ T6519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.531310][ T6519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.578075][ T6519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.597571][ T6519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.609854][ T6519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.648202][ T6519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.666593][ T6519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.709312][ T6519] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.728515][ T6519] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.754218][ T6519] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.767129][ T6519] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.810014][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.261'. [ 133.866576][ T6742] veth0_macvtap: left promiscuous mode [ 134.204201][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.247876][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.340578][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.365449][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.696182][ T6762] loop6: detected capacity change from 0 to 512 [ 134.799586][ T6762] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.121967][ T6519] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.883513][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e173000: rx timeout, send abort [ 135.895016][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e173000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 136.426893][ T6809] batadv_slave_1: entered promiscuous mode [ 136.441031][ T6808] batadv_slave_1: left promiscuous mode [ 136.959261][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'. [ 136.986927][ T6831] netlink: 'syz.2.288': attribute type 9 has an invalid length. [ 137.697620][ T175] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 137.821238][ T6828] loop6: detected capacity change from 0 to 32768 [ 137.849632][ T6828] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop6 scanned by syz.6.287 (6828) [ 137.932801][ T175] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.945065][ T6828] BTRFS info (device loop6): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 137.978869][ T175] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 137.997634][ T175] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.000116][ T6828] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 138.050152][ T175] usb 6-1: config 0 descriptor?? [ 138.070711][ T6828] BTRFS info (device loop6): using free space tree [ 138.111444][ T6858] overlayfs: failed to resolve './file0': -2 [ 138.246834][ T6828] BTRFS info (device loop6): enabling ssd optimizations [ 138.289697][ T6847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.308439][ T6847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.316724][ T6828] BTRFS info (device loop6): auto enabling async discard [ 138.329841][ T6847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.340750][ T6847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.378519][ T175] usbhid 6-1:0.0: can't add hid device: -71 [ 138.394854][ T175] usbhid: probe of 6-1:0.0 failed with error -71 [ 138.433637][ T175] usb 6-1: USB disconnect, device number 2 [ 138.568031][ T6878] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 138.760553][ T6888] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.997859][ T6896] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 139.059209][ T175] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 139.144475][ T6519] BTRFS info (device loop6): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 139.197395][ T6903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.305'. [ 139.236991][ T6903] bond0: entered promiscuous mode [ 139.242778][ T6903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.327747][ T175] usb 6-1: config 8 has an invalid interface number: 177 but max is 0 [ 139.336016][ T175] usb 6-1: config 8 has no interface number 0 [ 139.351751][ T175] usb 6-1: config 8 interface 177 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 139.363822][ T175] usb 6-1: config 8 interface 177 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 139.377576][ T175] usb 6-1: config 8 interface 177 has no altsetting 0 [ 139.401947][ T175] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 139.421680][ T175] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.479827][ C0] ir_toy 6-1:8.177: out urb status: -71 [ 139.553446][ T6903] veth3: entered promiscuous mode [ 139.583612][ T6903] bond0: (slave veth3): Enslaving as an active interface with an up link [ 139.676388][ T6908] netlink: 40 bytes leftover after parsing attributes in process `syz.0.306'. [ 139.716787][ T6908] netlink: 24 bytes leftover after parsing attributes in process `syz.0.306'. [ 140.002873][ T175] ir_toy 6-1:8.177: could not write reset command: -110 [ 140.028864][ T175] ir_toy: probe of 6-1:8.177 failed with error -110 [ 140.078994][ T175] usb 6-1: USB disconnect, device number 3 [ 140.437850][ T6933] loop6: detected capacity change from 0 to 512 [ 140.464482][ T6933] EXT4-fs: