last executing test programs: 1m14.509685853s ago: executing program 2 (id=657): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) uname(&(0x7f0000000140)=""/62) 1m14.090226464s ago: executing program 2 (id=664): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0x166, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa4086dd60"], 0x0) 1m13.714794012s ago: executing program 2 (id=670): ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea6f464160af36514001ac00800020004000200060000000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1m13.181570836s ago: executing program 2 (id=676): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x8, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1m12.890780995s ago: executing program 2 (id=680): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 1m12.574327397s ago: executing program 2 (id=686): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881af, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 56.524264628s ago: executing program 32 (id=686): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881af, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 34.506570617s ago: executing program 5 (id=1242): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000001900010000000000fbdbdf250a010900100012800400f88008001e0000000000140004"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) 34.188814199s ago: executing program 5 (id=1248): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_drvinfo={0x3, "ad49906d7a095cbd060c37a40352e2c35b8d9e86df90a79c8d1b9195e183dd40", "0c332a55d26e6efaed6c731c4333a3eca96eabd2d1b5e551ef5c1396886fa7da", "973e1725b5310fc4ed87aa5395b3ce2bb3bdabe7654bb8c400468e2d62666284", "26830a1d7375a812c15c980b0c5d6d0de3f1f0475811b9bf8d2034b32464b5e0", "dcbe1b254c1b508d135455bfb5abc56b05589c7c58140dca77a72cbabfb4d29f", "42f5927fa528405c645e1b9d", 0x3, 0x101, 0x117, 0xecd1, 0x2}}) 33.938675854s ago: executing program 5 (id=1251): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket(0x9, 0xa, 0x0) 33.717908256s ago: executing program 5 (id=1255): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x50, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 33.520884566s ago: executing program 5 (id=1258): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0xc0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 32.446306874s ago: executing program 5 (id=1275): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, 0x0, &(0x7f0000000200)) 16.34051777s ago: executing program 33 (id=1275): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, 0x0, &(0x7f0000000200)) 2.355544313s ago: executing program 3 (id=1590): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 2.129872506s ago: executing program 3 (id=1594): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$packet(0x11, 0x2, 0x300) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xc2c}) 1.779679071s ago: executing program 0 (id=1600): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) 1.604476279s ago: executing program 3 (id=1601): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) close(r1) creat(&(0x7f0000000100)='./file0\x00', 0x0) 1.59842013s ago: executing program 0 (id=1602): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x8}) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) 1.576719381s ago: executing program 6 (id=1604): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r3, 0x0, 0x0, 0x0) 1.332834606s ago: executing program 0 (id=1606): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x0, 0x8000}) 1.332372796s ago: executing program 4 (id=1607): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0) 1.2926459s ago: executing program 6 (id=1608): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x800]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2}, 0x0, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0xffffffff], [0x100000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0xfffffffc, 0x7, 0x0, 0x0, 0x0, 0xfffe], [0x4, 0xfc, 0x0, 0x800000, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfc0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x200, 0x0, 0x0, 0x1, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x9, 0x0, 0x200, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfe, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb884aa9, 0x1, 0x4]}, 0x45c) 1.29178447s ago: executing program 1 (id=1610): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, 0x0, 0x0) 1.132023606s ago: executing program 4 (id=1611): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$binfmt_register(r2, &(0x7f00000000c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0xe05, 0x3a, '/selin\x87\x00\x00\x00ccess\x00', 0x3a, 'kfree\x00', 0x3a, './file0'}, 0x3d) 1.081298141s ago: executing program 0 (id=1612): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r3, 0x0, 0x0, 0x80000) 1.058138074s ago: executing program 1 (id=1613): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, 0x0}, 0x1a83}], 0x2, 0x100, 0x0) 1.042227795s ago: executing program 6 (id=1614): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) 874.633632ms ago: executing program 4 (id=1615): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0xfffffffffffff000) 873.800952ms ago: executing program 0 (id=1616): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x64, 0x0, &(0x7f0000000180)=[@release, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 844.823065ms ago: executing program 1 (id=1617): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x401, @empty}, 0x1c) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000200)={0xfffffffffffffd29, 0x5, 0x0, {0x0, 0x2, 0x2}}, 0x30) r1 = syz_io_uring_setup(0xd2, &(0x7f00000002c0)={0x0, 0xbd84, 0x0, 0x1, 0x30a}, &(0x7f0000000340)=0x0, &(0x7f0000000640)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) sendmmsg$sock(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) io_uring_enter(r1, 0x22d2, 0x20, 0x0, 0x0, 0x0) 749.283585ms ago: executing program 6 (id=1618): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xd4000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x3ffdb8, 0x1, 0x101, 0x0}) 626.338187ms ago: executing program 4 (id=1619): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='1-6:5'], 0x31) 626.081547ms ago: executing program 0 (id=1620): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000540)={0x0, 0x9, 0x4, "fd980000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000300)={0x40, 0xb, 0x4, "ecae0aac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="00000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b40)={0x0, 0x38, 0x4, "50db0822"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 625.611557ms ago: executing program 1 (id=1621): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_POLL(r2, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x8}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, 0x100) 487.821031ms ago: executing program 3 (id=1622): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, 0x0) 431.734166ms ago: executing program 4 (id=1623): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r1}, 0x18) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1d3) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x22) 417.701698ms ago: executing program 1 (id=1624): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r2, 0x0) shutdown(r2, 0x1) 380.141462ms ago: executing program 6 (id=1625): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) 310.769959ms ago: executing program 3 (id=1626): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x28, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0xc, 0x1b, 0x0, 0x1, [@typed={0x11, 0x0, 0x0, 0x0, @str='}\x00'}]}]}, 0x28}], 0x1}, 0x0) 187.823651ms ago: executing program 4 (id=1627): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x20031, 0xffffffffffffffff, 0xffffe000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffa000/0x2000)=nil) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) 187.491541ms ago: executing program 1 (id=1628): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x100d87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) 91.18012ms ago: executing program 6 (id=1629): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x4480, &(0x7f00000000c0), 0x83, 0x22e, &(0x7f0000000940)="$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") close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 0s ago: executing program 3 (id=1630): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x20042, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): NGE): veth1_to_hsr: link becomes ready [ 78.915688][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.931456][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.944445][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.955554][ T4312] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.962778][ T4312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.978624][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.987580][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.002029][ T4312] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.009207][ T4312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.017983][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.026061][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.034876][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.045000][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.062227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.079189][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.090733][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.101503][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.118197][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.141607][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.166718][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.194368][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.213084][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.220294][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.233953][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.302223][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.320520][ T4274] Bluetooth: hci4: command 0x041b tx timeout [ 79.326610][ T4274] Bluetooth: hci0: command 0x041b tx timeout [ 79.329526][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.333675][ T4268] Bluetooth: hci2: command 0x041b tx timeout [ 79.347676][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 79.353782][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 79.360943][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.375652][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.384466][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.393549][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.402743][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.409914][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.417654][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.426819][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.440936][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.449803][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.465771][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.474802][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.485150][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.500119][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.534653][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.545798][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.556294][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.571110][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.584544][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.594091][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.603705][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.631125][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.650267][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.660470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.668025][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.692829][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.713210][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.726892][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.738205][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.751268][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.767501][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.774706][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.785108][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.840662][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.860575][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.880253][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.887422][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.899942][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.915853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.925012][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.940871][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.969391][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.987111][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.996102][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.006310][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.035145][ T4275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.053690][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.066603][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.082779][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.094923][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.104634][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.117625][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.134349][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.145444][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.166231][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.183997][ T4265] device veth0_vlan entered promiscuous mode [ 80.220120][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.236337][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.261763][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.295391][ T4265] device veth1_vlan entered promiscuous mode [ 80.304718][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.321568][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.344331][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.395012][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.405641][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.415128][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.449431][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.460354][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.467892][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.494360][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.516031][ T4265] device veth0_macvtap entered promiscuous mode [ 80.525616][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.554347][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.581464][ T4265] device veth1_macvtap entered promiscuous mode [ 80.595169][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.634639][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.663447][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.674959][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.720636][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.739545][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.777764][ T4273] device veth0_vlan entered promiscuous mode [ 80.801336][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.816181][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.830853][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.860187][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.879307][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.898530][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.906998][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.923936][ T4266] device veth0_vlan entered promiscuous mode [ 80.958271][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.971388][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.982409][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.993517][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.007475][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.018278][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.032246][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.047927][ T4266] device veth1_vlan entered promiscuous mode [ 81.060345][ T4265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.070115][ T4265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.079070][ T4265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.087940][ T4265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.111830][ T4273] device veth1_vlan entered promiscuous mode [ 81.144480][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.154180][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.163078][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.177071][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.210130][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.226544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.244613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.257985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.268102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.284771][ T4273] device veth0_macvtap entered promiscuous mode [ 81.305797][ T4266] device veth0_macvtap entered promiscuous mode [ 81.319836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.328017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.337422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.353041][ T4273] device veth1_macvtap entered promiscuous mode [ 81.372693][ T4282] device veth0_vlan entered promiscuous mode [ 81.383110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.393585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.399030][ T4274] Bluetooth: hci0: command 0x040f tx timeout [ 81.407097][ T4274] Bluetooth: hci2: command 0x040f tx timeout [ 81.409006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.413267][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 81.426871][ T4285] Bluetooth: hci4: command 0x040f tx timeout [ 81.433103][ T4268] Bluetooth: hci3: command 0x040f tx timeout [ 81.434625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.456414][ T4266] device veth1_macvtap entered promiscuous mode [ 81.480432][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.491566][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.503807][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.513466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.522989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.531379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.539664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.548288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.576475][ T4282] device veth1_vlan entered promiscuous mode [ 81.587317][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.597832][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.609555][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.629504][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.641466][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.655392][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.666261][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.680839][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.690317][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.700230][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.709751][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.718869][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.727656][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.737878][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.747378][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.764490][ T4266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.779538][ T4266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.788365][ T4266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.797756][ T4266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.823874][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.835961][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.847799][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.858663][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.870804][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.887440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.896446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.906487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.936521][ T4275] device veth0_vlan entered promiscuous mode [ 81.946896][ T4273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.957181][ T4273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.968983][ T4273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.977721][ T4273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.992813][ T4357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.009350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.017348][ T4357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.019231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.037468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.047707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.057154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.066020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.074542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.097018][ T4275] device veth1_vlan entered promiscuous mode [ 82.123979][ T4282] device veth0_macvtap entered promiscuous mode [ 82.187836][ T4282] device veth1_macvtap entered promiscuous mode [ 82.240057][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.241630][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.262326][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.272953][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.283980][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.297308][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.307588][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.325472][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.335794][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.374298][ T4275] device veth0_macvtap entered promiscuous mode [ 82.383234][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.400393][ T4357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.415018][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.426301][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.437925][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.441720][ T4357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.465096][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.475417][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.487354][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.515074][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.555427][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.570952][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.581028][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.593362][ T4275] device veth1_macvtap entered promiscuous mode [ 82.609919][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.622376][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.633108][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.643699][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.653713][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.664276][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.675512][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.725395][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.735704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.750649][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.767725][ T4282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.777466][ T4282] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.792610][ T4282] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.801602][ T4282] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.813884][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.827387][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.830875][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.847416][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.857628][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.868541][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.878759][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.889504][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.899648][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.931386][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.943721][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.963782][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.974946][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.992316][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.025100][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.042260][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.053753][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.063290][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.071243][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.079127][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.100380][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.112283][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.122400][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.133770][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.143926][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.154643][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.171741][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.195413][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.206143][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.219569][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.240538][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.274596][ T4275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.288152][ T4275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.298293][ T4275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.307778][ T4275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.479438][ T4274] Bluetooth: hci2: command 0x0419 tx timeout [ 83.485556][ T4274] Bluetooth: hci1: command 0x0419 tx timeout [ 83.492180][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 83.498358][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 83.505761][ T4268] Bluetooth: hci0: command 0x0419 tx timeout [ 83.587910][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.638469][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.657731][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.705189][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.726953][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.753030][ T4357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.775939][ T4357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.795618][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.841755][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.843382][ T4409] loop1: detected capacity change from 0 to 512 [ 83.890729][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.916915][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.976163][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.034496][ T4409] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 84.058259][ T4415] loop4: detected capacity change from 0 to 8 [ 84.320065][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 84.500775][ T26] audit: type=1326 audit(1763429110.915:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4423 comm="syz.3.15" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bb5f8f6c9 code=0x0 [ 85.285033][ T4450] batman_adv: batadv0: Adding interface: dummy0 [ 85.305324][ T4450] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.430084][ T4450] batman_adv: batadv0: Interface activated: dummy0 [ 85.476644][ T4458] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.522375][ T26] audit: type=1326 audit(1763429111.925:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4457 comm="syz.2.29" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa76278f6c9 code=0x0 [ 85.573393][ T4453] batadv0: mtu less than device minimum [ 85.609660][ T4453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.622148][ T4453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.634355][ T4453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.646632][ T4453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.658982][ T4453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.671236][ T4453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.683491][ T4453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.695799][ T4453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.708083][ T4453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.919713][ T4465] af_packet: tpacket_rcv: packet too big, clamped from 64644 to 4294967272. macoff=96 [ 86.076696][ T4472] loop3: detected capacity change from 0 to 512 [ 86.117282][ T4472] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 86.286836][ T26] audit: type=1326 audit(1763429112.695:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4475 comm="syz.4.38" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f061158f6c9 code=0x0 [ 86.760907][ T129] cfg80211: failed to load regulatory.db [ 86.953925][ T4499] loop4: detected capacity change from 0 to 128 [ 87.554623][ T26] audit: type=1326 audit(1763429113.965:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4511 comm="syz.1.54" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c5bf8f6c9 code=0x0 [ 87.707750][ T4494] loop2: detected capacity change from 0 to 32768 [ 87.822399][ T4494] XFS (loop2): Mounting V5 Filesystem [ 87.971177][ T4494] XFS (loop2): Ending clean mount [ 88.004314][ T4494] XFS (loop2): Quotacheck needed: Please wait. [ 88.120271][ T4494] XFS (loop2): Quotacheck: Done. [ 88.314145][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.485861][ T4275] XFS (loop2): Unmounting Filesystem [ 88.554178][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 88.583397][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.622354][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.653391][ T14] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 88.684863][ T4542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.63'. [ 88.705367][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.736340][ T14] usb 1-1: config 0 descriptor?? [ 89.149446][ T4549] Zero length message leads to an empty skb [ 89.257480][ T14] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 89.679244][ T4313] usb 1-1: USB disconnect, device number 2 [ 90.262202][ T4584] loop3: detected capacity change from 0 to 256 [ 90.899940][ T4595] loop1: detected capacity change from 0 to 4096 [ 90.922665][ T4595] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 91.615943][ T4590] loop4: detected capacity change from 0 to 32768 [ 91.773811][ T4590] XFS (loop4): Mounting V5 Filesystem [ 91.952218][ T4604] loop0: detected capacity change from 0 to 32768 [ 91.972322][ T4590] XFS (loop4): Ending clean mount [ 91.991924][ T4590] XFS (loop4): Quotacheck needed: Please wait. [ 92.052168][ T4604] (syz.0.85,4604,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 92.114645][ T4604] (syz.0.85,4604,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 92.131976][ T4590] XFS (loop4): Quotacheck: Done. [ 92.239934][ T4604] (syz.0.85,4604,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 92.269767][ T4604] JBD2: Ignoring recovery information on journal [ 92.375143][ T4282] XFS (loop4): Unmounting Filesystem [ 92.396861][ T4604] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 92.596318][ T4631] sd 0:0:1:0: PR command failed: 1026 [ 92.611498][ T4631] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 92.618263][ T4631] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 92.649438][ T4604] ocfs2: Unmounting device (7,0) on (node local) [ 93.213324][ T4629] loop2: detected capacity change from 0 to 32768 [ 93.411423][ T4629] XFS (loop2): Mounting V5 Filesystem [ 93.441485][ T4634] loop1: detected capacity change from 0 to 32768 [ 93.450810][ T4634] ======================================================= [ 93.450810][ T4634] WARNING: The mand mount option has been deprecated and [ 93.450810][ T4634] and is ignored by this kernel. Remove the mand [ 93.450810][ T4634] option from the mount to silence this warning. [ 93.450810][ T4634] ======================================================= [ 93.518836][ T4634] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 93.545923][ T4654] fuse: Bad value for 'fd' [ 93.589936][ T4634] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 93.625724][ T51] (kworker/u4:3,51,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 93.631135][ T4629] XFS (loop2): Ending clean mount [ 93.729877][ T4634] ocfs2: Unmounting device (7,1) on (node local) [ 94.156853][ T4275] XFS (loop2): Unmounting Filesystem [ 94.577073][ T26] audit: type=1326 audit(1763429120.985:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4673 comm="syz.1.107" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c5bf8f6c9 code=0x0 [ 96.370637][ T41] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.571878][ T41] usb 4-1: Using ep0 maxpacket: 16 [ 96.577963][ T41] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 96.617779][ T41] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.639980][ T41] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.696274][ T41] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.723705][ T41] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.779693][ T41] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.823104][ T41] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.849740][ T41] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.879767][ T41] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.915442][ T41] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 96.952886][ T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 96.989164][ T41] usb 4-1: SerialNumber: syz [ 97.009176][ T41] usb 4-1: config 0 descriptor?? [ 97.057019][ T41] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 97.237821][ T4723] input: syz1 as /devices/virtual/input/input6 [ 97.274846][ T3622] bcm5974 4-1:0.0: could not read from device [ 97.309457][ T3622] bcm5974 4-1:0.0: could not read from device [ 97.319037][ T41] usb 4-1: USB disconnect, device number 2 [ 97.326414][ T3622] bcm5974 4-1:0.0: could not read from device [ 97.646293][ T4741] netlink: 7 bytes leftover after parsing attributes in process `syz.1.133'. [ 97.921166][ T4751] qnx4: no qnx4 filesystem (no root dir). [ 98.307166][ T4767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.146'. [ 98.595222][ T4779] loop1: detected capacity change from 0 to 512 [ 98.628539][ T4779] EXT4-fs (loop1): #blocks per group too big: 663552 [ 99.016442][ T4797] binder: Bad value for 'stats' [ 99.122771][ T4799] Illegal XDP return value 4294967274 on prog (id 15) dev syz_tun, expect packet loss! [ 99.471570][ T4812] net_ratelimit: 11 callbacks suppressed [ 99.471588][ T4812] TCP: tcp_parse_options: Illegal window scaling value 218 > 14 received [ 99.743025][ C1] Unknown status report in ack skb [ 99.861529][ T4805] loop3: detected capacity change from 0 to 32768 [ 99.916611][ T4805] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.164 (4805) [ 99.951282][ T4805] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 99.967121][ T4805] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 99.981084][ T4805] BTRFS info (device loop3): enabling auto defrag [ 99.987814][ T4805] BTRFS info (device loop3): turning on sync discard [ 100.001376][ T4805] BTRFS info (device loop3): force clearing of disk cache [ 100.009252][ T4805] BTRFS info (device loop3): using default commit interval 30s [ 100.017040][ T4805] BTRFS info (device loop3): max_inline at 0 [ 100.026590][ T4805] BTRFS info (device loop3): disabling free space tree [ 100.202232][ T4805] BTRFS info (device loop3): enabling ssd optimizations [ 100.222881][ T4805] BTRFS info (device loop3): rebuilding free space tree [ 100.347624][ T4805] BTRFS info (device loop3): disabling free space tree [ 100.371316][ T4805] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 100.398480][ T4805] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 100.548197][ T26] audit: type=1800 audit(1763429126.955:7): pid=4805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.164" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 100.600237][ T26] audit: type=1800 audit(1763429126.955:8): pid=4805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.164" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 101.148067][ T4273] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 101.205745][ T4867] loop2: detected capacity change from 0 to 128 [ 101.250229][ T129] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 101.403673][ T4867] syz.2.184: attempt to access beyond end of device [ 101.403673][ T4867] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 101.436613][ T4867] syz.2.184: attempt to access beyond end of device [ 101.436613][ T4867] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 101.452366][ T4875] overlayfs: failed to get inode (-116) [ 101.453420][ T129] usb 5-1: config 0 has no interfaces? [ 101.470148][ T4875] overlayfs: failed to get inode (-116) [ 101.475943][ T129] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 101.499524][ T129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.535001][ T129] usb 5-1: config 0 descriptor?? [ 101.871250][ C1] Unknown status report in ack skb [ 102.595117][ T4909] binder: 4908:4909 ioctl 40046205 0 returned -22 [ 103.008618][ T4920] overlayfs: failed to clone upperpath [ 103.142168][ T4905] loop1: detected capacity change from 0 to 32768 [ 103.265705][ T129] usb 5-1: USB disconnect, device number 2 [ 103.332389][ T4905] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 103.332389][ T4905] [ 103.362243][ T4905] ERROR: (device loop1): remounting filesystem as read-only [ 103.433491][ T4905] syz.1.197: attempt to access beyond end of device [ 103.433491][ T4905] loop1: rw=2049, sector=2621792, nr_sectors = 8 limit=32768 [ 103.473667][ T4905] syz.1.197: attempt to access beyond end of device [ 103.473667][ T4905] loop1: rw=524288, sector=2621792, nr_sectors = 8 limit=32768 [ 103.491474][ T4905] syz.1.197: attempt to access beyond end of device [ 103.491474][ T4905] loop1: rw=0, sector=2621792, nr_sectors = 8 limit=32768 [ 103.508177][ T4905] syz.1.197: attempt to access beyond end of device [ 103.508177][ T4905] loop1: rw=0, sector=2621792, nr_sectors = 8 limit=32768 [ 103.523202][ T4905] syz.1.197: attempt to access beyond end of device [ 103.523202][ T4905] loop1: rw=0, sector=2621792, nr_sectors = 8 limit=32768 [ 103.538729][ T4905] syz.1.197: attempt to access beyond end of device [ 103.538729][ T4905] loop1: rw=0, sector=2621792, nr_sectors = 8 limit=32768 [ 103.675129][ T108] blkno = 5002c, nblocks = 1 [ 103.680236][ T108] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 103.680236][ T108] [ 104.663804][ T4969] futex_wake_op: syz.3.223 tries to shift op by 32; fix this program [ 105.000294][ T4982] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 105.068826][ T127] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 105.278486][ T127] usb 5-1: Using ep0 maxpacket: 16 [ 105.285664][ T127] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 