last executing test programs: 12.645213809s ago: executing program 0 (id=619): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getitimer(0xe, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01040000000000000000070000000900010073797a300000000048000000090a010400000000000000000700000208000a4000000000080007400000002a0900010073797a3000000000080005400000002110001180090001006d6574610000000014000000100001000000000000000000000f000a"], 0x90}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r3 = geteuid() mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000500)={[{@subsystem='cpu'}, {@subsystem='memory'}, {@xattr}], [{@uid_eq={'uid', 0x3d, r3}}, {@fsname={'fsname', 0x3d, 'y]'}}, {@uid_lt={'uid<', r3}}, {@seclabel}]}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000100)={0x2000201c}) close(r4) 10.896869517s ago: executing program 0 (id=621): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x42, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 9.196126895s ago: executing program 3 (id=629): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) io_cancel(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0, 0x2}, 0x0) 8.916083456s ago: executing program 3 (id=632): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getitimer(0xe, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01040000000000000000070000000900010073797a300000000048000000090a010400000000000000000700000208000a4000000000080007400000002a0900010073797a3000000000080005400000002110001180090001006d6574610000000014000000100001000000000000000000000f000a"], 0x90}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r3 = geteuid() mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000500)={[{@subsystem='cpu'}, {@subsystem='memory'}, {@xattr}], [{@uid_eq={'uid', 0x3d, r3}}, {@fsname={'fsname', 0x3d, 'y]'}}, {@uid_lt={'uid<', r3}}, {@seclabel}]}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000100)={0x2000201c}) close(r4) 7.102242724s ago: executing program 1 (id=634): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x94) 7.099753873s ago: executing program 3 (id=635): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x7800}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0xff000000, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x230, 0x250, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x0, 0x7, 0x0, 0x0, 0x9}}, @common=@inet=@hashlimit2={{0x150}, {'vxcan1\x00', {0x8, 0xcc5, 0x1a, 0x7, 0x17f2, 0x3, 0x38, 0xb0, 0x8}, {0x5}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) 6.195454128s ago: executing program 1 (id=637): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @rose}, [@rose, @bcast, @default, @null, @null, @rose, @remote, @null]}, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000180)={0x7, 'vcan0\x00', {0x7ff}, 0x100}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5cee313670d5fda3}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x65) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$KVM_GET_PIT(r4, 0xc048ae65, &(0x7f00000007c0)) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x38}}, 0x40000010) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r6, 0x4018aee3, &(0x7f0000000300)=@attr_other={0x0, 0x3, 0xaf8, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) 5.208802097s ago: executing program 4 (id=639): socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) open_tree(0xffffffffffffff9c, 0x0, 0x800) syz_open_dev$MSR(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) 4.102957457s ago: executing program 4 (id=641): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 3.759492858s ago: executing program 2 (id=642): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) io_cancel(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0, 0x2}, 0x0) 3.636617316s ago: executing program 1 (id=643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x80}}, 0x0) 3.322090603s ago: executing program 2 (id=644): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'sit0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.321576862s ago: executing program 1 (id=645): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1}) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3.237479928s ago: executing program 4 (id=646): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 3.164152465s ago: executing program 3 (id=647): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2008400}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 3.044080514s ago: executing program 2 (id=648): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x94) 2.721763559s ago: executing program 4 (id=649): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x4000805}, 0x2004c094) fcntl$setlease(r2, 0x400, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000004c00)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x10}, &(0x7f00000000c0)=0x8) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.696367205s ago: executing program 0 (id=650): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 2.515860794s ago: executing program 3 (id=651): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x14, &(0x7f0000000040)="02000000", 0x4) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04040a00000014fe6704a9ae04"], 0xd) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x1, 0x2000, {0x0, 0x0, 0x0, r6, {}, {0x9, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x8}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004050}, 0x4010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10}, @jmp={0x5, 0x0, 0x3}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f0000000300)=ANY=[@ANYBLOB='shortna\fe=mixed,iocharset=koi8-r,utf8=0,nonumtail=0,iocharset=macromanian,nonumtail=0,shortname=lower,shortname=mixed,rodir,utf8=0,nonumtail=0,rodir,codepage=857,uni_xlate=1,shortname=win95,nonumtail=0,\x00'], 0x26, 0x358, &(0x7f00000008c0)="$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") 2.330722232s ago: executing program 2 (id=652): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfffffffffffffe4e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1.74120002s ago: executing program 1 (id=653): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @rose}, [@rose, @bcast, @default, @null, @null, @rose, @remote, @null]}, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000180)={0x7, 'vcan0\x00', {0x7ff}, 0x100}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5cee313670d5fda3}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x65) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$KVM_GET_PIT(r4, 0xc048ae65, &(0x7f00000007c0)) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x38}}, 0x40000010) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r6, 0x4018aee3, &(0x7f0000000300)=@attr_other={0x0, 0x3, 0xaf8, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) 1.702559073s ago: executing program 4 (id=654): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) io_cancel(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0, 0x2}, 0x0) 1.68404556s ago: executing program 0 (id=655): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) timer_create(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.536498705s ago: executing program 0 (id=656): ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x1, @win={{0x2}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40}}) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000001c0)={0x980915, 0x8081, @name="6736516728a5678c18a4ec047f3f1fa52fe9a9987d0406b3a0c705c611b66f06"}) openat2$dir(0xffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x2c, 0x0, @dev, @local, {[@routing={0x0, 0x0, 0x0, 0x3}]}}}}}, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x1001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd26, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x381, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x121100) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x77}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x800, 0x3}, 0x7, 0x1, 'id0\x00', 'timer0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=@ipv4_delrule={0x24, 0x21, 0xb12becd5a2b54cdf, 0x70bd2a, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r6, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000001ac0)=@ethtool_regs={0x4, 0x5}}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c0000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="0700000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac0000000000"], 0xc4}}, 0x4c050) 1.529280583s ago: executing program 3 (id=657): socket(0x41503864490ca358, 0x6, 0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000880)={0x3ff, {{0x2, 0x4e23, @multicast2}}}, 0x90) socket$inet6(0xa, 0x2, 0x0) 565.679458ms ago: executing program 4 (id=658): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120127528e855067728d000000000010"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 564.228398ms ago: executing program 2 (id=659): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) 178.546451ms ago: executing program 1 (id=660): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x42, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 177.982071ms ago: executing program 2 (id=661): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2008400}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 0s ago: executing program 0 (id=662): syz_open_dev$radio(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000000c0), 0x0, 0x0, 0x20000cc, 0x0) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffc, '\x00', r4, 0xffffffffffffffff, 0x3, 0x4}, 0x50) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) write$binfmt_aout(r6, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) kernel console output (not intermixed with test programs): be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.784253][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.799426][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.806527][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.832615][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.844687][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.851667][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.881034][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.900202][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.907321][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.933785][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.949557][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.956667][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.983270][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.995612][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.002584][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.028844][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.045111][ T4273] device hsr_slave_0 entered promiscuous mode [ 69.052025][ T4273] device hsr_slave_1 entered promiscuous mode [ 69.059557][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.067229][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.096861][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.175299][ T4269] Bluetooth: hci0: command 0x0409 tx timeout [ 69.175312][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 69.175489][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 69.227595][ T4268] device hsr_slave_0 entered promiscuous mode [ 69.238395][ T4268] device hsr_slave_1 entered promiscuous mode [ 69.245012][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.252723][ T4268] Cannot create hsr debugfs directory [ 69.258724][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 69.265546][ T4277] Bluetooth: hci3: command 0x0409 tx timeout [ 69.269051][ T4279] device hsr_slave_0 entered promiscuous mode [ 69.279609][ T4279] device hsr_slave_1 entered promiscuous mode [ 69.286176][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.293733][ T4279] Cannot create hsr debugfs directory [ 69.306489][ T4275] device hsr_slave_0 entered promiscuous mode [ 69.313492][ T4275] device hsr_slave_1 entered promiscuous mode [ 69.320625][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.328305][ T4275] Cannot create hsr debugfs directory [ 69.339028][ T4267] device hsr_slave_0 entered promiscuous mode [ 69.346362][ T4267] device hsr_slave_1 entered promiscuous mode [ 69.352838][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.363692][ T4267] Cannot create hsr debugfs directory [ 69.719109][ T4273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.733369][ T4273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.749631][ T4273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.760320][ T4273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.785926][ T4279] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.810369][ T4279] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.837706][ T4279] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.848083][ T4279] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.889890][ T4268] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.913803][ T4268] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.925258][ T4268] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.948819][ T4268] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.051691][ T4267] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.076718][ T4275] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.088471][ T4275] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.098076][ T4275] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.109235][ T4267] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.118129][ T4267] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.136654][ T4275] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.156141][ T4267] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.219642][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.241049][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.251321][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.274078][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.291064][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.302241][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.322272][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.333266][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.352915][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.374894][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.383397][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.393928][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.401379][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.410286][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.420043][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.427953][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.437860][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.446635][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.453717][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.461778][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.503253][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.512753][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.522161][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.533437][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.540569][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.550571][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.559801][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.569026][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.577600][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.584725][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.592748][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.601905][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.610894][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.621321][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.629708][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.641788][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.669400][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.679735][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.692322][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.701913][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.729131][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.742644][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.760134][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.776906][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.787997][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.797341][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.806269][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.813378][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.821984][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.832101][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.840921][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.849673][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.859450][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.868738][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.881967][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.891236][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.900354][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.907811][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.916429][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.925043][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.953979][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.963133][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.972239][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.985747][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.000217][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.009760][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.031549][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.042455][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.071404][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.086189][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.103532][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.112339][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.121675][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.145345][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.156993][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.176275][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.192117][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.201256][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.211354][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.223306][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.237467][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.246283][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.254537][ T4269] Bluetooth: hci1: command 0x041b tx timeout [ 71.254878][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 71.260902][ T4269] Bluetooth: hci2: command 0x041b tx timeout [ 71.275071][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.286771][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.334680][ T4269] Bluetooth: hci4: command 0x041b tx timeout [ 71.335258][ T4277] Bluetooth: hci3: command 0x041b tx timeout [ 71.354022][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.364024][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.384690][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.391877][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.415213][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.448087][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.478665][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.486210][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.498203][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.504902][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.505009][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.521712][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.532092][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.542178][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.549365][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.558377][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.567459][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.577367][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.584705][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.593007][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.602290][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.648814][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.665698][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.673682][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.694921][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.714970][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.724996][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.736097][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.773178][ T4275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.787083][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.809188][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.821806][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.850412][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.861303][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.878817][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.887952][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.899231][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.909522][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.920062][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.929351][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.938670][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.948679][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.970234][ T4267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.994299][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.027928][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.037133][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.052471][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.062528][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.079623][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.090902][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.103285][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.156813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.185844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.198850][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.252518][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.262722][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.322176][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.339515][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.383743][ T4273] device veth0_vlan entered promiscuous mode [ 72.407950][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.425643][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.467929][ T4273] device veth1_vlan entered promiscuous mode [ 72.505799][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.513968][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.524809][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.555331][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.568961][ T4268] device veth0_vlan entered promiscuous mode [ 72.586513][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.606381][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.613957][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.644488][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.664681][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.710968][ T4273] device veth0_macvtap entered promiscuous mode [ 72.741459][ T4268] device veth1_vlan entered promiscuous mode [ 72.769329][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.782119][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.790856][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.800230][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.809882][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.818998][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.826911][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.835075][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.849372][ T4273] device veth1_macvtap entered promiscuous mode [ 72.860933][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.920486][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.932161][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.962556][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.979118][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.996758][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.015068][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.034539][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.043713][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.055747][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.065840][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.077893][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.100768][ T4268] device veth0_macvtap entered promiscuous mode [ 73.138995][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.152019][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.169169][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.182042][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.195460][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.205186][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.213130][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.242547][ T4268] device veth1_macvtap entered promiscuous mode [ 73.253430][ T4275] device veth0_vlan entered promiscuous mode [ 73.263594][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.277166][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.287294][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.308034][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.317958][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.327530][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.334609][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 73.337406][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.342651][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 73.358059][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 73.367203][ T4275] device veth1_vlan entered promiscuous mode [ 73.376376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.387403][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.396504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.405463][ T4267] device veth0_vlan entered promiscuous mode [ 73.414612][ T4277] Bluetooth: hci3: command 0x040f tx timeout [ 73.420681][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 73.438141][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.449321][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.461033][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.469150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.479373][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.488210][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.496863][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.505952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.520233][ T4267] device veth1_vlan entered promiscuous mode [ 73.632290][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.643569][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.659808][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.669135][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.677847][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.686296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.698212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.706806][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.716318][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.725468][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.733887][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.745958][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.755500][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.766428][ T4275] device veth0_macvtap entered promiscuous mode [ 73.791089][ T4268] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.801804][ T4268] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.811230][ T4268] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.820872][ T4268] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.831800][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.843228][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.851768][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.860721][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.869091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.879557][ T4267] device veth0_macvtap entered promiscuous mode [ 73.889856][ T4275] device veth1_macvtap entered promiscuous mode [ 73.899450][ T4279] device veth0_vlan entered promiscuous mode [ 73.917844][ T4267] device veth1_macvtap entered promiscuous mode [ 73.952537][ T4279] device veth1_vlan entered promiscuous mode [ 73.959582][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.968205][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.999662][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.011003][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.023395][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.034649][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.046473][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.076831][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.088814][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.099022][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.116486][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.127315][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.138740][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.149474][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.165178][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.181278][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.193794][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.204082][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.214862][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.224832][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.235471][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.246996][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.266264][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.276460][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.286500][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.296685][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.307923][ T4295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.319836][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.323104][ T4295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.341962][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.352675][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.363342][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.373343][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.384852][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.396440][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.417870][ T4267] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.427309][ T4267] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.437798][ T4267] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.446819][ T4267] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.459878][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.469192][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.478148][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.492899][ T4279] device veth0_macvtap entered promiscuous mode [ 74.502726][ T4275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.516351][ T4275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.525759][ T4275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.535202][ T4275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.581757][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.615450][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.631145][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.661927][ T4279] device veth1_macvtap entered promiscuous mode [ 74.780319][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.791926][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.806161][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.822542][ T4351] loop1: detected capacity change from 0 to 512 [ 74.824260][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.836060][ T4351] EXT4-fs: Ignoring removed nobh option [ 74.847182][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.863184][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.873503][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.890307][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.902853][ T4351] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.2: iget: bad i_size value: 38620345925642 [ 74.920093][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.941633][ T4351] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2: couldn't read orphan inode 15 (err -117) [ 74.956414][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.968497][ T4351] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 74.970436][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.998304][ T4295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.013789][ T4295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.044949][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.053144][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.095214][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.106567][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.117151][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.141075][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.159631][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.171673][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.199265][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.216843][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.233276][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.250710][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.272588][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.285332][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.322737][ T4295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.334020][ T4295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.336550][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.356291][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.365527][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.395627][ T4279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.405544][ T4279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.415219][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 75.415239][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 75.421250][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 75.423429][ T4279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.447121][ T4279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.463727][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.483597][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.494648][ T4269] Bluetooth: hci3: command 0x0419 tx timeout [ 75.494956][ T4277] Bluetooth: hci4: command 0x0419 tx timeout [ 75.520788][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.571594][ T4333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.710336][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 75.722411][ T4333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.850211][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.537242][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.573438][ T4365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.604718][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.645340][ T4365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.688525][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.705130][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.884564][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.902750][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.918813][ T4370] loop1: detected capacity change from 0 to 4096 [ 76.948789][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.084622][ T4376] Bluetooth: MGMT ver 1.22 [ 77.854389][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.879892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.368524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 80.042316][ T4402] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.294716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 80.304198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 80.313476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 80.322244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 80.330710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 80.338968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 80.348055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 80.401515][ T4390] loop0: detected capacity change from 0 to 32768 [ 81.147067][ T4417] Zero length message leads to an empty skb [ 81.749784][ T126] cfg80211: failed to load regulatory.db [ 81.864529][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.108936][ T14] usb 1-1: config 0 has no interfaces? [ 82.126209][ T14] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 82.144448][ T14] usb 1-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 82.164780][ T14] usb 1-1: Manufacturer: syz [ 82.192055][ T14] usb 1-1: config 0 descriptor?? [ 85.462173][ T4456] loop4: detected capacity change from 0 to 256 [ 85.807585][ T4454] ======================================================= [ 85.807585][ T4454] WARNING: The mand mount option has been deprecated and [ 85.807585][ T4454] and is ignored by this kernel. Remove the mand [ 85.807585][ T4454] option from the mount to silence this warning. [ 85.807585][ T4454] ======================================================= [ 85.843606][ T4454] cgroup: Unknown subsys name 'uid' [ 85.874986][ T4456] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 87.598720][ T14] usb 1-1: USB disconnect, device number 2 [ 88.994542][ T4313] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.224487][ T4313] usb 5-1: device descriptor read/64, error -71 [ 89.454251][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.504324][ T4313] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.664335][ T4313] usb 5-1: device descriptor read/64, error -71 [ 89.694352][ T27] usb 4-1: device descriptor read/64, error -71 [ 89.785624][ T4313] usb usb5-port1: attempt power cycle [ 89.974404][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.134923][ T27] usb 4-1: device descriptor read/64, error -71 [ 90.296431][ T4313] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 90.306331][ T27] usb usb4-port1: attempt power cycle [ 91.074665][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 91.145943][ T4313] usb 5-1: device descriptor read/8, error -71 [ 91.414770][ T27] usb 4-1: device not accepting address 4, error -71 [ 91.434218][ T4313] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 94.131355][ T4522] cgroup: Unknown subsys name 'uid' [ 94.284285][ T4313] usb 5-1: device descriptor read/8, error -71 [ 94.482845][ T4313] usb usb5-port1: unable to enumerate USB device [ 94.785169][ T4525] cgroup: Unknown subsys name 'uid' [ 97.054144][ C0] sched: RT throttling activated [ 97.122786][ T4361] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.364283][ T14] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.709932][ T4361] usb 2-1: config 0 has no interfaces? [ 97.793035][ T4361] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 98.186949][ T4361] usb 2-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 98.196464][ T4361] usb 2-1: Manufacturer: syz [ 98.206605][ T4361] usb 2-1: config 0 descriptor?? [ 98.213185][ T4361] usb 2-1: can't set config #0, error -71 [ 98.221203][ T4361] usb 2-1: USB disconnect, device number 2 [ 98.466163][ T14] usb 1-1: device not accepting address 3, error -71 [ 99.847670][ T4314] libceph: connect (1)[c::]:6789 error -101 [ 99.959645][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 100.142144][ T4584] cgroup: Unknown subsys name 'uid' [ 100.239484][ T4314] libceph: mon0 (1)[c::]:6789 connect error [ 100.340241][ T4573] ceph: No mds server is up or the cluster is laggy [ 100.414301][ T14] usb 1-1: device descriptor read/64, error -71 [ 100.545518][ T14] usb usb1-port1: attempt power cycle [ 102.534534][ T126] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 102.774062][ T126] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 102.848307][ T126] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.064352][ T126] usb 2-1: config 0 has no interfaces? [ 103.179896][ T126] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 103.364409][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.513914][ T126] usb 2-1: config 0 descriptor?? [ 104.984239][ T4361] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 105.030884][ T4314] usb 2-1: USB disconnect, device number 3 [ 105.286284][ T4361] usb 4-1: config 0 has no interfaces? [ 105.295092][ T4361] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 105.994471][ T4361] usb 4-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 106.049035][ T4361] usb 4-1: Manufacturer: syz [ 106.310551][ T4361] usb 4-1: config 0 descriptor?? [ 110.546100][ T7] usb 4-1: USB disconnect, device number 6 [ 110.576188][ T4636] loop4: detected capacity change from 0 to 16 [ 110.588872][ T4636] erofs: (device loop4): mounted with root inode @ nid 36. [ 110.601372][ T4636] syz.4.62: attempt to access beyond end of device [ 110.601372][ T4636] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 110.601824][ T4635] cgroup: Unknown subsys name 'uid' [ 110.630744][ T4636] syz.4.62: attempt to access beyond end of device [ 110.630744][ T4636] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 110.648401][ T4636] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 110.661061][ T26] audit: type=1800 audit(1772821421.470:2): pid=4636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.62" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 110.713774][ T4636] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 110.997531][ T4636] syz.4.62 (4636) used greatest stack depth: 19888 bytes left [ 111.005813][ T26] audit: type=1326 audit(1772821421.810:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4632 comm="syz.4.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e019c799 code=0x7fc00000 [ 113.724427][ T27] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 114.526384][ T27] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 114.554195][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.574198][ T27] usb 4-1: config 0 has no interfaces? [ 114.579945][ T27] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 114.600765][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.725238][ T27] usb 4-1: config 0 descriptor?? [ 114.944360][ T4314] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 116.074370][ T4689] cgroup: Unknown subsys name 'uid' [ 116.658180][ T4314] usb 2-1: config 0 has no interfaces? [ 116.668370][ T4314] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 116.683314][ T4314] usb 2-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 116.694529][ T4314] usb 2-1: Manufacturer: syz [ 116.711475][ T4693] usb 4-1: USB disconnect, device number 7 [ 116.732615][ T4314] usb 2-1: config 0 descriptor?? [ 120.855262][ T4352] usb 2-1: USB disconnect, device number 4 [ 122.316179][ T4720] loop4: detected capacity change from 0 to 4096 [ 123.548996][ T4742] cgroup: Unknown subsys name 'uid' [ 124.122169][ T129] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 124.318288][ T129] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 124.334417][ T129] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.385914][ T129] usb 3-1: config 0 has no interfaces? [ 124.404203][ T129] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 124.423720][ T129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.454925][ T129] usb 3-1: config 0 descriptor?? [ 124.668681][ T4314] usb 3-1: USB disconnect, device number 2 [ 124.670389][ T126] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 124.885352][ T126] usb 2-1: Using ep0 maxpacket: 32 [ 124.897507][ T126] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.938143][ T126] usb 2-1: config 0 has no interfaces? [ 124.971659][ T126] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 125.004274][ T27] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 125.022200][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.047703][ T126] usb 2-1: Product: syz [ 125.052153][ T126] usb 2-1: Manufacturer: syz [ 125.072374][ T126] usb 2-1: SerialNumber: syz [ 125.103534][ T126] usb 2-1: config 0 descriptor?? [ 125.226891][ T27] usb 5-1: config 0 has no interfaces? [ 125.244600][ T27] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 125.281162][ T27] usb 5-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 125.361849][ T27] usb 5-1: Manufacturer: syz [ 125.393888][ T27] usb 5-1: config 0 descriptor?? [ 125.737908][ T4758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.842254][ T4758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.388376][ T27] usb 2-1: USB disconnect, device number 5 [ 129.807651][ T129] usb 5-1: USB disconnect, device number 6 [ 131.187880][ T4788] loop2: detected capacity change from 0 to 512 [ 131.264276][ T4788] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 131.294266][ T4788] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 131.458477][ T4792] cgroup: Unknown subsys name 'uid' [ 131.698811][ T4788] EXT4-fs (loop2): 1 truncate cleaned up [ 131.782997][ T4788] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 132.108934][ T4789] loop1: detected capacity change from 0 to 4096 [ 132.265810][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 132.643603][ T4361] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 132.846343][ T4361] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 132.859422][ T4361] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.884056][ T4361] usb 1-1: config 0 has no interfaces? [ 132.908130][ T4361] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 132.933291][ T4361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.977697][ T4361] usb 1-1: config 0 descriptor?? [ 133.006335][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.012848][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.236152][ T4313] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 134.654487][ T4313] usb 2-1: Using ep0 maxpacket: 32 [ 134.695771][ T4313] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.774531][ T4314] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 134.840188][ T4313] usb 2-1: config 0 has no interfaces? [ 134.903811][ T4693] libceph: connect (1)[c::]:6789 error -101 [ 134.943158][ T4313] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 134.954779][ T4693] libceph: mon0 (1)[c::]:6789 connect error [ 134.968859][ T4313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.982244][ T4313] usb 2-1: Product: syz [ 134.991210][ T4313] usb 2-1: Manufacturer: syz [ 135.000920][ T4314] usb 4-1: config 0 has no interfaces? [ 135.010972][ T4313] usb 2-1: SerialNumber: syz [ 135.018231][ T4314] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 135.063324][ T4313] usb 2-1: config 0 descriptor?? [ 135.076084][ T4314] usb 4-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 135.095210][ T4314] usb 4-1: Manufacturer: syz [ 135.136608][ T4314] usb 4-1: config 0 descriptor?? [ 135.162799][ T4824] ceph: No mds server is up or the cluster is laggy [ 136.315023][ T4693] usb 1-1: USB disconnect, device number 6 [ 138.479691][ T4693] usb 2-1: USB disconnect, device number 6 [ 138.895017][ T4850] cgroup: Unknown subsys name 'uid' [ 138.930893][ T4848] loop2: detected capacity change from 0 to 512 [ 139.109227][ T4848] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 139.372949][ T4848] EXT4-fs (loop2): 1 truncate cleaned up [ 139.458516][ T4848] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 140.461191][ T4693] usb 4-1: USB disconnect, device number 8 [ 140.602383][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 143.182839][ T4885] loop3: detected capacity change from 0 to 40427 [ 143.194050][ T4885] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 143.202397][ T4885] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 143.215037][ T4885] F2FS-fs (loop3): invalid crc value [ 143.354997][ T4885] F2FS-fs (loop3): Found nat_bits in checkpoint [ 143.399675][ T4885] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 143.407048][ T4885] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 143.834228][ T4313] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 144.484440][ T4313] usb 3-1: Using ep0 maxpacket: 32 [ 144.581551][ T4313] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 144.612029][ T4313] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.651052][ T4313] usb 3-1: config 0 has no interface number 0 [ 144.670451][ T4313] usb 3-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.720577][ T4313] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 144.876474][ T4313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.890959][ T4906] cgroup: Unknown subsys name 'uid' [ 144.994738][ T4313] usb 3-1: Product: syz [ 144.999643][ T4313] usb 3-1: Manufacturer: syz [ 145.005361][ T4313] usb 3-1: SerialNumber: syz [ 145.012195][ T4313] usb 3-1: config 0 descriptor?? [ 145.033838][ T4313] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 145.231378][ T4913] loop0: detected capacity change from 0 to 512 [ 145.233157][ T4313] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 145.264027][ T4913] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 145.301134][ T4313] quatech2: probe of 3-1:0.51 failed with error -8 [ 145.406464][ T4913] EXT4-fs (loop0): 1 truncate cleaned up [ 145.414051][ T4913] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 145.442109][ T4311] usb 3-1: USB disconnect, device number 3 [ 145.638729][ T4920] overlayfs: overlapping lowerdir path [ 146.690072][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 147.060971][ T4936] cgroup: Unknown subsys name 'uid' [ 148.698658][ T4953] loop2: detected capacity change from 0 to 40427 [ 148.706680][ T4953] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 148.715134][ T4953] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 148.725778][ T4953] F2FS-fs (loop2): invalid crc value [ 148.803659][ T4953] F2FS-fs (loop2): Found nat_bits in checkpoint [ 148.853073][ T4953] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 148.860417][ T4953] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 151.180929][ T4980] cgroup: Unknown subsys name 'uid' [ 152.735370][ T4347] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 153.074568][ T4347] usb 1-1: Using ep0 maxpacket: 32 [ 153.082121][ T4347] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 153.111879][ T5005] cgroup: Unknown subsys name 'uid' [ 153.219701][ T4347] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.238652][ T4347] usb 1-1: config 0 has no interface number 0 [ 153.245721][ T4347] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 153.265592][ T4347] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 153.292304][ T4347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.304793][ T4347] usb 1-1: Product: syz [ 153.309129][ T4347] usb 1-1: Manufacturer: syz [ 153.314788][ T4347] usb 1-1: SerialNumber: syz [ 153.332733][ T4347] usb 1-1: config 0 descriptor?? [ 153.344048][ T4347] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 153.585440][ T5013] loop3: detected capacity change from 0 to 40427 [ 153.598910][ T5013] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 153.607594][ T5013] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 153.622920][ T4347] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 153.630260][ T4347] quatech2: probe of 1-1:0.51 failed with error -8 [ 153.645526][ T5013] F2FS-fs (loop3): invalid crc value [ 153.655843][ T5013] F2FS-fs (loop3): Found nat_bits in checkpoint [ 153.687139][ T5013] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 153.695128][ T5013] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 153.880779][ T27] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 153.923893][ T126] usb 1-1: USB disconnect, device number 7 [ 154.082851][ T5025] overlayfs: overlapping lowerdir path [ 154.084278][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 154.112076][ T27] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 154.347229][ T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.399021][ T27] usb 5-1: config 0 has no interface number 0 [ 154.431393][ T27] usb 5-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 154.498095][ T27] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 154.508703][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.556964][ T27] usb 5-1: Product: syz [ 154.573693][ T27] usb 5-1: Manufacturer: syz [ 154.600087][ T27] usb 5-1: SerialNumber: syz [ 154.641605][ T27] usb 5-1: config 0 descriptor?? [ 154.684026][ T27] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 154.883198][ T27] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 154.905253][ T27] quatech2: probe of 5-1:0.51 failed with error -8 [ 155.052512][ T5033] overlayfs: overlapping lowerdir path [ 155.132696][ T5015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.154556][ T5015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.169525][ T5039] cgroup: Unknown subsys name 'uid' [ 155.627361][ T126] usb 5-1: USB disconnect, device number 7 [ 159.358734][ T5070] cgroup: Unknown subsys name 'uid' [ 160.006102][ T5077] loop2: detected capacity change from 0 to 40427 [ 160.013787][ T5077] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 160.021665][ T5077] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 160.035887][ T5077] F2FS-fs (loop2): invalid crc value [ 160.081602][ T5077] F2FS-fs (loop2): Found nat_bits in checkpoint [ 160.219653][ T5077] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 160.227829][ T5077] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 160.621774][ T4313] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 160.804297][ T4313] usb 2-1: Using ep0 maxpacket: 32 [ 160.812171][ T4313] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 160.894607][ T4313] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.935576][ T4313] usb 2-1: config 0 has no interface number 0 [ 160.943416][ T4313] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 160.952184][ T5095] cgroup: Unknown subsys name 'uid' [ 160.970962][ T4313] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 161.000700][ T4313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.049472][ T4313] usb 2-1: Product: syz [ 161.068732][ T4313] usb 2-1: Manufacturer: syz [ 161.088932][ T4313] usb 2-1: SerialNumber: syz [ 161.111170][ T4313] usb 2-1: config 0 descriptor?? [ 161.134062][ T4313] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 161.334021][ T4313] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 161.369453][ T4313] quatech2: probe of 2-1:0.51 failed with error -8 [ 161.379186][ T5098] loop3: detected capacity change from 0 to 4096 [ 161.416596][ T5106] overlayfs: overlapping lowerdir path [ 161.552412][ T4313] usb 2-1: USB disconnect, device number 7 [ 163.595846][ T5126] cgroup: Unknown subsys name 'uid' [ 164.400054][ T5134] loop1: detected capacity change from 0 to 40427 [ 164.424798][ T5134] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 164.432617][ T5134] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 164.442237][ T5134] F2FS-fs (loop1): invalid crc value [ 164.516184][ T5134] F2FS-fs (loop1): Found nat_bits in checkpoint [ 164.582639][ T5134] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 164.589934][ T5134] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 167.055326][ T5158] cgroup: Unknown subsys name 'uid' [ 167.554437][ T4317] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 167.758060][ T4317] usb 1-1: config 0 has no interfaces? [ 167.765888][ T4317] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 167.800502][ T5167] loop4: detected capacity change from 0 to 4096 [ 167.823161][ T4317] usb 1-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 167.843847][ T4317] usb 1-1: Manufacturer: syz [ 167.878149][ T4317] usb 1-1: config 0 descriptor?? [ 171.171845][ T4352] usb 1-1: USB disconnect, device number 8 [ 172.033480][ T5216] cgroup: Unknown subsys name 'uid' [ 175.814390][ T4334] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 176.031264][ T4334] usb 4-1: config 0 has no interfaces? [ 176.068390][ T4334] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 176.214958][ T4334] usb 4-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 176.340565][ T4334] usb 4-1: Manufacturer: syz [ 176.518031][ T4334] usb 4-1: config 0 descriptor?? [ 181.121579][ T4693] usb 4-1: USB disconnect, device number 9 [ 181.427285][ T5266] loop3: detected capacity change from 0 to 16 [ 181.439883][ T5266] erofs: (device loop3): mounted with root inode @ nid 36. [ 181.450517][ T5266] syz.3.212: attempt to access beyond end of device [ 181.450517][ T5266] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 181.469661][ T5266] syz.3.212: attempt to access beyond end of device [ 181.469661][ T5266] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 181.484003][ T5266] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 181.496416][ T26] audit: type=1800 audit(1772821492.310:4): pid=5266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.212" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 181.637816][ T5274] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 182.246169][ T26] audit: type=1326 audit(1772821493.060:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5265 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016739c799 code=0x7fc00000 [ 183.108447][ T5288] cgroup: Unknown subsys name 'uid' [ 189.956043][ T5318] netlink: 'syz.3.225': attribute type 21 has an invalid length. [ 190.386422][ T5326] loop2: detected capacity change from 0 to 2048 [ 190.464313][ T4693] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 190.508104][ T5326] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.674865][ T4693] usb 5-1: config 0 has no interfaces? [ 190.701216][ T4693] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 190.805662][ T4693] usb 5-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 190.871704][ T4693] usb 5-1: Manufacturer: syz [ 191.163041][ T4693] usb 5-1: config 0 descriptor?? [ 191.334449][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 191.335444][ T4269] Bluetooth: hci4: command 0x0406 tx timeout [ 191.348802][ T4269] Bluetooth: hci3: command 0x0406 tx timeout [ 191.356394][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 191.363688][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 192.587991][ T5325] UDF-fs: warning (device loop2): udf_truncate_tail_extent: Too long extent after EOF in inode 1436: i_size: 90112 lbcount: 94208 extent 129+93184 [ 195.605368][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.611794][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.446396][ T4693] usb 5-1: USB disconnect, device number 8 [ 199.814382][ T4693] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 200.008714][ T4693] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 200.011868][ T5385] cgroup: Unknown subsys name 'uid' [ 200.091633][ T4693] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.233939][ T4693] usb 2-1: config 0 has no interfaces? [ 200.255772][ T4693] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 200.282176][ T4693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.348014][ T4693] usb 2-1: config 0 descriptor?? [ 200.440943][ T5395] overlayfs: failed to resolve './file0': -2 [ 200.635054][ T5403] loop0: detected capacity change from 0 to 256 [ 200.720059][ T5403] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 201.693768][ T5412] loop4: detected capacity change from 0 to 8 [ 201.749227][ T5412] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 201.771175][ T4348] udevd[4348]: incorrect cramfs checksum on /dev/loop4 [ 201.927470][ T4348] udevd[4348]: incorrect