Ignoring removed oldalloc option [ 140.503770][ T6933] EXT4-fs (loop6): Test dummy encryption mode enabled [ 140.651937][ T6933] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.879822][ T6519] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.198302][ T6963] loop5: detected capacity change from 0 to 512 [ 141.509679][ T6963] EXT4-fs (loop5): Test dummy encryption mode enabled [ 141.549601][ T6963] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 141.583574][ T6963] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 141.616018][ T6963] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.891472][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.034538][ T6996] netlink: 84 bytes leftover after parsing attributes in process `syz.2.328'. [ 142.112571][ T6996] netlink: 232 bytes leftover after parsing attributes in process `syz.2.328'. [ 142.358431][ T7009] netlink: 'syz.0.332': attribute type 1 has an invalid length. [ 142.452112][ T7013] overlayfs: failed to clone upperpath [ 142.628094][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 142.829992][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.857565][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.892660][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.939764][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.967586][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.004928][ T9] usb 7-1: config 0 descriptor?? [ 143.494258][ T9] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 143.533269][ T9] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 144.718320][ T175] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 144.919523][ T175] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 144.939483][ T175] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.950033][ T175] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.968380][ T175] usb 6-1: config 0 interface 0 has no altsetting 0 [ 144.979080][ T175] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.988421][ T175] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.011438][ T175] usb 6-1: config 0 interface 0 has no altsetting 0 [ 145.022151][ C1] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -1 [ 145.030431][ T175] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.030643][ T175] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.075289][ T5820] usb 7-1: USB disconnect, device number 2 [ 145.099596][ T175] usb 6-1: config 0 interface 0 has no altsetting 0 [ 145.134121][ T175] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.166811][ T175] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.197641][ T175] usb 6-1: config 0 interface 0 has no altsetting 0 [ 145.212611][ T175] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.223552][ T175] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.235569][ T7119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 145.244766][ T175] usb 6-1: config 0 interface 0 has no altsetting 0 [ 145.261496][ T175] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.288951][ T175] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.315118][ T175] usb 6-1: config 0 interface 0 has no altsetting 0 [ 145.327051][ T175] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.336628][ T175] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.349568][ T175] usb 6-1: config 0 interface 0 has no altsetting 0 [ 145.364280][ T175] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.397268][ T175] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.425714][ T175] usb 6-1: config 0 interface 0 has no altsetting 0 [ 145.440736][ T175] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 145.455402][ T175] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 145.479025][ T175] usb 6-1: Product: syz [ 145.483299][ T175] usb 6-1: Manufacturer: syz [ 145.497629][ T175] usb 6-1: SerialNumber: syz [ 145.509386][ T175] usb 6-1: config 0 descriptor?? [ 145.522778][ T175] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 145.916570][ C0] usb 6-1: yurex_control_callback - control failed: -71 [ 145.924429][ T5820] usb 6-1: USB disconnect, device number 4 [ 145.949675][ T5820] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 146.251434][ T7151] netlink: 52 bytes leftover after parsing attributes in process `syz.2.358'. [ 146.298514][ T7151] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.306236][ T7151] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.436847][ T7153] netlink: 52 bytes leftover after parsing attributes in process `syz.2.358'. [ 147.170130][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.6.368'. [ 147.268714][ T7184] gadgetfs: bound to dummy_udc driver [ 148.348453][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.6.380'. [ 148.595315][ T7227] loop6: detected capacity change from 0 to 2048 [ 148.763586][ T7227] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.101713][ T6519] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.771632][ T5819] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 150.015560][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.041953][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.066002][ T7257] loop5: detected capacity change from 0 to 8192 [ 150.072633][ T5819] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.100343][ T5819] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.119555][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.128821][ T7257] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 150.146751][ T7257] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 150.159907][ T5819] usb 1-1: config 0 descriptor?? [ 150.168105][ T7257] REISERFS (device loop5): using ordered data mode [ 150.174748][ T7257] reiserfs: using flush barriers [ 150.236409][ T7257] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 150.328277][ T7257] REISERFS (device loop5): checking transaction log (loop5) [ 150.408667][ T7257] REISERFS (device loop5): Using r5 hash to sort names [ 150.458124][ T7257] REISERFS (device loop5): using 3.5.x disk format [ 150.528127][ T7257] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 150.602391][ T5819] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 150.664478][ T5819] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 151.095949][ T7280] loop6: detected capacity change from 0 to 128 [ 151.400467][ T7280] syz.6.394: attempt to access beyond end of device [ 151.400467][ T7280] loop6: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 151.546126][ T7280] syz.6.394: attempt to access beyond end of device [ 151.546126][ T7280] loop6: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 151.570765][ T7280] syz.6.394: attempt to access beyond end of device [ 151.570765][ T7280] loop6: rw=2049, sector=244, nr_sectors = 2 limit=128 [ 151.610127][ T7280] Buffer I/O error on dev loop6, logical block 122, lost async page write [ 151.688518][ T7291] netlink: 'syz.2.396': attribute type 8 has an invalid length. [ 151.994085][ C0] plantronics 0003:047F:FFFF.0004: usb_submit_urb(ctrl) failed: -1 [ 152.266115][ T7310] netlink: 'syz.2.400': attribute type 12 has an invalid length. [ 152.279901][ T7310] netlink: 'syz.2.400': attribute type 29 has an invalid length. [ 152.300134][ T7310] netlink: 148 bytes leftover after parsing attributes in process `syz.2.400'. [ 152.312864][ T7310] netlink: 'syz.2.400': attribute type 2 has an invalid length. [ 152.321890][ T5819] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 152.333786][ T7310] netlink: 'syz.2.400': attribute type 3 has an invalid length. [ 152.354345][ T7310] netlink: 15 bytes leftover after parsing attributes in process `syz.2.400'. [ 152.546433][ T5819] usb 7-1: Using ep0 maxpacket: 16 [ 152.562091][ T5819] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 152.577697][ T5819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.607636][ T5819] usb 7-1: Product: syz [ 152.617856][ T5819] usb 7-1: Manufacturer: syz [ 152.622561][ T5819] usb 7-1: SerialNumber: syz [ 152.858330][ T9] usb 1-1: USB disconnect, device number 4 [ 152.902741][ T5819] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 152.998184][ T5819] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 153.023834][ T5819] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 153.032644][ T5819] usb 7-1: media controller created [ 153.063697][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.064607][ T7332] input: syz0 as /devices/virtual/input/input7 [ 153.319577][ T5819] zl10353_read_register: readreg error (reg=127, ret==-71) [ 153.449768][ T5819] dvb_usb_gl861: probe of 7-1:157.0 failed with error -5 [ 153.497184][ T5819] usb 7-1: USB disconnect, device number 3 [ 153.549517][ T7337] netlink: 'syz.5.409': attribute type 6 has an invalid length. [ 154.179914][ T5819] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 154.421875][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.440931][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.471353][ T5819] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 154.504345][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.536137][ T5819] usb 1-1: config 0 descriptor?? [ 154.910445][ T7353] loop5: detected capacity change from 0 to 32768 [ 154.936792][ T7353] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.414 (7353) [ 154.981572][ T7353] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.016819][ T7353] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 155.059119][ T7353] BTRFS info (device loop5): using free space tree [ 155.216832][ T5819] usb 1-1: string descriptor 0 read error: -22 [ 155.233161][ T7353] BTRFS info (device loop5): enabling ssd optimizations [ 155.240718][ T7353] BTRFS info (device loop5): auto enabling async discard [ 155.428049][ T5819] uclogic 0003:256C:006D.0005: interface is invalid, ignoring [ 155.446661][ T28] audit: type=1800 audit(1785808112.385:4): pid=7399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.414" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 155.714240][ T791] usb 1-1: USB disconnect, device number 5 [ 155.842051][ T7409] loop6: detected capacity change from 0 to 512 [ 155.871653][ T7409] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 156.010145][ T59] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 156.225050][ T6138] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 157.167958][ T5817] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 157.367687][ T5817] usb 7-1: Using ep0 maxpacket: 8 [ 157.375123][ T5817] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 157.384118][ T5817] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.413164][ T5817] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.430944][ T5817] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.467675][ T5817] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.507785][ T5817] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 157.516938][ T5817] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.816190][ T5817] usb 7-1: usb_control_msg returned -32 [ 157.832277][ T5817] usbtmc 7-1:16.0: can't read capabilities [ 158.060370][ T5817] usb 7-1: USB disconnect, device number 4 [ 158.125373][ T7447] loop5: detected capacity change from 0 to 32768 [ 158.164695][ T7447] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.437 (7447) [ 158.245055][ T7447] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 158.267730][ T7447] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 158.305952][ T7447] BTRFS info (device loop5): using free space tree [ 158.446393][ T7447] BTRFS info (device loop5): enabling ssd optimizations [ 158.455505][ T7447] BTRFS info (device loop5): auto enabling async discard [ 158.721310][ T6138] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 159.093970][ T7498] netlink: 'syz.2.446': attribute type 1 has an invalid length. [ 159.127936][ T7498] netlink: 20 bytes leftover after parsing attributes in process `syz.2.446'. [ 159.191374][ T7500] ip6gre1: entered allmulticast mode [ 159.239326][ T143] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 159.920793][ T7493] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 160.888849][ T7517] loop5: detected capacity change from 0 to 32768 [ 160.938510][ T7540] overlayfs: failed to resolve './file0': -2 [ 160.994444][ T7517] [ 160.994444][ T7517] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.994444][ T7517] [ 161.193193][ T7517] ERROR: (device loop5): diWrite: ixpxd invalid [ 161.193193][ T7517] [ 161.239607][ T7550] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.459'. [ 161.260442][ T7517] ERROR: (device loop5): txCommit: [ 161.260442][ T7517] [ 161.503342][ T7556] loop6: detected capacity change from 0 to 256 [ 161.547005][ T6138] [ 161.547005][ T6138] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 161.547005][ T6138] [ 161.604221][ T6138] [ 161.604221][ T6138] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 161.604221][ T6138] [ 162.099874][ T7574] loop5: detected capacity change from 0 to 128 [ 162.168139][ T7574] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 162.215742][ T7574] hpfs: filesystem error: improperly stopped [ 162.256302][ T7574] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 162.278379][ T7574] hpfs: You really don't want any checks? You are crazy... [ 162.285680][ T7574] hpfs: Code page index out of array [ 162.337079][ T7574] hpfs: code page support is disabled [ 162.363668][ T7574] hpfs: hpfs_map_4sectors(): unaligned read [ 162.389772][ T7574] hpfs: hpfs_map_4sectors(): unaligned read [ 162.395761][ T7574] hpfs: filesystem error: unable to find root dir [ 162.751530][ T7596] "syz.6.473" (7596) uses obsolete ecb(arc4) skcipher [ 163.137908][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.226577][ T7611] loop5: detected capacity change from 0 to 2048 [ 163.266378][ T7611] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 163.307278][ T7611] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.819129][ T7629] overlayfs: failed to resolve './file0': -2 [ 164.829709][ T7660] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.837868][ T7660] bridge0: port 3(bond1) entered blocking state [ 164.845449][ T7660] bridge0: port 3(bond1) entered disabled state [ 164.854113][ T7660] bond1: entered allmulticast mode [ 164.863857][ T7660] bond1: entered promiscuous mode [ 164.869923][ T7660] bridge0: port 3(bond1) entered blocking state [ 164.876473][ T7660] bridge0: port 3(bond1) entered forwarding state [ 164.889753][ T7076] bridge0: port 3(bond1) entered disabled state [ 165.007745][ T175] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 165.197633][ T175] usb 6-1: Using ep0 maxpacket: 16 [ 165.214947][ T175] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 165.242094][ T175] usb 6-1: config 0 has no interface number 0 [ 165.261013][ T175] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 165.287590][ T175] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 165.310909][ T175] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 165.327277][ T175] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 165.356640][ T175] usb 6-1: Product: syz [ 165.375061][ T175] usb 6-1: SerialNumber: syz [ 165.398332][ T175] usb 6-1: config 0 descriptor?? [ 165.420124][ T175] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 165.464990][ T175] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input8 [ 165.743315][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 