105.303432][ T4988] loop1: detected capacity change from 0 to 256 [ 105.317163][ T127] usb 5-1: config 0 has no interface number 0 [ 105.351104][ T127] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 105.369146][ T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.378909][ T127] usb 5-1: Product: syz [ 105.383132][ T127] usb 5-1: Manufacturer: syz [ 105.398199][ T127] usb 5-1: SerialNumber: syz [ 105.431461][ T127] usb 5-1: config 0 descriptor?? [ 105.678739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.687187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.695560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 105.808877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 105.817304][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 105.825796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 105.834198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 105.842598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 105.850974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 105.861779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 107.379919][ T5024] overlayfs: failed to clone upperpath [ 107.945452][ T127] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 107.969770][ T127] asix: probe of 5-1:0.34 failed with error -71 [ 107.996729][ T127] usb 5-1: USB disconnect, device number 3 [ 108.308635][ T4313] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 108.516302][ T4313] usb 3-1: unable to get BOS descriptor or descriptor too short [ 108.546310][ T4313] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 8 [ 108.565465][ T4313] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.597360][ T4313] usb 3-1: string descriptor 0 read error: -22 [ 108.609713][ T5054] syz.4.260 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 108.620730][ T4313] usb 3-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 108.646360][ T4313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.666594][ T5035] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 108.883709][ T4313] usbhid 3-1:1.0: can't add hid device: -71 [ 108.898753][ T4313] usbhid: probe of 3-1:1.0 failed with error -71 [ 108.925703][ T4313] usb 3-1: USB disconnect, device number 2 [ 109.637462][ T4274] Bluetooth: hci3: unexpected event 0x32 length: 16 > 9 [ 109.643505][ T5085] loop2: detected capacity change from 0 to 128 [ 109.699108][ T5085] FAT-fs (loop2): bogus number of FAT structure [ 109.726608][ T5085] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 109.748601][ T5085] FAT-fs (loop2): Can't find a valid FAT filesystem [ 109.878527][ T4874] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 110.124943][ T4874] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 110.149742][ T4874] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 110.175069][ T4874] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 110.195117][ T4874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.239852][ T5105] block nbd2: shutting down sockets [ 110.253745][ T5082] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 110.283728][ T5082] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 110.485615][ T5113] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 110.737966][ T4313] usb 4-1: USB disconnect, device number 3 [ 110.752232][ T5120] loop2: detected capacity change from 0 to 1024 [ 111.659357][ T5142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'. [ 111.896007][ T5149] capability: warning: `syz.3.299' uses 32-bit capabilities (legacy support in use) [ 111.919159][ T5124] loop4: detected capacity change from 0 to 32768 [ 112.085654][ T5124] XFS (loop4): Mounting V5 Filesystem [ 112.257882][ T5124] XFS (loop4): Ending clean mount [ 112.273328][ T5124] XFS (loop4): Quotacheck needed: Please wait. [ 112.321307][ T5124] XFS (loop4): Quotacheck: Done. [ 112.626150][ T4282] XFS (loop4): Unmounting Filesystem [ 113.212374][ T26] audit: type=1326 audit(1763429139.513:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5195 comm="syz.2.319" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa76278f6c9 code=0x0 [ 114.529488][ T5248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.341'. [ 114.571475][ T5248] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.580784][ T5248] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.589670][ T5248] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.598502][ T5248] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.629856][ T5248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.341'. [ 116.500198][ T5306] loop1: detected capacity change from 0 to 512 [ 116.565709][ T5306] EXT4-fs: Ignoring removed bh option [ 116.865133][ T5306] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.367: bad orphan inode 14 [ 116.929379][ T5306] ext4_test_bit(bit=13, block=18) = 1 [ 116.983289][ T5306] is_bad_inode(inode)=0 [ 116.987534][ T5306] NEXT_ORPHAN(inode)=0 [ 117.053574][ T5306] max_ino=32 [ 117.056909][ T5306] i_nlink=1 [ 117.073005][ T5306] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 117.144101][ T5306] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.305398][ T5329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.378'. [ 117.709799][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 117.927829][ T26] audit: type=1326 audit(1763429143.933:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5347 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76278f6c9 code=0x7ffc0000 [ 117.950674][ T5348] syz.2.386 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 118.004520][ T26] audit: type=1326 audit(1763429143.933:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5347 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76278f6c9 code=0x7ffc0000 [ 118.031917][ T5350] bridge0: port 3(erspan0) entered blocking state [ 118.057338][ T5350] bridge0: port 3(erspan0) entered disabled state [ 118.076452][ T26] audit: type=1326 audit(1763429143.933:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5347 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76278f6c9 code=0x7ffc0000 [ 118.106705][ T5350] device erspan0 entered promiscuous mode [ 118.141677][ T26] audit: type=1326 audit(1763429143.933:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5347 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76278f6c9 code=0x7ffc0000 [ 118.178232][ T5350] bridge0: port 3(erspan0) entered blocking state [ 118.185175][ T5350] bridge0: port 3(erspan0) entered forwarding state [ 118.219736][ T26] audit: type=1326 audit(1763429143.933:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5347 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa76278f6c9 code=0x7ffc0000 [ 118.294519][ T26] audit: type=1326 audit(1763429143.933:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5347 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76278f6c9 code=0x7ffc0000 [ 118.319456][ T5353] device erspan0 left promiscuous mode [ 118.326319][ T5353] bridge0: port 3(erspan0) entered disabled state [ 118.358260][ T26] audit: type=1326 audit(1763429143.933:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5347 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76278f6c9 code=0x7ffc0000 [ 118.433054][ T26] audit: type=1326 audit(1763429143.933:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5347 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76278f6c9 code=0x7ffc0000 [ 118.514105][ T26] audit: type=1326 audit(1763429143.933:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5347 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76278f6c9 code=0x7ffc0000 [ 118.624666][ T26] audit: type=1326 audit(1763429143.933:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5347 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa76278f6c9 code=0x7ffc0000 [ 118.696597][ T26] audit: type=1326 audit(1763429143.942:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5347 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76278f6c9 code=0x7ffc0000 [ 118.790545][ T26] audit: type=1326 audit(1763429143.942:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5347 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76278f6c9 code=0x7ffc0000 [ 118.875184][ T26] audit: type=1326 audit(1763429143.942:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5347 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76278f6c9 code=0x7ffc0000 [ 118.933132][ T26] audit: type=1326 audit(1763429143.942:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5347 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76278f6c9 code=0x7ffc0000 [ 118.965769][ T4876] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 119.005894][ T26] audit: type=1326 audit(1763429143.951:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5347 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa76278f6c9 code=0x7ffc0000 [ 119.061033][ T26] audit: type=1326 audit(1763429143.951:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5347 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76278f6c9 code=0x7ffc0000 [ 119.114922][ T26] audit: type=1326 audit(1763429143.951:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5347 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76278f6c9 code=0x7ffc0000 [ 119.191368][ T4876] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.233045][ T26] audit: type=1326 audit(1763429143.951:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5347 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 119.256187][ T4876] usb 5-1: config 0 has no interfaces? [ 119.278503][ T4876] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 119.309767][ T4876] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 119.334138][ T26] audit: type=1326 audit(1763429143.951:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5347 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76278f6c9 code=0x7ffc0000 [ 119.362612][ T4876] usb 5-1: Product: syz [ 119.369404][ T4876] usb 5-1: Manufacturer: syz [ 119.385568][ T4876] usb 5-1: SerialNumber: syz [ 119.427652][ T4876] usb 5-1: config 0 descriptor?? [ 119.681830][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.722497][ T5365] input: syz0 as /devices/virtual/input/input7 [ 119.802075][ T4874] usb 5-1: USB disconnect, device number 4 [ 119.880921][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.145967][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.492761][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.996182][ T4268] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 121.005661][ T4268] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 121.033582][ T4268] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 121.063142][ T4268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 121.073740][ T4268] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 121.084226][ T4268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 122.303835][ T5399] chnl_net:caif_netlink_parms(): no params data found [ 123.159279][ T5399] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.197744][ T5399] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.256537][ T5399] device bridge_slave_0 entered promiscuous mode [ 123.262571][ T4268] Bluetooth: hci2: command 0x0409 tx timeout [ 123.281586][ T5399] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.323939][ T5399] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.398397][ T5399] device bridge_slave_1 entered promiscuous mode [ 123.605301][ T5399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.637898][ T5399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.740595][ T4313] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.904976][ T5463] loop4: detected capacity change from 0 to 40427 [ 123.951564][ T5399] team0: Port device team_slave_0 added [ 123.968913][ T5463] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 123.977050][ T5463] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 123.996528][ T4313] usb 3-1: Using ep0 maxpacket: 16 [ 123.998101][ T5463] F2FS-fs (loop4): invalid crc value [ 124.012147][ T4313] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 124.044157][ T4313] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 124.088457][ T5463] F2FS-fs (loop4): Found nat_bits in checkpoint [ 124.098912][ T4313] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.155137][ T5463] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 124.156500][ T4313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 124.162722][ T5463] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 124.235985][ T4313] usb 3-1: SerialNumber: syz [ 124.259696][ T5456] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 124.316305][ T5456] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 124.355979][ T5463] syz.4.427: attempt to access beyond end of device [ 124.355979][ T5463] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 124.615615][ T4312] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 124.642672][ T4313] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 124.661338][ T4313] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 124.698371][ T4312] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 124.722247][ T4313] usb 3-1: USB disconnect, device number 3 [ 124.786677][ T5399] team0: Port device team_slave_1 added [ 124.857404][ T4312] kworker/u4:5: attempt to access beyond end of device [ 124.857404][ T4312] loop4: rw=1, sector=45224, nr_sectors = 8 limit=40427 [ 125.115949][ T5479] tmpfs: Unknown parameter 'noinode32' [ 125.203893][ T5399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.210902][ T5399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.345735][ T5399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.382413][ T5484] bridge_slave_0: default FDB implementation only supports local addresses [ 125.477808][ T4268] Bluetooth: hci2: command 0x041b tx timeout [ 125.514611][ T11] device hsr_slave_0 left promiscuous mode [ 125.537999][ T11] device hsr_slave_1 left promiscuous mode [ 125.585372][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.621209][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.666357][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.687348][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.722436][ T11] device bridge_slave_1 left promiscuous mode [ 125.757330][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.814333][ T11] device bridge_slave_0 left promiscuous mode [ 125.823696][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.937531][ T11] device veth1_macvtap left promiscuous mode [ 125.944360][ T11] device veth0_macvtap left promiscuous mode [ 125.990843][ T11] device veth1_vlan left promiscuous mode [ 125.997063][ T11] device veth0_vlan left promiscuous mode [ 126.350733][ T4268] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 127.680994][ T11] team0 (unregistering): Port device team_slave_1 removed [ 127.695155][ T4268] Bluetooth: hci2: command 0x040f tx timeout [ 127.836606][ T11] team0 (unregistering): Port device team_slave_0 removed [ 127.945882][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.115051][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.473133][ T4873] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 128.677544][ T4873] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 128.700485][ T4873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.728094][ T4873] usb 3-1: config 0 descriptor?? [ 128.743515][ T4873] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 128.913894][ T11] bond0 (unregistering): Released all slaves [ 129.065682][ T5486] netlink: 6 bytes leftover after parsing attributes in process `syz.0.435'. [ 129.075462][ T5486] bridge_slave_0: default FDB implementation only supports local addresses [ 129.087120][ T5399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.106482][ T5399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.161071][ T5399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.292075][ T5399] device hsr_slave_0 entered promiscuous mode [ 129.318481][ T5399] device hsr_slave_1 entered promiscuous mode [ 129.384760][ T5399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.413686][ T5399] Cannot create hsr debugfs directory [ 129.912256][ T4268] Bluetooth: hci2: command 0x0419 tx timeout [ 130.049356][ T4873] gspca_stv06xx: I2C: Read error writing address: -71 [ 130.074311][ T4873] usb 3-1: USB disconnect, device number 4 [ 130.825531][ T5399] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 130.890366][ T5399] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 130.897245][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 130.897259][ T26] audit: type=1326 audit(1780206601.093:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5624 comm="syz.1.488" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c5bf8f6c9 code=0x0 [ 130.988976][ T5399] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 131.094688][ T5399] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 131.527963][ T5399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.596085][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.638944][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.682045][ T5399] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.747196][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.761359][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.789039][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.796244][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.821804][ T4876] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 131.843810][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 131.876065][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 131.899863][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.931378][ T4994] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.938676][ T4994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.994541][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.025696][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.037545][ T4876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.077650][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.086275][ T4876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.096076][ T4876] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 132.129380][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.150816][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 132.159359][ T4876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.181230][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.205193][ T4876] usb 5-1: config 0 descriptor?? [ 132.212345][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.266259][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.314263][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.352271][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.391984][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.436504][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 132.663047][ T4876] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 132.692206][ T4876] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 132.874205][ T4876] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE [ 133.187644][ T5698] netlink: 'syz.1.513': attribute type 33 has an invalid length. [ 133.225349][ T5698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.513'. [ 133.403102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.419257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.468300][ T5399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.483965][ T5705] netlink: 16 bytes leftover after parsing attributes in process `syz.2.515'. [ 133.517670][ T5650] cp2112 0003:10C4:EA90.0002: Error starting transaction: -38 [ 133.529993][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.541589][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.562124][ T4876] cp2112 0003:10C4:EA90.0002: error reading lock byte: -71 [ 133.600488][ T4876] usb 5-1: USB disconnect, device number 5 [ 133.629377][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.653896][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.717648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.747744][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.761817][ T5399] device veth0_vlan entered promiscuous mode [ 133.803279][ T5399] device veth1_vlan entered promiscuous mode [ 133.895724][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.939118][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.952906][ T5711] fido_id[5711]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 133.979508][ T5399] device veth0_macvtap entered promiscuous mode [ 133.997376][ T5399] device veth1_macvtap entered promiscuous mode [ 134.088641][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.139945][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.189601][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.200215][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.210918][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.239182][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.263548][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.269914][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.306243][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.324501][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.337379][ T5399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.347576][ T5720] 8021q: VLANs not supported on xfrm0 [ 134.354643][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 134.386880][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 134.437684][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.458527][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.482020][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.500956][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.522932][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.544497][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.567775][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.587323][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.610165][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.626150][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.643154][ T5399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.660607][ T5732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.525'. [ 134.682283][ T5734] netlink: 'syz.2.526': attribute type 12 has an invalid length. [ 134.712806][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.740834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.776624][ T5399] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.805257][ T5399] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.814024][ T5399] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.845892][ T5399] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.180151][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.192395][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.219269][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 135.301675][ T5756] netlink: 32 bytes leftover after parsing attributes in process `syz.2.535'. [ 135.318946][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.369613][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.397099][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.404918][ T5840] binder: 5832:5840 ioctl c018620c 200000000000 returned -1 [ 137.780305][ T5853] kernel profiling enabled (shift: 5) [ 138.565928][ T5879] sp0: Synchronizing with TNC [ 138.628424][ T5875] [U] è [ 139.078912][ T5894] netlink: 9 bytes leftover after parsing attributes in process `syz.1.587'. [ 139.107506][ T5894] device gretap0 entered promiscuous mode [ 140.473142][ T5941] netlink: 76 bytes leftover after parsing attributes in process `syz.2.607'. [ 140.833710][ T5953] netlink: 104 bytes leftover after parsing attributes in process `syz.0.615'. [ 141.560450][ T5979] netlink: 68 bytes leftover after parsing attributes in process `syz.2.627'. [ 142.338955][ T26] audit: type=1326 audit(1780206611.817:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.1.643" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c5bf8f6c9 code=0x0 [ 142.558978][ T6024] netlink: 'syz.0.648': attribute type 4 has an invalid length. [ 142.610027][ T6024] netlink: 17 bytes leftover after parsing attributes in process `syz.0.648'. [ 143.923220][ T6065] binder: 6064:6065 ioctl c0306201 200000000040 returned -14 [ 143.977089][ T6069] netlink: 'syz.2.670': attribute type 10 has an invalid length. [ 144.029427][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.038451][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.095131][ T6069] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.102385][ T6069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.110924][ T6069] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.118103][ T6069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.223405][ T6073] syz.4.672 uses obsolete (PF_INET,SOCK_PACKET) [ 144.235660][ T6069] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 144.556544][ T26] audit: type=1326 audit(1780206613.919:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.2.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76278f6c9 code=0x7ffc0000 [ 144.715978][ T26] audit: type=1326 audit(1780206613.919:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.2.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76278f6c9 code=0x7ffc0000 [ 144.822003][ T26] audit: type=1326 audit(1780206613.938:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.2.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa76278f6c9 code=0x7ffc0000 [ 144.913460][ T26] audit: type=1326 audit(1780206613.938:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.2.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76278f6c9 code=0x7ffc0000 [ 145.029085][ T26] audit: type=1326 audit(1780206613.938:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.2.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76278f6c9 code=0x7ffc0000 [ 145.099667][ T26] audit: type=1326 audit(1780206613.938:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.2.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fa76278f6c9 code=0x7ffc0000 [ 145.177205][ T26] audit: type=1326 audit(1780206613.947:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.2.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76278f6c9 code=0x7ffc0000 [ 145.244334][ T26] audit: type=1326 audit(1780206613.947:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.2.