cramfs checksum on /dev/loop4 [ 201.929040][ T5415] cramfs: Error -3 while decompressing! [ 201.941616][ T5415] cramfs: ffffffff96d8a1e8(26)->ffff88805343c000(4096) [ 201.949311][ T5415] cramfs: Error -5 while decompressing! [ 201.955541][ T5415] cramfs: ffffffff96d8a202(26)->ffff88805343d000(4096) [ 201.963672][ T5415] cramfs: Error -3 while decompressing! [ 201.969483][ T5415] cramfs: ffffffff96d8a21c(16)->ffff88805343e000(4096) [ 201.977850][ T5415] cramfs: Error -3 while decompressing! [ 201.993034][ T5415] cramfs: ffffffff96d8a1e8(26)->ffff88805343c000(4096) [ 202.014500][ T26] audit: type=1800 audit(1772821512.830:6): pid=5415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.247" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 202.732303][ T4361] usb 2-1: USB disconnect, device number 8 [ 204.672239][ T5430] loop2: detected capacity change from 0 to 64 [ 204.879362][ T5430] Trying to free block not in datazone [ 205.115317][ T5432] loop4: detected capacity change from 0 to 40427 [ 205.129986][ T5432] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 205.137968][ T5432] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 205.150845][ T5432] F2FS-fs (loop4): invalid crc value [ 205.229116][ T5432] F2FS-fs (loop4): Found nat_bits in checkpoint [ 205.371527][ T5432] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 205.378793][ T5432] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 206.431702][ T5453] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 206.874253][ T5458] cgroup: Unknown subsys name 'uid' [ 207.445726][ T5464] loop4: detected capacity change from 0 to 128 [ 207.536629][ T5464] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 207.557839][ T5464] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 208.666121][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 208.868531][ T5476] netlink: 'syz.0.263': attribute type 72 has an invalid length. [ 209.075399][ T5483] loop4: detected capacity change from 0 to 512 [ 209.902657][ T5483] EXT4-fs (loop4): 1 truncate cleaned up [ 209.926487][ T5483] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 209.991300][ T5490] loop0: detected capacity change from 0 to 256 [ 210.020522][ T26] audit: type=1800 audit(1772821520.830:7): pid=5483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.264" name="file0" dev="overlay" ino=13 res=0 errno=0 [ 210.100687][ T5490] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 210.313072][ T5492] loop3: detected capacity change from 0 to 40427 [ 210.320745][ T5492] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 210.329188][ T5492] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 210.339547][ T5492] F2FS-fs (loop3): invalid crc value [ 210.381757][ T4279] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 210.443810][ T5492] F2FS-fs (loop3): Found nat_bits in checkpoint [ 210.497812][ T5492] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 210.505171][ T5492] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 210.754170][ T4279] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 465: padding at end of block bitmap is not set [ 210.977659][ T4279] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 210.987999][ T4279] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 234881024 (level 0) [ 211.027976][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 211.773461][ T5512] loop4: detected capacity change from 0 to 128 [ 212.116165][ T5512] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 212.135079][ T5512] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 212.828640][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 216.778666][ T5549] loop2: detected capacity change from 0 to 764 [ 218.019717][ T5554] loop2: detected capacity change from 0 to 4096 [ 218.257551][ T5554] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 218.487894][ T5563] loop1: detected capacity change from 0 to 512 [ 218.511641][ T5563] FAT-fs (loop1): IO charset utfѾ¹Éh$Û‚‰œ#wî•w9Á‹C= Yæ’³t ¤•áÁEÅ’&y3‹_òÀ©„@¥rRh¢BÀ&5dùˆÓÁxpOêø¤ß‚upˆ‚êš@HÆäX¡ð[ƒòæ›–[ò²â°î7VGø†¥1‰˜ yª{´îþvŽìX±œõªñ)P1uô&-÷@=õ6 not found [ 219.083677][ T5554] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #15: comm syz.2.284: corrupted inode contents [ 219.147161][ T5554] EXT4-fs error (device loop2): ext4_dirty_inode:6137: inode #15: comm syz.2.284: mark_inode_dirty error [ 219.159616][ T5554] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #15: comm syz.2.284: corrupted inode contents [ 219.171908][ T4429] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 219.172267][ T5554] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.284: mark_inode_dirty error [ 219.256107][ T5554] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #15: comm syz.2.284: corrupted inode contents [ 219.355087][ T5554] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.284: mark_inode_dirty error [ 219.402540][ T5554] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #15: comm syz.2.284: corrupted inode contents [ 219.446522][ T5554] EXT4-fs error (device loop2): ext4_truncate:4318: inode #15: comm syz.2.284: mark_inode_dirty error [ 219.510920][ T5571] loop4: detected capacity change from 0 to 256 [ 219.577652][ T5554] EXT4-fs error (device loop2) in ext4_setattr:5676: Corrupt filesystem [ 219.670720][ T5571] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 219.984957][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 225.524276][ T4315] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 226.606100][ T4315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.467092][ T4315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.478101][ T4315] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 227.512594][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.557603][ T4315] usb 3-1: config 0 descriptor?? [ 227.984424][ T129] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 228.294531][ T129] usb 5-1: Using ep0 maxpacket: 32 [ 228.301701][ T129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.323558][ T129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.487061][ T4315] hid-led 0003:27B8:01ED.0001: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 228.892609][ T4315] hid-led 0003:27B8:01ED.0001: ThingM blink(1) initialized [ 229.067533][ T129] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 229.076755][ T129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.086463][ T4315] usb 3-1: USB disconnect, device number 4 [ 229.097975][ T129] usb 5-1: config 0 descriptor?? [ 229.122937][ T129] hub 5-1:0.0: USB hub found [ 229.323196][ T129] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 229.375917][ T5646] fido_id[5646]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 229.567719][ T129] usbhid 5-1:0.0: can't add hid device: -71 [ 229.573785][ T129] usbhid: probe of 5-1:0.0 failed with error -71 [ 230.473671][ T129] usb 5-1: USB disconnect, device number 9 [ 230.644421][ T4315] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 230.667789][ T5662] loop0: detected capacity change from 0 to 256 [ 230.744556][ T5664] loop1: detected capacity change from 0 to 128 [ 230.771818][ T5662] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 231.003804][ T4315] usb 4-1: Using ep0 maxpacket: 32 [ 231.009606][ T4334] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 231.018825][ T5664] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 231.020175][ T4315] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 231.054339][ T5664] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 231.064671][ T4315] usb 4-1: config 0 has no interface number 0 [ 231.782501][ T4315] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 231.793182][ T4315] usb 4-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 231.825357][ T4315] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 231.874233][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.882375][ T4315] usb 4-1: Product: syz [ 231.886719][ T4334] usb 3-1: Using ep0 maxpacket: 16 [ 231.894414][ T4334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 231.923838][ T4315] usb 4-1: Manufacturer: syz [ 231.930827][ T4334] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 231.943845][ T4315] usb 4-1: SerialNumber: syz [ 232.128127][ T4334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.138255][ T4315] usb 4-1: config 0 descriptor?? [ 232.143416][ T4334] usb 3-1: Product: syz [ 232.148231][ T4334] usb 3-1: Manufacturer: syz [ 232.154638][ T4315] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 232.164379][ T4334] usb 3-1: SerialNumber: syz [ 232.172201][ T4334] usb 3-1: config 0 descriptor?? [ 232.182207][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 232.183611][ T4334] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 232.200700][ T4334] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 232.359966][ T4315] usb 4-1: qt2_setup_urbs - submit read urb failed -90 [ 232.379844][ T4315] quatech2: probe of 4-1:0.51 failed with error -90 [ 232.850850][ T5656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.890826][ T4334] em28xx 3-1:0.0: chip ID is em2874 [ 233.216879][ T4334] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 233.234476][ T5656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.241358][ T4334] em28xx 3-1:0.0: board has no eeprom [ 233.277156][ T4352] usb 4-1: USB disconnect, device number 10 [ 233.364247][ T4334] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 233.384244][ T4334] em28xx 3-1:0.0: dvb set to bulk mode. [ 233.398626][ T4334] usb 3-1: USB disconnect, device number 5 [ 233.415212][ T4334] em28xx 3-1:0.0: Disconnecting em28xx [ 233.421982][ T4315] em28xx 3-1:0.0: Binding DVB extension [ 233.539231][ T4315] em28xx 3-1:0.0: Registering input extension [ 233.864277][ T4315] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 233.881180][ T4315] Registered IR keymap rc-empty [ 233.910139][ T4315] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 233.933700][ T4315] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 234.005224][ T4315] em28xx 3-1:0.0: Input extension successfully initialized [ 234.013828][ T4334] em28xx 3-1:0.0: Closing input extension [ 234.404602][ T4334] em28xx 3-1:0.0: Freeing device [ 234.527043][ T5690] loop1: detected capacity change from 0 to 128 [ 234.575601][ T5690] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 234.615034][ T5690] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 235.568906][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 236.687384][ T5717] loop4: detected capacity change from 0 to 164 [ 236.812316][ T4348] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 239.194720][ T5740] loop1: detected capacity change from 0 to 1024 [ 239.290349][ T5740] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #4: comm syz.1.332: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 239.366522][ T5740] EXT4-fs error (device loop1): ext4_quota_enable:7046: comm syz.1.332: Bad quota inode: 4, type: 1 [ 239.401538][ T5740] EXT4-fs warning (device loop1): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 239.470416][ T5740] EXT4-fs (loop1): mount failed [ 240.903776][ T5752] loop0: detected capacity change from 0 to 512 [ 241.014948][ T5752] EXT4-fs (loop0): 1 truncate cleaned up [ 241.047378][ T5752] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 241.184389][ T26] audit: type=1800 audit(1772821551.990:8): pid=5752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.336" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 241.342352][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 243.482298][ T5757] loop4: detected capacity change from 0 to 32768 [ 243.589849][ T5757] XFS (loop4): Mounting V5 Filesystem [ 243.740642][ T5757] XFS (loop4): Ending clean mount [ 243.834842][ T5757] XFS (loop4): Quotacheck needed: Please wait. [ 243.848407][ T5792] loop3: detected capacity change from 0 to 256 [ 243.927881][ T5792] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd22393c8, utbl_chksum : 0xe619d30d) [ 243.951492][ T5757] XFS (loop4): Quotacheck: Done. [ 244.212685][ T4279] XFS (loop4): Unmounting Filesystem [ 244.604232][ T4313] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 244.804201][ T4313] usb 4-1: Using ep0 maxpacket: 32 [ 244.811637][ T4313] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 245.747977][ T4313] usb 4-1: config 0 has no interface number 0 [ 245.763677][ T4313] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 245.773218][ T4313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.781641][ T4313] usb 4-1: Product: syz [ 245.786289][ T4313] usb 4-1: Manufacturer: syz [ 245.791010][ T4313] usb 4-1: SerialNumber: syz [ 245.810484][ T4313] usb 4-1: config 0 descriptor?? [ 245.825212][ T4313] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 247.101812][ T4313] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 247.126678][ T4313] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 247.500901][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 247.501836][ T4334] usb 4-1: USB disconnect, device number 11 [ 247.579316][ T4334] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 247.680847][ T4334] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 247.738244][ T4334] quatech2 4-1:0.51: device disconnected [ 248.682232][ T5836] netlink: 'syz.2.358': attribute type 4 has an invalid length. [ 251.177528][ T5845] loop0: detected capacity change from 0 to 2048 [ 251.197269][ T5845] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.042421][ T5856] loop3: detected capacity change from 0 to 1024 [ 253.647701][ T5863] overlayfs: unrecognized mount option "/" or missing value [ 253.730829][ T5854] cgroup: Unknown subsys name 'uid' [ 255.816956][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.823346][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.197061][ T5881] loop1: detected capacity change from 0 to 512 [ 258.226139][ T5881] EXT4-fs (loop1): Test dummy encryption mode enabled [ 258.263835][ T5881] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 258.333609][ T5881] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.370: bad orphan inode 131083 [ 258.388442][ T5881] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 259.672911][ T5880] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 259.729944][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 261.635048][ T4693] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 261.854312][ T4693] usb 1-1: Using ep0 maxpacket: 16 [ 261.861383][ T4693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.640968][ T4693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.654364][ T4693] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 262.668173][ T4693] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 262.677590][ T4693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.687876][ T4693] usb 1-1: config 0 descriptor?? [ 263.382437][ T4693] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 263.533394][ T4693] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 263.578243][ T4693] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 263.647065][ T4693] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 263.659997][ T4693] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 263.672085][ T4693] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 263.682374][ T4693] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 263.697633][ T4693] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 263.710824][ T4693] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 263.720953][ T4693] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 263.730407][ T4693] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 263.740970][ T4693] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 263.749592][ T4693] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 264.560741][ T4693] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 264.568333][ T4693] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 264.586303][ T4693] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input6 [ 264.719146][ T4693] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 264.736203][ T4693] usb 1-1: USB disconnect, device number 9 [ 264.892553][ T5931] overlayfs: unrecognized mount option "/" or missing value [ 265.056675][ T5933] fido_id[5933]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 265.431750][ T5942] cgroup: Unknown subsys name 'uid' [ 269.954235][ T5973] loop2: detected capacity change from 0 to 128 [ 270.399835][ T5977] ptrace attach of ""[5982] was attempted by "./syz-executor exec"[5977] [ 273.559009][ T6008] loop1: detected capacity change from 0 to 16 [ 273.623496][ T6008] erofs: (device loop1): mounted with root inode @ nid 36. [ 273.795736][ T6008] syz.1.403: attempt to access beyond end of device [ 273.795736][ T6008] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 273.831824][ T6008] syz.1.403: attempt to access beyond end of device [ 273.831824][ T6008] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 273.861711][ T6008] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 273.882142][ T26] audit: type=1800 audit(1772821584.690:9): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.403" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 274.141665][ T6012] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 274.416888][ T26] audit: type=1326 audit(1772821585.230:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc879c799 code=0x7fc00000 [ 274.527889][ T26] audit: type=1326 audit(1772821585.230:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fcdc879c799 code=0x7fc00000 [ 274.697649][ T26] audit: type=1326 audit(1772821585.230:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc879c799 code=0x7fc00000 [ 274.911910][ T26] audit: type=1326 audit(1772821585.230:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc879c799 code=0x7fc00000 [ 274.948646][ T6017] loop2: detected capacity change from 0 to 512 [ 274.964319][ T26] audit: type=1326 audit(1772821585.230:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc879c799 code=0x7fc00000 [ 274.987660][ T26] audit: type=1326 audit(1772821585.230:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc879c799 code=0x7fc00000 [ 275.010710][ T26] audit: type=1326 audit(1772821585.230:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc879c799 code=0x7fc00000 [ 275.033405][ T26] audit: type=1326 audit(1772821585.230:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc879c799 code=0x7fc00000 [ 275.055973][ T26] audit: type=1326 audit(1772821585.250:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc879c799 code=0x7fc00000 [ 275.219888][ T6017] EXT4-fs (loop2): 1 truncate cleaned up [ 275.240996][ T6017] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 276.110732][ T6022] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 277.153166][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 277.355484][ T6033] cgroup: Unknown subsys name 'uid' [ 279.321139][ T6054] loop3: detected capacity change from 0 to 1024 [ 280.132423][ T4379] hfsplus: b-tree write err: -5, ino 3 [ 280.576378][ T6065] loop4: detected capacity change from 0 to 16 [ 280.632827][ T6065] erofs: (device loop4): mounted with root inode @ nid 36. [ 280.763041][ T6065] syz.4.418: attempt to access beyond end of device [ 280.763041][ T6065] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 280.851462][ T6065] syz.4.418: attempt to access beyond end of device [ 280.851462][ T6065] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 280.975693][ T6077] batman_adv: batadv0: Adding interface: gretap1 [ 280.982493][ T6077] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.008345][ T6077] batman_adv: batadv0: Interface activated: gretap1 [ 281.270102][ T6065] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 281.944850][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 281.944866][ T26] audit: type=1800 audit(1772821592.760:43): pid=6065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.418" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 281.987294][ T6065] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 282.185286][ T26] audit: type=1326 audit(1772821593.000:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e019c799 code=0x7fc00000 [ 282.503229][ T6084] loop4: detected capacity change from 0 to 512 [ 282.541155][ T6084] EXT4-fs (loop4): 1 truncate cleaned up [ 282.603161][ T6084] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 282.748975][ T26] audit: type=1800 audit(1772821593.560:45): pid=6087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.421" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 283.829592][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 283.878055][ T6094] netlink: 'syz.2.423': attribute type 1 has an invalid length. [ 283.977462][ T6094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 284.088074][ T6096] bond1: (slave veth3): Enslaving as an active interface with a down link [ 284.269607][ T6094] device veth0_to_bond entered promiscuous mode [ 284.288332][ T6094] device veth0_to_bond left promiscuous mode [ 285.115479][ T6094] bond1: (slave vlan2): making interface the new active one [ 285.139290][ T6094] device veth0_to_bond entered promiscuous mode [ 285.175527][ T6094] device vlan2 entered promiscuous mode [ 285.181988][ T6094] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 285.240720][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 286.376801][ T6121] loop2: detected capacity change from 0 to 512 [ 286.431962][ T6119] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 286.493534][ T6119] team0: Port device batadv1 added [ 286.505440][ T6121] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 286.517485][ T6121] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.735782][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 287.137199][ T6127] loop2: detected capacity change from 0 to 128 [ 287.285051][ T6127] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 287.347911][ T6127] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 287.610728][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 288.845666][ T6135] loop4: detected capacity change from 0 to 16 [ 288.909778][ T6135] erofs: (device loop4): mounted with root inode @ nid 36. [ 289.135094][ T6135] syz.4.432: attempt to access beyond end of device [ 289.135094][ T6135] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 289.212471][ T6135] syz.4.432: attempt to access beyond end of device [ 289.212471][ T6135] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 289.226599][ T6135] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 289.238644][ T26] audit: type=1800 audit(1772821600.050:46): pid=6135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.432" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 289.430321][ T6142] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 289.682359][ T26] audit: type=1326 audit(1772821600.490:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e019c799 code=0x7fc00000 [ 289.775014][ T26] audit: type=1326 audit(1772821600.490:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f70e019c799 code=0x7fc00000 [ 289.928272][ T26] audit: type=1326 audit(1772821600.490:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e019c799 code=0x7fc00000 [ 290.002256][ T26] audit: type=1326 audit(1772821600.490:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e019c799 code=0x7fc00000 [ 290.112313][ T26] audit: type=1326 audit(1772821600.490:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e019c799 code=0x7fc00000 [ 290.340990][ T26] audit: type=1326 audit(1772821600.490:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e019c799 code=0x7fc00000 [ 290.364303][ T26] audit: type=1326 audit(1772821600.490:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e019c799 code=0x7fc00000 [ 290.388834][ T26] audit: type=1326 audit(1772821600.490:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e019c799 code=0x7fc00000 [ 290.420283][ T6148] block device autoloading is deprecated and will be removed. [ 290.423187][ T26] audit: type=1326 audit(1772821600.490:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e019c799 code=0x7fc00000 [ 290.454433][ T5897] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 290.654338][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 290.663696][ T5897] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 290.713805][ T5897] usb 3-1: config 0 has no interface number 0 [ 290.775490][ T5897] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 290.873307][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.905688][ T5897] usb 3-1: Product: syz [ 290.909896][ T5897] usb 3-1: Manufacturer: syz [ 290.930074][ T5897] usb 3-1: SerialNumber: syz [ 290.987534][ T5897] usb 3-1: config 0 descriptor?? [ 291.039371][ T5897] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 291.246216][ T5897] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 291.317339][ T5897] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 291.467782][ T6161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.484573][ T6161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.725478][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 291.726286][ T4352] usb 3-1: USB disconnect, device number 6 [ 291.820431][ T4352] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 291.881165][ T4352] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 292.064919][ T4352] quatech2 3-1:0.51: device disconnected [ 294.047869][ T6190] loop1: detected capacity change from 0 to 32768 [ 294.389838][ T6199] loop4: detected capacity change from 0 to 16 [ 294.462961][ T6199] erofs: (device loop4): mounted with root inode @ nid 36. [ 294.673798][ T6199] syz.4.451: attempt to access beyond end of device [ 294.673798][ T6199] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 294.761881][ T6199] syz.4.451: attempt to access beyond end of device [ 294.761881][ T6199] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 294.916146][ T6199] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 295.056409][ T6207] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 295.075653][ T6207] team0: Port device batadv1 added [ 295.087721][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 295.087735][ T26] audit: type=1800 audit(1772821605.900:113): pid=6199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.451" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 295.714358][ T6216] cgroup: Unknown subsys name 'uid' [ 296.119916][ T6199] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 296.624475][ T26] audit: type=1326 audit(1772821607.400:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e019c799 code=0x7fc00000 [ 296.889533][ T26] audit: type=1326 audit(1772821607.400:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f70e019c799 code=0x7fc00000 [ 297.023542][ T26] audit: type=1326 audit(1772821607.400:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e019c799 code=0x7fc00000 [ 297.233160][ T26] audit: type=1326 audit(1772821607.400:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e019c799 code=0x7fc00000 [ 297.335912][ T26] audit: type=1326 audit(1772821607.400:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e019c799 code=0x7fc00000 [ 297.410481][ T6225] loop3: detected capacity change from 0 to 1024 [ 297.450507][ T26] audit: type=1326 audit(1772821607.400:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e019c799 code=0x7fc00000 [ 297.537005][ T26] audit: type=1326 audit(1772821607.400:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e019c799 code=0x7fc00000 [ 297.620586][ T26] audit: type=1326 audit(1772821607.400:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e019c799 code=0x7fc00000 [ 297.685198][ T26] audit: type=1326 audit(1772821607.400:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e019c799 code=0x7fc00000 [ 297.789321][ T6225] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 298.225547][ T4365] device vlan2 left promiscuous mode [ 298.826881][ T6225] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 298.893549][ T6238] loop4: detected capacity change from 0 to 512 [ 299.020984][ T6238] EXT4-fs (loop4): 1 truncate cleaned up [ 299.045447][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 299.080578][ T6238] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 299.234645][ T6238] overlayfs: missing 'lowerdir' [ 300.164728][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 300.164743][ T26] audit: type=1800 audit(1772821610.980:141): pid=6247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.458" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 300.398469][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 300.884197][ T126] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 301.074149][ T126] usb 4-1: Using ep0 maxpacket: 32 [ 301.081491][ T126] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 301.118049][ T126] usb 4-1: config 0 has no interface number 0 [ 301.154289][ T126] usb 4-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 301.234499][ T126] usb 4-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 301.286987][ T126] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 301.370903][ T126] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 301.411430][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.425574][ T126] usb 4-1: Product: syz [ 301.430073][ T126] usb 4-1: Manufacturer: syz [ 301.435480][ T126] usb 4-1: SerialNumber: syz [ 301.467355][ T126] usb 4-1: config 0 descriptor?? [ 301.486455][ T6258] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 301.523850][ T126] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input7 [ 301.824236][ T126] usb 4-1: USB disconnect, device number 12 [ 302.221393][ T6271] sctp: [Deprecated]: syz.4.466 (pid 6271) Use of int in max_burst socket option deprecated. [ 302.221393][ T6271] Use struct sctp_assoc_value instead [ 302.329679][ T6275] netlink: 24 bytes leftover after parsing attributes in process `syz.4.466'. [ 302.656628][ T6271] loop4: detected capacity change from 0 to 256 [ 302.672892][ T6271] FAT-fs (loop4): Unrecognized mount option "shortna e=mixed" or missing value [ 303.014401][ T5897] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 303.214456][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 303.234685][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.363511][ T5897] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 303.744920][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.753196][ T5897] usb 5-1: Product: syz [ 303.759878][ T5897] usb 5-1: Manufacturer: syz [ 303.765343][ T5897] usb 5-1: SerialNumber: syz [ 303.894846][ T5897] usb 5-1: config 0 descriptor?? [ 303.915283][ T5897] smsc95xx v2.0.0 [ 303.919142][ T5897] smsc95xx 5-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 303.933052][ T5897] smsc95xx: probe of 5-1:0.0 failed with error -22 [ 304.415181][ T27] usb 5-1: USB disconnect, device number 10 [ 305.400603][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.474'. [ 308.124358][ T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 308.314147][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 308.323015][ T27] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 308.362317][ T27] usb 2-1: config 0 has no interface number 0 [ 308.403336][ T27] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 308.448946][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.350750][ T27] usb 2-1: Product: syz [ 309.367436][ T27] usb 2-1: Manufacturer: syz [ 310.217077][ T27] usb 2-1: SerialNumber: syz [ 310.233634][ T27] usb 2-1: config 0 descriptor?? [ 310.243391][ T27] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 310.777550][ T27] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 310.790269][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.819374][ T27] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 310.824417][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.936364][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 311.936663][ T6322] usb 2-1: USB disconnect, device number 9 [ 311.975170][ T6322] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 312.067427][ T6322] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 312.102031][ T6349] loop1: detected capacity change from 0 to 512 [ 312.105775][ T6322] quatech2 2-1:0.51: device disconnected [ 312.154921][ T6349] EXT4-fs: inline encryption not supported [ 312.204747][ T6349] EXT4-fs: Ignoring removed i_version option [ 316.196356][ T6349] EXT4-fs (loop1): 1 orphan inode deleted [ 316.228054][ T6349] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 316.296181][ T6372] loop2: detected capacity change from 0 to 1024 [ 316.316127][ T6370] loop3: detected capacity change from 0 to 512 [ 316.478350][ T6370] EXT4-fs (loop3): 1 truncate cleaned up [ 316.497852][ T6370] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 316.517396][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 316.559111][ T6370] overlayfs: missing 'lowerdir' [ 316.593038][ T26] audit: type=1800 audit(1772821627.400:142): pid=6370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.495" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 316.860794][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 317.264518][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.271010][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.394322][ T6383] cgroup: Unknown subsys name 'uid' [ 318.542457][ T129] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 319.704439][ T129] usb 1-1: Using ep0 maxpacket: 32 [ 319.711753][ T129] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 319.722315][ T129] usb 1-1: config 0 has no interface number 0 [ 319.741747][ T129] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 319.757199][ T129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.774452][ T129] usb 1-1: Product: syz [ 319.778856][ T129] usb 1-1: Manufacturer: syz [ 319.787395][ T129] usb 1-1: SerialNumber: syz [ 320.607130][ T129] usb 1-1: config 0 descriptor?? [ 320.655795][ T129] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 320.855905][ T129] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 320.936915][ T129] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 321.059712][ T6389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.074529][ T6389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.272771][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 323.272994][ T4361] usb 1-1: USB disconnect, device number 10 [ 323.401980][ T4361] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 323.462727][ T4361] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 323.484862][ T4361] quatech2 1-1:0.51: device disconnected [ 323.954400][ T4313] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 325.535981][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.704141][ T4313] usb 5-1: Using ep0 maxpacket: 32 [ 325.713893][ T4313] usb 5-1: config 4 has an invalid descriptor of length 49, skipping remainder of the config [ 325.728815][ T4313] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 325.833822][ T4313] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 325.854176][ T4313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.912257][ T4313] usb 5-1: Product: syz [ 325.943098][ T4313] usb 5-1: Manufacturer: syz [ 325.977289][ T4313] usb 5-1: SerialNumber: syz [ 326.229313][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.679763][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.808989][ T4313] usb 5-1: USB disconnect, device number 11 [ 328.183522][ T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.606334][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.651326][ T4352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.744184][ T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.811415][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.822081][ T4313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.831062][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.950048][ T6470] loop2: detected capacity change from 0 to 16 [ 333.038125][ T6470] erofs: (device loop2): mounted with root inode @ nid 36. [ 333.108359][ T6470] syz.2.525: attempt to access beyond end of device [ 333.108359][ T6470] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 333.424817][ T4313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.443538][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.456085][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.226914][ T6479] netlink: 'syz.0.526': attribute type 1 has an invalid length. [ 334.234791][ T6479] netlink: 'syz.0.526': attribute type 2 has an invalid length. [ 334.884147][ T6480] syz.0.526 uses obsolete (PF_INET,SOCK_PACKET) [ 335.058650][ T6470] syz.2.525: attempt to access beyond end of device [ 335.058650][ T6470] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 335.072794][ T6470] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 335.090896][ T26] audit: type=1800 audit(1772821645.900:143): pid=6470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.525" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 335.098410][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.054829][ T4313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.538981][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.570231][ T6470] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 337.802369][ T6484] loop3: detected capacity change from 0 to 512 [ 337.845682][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.871539][ T6484] EXT4-fs (loop3): 1 truncate cleaned up [ 337.914125][ T6484] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 337.924945][ T26] audit: type=1326 audit(1772821648.730:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="syz.2.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e62d9c799 code=0x7fc00000 [ 337.966554][ T6484] overlayfs: unrecognized mount option "/" or missing value [ 338.027263][ T26] audit: type=1800 audit(1772821648.840:145): pid=6487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.529" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 338.431251][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 338.854345][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.894398][ T4315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.003219][ T6501] loop0: detected capacity change from 0 to 512 [ 340.046641][ T6501] EXT4-fs: Ignoring removed oldalloc option [ 340.075246][ T6501] ext4: Unknown parameter 'seclabel' [ 340.290402][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.247017][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.416704][ T6514] loop3: detected capacity change from 0 to 2048 [ 341.579185][ T6514] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 342.336606][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.857428][ T4383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.014730][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.023646][ T4313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.237836][ T6541] cgroup: Unknown subsys name 'uid' [ 343.623064][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.799895][ T4313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.488463][ T4315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.601534][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.806066][ T6579] netlink: 'syz.0.555': attribute type 1 has an invalid length. [ 346.898704][ T6579] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.993130][ T4313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.045208][ T6581] bond1: (slave veth3): Enslaving as an active interface with a down link [ 347.555311][ T6586] binder: 6584:6586 ioctl c0306201 200000000380 returned -11 [ 347.654758][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.694700][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.734681][ T4315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.777469][ T6607] loop1: detected capacity change from 0 to 16 [ 349.847384][ T6607] erofs: (device loop1): mounted with root inode @ nid 36. [ 350.048084][ T6612] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 350.056904][ T4313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.154274][ T6624] netlink: 'syz.4.570': attribute type 1 has an invalid length. [ 351.161966][ T6624] netlink: 'syz.4.570': attribute type 2 has an invalid length. [ 352.061545][ T4315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.750607][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.766401][ T26] audit: type=1326 audit(1772821663.580:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc879c799 code=0x7fc00000 [ 353.096661][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.104997][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.122071][ T4313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.385352][ T6645] cgroup: Unknown subsys name 'uid' [ 354.873760][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.951029][ T6648] loop2: detected capacity change from 0 to 2048 [ 355.064201][ T6648] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 355.091021][ T6655] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 355.102159][ T6655] team0: Port device batadv2 added [ 355.898362][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.148205][ T6671] loop1: detected capacity change from 0 to 16 [ 356.422691][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.473031][ T6671] erofs: (device loop1): mounted with root inode @ nid 36. [ 357.427382][ T4315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.687546][ T6671] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 358.454609][ T4315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.528528][ T4313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.536750][ T4315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.545100][ T26] audit: type=1326 audit(1772821670.330:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.1.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc879c799 code=0x7fc00000 [ 359.607785][ T6693] netlink: 'syz.3.589': attribute type 1 has an invalid length. [ 359.686961][ T6693] 8021q: adding VLAN 0 to HW filter on device bond2 [ 360.884281][ T6703] cgroup: Unknown subsys name 'uid' [ 361.054938][ T4352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.239850][ T6695] bond2: (slave veth3): Enslaving as an active interface with a down link [ 362.419188][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.614263][ T4314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.630290][ T6714] loop1: detected capacity change from 0 to 2048 [ 363.416084][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.523348][ T6714] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 363.540709][ T4315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.673738][ T4352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.673690][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.778002][ T4352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.526823][ T6746] loop3: detected capacity change from 0 to 16 [ 366.551471][ T6746] erofs: (device loop3): mounted with root inode @ nid 36. [ 366.627113][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.667338][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.684913][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.696675][ T6746] syz.3.601: attempt to access beyond end of device [ 366.696675][ T6746] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 366.724886][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.751663][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.786604][ T6746] syz.3.601: attempt to access beyond end of device [ 366.786604][ T6746] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 366.885385][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.915895][ T6746] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 366.974156][ T26] audit: type=1800 audit(1772821677.780:148): pid=6746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.601" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 367.203655][ T6762] cgroup: Unknown subsys name 'uid' [ 367.280461][ T6746] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 368.331565][ T6768] netlink: 'syz.4.607': attribute type 1 has an invalid length. [ 368.365456][ T26] audit: type=1326 audit(1772821679.180:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.3.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016739c799 code=0x7fc00000 [ 368.474169][ T26] audit: type=1326 audit(1772821679.200:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.3.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f016739c799 code=0x7fc00000 [ 368.573816][ T6768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 368.582259][ T6777] sctp: [Deprecated]: syz.0.610 (pid 6777) Use of int in max_burst socket option deprecated. [ 368.582259][ T6777] Use struct sctp_assoc_value instead [ 368.619113][ T26] audit: type=1326 audit(1772821679.200:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.3.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016739c799 code=0x7fc00000 [ 368.649646][ T26] audit: type=1326 audit(1772821679.200:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.3.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016739c799 code=0x7fc00000 [ 368.672626][ T26] audit: type=1326 audit(1772821679.200:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.3.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016739c799 code=0x7fc00000 [ 368.696289][ T4313] net_ratelimit: 49 callbacks suppressed [ 368.696308][ T4313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.752269][ T26] audit: type=1326 audit(1772821679.200:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.3.