165.810426][ T28] audit: type=1326 audit(1785808122.775:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.6.501" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4d3b9e019 code=0x0 [ 166.537619][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 166.549472][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 166.557319][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 166.565202][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 166.575288][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 166.582687][ T5841] usb 6-1: USB disconnect, device number 5 [ 166.588711][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 166.588733][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 166.672140][ T5841] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 167.831094][ T7747] fuse: Bad value for 'fd' [ 168.046058][ T7752] overlayfs: failed to clone upperpath [ 168.621583][ T7773] loop5: detected capacity change from 0 to 256 [ 168.660709][ T7773] exfat: Deprecated parameter 'utf8' [ 168.685224][ T7773] exfat: Deprecated parameter 'namecase' [ 168.731361][ T7773] exfat: Deprecated parameter 'namecase' [ 168.763032][ T7773] exfat: Deprecated parameter 'utf8' [ 168.815831][ T7773] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 169.235952][ T28] audit: type=1800 audit(1785808126.195:6): pid=7790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.528" name="enable" dev="configfs" ino=14461 res=0 errno=0 [ 169.535695][ T5841] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 169.617393][ T5841] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.932165][ T7816] netlink: 'syz.5.539': attribute type 1 has an invalid length. [ 169.964195][ T7816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.015368][ T7816] bond1: (slave geneve2): making interface the new active one [ 170.050405][ T7816] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 170.900337][ T51] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 170.909358][ T51] Bluetooth: hci3: Injecting HCI hardware error event [ 170.919997][ T5085] Bluetooth: hci3: hardware error 0x00 [ 170.977695][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.080636][ T7846] overlayfs: failed to clone upperpath [ 171.188797][ T7848] bridge1: entered promiscuous mode [ 171.198203][ T7848] bridge1: entered allmulticast mode [ 171.640399][ T7859] bond0: (slave bond_slave_0): Releasing backup interface [ 171.654871][ T7866] netlink: 'syz.5.555': attribute type 19 has an invalid length. [ 172.032596][ T7881] loop5: detected capacity change from 0 to 128 [ 172.080956][ T7881] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 172.119775][ T7881] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 172.236682][ T6138] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 172.899059][ T7914] loop5: detected capacity change from 0 to 7 [ 172.922958][ T7914] Dev loop5: unable to read RDB block 7 [ 172.935895][ T7914] loop5: unable to read partition table [ 172.952921][ T7914] loop5: partition table beyond EOD, truncated [ 172.970125][ T7914] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 172.997628][ T5085] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 173.083146][ T7916] loop5: detected capacity change from 7 to 0 [ 174.027629][ T5820] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 174.207714][ T5820] usb 6-1: Using ep0 maxpacket: 32 [ 174.215356][ T5820] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 174.235497][ T5820] usb 6-1: config 0 has no interface number 0 [ 174.255789][ T5820] usb 6-1: config 0 interface 184 has no altsetting 0 [ 174.275824][ T5820] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 174.295331][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.318305][ T5820] usb 6-1: Product: syz [ 174.322559][ T5820] usb 6-1: Manufacturer: syz [ 174.339469][ T5820] usb 6-1: SerialNumber: syz [ 174.358630][ T5820] usb 6-1: config 0 descriptor?? [ 174.375897][ T5820] smsc75xx v1.0.0 [ 174.593125][ T7968] overlayfs: failed to clone upperpath [ 175.000767][ T5820] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 175.024704][ T5820] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 175.459938][ T5820] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 175.476710][ T7994] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 175.486183][ T5820] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 175.486244][ T5820] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 175.527404][ T5820] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 175.558068][ T5820] usb 6-1: USB disconnect, device number 6 [ 175.900858][ T7998] overlayfs: failed to resolve './file0': -2 [ 177.027785][ T8042] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 177.279647][ T8051] loop5: detected capacity change from 0 to 1024 [ 177.315943][ T8051] EXT4-fs: Ignoring removed orlov option [ 177.418998][ T8051] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.600113][ T28] audit: type=1326 audit(1785808134.555:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.0.607" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4763d9e019 code=0x7ffc0000 [ 177.640885][ T28] audit: type=1326 audit(1785808134.555:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.0.607" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4763d9e019 code=0x7ffc0000 [ 177.703557][ T28] audit: type=1326 audit(1785808134.585:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.0.607" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4763d9e019 code=0x7ffc0000 [ 177.745745][ T28] audit: type=1326 audit(1785808134.585:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.0.607" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4763d9e019 code=0x7ffc0000 [ 177.832963][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.846482][ T28] audit: type=1326 audit(1785808134.585:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.0.607" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4763d9e019 code=0x7ffc0000 [ 177.904134][ T28] audit: type=1326 audit(1785808134.585:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.0.607" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4763d9e019 code=0x7ffc0000 [ 177.940902][ T28] audit: type=1326 audit(1785808134.585:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.0.607" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4763d9e019 code=0x7ffc0000 [ 178.035082][ T28] audit: type=1326 audit(1785808134.585:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.0.607" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4763d9e019 code=0x7ffc0000 [ 178.071517][ T28] audit: type=1326 audit(1785808134.595:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.0.607" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4763d9e019 code=0x7ffc0000 [ 178.105075][ T28] audit: type=1326 audit(1785808134.595:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.0.607" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4763d9e019 code=0x7ffc0000 [ 178.657259][ T8088] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 178.675673][ C1] Illegal XDP return value 16128 on prog (id 50) dev bridge0, expect packet loss! [ 178.836599][ T8088] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 179.367965][ T5765] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 179.531224][ T8118] overlayfs: failed to clone upperpath [ 179.546799][ T8118] overlayfs: failed to clone upperpath [ 179.559603][ T5765] usb 6-1: Using ep0 maxpacket: 8 [ 179.575525][ T5765] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 179.601424][ T5765] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 179.617726][ T5765] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 179.637731][ T5765] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 179.667790][ T5765] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.697893][ T5765] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 179.707195][ T5765] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.947634][ T5765] usb 6-1: usb_control_msg returned -32 [ 179.967718][ T5765] usbtmc 6-1:16.0: can't read capabilities [ 180.383358][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.6.630'. [ 180.398981][ T8145] netlink: 40 bytes leftover after parsing attributes in process `syz.6.630'. [ 180.409165][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.6.630'. [ 180.437200][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.6.630'. [ 180.446847][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.6.630'. [ 180.776862][ T8159] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 180.976611][ T27] usb 6-1: USB disconnect, device number 7 [ 181.219356][ T5085] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 181.583133][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'. [ 182.094901][ T8202] overlayfs: failed to clone upperpath [ 183.995308][ T8249] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.524000][ T8263] xt_hashlimit: size too large, truncated to 1048576 [ 185.635743][ T8303] loop6: detected capacity change from 0 to 2048 [ 185.701957][ T8303] loop6: p1 < > p4 [ 185.701957][ T8303] p4: [ 185.731392][ T8303] loop6: p4 size 722688 extends beyond EOD, truncated [ 186.739256][ T8330] loop5: detected capacity change from 0 to 1024 [ 186.746733][ T8330] EXT4-fs: Ignoring removed orlov option [ 186.847337][ T8330] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.859564][ T8335] loop6: detected capacity change from 0 to 128 [ 186.909480][ T8335] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.967003][ T8335] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 187.186614][ T6519] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.539118][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.617729][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 188.412248][ T8371] loop5: detected capacity change from 0 to 4096 [ 188.480865][ T8376] loop6: detected capacity change from 0 to 128 [ 188.625205][ T8371] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 191.644369][ T8491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.710'. [ 193.777866][ T175] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 193.990102][ T175] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 194.007734][ T175] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.676792][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.684099][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.066488][ T175] usb 6-1: non-Atmel transceiver xxxx0300 [ 195.268486][ T175] usb 6-1: Firmware version (0.0) predates our first public release. [ 195.281443][ T175] usb 6-1: Please update to version 0.2 or newer [ 195.288255][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 195.307705][ T175] usb 6-1: atusb_probe: initialization failed, error = -19 [ 195.331621][ T175] usb 6-1: USB disconnect, device number 8 [ 195.501672][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 195.517887][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 195.534542][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.556381][ T9] usb 7-1: config 0 descriptor?? [ 196.163299][ T8596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.185796][ T8596] batadv_slave_0: entered promiscuous mode [ 196.209491][ T8596] batadv_slave_0: entered allmulticast mode [ 196.605938][ T9] radio-keene 7-1:0.0: V4L2 device registered as radio48 [ 196.864597][ T5765] usb 7-1: USB disconnect, device number 5 [ 198.053715][ T8676] "syz.2.758" (8676) uses obsolete ecb(arc4) skcipher [ 198.069976][ T8676] trusted_key: syz.2.758 sent an empty control message without MSG_MORE. [ 198.127384][ T8679] 9pnet_fd: Insufficient options for proto=fd [ 199.279191][ T7083] tipc: Subscription rejected, illegal request [ 200.547106][ T5820] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 200.585342][ T5820] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 200.857987][ T175] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 201.057900][ T175] usb 7-1: Using ep0 maxpacket: 8 [ 201.065991][ T175] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 201.087705][ T175] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 201.108253][ T175] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 201.127425][ T175] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 201.159879][ T175] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.197583][ T175] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 201.227095][ T175] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.504170][ T175] usb 7-1: usb_control_msg returned -32 [ 201.528024][ T175] usbtmc 7-1:16.0: can't read capabilities [ 201.882920][ T8798] db_root: cannot be changed because it's in use [ 202.307800][ T8810] usbtmc 7-1:16.0: usb_clear_halt returned -32 [ 202.504695][ T5841] usb 7-1: USB disconnect, device number 6 [ 202.897518][ C1] sched: RT throttling activated [ 202.940342][ T8823] overlayfs: failed to resolve './file0': -2 [ 203.050571][ T8805] loop5: detected capacity change from 0 to 131072 [ 203.061358][ T8805] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 203.068238][ T8805] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 203.081602][ T8805] F2FS-fs (loop5): invalid crc value [ 203.129227][ T8805] F2FS-fs (loop5): Found nat_bits in checkpoint [ 203.190034][ T8805] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 203.197171][ T8805] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 203.383125][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 203.383145][ T28] audit: type=1800 audit(1785808160.325:36): pid=8805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.788" name="file1" dev="loop5" ino=7 res=0 errno=0 [ 203.947056][ T8852] netlink: 'syz.0.805': attribute type 11 has an invalid length. [ 204.688821][ T8864] input: syz1 as /devices/virtual/input/input9 [ 205.148097][ T8880] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709551615 [ 205.329230][ T8887] loop6: detected capacity change from 0 to 1024 [ 205.353942][ T8887] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.453902][ T28] audit: type=1800 audit(1785808162.415:37): pid=8887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.820" name="file1" dev="overlay" ino=15 res=0 errno=0 [ 205.593240][ T6519] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.179377][ T8916] loop5: detected capacity change from 0 to 512 [ 206.289463][ T8916] EXT4-fs (loop5): 1 orphan inode deleted [ 206.296596][ T8916] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.355995][ T8916] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.560977][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.310668][ T8942] loop6: detected capacity change from 0 to 256 [ 207.355705][ T8942] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 208.013375][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.847'. [ 208.727709][ T8975] loop5: detected capacity change from 0 to 1764 [ 209.162911][ T8984] input: syz1 as /devices/virtual/input/input10 [ 209.215720][ T8986] input: syz0 as /devices/virtual/input/input11 [ 209.509005][ T8995] netlink: 'syz.6.860': attribute type 19 has an invalid length. [ 209.516828][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.6.860'. [ 209.564029][ T8995] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.573884][ T8995] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.582715][ T8995] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.591690][ T8995] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.643047][ T8995] netlink: 'syz.6.860': attribute type 19 has an invalid length. [ 209.666429][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.6.860'. [ 209.854167][ T9000] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 209.890912][ T9000] overlayfs: failed to set xattr on upper [ 209.948642][ T9000] overlayfs: ...falling back to redirect_dir=nofollow. [ 209.973503][ T9000] overlayfs: ...falling back to index=off. [ 210.001923][ T9000] overlayfs: ...falling back to uuid=null. [ 210.335563][ T9018] input: syz0 as /devices/virtual/input/input12 [ 210.834929][ T9027] loop5: detected capacity change from 0 to 2048 [ 210.936238][ T9027] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 210.977120][ T9027] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 211.051615][ T9027] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.277159][ T9009] loop6: detected capacity change from 0 to 32768 [ 211.432437][ T9033] read_mapping_page failed! [ 211.474147][ T9033] ERROR: (device loop6): txCommit: [ 211.474147][ T9033] [ 211.751211][ T5435] [ 211.753636][ T5435] ============================= [ 211.758896][ T5435] WARNING: suspicious RCU usage [ 211.763809][ T5435] syzkaller #0 Not tainted [ 211.768357][ T5435] ----------------------------- [ 211.773277][ T5435] net/mac80211/iface.c:378 suspicious rcu_dereference_protected() usage! [ 211.782804][ T5435] [ 211.782804][ T5435] other info that might help us debug this: [ 211.782804][ T5435] [ 211.793321][ T5435] [ 211.793321][ T5435] rcu_scheduler_active = 2, debug_locks = 1 [ 211.801586][ T5435] 1 lock held by dhcpcd/5435: [ 211.806541][ T5435] #0: ffffffff8e3d70c8 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2fc/0x1d70 [ 211.815822][ T5435] [ 211.815822][ T5435] stack backtrace: [ 211.821881][ T5435] CPU: 0 PID: 5435 Comm: dhcpcd Not tainted syzkaller #0 [ 211.828961][ T5435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.839082][ T5435] Call Trace: [ 211.842411][ T5435] [ 211.845389][ T5435] dump_stack_lvl+0x18c/0x250 [ 211.850132][ T5435] ? load_image+0x420/0x420 [ 211.854697][ T5435] ? show_regs_print_info+0x20/0x20 [ 211.859966][ T5435] ? load_image+0x420/0x420 [ 211.864534][ T5435] ? print_tainted+0x14c/0x170 [ 211.869369][ T5435] lockdep_rcu_suspicious+0x1e1/0x300 [ 211.874826][ T5435] ieee80211_check_concurrent_iface+0x46b/0x950 [ 211.881146][ T5435] ieee80211_open+0xc1/0x200 [ 211.885801][ T5435] __dev_open+0x2cb/0x430 [ 211.890194][ T5435] ? dev_open+0x190/0x190 [ 211.894594][ T5435] __dev_change_flags+0x1e8/0x6a0 [ 211.899759][ T5435] ? dev_get_flags+0x1c0/0x1c0 [ 211.904578][ T5435] ? apparmor_capable+0x137/0x1a0 [ 211.909661][ T5435] dev_change_flags+0x7c/0x1a0 [ 211.914487][ T5435] devinet_ioctl+0x949/0x1d70 [ 211.919242][ T5435] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 211.924415][ T5435] ? _copy_from_user+0xa5/0xe0 [ 211.929258][ T5435] ? get_user_ifreq+0x12b/0x180 [ 211.934160][ T5435] inet_ioctl+0x42b/0x560 [ 211.938534][ T5435] ? tomoyo_path_number_perm+0x217/0x5e0 [ 211.944232][ T5435] ? inet_shutdown+0x370/0x370 [ 211.949032][ T5435] ? slab_free_freelist_hook+0x130/0x1a0 [ 211.954695][ T5435] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 211.960382][ T5435] ? __kmem_cache_free+0xba/0x1f0 [ 211.965448][ T5435] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 211.971002][ T5435] sock_do_ioctl+0xfc/0x310 [ 211.975550][ T5435] ? sock_show_fdinfo+0xb0/0xb0 [ 211.980464][ T5435] sock_ioctl+0x5be/0x7e0 [ 211.984829][ T5435] ? sock_poll+0x3e0/0x3e0 [ 211.989281][ T5435] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 211.995284][ T5435] ? fd_install+0x60/0x4e0 [ 211.999762][ T5435] ? bpf_lsm_file_ioctl+0x9/0x10 [ 212.004729][ T5435] ? security_file_ioctl+0x80/0xa0 [ 212.009889][ T5435] ? sock_poll+0x3e0/0x3e0 [ 212.014337][ T5435] __se_sys_ioctl+0xfd/0x170 [ 212.018965][ T5435] do_syscall_64+0x55/0xb0 [ 212.023421][ T5435] ? clear_bhb_loop+0x40/0x90 [ 212.028120][ T5435] ? clear_bhb_loop+0x40/0x90 [ 212.032825][ T5435] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.038752][ T5435] RIP: 0033:0x7f5046394378 [ 212.043195][ T5435] Code: 00 00 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 07 89 d0 c3 0f 1f 40 00 48 8b 15 49 3a 0d [ 212.062856][ T5435] RSP: 002b:00007ffef6fe9578 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.071308][ T5435] RAX: ffffffffffffffda RBX: 0000000000000030 RCX: 00007f5046394378 [ 212.079393][ T5435] RDX: 00007ffef6ff9770 RSI: 0000000000008914 RDI: 0000000000000030 [ 212.087391][ T5435] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 212.095380][ T5435] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef7009910 [ 212.103375][ T5435] R13: 00007f50462946c8 R14: 0000000000000028 R15: 0000000000008914 [ 212.111381][ T5435] [ 212.114460][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.120944][ T9038] loop5: detected capacity change from 0 to 8192 [ 212.171822][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 212.182390][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 219.627739][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!