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76278f6c9 code=0x7ffc0000 [ 145.288740][ T26] audit: type=1326 audit(1780206613.947:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.2.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa76278f6c9 code=0x7ffc0000 [ 145.693279][ T6117] x_tables: duplicate underflow at hook 2 [ 145.750018][ T4873] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 145.900372][ T6121] loop4: detected capacity change from 0 to 1024 [ 145.953360][ T4873] usb 4-1: Using ep0 maxpacket: 32 [ 145.961482][ T4873] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 145.971169][ T4873] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 145.974793][ T6121] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 145.980300][ T4873] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 145.997454][ T4873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 146.007825][ T4873] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 146.011113][ T6121] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.017594][ T4873] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 146.017640][ T4873] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 146.017663][ T4873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.064930][ T4873] usb 4-1: config 0 descriptor?? [ 146.175971][ T6121] EXT4-fs (loop4): unmounting filesystem. [ 146.316791][ T4873] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 146.364563][ T4873] usb 4-1: USB disconnect, device number 4 [ 146.394175][ T4873] usblp0: removed [ 146.813028][ T6156] netlink: 5 bytes leftover after parsing attributes in process `syz.4.711'. [ 146.954716][ T4873] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 147.043415][ T6167] netlink: 92 bytes leftover after parsing attributes in process `syz.4.716'. [ 147.156892][ T4873] usb 4-1: Using ep0 maxpacket: 32 [ 147.164599][ T4873] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 147.180739][ T4873] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 147.190160][ T4873] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 147.205389][ T4873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 147.215511][ T4873] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 147.243019][ T4873] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 147.262477][ T4873] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 147.279909][ T4873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.313487][ T4873] usb 4-1: config 0 descriptor?? [ 147.551348][ T4873] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 148.015891][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 148.015906][ T26] audit: type=1326 audit(1780206617.156:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6209 comm="syz.0.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 148.045331][ T26] audit: type=1326 audit(1780206617.156:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6209 comm="syz.0.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 148.071029][ T26] audit: type=1326 audit(1780206617.156:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6209 comm="syz.0.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 148.095140][ T26] audit: type=1326 audit(1780206617.156:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6209 comm="syz.0.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 148.118731][ T26] audit: type=1326 audit(1780206617.156:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6209 comm="syz.0.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 148.148766][ T4877] usb 4-1: USB disconnect, device number 5 [ 148.165360][ T4877] usblp0: removed [ 148.177627][ T26] audit: type=1326 audit(1780206617.165:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6209 comm="syz.0.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 148.209705][ T26] audit: type=1326 audit(1780206617.165:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6209 comm="syz.0.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 148.245235][ T26] audit: type=1326 audit(1780206617.165:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6209 comm="syz.0.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 148.274588][ T26] audit: type=1326 audit(1780206617.165:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6209 comm="syz.0.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 148.293446][ T6216] 9pnet: Unknown protocol version 9 [ 148.302062][ T26] audit: type=1326 audit(1780206617.165:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6209 comm="syz.0.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 148.397755][ T6218] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 148.543239][ T6222] veth0_to_team: mtu greater than device maximum [ 148.885651][ T6238] loop1: detected capacity change from 0 to 1024 [ 148.967492][ T6238] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 149.098977][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 149.202682][ T6249] capability: warning: `syz.0.753' uses deprecated v2 capabilities in a way that may be insecure [ 149.259048][ T6253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.756'. [ 149.645991][ T6267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.762'. [ 150.252892][ T6293] netlink: 20 bytes leftover after parsing attributes in process `syz.0.775'. [ 151.777987][ T6345] loop1: detected capacity change from 0 to 512 [ 151.924312][ T6345] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 152.139445][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 153.263842][ T4876] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 153.478951][ T4876] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 153.498491][ T4876] usb 4-1: config 179 has no interface number 0 [ 153.512203][ T4876] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 153.540973][ T4876] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 153.580173][ T4876] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 153.620114][ T4876] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 153.653162][ T4876] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 153.685332][ T4876] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 153.727667][ T4876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.772072][ T6375] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 153.789572][ T4876] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 153.808874][ T4876] xpad: probe of 4-1:179.65 failed with error -5 [ 154.029782][ T4876] usb 4-1: USB disconnect, device number 6 [ 154.547989][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 154.548008][ T26] audit: type=1326 audit(1780206623.292:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 154.636280][ T26] audit: type=1326 audit(1780206623.292:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 154.697815][ T26] audit: type=1326 audit(1780206623.339:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 154.819848][ T26] audit: type=1326 audit(1780206623.339:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 154.903750][ T26] audit: type=1326 audit(1780206623.339:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 154.938032][ T6419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.835'. [ 154.958623][ T6419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.835'. [ 155.010598][ T26] audit: type=1326 audit(1780206623.339:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 155.084890][ T26] audit: type=1326 audit(1780206623.348:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 155.154056][ T26] audit: type=1326 audit(1780206623.348:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 155.222371][ T26] audit: type=1326 audit(1780206623.348:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 155.273448][ T26] audit: type=1326 audit(1780206623.348:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 155.423311][ T6437] netlink: 84 bytes leftover after parsing attributes in process `syz.4.843'. [ 156.183005][ T6471] netlink: 16 bytes leftover after parsing attributes in process `syz.4.856'. [ 157.236214][ T6524] netlink: 76 bytes leftover after parsing attributes in process `syz.4.881'. [ 157.791431][ T6549] netlink: 'syz.0.893': attribute type 12 has an invalid length. [ 158.197229][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.901'. [ 158.209389][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.901'. [ 160.081953][ T6647] 8021q: VLANs not supported on ip6tnl0 [ 160.388677][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.941'. [ 160.719806][ T6675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.950'. [ 162.060946][ T4274] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 162.072292][ T4274] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 162.080408][ T4274] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 162.109055][ T4274] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 162.117889][ T4274] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 162.128420][ T4274] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 162.201709][ T4994] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.426168][ T4994] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.581927][ T4994] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.787695][ T4994] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.918485][ T6746] binder: 6745:6746 ioctl c00c6211 0 returned -14 [ 162.944230][ T6719] chnl_net:caif_netlink_parms(): no params data found [ 163.380665][ T6719] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.387820][ T6719] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.426313][ T6719] device bridge_slave_0 entered promiscuous mode [ 163.559854][ T6719] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.567043][ T6719] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.593174][ T6719] device bridge_slave_1 entered promiscuous mode [ 163.654147][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 163.654164][ T26] audit: type=1326 audit(1780206631.830:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6767 comm="syz.0.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 163.785537][ T26] audit: type=1326 audit(1780206631.830:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6767 comm="syz.0.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 163.815063][ T6719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.879501][ T26] audit: type=1326 audit(1780206631.877:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6767 comm="syz.0.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 163.917761][ T6719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.942086][ T6774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.990'. [ 163.949442][ T26] audit: type=1326 audit(1780206631.877:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6767 comm="syz.0.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 164.065947][ T6719] team0: Port device team_slave_0 added [ 164.072113][ T26] audit: type=1326 audit(1780206631.877:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6767 comm="syz.0.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 164.140161][ T26] audit: type=1326 audit(1780206631.877:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6767 comm="syz.0.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 164.210854][ T6719] team0: Port device team_slave_1 added [ 164.241586][ T26] audit: type=1326 audit(1780206631.877:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6767 comm="syz.0.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 164.274236][ T4268] Bluetooth: hci3: command 0x0409 tx timeout [ 164.328690][ T26] audit: type=1326 audit(1780206631.877:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6767 comm="syz.0.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 164.352681][ T26] audit: type=1326 audit(1780206631.877:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6767 comm="syz.0.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 164.381373][ T26] audit: type=1326 audit(1780206631.877:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6767 comm="syz.0.