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016739c799 code=0x7fc00000 [ 368.776442][ T26] audit: type=1326 audit(1772821679.200:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.3.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016739c799 code=0x7fc00000 [ 368.799677][ T26] audit: type=1326 audit(1772821679.200:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.3.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016739c799 code=0x7fc00000 [ 369.161926][ T4281] Bluetooth: unknown link type 4 [ 369.449211][ T26] audit: type=1326 audit(1772821679.200:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.3.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016739c799 code=0x7fc00000 [ 369.495465][ T6769] bond1: (slave veth5): Enslaving as an active interface with a down link [ 369.501489][ T4352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.522041][ T6782] loop0: detected capacity change from 0 to 256 [ 369.705867][ T6777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.610'. [ 369.716960][ T6782] FAT-fs (loop0): Unrecognized mount option "shortna e=mixed" or missing value [ 370.538400][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.718227][ T6793] loop1: detected capacity change from 0 to 2048 [ 370.762895][ T6793] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 371.174371][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 371.734404][ T4313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.004217][ T4315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.934736][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.051970][ T4315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.254232][ T6816] cgroup: Unknown subsys name 'uid' [ 374.817987][ T4352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.831489][ T4313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.320561][ T6832] netlink: 'syz.1.624': attribute type 1 has an invalid length. [ 376.326324][ T4352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.344451][ T6832] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.428210][ T6833] bond1: (slave veth3): Enslaving as an active interface with a down link [ 376.454769][ T6844] loop2: detected capacity change from 0 to 2048 [ 376.528274][ T6844] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 376.775587][ T4352] libceph: connect (1)[c::]:6789 error -101 [ 376.781674][ T4352] libceph: mon0 (1)[c::]:6789 connect error [ 376.862750][ T6853] loop4: detected capacity change from 0 to 16 [ 376.909952][ T6849] ceph: No mds server is up or the cluster is laggy [ 376.945765][ T6853] erofs: (device loop4): mounted with root inode @ nid 36. [ 376.986806][ T6853] syz.4.631: attempt to access beyond end of device [ 376.986806][ T6853] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 377.198293][ T27] libceph: connect (1)[c::]:6789 error -101 [ 377.235485][ T6853] syz.4.631: attempt to access beyond end of device [ 377.235485][ T6853] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 377.251328][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 377.260409][ T6853] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 378.112159][ T6863] cgroup: Unknown subsys name 'uid' [ 378.451986][ T26] kauditd_printk_skb: 32 callbacks suppressed [ 378.452002][ T26] audit: type=1800 audit(1772821689.260:190): pid=6853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.631" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 378.489448][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.561317][ T6853] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 378.628851][ T4314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.696808][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.705989][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.494612][ T4352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.553236][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.654538][ T4314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.813868][ T6890] loop2: detected capacity change from 0 to 2048 [ 381.832990][ T6890] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 381.894147][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.534640][ T4314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.563376][ T6900] netlink: 'syz.1.645': attribute type 1 has an invalid length. [ 382.636123][ T6900] 8021q: adding VLAN 0 to HW filter on device bond2 [ 382.817856][ T6906] bond2: (slave veth5): Enslaving as an active interface with a down link [ 382.949857][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.880617][ T6920] sctp: [Deprecated]: syz.3.651 (pid 6920) Use of int in max_burst socket option deprecated. [ 383.880617][ T6920] Use struct sctp_assoc_value instead [ 383.985973][ T6920] netlink: 24 bytes leftover after parsing attributes in process `syz.3.651'. [ 384.010022][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.018544][ T4281] Bluetooth: unknown link type 4 [ 384.094238][ T6923] loop3: detected capacity change from 0 to 256 [ 384.101606][ T6923] FAT-fs (loop3): Unrecognized mount option "shortna e=mixed" or missing value [ 384.694921][ T4314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.014693][ T4352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.369341][ T6941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.656'. [ 385.584236][ T126] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 385.814144][ T126] usb 5-1: Using ep0 maxpacket: 32 [ 385.830259][ T126] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 385.881650][ T126] usb 5-1: config 0 has no interface number 0 [ 385.929066][ T126] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 386.104220][ C1] ------------[ cut here ]------------ [ 386.110042][ C1] WARNING: CPU: 1 PID: 0 at net/mac80211/tx.c:4944 __ieee80211_beacon_get+0x1233/0x1600 [ 386.119878][ C1] Modules linked in: [ 386.123804][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 386.130997][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 386.141161][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 386.148187][ C1] Code: 24 4c 89 e7 e8 9e d3 0a f8 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 39 3d d2 f7 0f 0b e9 f6 f7 ff ff e8 2d 3d d2 f7 <0f> 0b e9 48 fb ff ff e8 21 3d d2 f7 48 c7 c7 50 d6 fa 8d 4c 89 e6 [ 386.167903][ C1] RSP: 0018:ffffc900001e0a30 EFLAGS: 00010246 [ 386.174163][ C1] RAX: ffffffff89b03583 RBX: ffffffff89b02386 RCX: ffff888017731dc0 [ 386.182185][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 386.190224][ C1] RBP: 0000000000000000 R08: ffff888017731dc0 R09: 0000000000000003 [ 386.198779][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888027e0a228 [ 386.206810][ C1] R13: dffffc0000000000 R14: ffff888027e0a760 R15: ffff888058a87824 [ 386.214853][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 386.223815][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 386.230554][ C1] CR2: 00007f01673e9e80 CR3: 000000004d2c1000 CR4: 00000000003506e0 [ 386.238589][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 386.246615][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 386.254648][ C1] Call Trace: [ 386.257952][ C1] [ 386.260828][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 386.266454][ C1] ieee80211_beacon_get_tim+0x63/0x4e0 [ 386.272045][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 386.277660][ C1] ? read_lock_is_recursive+0x10/0x10 [ 386.283075][ C1] __iterate_interfaces+0x243/0x500 [ 386.288364][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 386.288920][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 386.294682][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 386.307982][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 386.314330][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 386.321545][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 386.326925][ C1] __hrtimer_run_queues+0x54a/0xd50 [ 386.332184][ C1] ? hw_scan_work+0xf50/0xf50 [ 386.336992][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 386.342249][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 386.348510][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 386.353660][ C1] handle_softirqs+0x2a1/0x930 [ 386.358488][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 386.363371][ C1] ? do_softirq+0x210/0x210 [ 386.368019][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 386.373241][ C1] __irq_exit_rcu+0x13b/0x230 [ 386.378075][ C1] ? irq_exit_rcu+0x20/0x20 [ 386.382616][ C1] irq_exit_rcu+0x5/0x20 [ 386.386915][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 386.392664][ C1] [ 386.395670][ C1] [ 386.398709][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 386.404748][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 386.410594][ C1] Code: 0f 84 3b 01 00 00 48 85 db 0f 85 5a 01 00 00 e9 e8 04 00 00 4c 8b 75 d0 4c 89 e7 e8 d0 6d dd 08 e8 0b 2c 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 386.430333][ C1] RSP: 0018:ffffc90000177bd8 EFLAGS: 00000286 [ 386.436538][ C1] RAX: 20450596a7e35400 RBX: 0000000000000000 RCX: 20450596a7e35400 [ 386.444662][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0f60 [ 386.452664][ C1] RBP: ffffc90000177c30 R08: ffff8880b8e3ab03 R09: 1ffff110171c7560 [ 386.460716][ C1] R10: dffffc0000000000 R11: ffffed10171c7561 R12: ffff888017731dc0 [ 386.468756][ C1] R13: dffffc0000000000 R14: ffff888024aad940 R15: ffff8880b8f3b5d0 [ 386.476976][ C1] ? finish_task_switch+0x265/0x8f0 [ 386.482215][ C1] __schedule+0x11d9/0x40e0 [ 386.487128][ C1] ? __sched_text_start+0x8/0x8 [ 386.492038][ C1] ? flush_smp_call_function_queue+0x127/0x350 [ 386.498299][ C1] ? generic_smp_call_function_single_interrupt+0x120/0x120 [ 386.505965][ C1] ? tick_nohz_restart_sched_tick+0x1f0/0x1f0 [ 386.512188][ C1] schedule_idle+0x4a/0x90 [ 386.516778][ C1] do_idle+0x554/0x5a0 [ 386.520957][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 386.526438][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 386.532180][ C1] ? schedule_idle+0x57/0x90 [ 386.536847][ C1] cpu_startup_entry+0x3f/0x60 [ 386.541662][ C1] start_secondary+0xe4/0xf0 [ 386.546605][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 386.552621][ C1] [ 386.555685][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 386.562960][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 386.570002][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 386.580078][ C1] Call Trace: [ 386.583354][ C1] [ 386.586203][ C1] dump_stack_lvl+0x188/0x24e [ 386.591012][ C1] ? memcpy+0x3c/0x60 [ 386.595007][ C1] ? show_regs_print_info+0x12/0x12 [ 386.600305][ C1] ? load_image+0x400/0x400 [ 386.604815][ C1] panic+0x2e5/0x730 [ 386.608723][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 386.613251][ C1] ? secondary_startup_64_no_verify+0xcf/0xdb [ 386.619322][ C1] __warn+0x2f8/0x4f0 [ 386.623301][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 386.629017][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 386.634885][ C1] report_bug+0x2ba/0x4f0 [ 386.639765][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 386.645501][ C1] handle_bug+0x3a/0x70 [ 386.649829][ C1] exc_invalid_op+0x16/0x40 [ 386.654327][ C1] asm_exc_invalid_op+0x16/0x20 [ 386.659195][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 386.665543][ C1] Code: 24 4c 89 e7 e8 9e d3 0a f8 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 39 3d d2 f7 0f 0b e9 f6 f7 ff ff e8 2d 3d d2 f7 <0f> 0b e9 48 fb ff ff e8 21 3d d2 f7 48 c7 c7 50 d6 fa 8d 4c 89 e6 [ 386.685238][ C1] RSP: 0018:ffffc900001e0a30 EFLAGS: 00010246 [ 386.691302][ C1] RAX: ffffffff89b03583 RBX: ffffffff89b02386 RCX: ffff888017731dc0 [ 386.699354][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 386.707344][ C1] RBP: 0000000000000000 R08: ffff888017731dc0 R09: 0000000000000003 [ 386.715322][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888027e0a228 [ 386.723315][ C1] R13: dffffc0000000000 R14: ffff888027e0a760 R15: ffff888058a87824 [ 386.731642][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 386.737374][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 386.743102][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 386.748736][ C1] ieee80211_beacon_get_tim+0x63/0x4e0 [ 386.754196][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 386.759836][ C1] ? read_lock_is_recursive+0x10/0x10 [ 386.765215][ C1] __iterate_interfaces+0x243/0x500 [ 386.770427][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 386.776665][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 386.783947][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 386.790186][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 386.797334][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 386.802546][ C1] __hrtimer_run_queues+0x54a/0xd50 [ 386.807874][ C1] ? hw_scan_work+0xf50/0xf50 [ 386.812735][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 386.817848][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 386.824108][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 386.829228][ C1] handle_softirqs+0x2a1/0x930 [ 386.834003][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 386.838869][ C1] ? do_softirq+0x210/0x210 [ 386.843366][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 386.848578][ C1] __irq_exit_rcu+0x13b/0x230 [ 386.853269][ C1] ? irq_exit_rcu+0x20/0x20 [ 386.857862][ C1] irq_exit_rcu+0x5/0x20 [ 386.862186][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 386.867880][ C1] [ 386.870842][ C1] [ 386.873769][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 386.879755][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 386.885586][ C1] Code: 0f 84 3b 01 00 00 48 85 db 0f 85 5a 01 00 00 e9 e8 04 00 00 4c 8b 75 d0 4c 89 e7 e8 d0 6d dd 08 e8 0b 2c 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 386.905197][ C1] RSP: 0018:ffffc90000177bd8 EFLAGS: 00000286 [ 386.911366][ C1] RAX: 20450596a7e35400 RBX: 0000000000000000 RCX: 20450596a7e35400 [ 386.919613][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0f60 [ 386.927589][ C1] RBP: ffffc90000177c30 R08: ffff8880b8e3ab03 R09: 1ffff110171c7560 [ 386.935570][ C1] R10: dffffc0000000000 R11: ffffed10171c7561 R12: ffff888017731dc0 [ 386.943538][ C1] R13: dffffc0000000000 R14: ffff888024aad940 R15: ffff8880b8f3b5d0 [ 386.951608][ C1] ? finish_task_switch+0x265/0x8f0 [ 386.956821][ C1] __schedule+0x11d9/0x40e0 [ 386.961342][ C1] ? __sched_text_start+0x8/0x8 [ 386.966275][ C1] ? flush_smp_call_function_queue+0x127/0x350 [ 386.972428][ C1] ? generic_smp_call_function_single_interrupt+0x120/0x120 [ 386.979793][ C1] ? tick_nohz_restart_sched_tick+0x1f0/0x1f0 [ 386.986048][ C1] schedule_idle+0x4a/0x90 [ 386.990565][ C1] do_idle+0x554/0x5a0 [ 386.994740][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 386.999972][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 387.005632][ C1] ? schedule_idle+0x57/0x90 [ 387.010313][ C1] cpu_startup_entry+0x3f/0x60 [ 387.015146][ C1] start_secondary+0xe4/0xf0 [ 387.019747][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 387.025657][ C1] [ 387.029314][ C1] Kernel Offset: disabled [ 387.033670][ C1] Rebooting in 86400 seconds..