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 164.421941][ T6719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.465409][ T6719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.534675][ T6719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.659419][ T6719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.667010][ T6719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.727121][ T6719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.949313][ T6719] device hsr_slave_0 entered promiscuous mode [ 164.999841][ T6719] device hsr_slave_1 entered promiscuous mode [ 165.013612][ T6719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.024877][ T6719] Cannot create hsr debugfs directory [ 165.566207][ T6823] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1011'. [ 165.583271][ T6825] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1012'. [ 165.953866][ T4994] device hsr_slave_0 left promiscuous mode [ 165.976431][ T4994] device hsr_slave_1 left promiscuous mode [ 165.987186][ T4994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.000708][ T4994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.019441][ T4994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.032527][ T4994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.051624][ T4994] device bridge_slave_1 left promiscuous mode [ 166.061925][ T4994] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.084617][ T4994] device bridge_slave_0 left promiscuous mode [ 166.094216][ T4994] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.180777][ T4994] device veth1_macvtap left promiscuous mode [ 166.187062][ T4994] device veth0_macvtap left promiscuous mode [ 166.194368][ T4994] device veth1_vlan left promiscuous mode [ 166.200232][ T4994] device veth0_vlan left promiscuous mode [ 166.490580][ T4268] Bluetooth: hci3: command 0x041b tx timeout [ 167.607108][ T4994] team0 (unregistering): Port device team_slave_1 removed [ 167.668943][ T4994] team0 (unregistering): Port device team_slave_0 removed [ 167.727763][ T4994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.773572][ T4994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.233052][ T4994] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 168.242184][ T4994] bond0 (unregistering): Released all slaves [ 168.707666][ T4268] Bluetooth: hci3: command 0x040f tx timeout [ 168.775082][ T6719] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 168.818008][ T6719] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 168.875071][ T6719] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 168.924998][ T6719] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 169.296838][ T6719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.360923][ T6719] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.371237][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.380187][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.431252][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.455990][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.484229][ T4373] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.491445][ T4373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.525045][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.548115][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.566598][ T4373] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.573829][ T4373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.634691][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.672888][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.695019][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.723842][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1052'. [ 169.785144][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.827366][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.870253][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 169.912504][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.970656][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.013114][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.034659][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.081793][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.113628][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.146939][ T6719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.179029][ T6959] IPv6: NLM_F_CREATE should be specified when creating new route [ 170.924312][ T4268] Bluetooth: hci3: command 0x0419 tx timeout [ 171.057211][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.074252][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.110647][ T6719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.337114][ T7008] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1072'. [ 172.452524][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.476030][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.552557][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.572000][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.605289][ T6719] device veth0_vlan entered promiscuous mode [ 172.632352][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.664086][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.689599][ T6719] device veth1_vlan entered promiscuous mode [ 172.748604][ T7064] IPv6: Can't replace route, no match found [ 172.851591][ T7067] netlink: 5308 bytes leftover after parsing attributes in process `syz.0.1091'. [ 172.855652][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.913370][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.934536][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.958118][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.005348][ T6719] device veth0_macvtap entered promiscuous mode [ 173.032604][ T6719] device veth1_macvtap entered promiscuous mode [ 173.119025][ T7077] process 'syz.0.1095' launched './file0' with NULL argv: empty string added [ 173.126817][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.173050][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.216121][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.258005][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.275685][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.292717][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.305863][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.318033][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.345854][ T6719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.363358][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 173.417445][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 173.440786][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.493182][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.520471][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.564222][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.604804][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.616551][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.632708][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.643653][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.653863][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.664672][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.685362][ T6719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.710733][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.730182][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.758961][ T6719] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.774035][ T6719] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.784723][ T6719] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.797938][ T6719] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.006669][ T4994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.033437][ T4994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.080062][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 174.099780][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.146143][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.184843][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 175.739357][ T7171] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1134'. [ 176.046842][ T7187] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 4, id = 0 [ 176.075911][ T7188] binder: Bad value for 'max' [ 177.503861][ T7246] binder: Bad value for 'max' [ 178.457021][ T7287] x_tables: unsorted underflow at hook 1 [ 178.640746][ T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 178.660143][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 178.660158][ T26] audit: type=1326 audit(1780206645.913:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 178.803812][ T26] audit: type=1326 audit(1780206645.913:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 178.827413][ T7298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1182'. [ 178.864771][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 178.876543][ T7] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 178.884854][ T7] usb 6-1: config 179 has no interface number 0 [ 178.917997][ T26] audit: type=1326 audit(1780206645.960:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 178.950182][ T7] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 178.988611][ T7] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 179.004189][ T26] audit: type=1326 audit(1780206645.960:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 179.035418][ T7] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 179.080607][ T7] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 179.103931][ T26] audit: type=1326 audit(1780206645.960:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 179.136113][ T7] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 179.180561][ T7] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 179.201286][ T26] audit: type=1326 audit(1780206645.960:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 179.240365][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.283836][ T7285] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 179.312981][ T7312] 9pnet_fd: Insufficient options for proto=fd [ 179.330111][ T26] audit: type=1326 audit(1780206645.970:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 179.418069][ T26] audit: type=1326 audit(1780206645.970:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 179.490446][ T26] audit: type=1326 audit(1780206645.979:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 179.515700][ T26] audit: type=1326 audit(1780206645.979:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 179.790955][ T4874] usb 6-1: USB disconnect, device number 2 [ 179.790969][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 179.807574][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 180.082955][ T7302] loop3: detected capacity change from 0 to 32768 [ 180.922204][ T7363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1207'. [ 181.776862][ T7401] bridge0: port 3(bond0) entered blocking state [ 181.784822][ T7401] bridge0: port 3(bond0) entered disabled state [ 181.815455][ T7401] device bond0 entered promiscuous mode [ 181.836860][ T7401] device bond_slave_0 entered promiscuous mode [ 181.854931][ T7401] device bond_slave_1 entered promiscuous mode [ 181.875112][ T7401] bridge0: port 3(bond0) entered blocking state [ 181.881601][ T7401] bridge0: port 3(bond0) entered forwarding state [ 182.085876][ T7413] 9pnet_fd: Insufficient options for proto=fd [ 182.449895][ T7428] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1229'. [ 183.247025][ T7459] netlink: 'syz.5.1242': attribute type 4 has an invalid length. [ 183.391231][ T7465] loop3: detected capacity change from 0 to 512 [ 183.466783][ T7465] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 183.512671][ T7465] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 183.570531][ T7465] EXT4-fs (loop3): group descriptors corrupted! [ 183.591557][ T7474] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1249'. [ 184.083542][ T7460] 9pnet_fd: p9_fd_create_tcp (7460): problem connecting socket to 127.0.0.1 [ 184.308711][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 184.308727][ T26] audit: type=1326 audit(1780206651.205:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz.0.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 184.443203][ T26] audit: type=1326 audit(1780206651.252:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz.0.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 184.469601][ T7505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1263'. [ 184.498302][ T26] audit: type=1326 audit(1780206651.252:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz.0.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 184.613506][ T26] audit: type=1326 audit(1780206651.252:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz.0.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 184.694590][ T26] audit: type=1326 audit(1780206651.252:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz.0.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147878f6c9 code=0x7ffc0000 [ 185.001245][ T7527] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1271'. [ 185.501210][ T7546] raw_sendmsg: syz.3.1281 forgot to set AF_INET. Fix it! [ 186.549606][ T7571] loop1: detected capacity change from 0 to 32768 [ 186.986206][ T7590] syz_tun: mtu less than device minimum [ 187.259696][ T7578] 9pnet_fd: p9_fd_create_tcp (7578): problem connecting socket to 127.0.0.1 [ 187.539613][ T26] audit: type=1326 audit(1780206654.236:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7609 comm="syz.3.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292538f6c9 code=0x7ffc0000 [ 187.625796][ T26] audit: type=1326 audit(1780206654.236:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7609 comm="syz.3.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292538f6c9 code=0x7ffc0000 [ 187.663778][ T26] audit: type=1326 audit(1780206654.245:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7609 comm="syz.3.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f292538f6c9 code=0x7ffc0000 [ 187.719681][ T26] audit: type=1326 audit(1780206654.245:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7609 comm="syz.3.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f292538f703 code=0x7ffc0000 [ 187.806965][ T26] audit: type=1326 audit(1780206654.245:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7609 comm="syz.3.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292538f6c9 code=0x7ffc0000 [ 189.025746][ T7670] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1328'. [ 189.042063][ T7671] IPv6: addrconf: prefix option has invalid lifetime [ 189.715351][ T4313] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 189.924405][ T4313] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.939153][ T4313] usb 4-1: config 0 has no interface number 0 [ 189.945308][ T4313] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 190.007181][ T4313] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 190.045735][ T4313] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 190.066388][ T4313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.102351][ T4313] usb 4-1: config 0 descriptor?? [ 190.109437][ T7683] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 190.151447][ T4313] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 190.473668][ T4313] usb 4-1: USB disconnect, device number 7 [ 190.479602][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 191.228555][ T7743] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1355'. [ 191.307523][ T4874] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 191.516297][ T4874] usb 2-1: Using ep0 maxpacket: 8 [ 191.523657][ T4874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 191.558960][ T4874] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 191.579004][ T4874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.620145][ T4874] usb 2-1: config 0 descriptor?? [ 192.055284][ T4874] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 192.830031][ T14] usb 2-1: USB disconnect, device number 2 [ 192.870124][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1363'. [ 192.890478][ T7773] device bridge_slave_1 left promiscuous mode [ 192.907759][ T7773] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.930679][ T7773] device bridge_slave_0 left promiscuous mode [ 192.950958][ T7773] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.702063][ T7803] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1373'. [ 194.242665][ T7829] loop1: detected capacity change from 0 to 128 [ 195.004173][ T7866] netlink: 'syz.1.1401': attribute type 1 has an invalid length. [ 195.022219][ T7866] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1401'. [ 199.041543][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1430'. [ 199.061939][ T7961] device bridge_slave_1 left promiscuous mode [ 199.068260][ T7961] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.107540][ T7961] device bridge_slave_0 left promiscuous mode [ 199.113943][ T7961] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.454423][ T7976] overlayfs: failed to clone upperpath [ 199.484328][ T7976] overlayfs: failed to clone upperpath [ 199.749885][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.756281][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.294227][ T8014] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1448'. [ 200.455234][ T8021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1449'. [ 200.486197][ T8021] device bridge_slave_1 left promiscuous mode [ 200.500678][ T8021] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.522867][ T8021] device bridge_slave_0 left promiscuous mode [ 200.529172][ T8021] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.986415][ T8044] overlayfs: failed to resolve './bus': -2 [ 201.304594][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1462'. [ 202.082976][ T4274] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 202.095065][ T4274] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 202.105040][ T4274] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 202.113233][ T4274] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 202.134613][ T4274] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 202.143040][ T4274] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 202.238389][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.358205][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.482243][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.728540][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.767131][ T8077] chnl_net:caif_netlink_parms(): no params data found [ 203.553608][ T8077] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.583163][ T8077] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.609789][ T8077] device bridge_slave_0 entered promiscuous mode [ 203.642126][ T8077] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.659525][ T8077] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.677293][ T8077] device bridge_slave_1 entered promiscuous mode [ 203.800274][ T8077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.850351][ T8077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.959372][ T8077] team0: Port device team_slave_0 added [ 203.979716][ T8077] team0: Port device team_slave_1 added [ 204.055003][ T8077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.070872][ T8077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.122576][ T8077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.144019][ T8077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.151328][ T8077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.218552][ T8077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.348070][ T4274] Bluetooth: hci3: command 0x0409 tx timeout [ 204.370731][ T8077] device hsr_slave_0 entered promiscuous mode [ 204.408307][ T8077] device hsr_slave_1 entered promiscuous mode [ 204.445249][ T8077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.494420][ T8077] Cannot create hsr debugfs directory [ 204.860919][ T8162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1499'. [ 205.298533][ T8077] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 205.393459][ T8077] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 205.414810][ T8077] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 205.510998][ T8077] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 205.639901][ T8192] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1514'. [ 205.787020][ T8200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1505'. [ 205.795987][ T8200] device bond0 left promiscuous mode [ 205.860627][ T8200] device bond_slave_0 left promiscuous mode [ 205.883570][ T8200] device bond_slave_1 left promiscuous mode [ 205.902670][ T8200] bridge0: port 3(bond0) entered disabled state [ 205.921224][ T8200] device bridge_slave_1 left promiscuous mode [ 205.940864][ T8200] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.956329][ T8206] input: syz0 as /devices/virtual/input/input9 [ 205.985026][ T8200] device bridge_slave_0 left promiscuous mode [ 206.012583][ T8200] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.037456][ T8209] overlayfs: failed to clone upperpath [ 206.058851][ T8209] overlayfs: failed to clone upperpath [ 206.463105][ T8077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.541283][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.559495][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.567278][ T4268] Bluetooth: hci3: command 0x041b tx timeout [ 206.627143][ T8077] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.842098][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.867643][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.915612][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.922781][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.003622][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.036988][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.064270][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.071463][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.130919][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.182413][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.262458][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.344490][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.369347][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.413498][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.418395][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 207.427503][ T4268] Bluetooth: hci0: command 0x0406 tx timeout [ 207.438787][ T4274] Bluetooth: hci1: command 0x0406 tx timeout [ 207.455110][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.504175][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.768644][ T8077] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 207.795158][ T8077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.821014][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.846559][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.898374][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.928347][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.036823][ T9] device hsr_slave_0 left promiscuous mode [ 208.085943][ T9] device hsr_slave_1 left promiscuous mode [ 208.118037][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.139778][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.182770][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.220628][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.274383][ T9] device bridge_slave_1 left promiscuous mode [ 208.298434][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.369429][ T9] device bridge_slave_0 left promiscuous mode [ 208.384409][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.397012][ T8291] binder: 8290:8291 unknown command 1074553619 [ 208.420072][ T8291] binder: 8290:8291 ioctl c0306201 200000000040 returned -22 [ 208.526283][ T9] device veth1_macvtap left promiscuous mode [ 208.543313][ T9] device veth0_macvtap left promiscuous mode [ 208.581892][ T9] device veth1_vlan left promiscuous mode [ 208.603863][ T9] device veth0_vlan left promiscuous mode [ 208.785371][ T4268] Bluetooth: hci3: command 0x040f tx timeout [ 209.519115][ T9] team0 (unregistering): Port device team_slave_1 removed [ 209.574306][ T9] team0 (unregistering): Port device team_slave_0 removed [ 209.626068][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.693596][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.966198][ T8324] binder: Bad value for 'max' [ 210.170308][ T8330] loop1: detected capacity change from 0 to 128 [ 210.178740][ T8330] FAT-fs (loop1): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 210.459316][ T9] bond0 (unregistering): Released all slaves [ 210.535406][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 211.003262][ T4268] Bluetooth: hci3: command 0x0419 tx timeout [ 211.136171][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.169816][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.234578][ T8077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.765932][ T14] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 211.979228][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 211.986706][ T14] usb 2-1: config 0 has an invalid interface number: 148 but max is 0 [ 212.022068][ T14] usb 2-1: config 0 has no interface number 0 [ 212.043017][ T14] usb 2-1: config 0 interface 148 has no altsetting 0 [ 212.083249][ T14] usb 2-1: New USB device found, idVendor=067b, idProduct=0307, bcdDevice=dd.c8 [ 212.115158][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.158223][ T14] usb 2-1: Product: syz [ 212.166065][ T14] usb 2-1: Manufacturer: syz [ 212.192270][ T14] usb 2-1: SerialNumber: syz [ 212.207897][ T14] usb 2-1: config 0 descriptor?? [ 212.242833][ T14] pl2303 2-1:0.148: required interrupt-in endpoint missing [ 212.449839][ T5605] usb 2-1: USB disconnect, device number 3 [ 212.537962][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 212.555863][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 212.600743][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 212.622341][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 212.652822][ T8077] device veth0_vlan entered promiscuous mode [ 212.659947][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 212.679831][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 212.705242][ T8077] device veth1_vlan entered promiscuous mode [ 212.776335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 212.798547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 212.819905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.846836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.880816][ T8077] device veth0_macvtap entered promiscuous mode [ 212.903516][ T8077] device veth1_macvtap entered promiscuous mode [ 212.956517][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.003594][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.040428][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.066527][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.104445][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.130744][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.194222][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.216274][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.262303][ T8077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.321555][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 213.341895][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 213.367042][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 213.392998][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.427313][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.481145][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.552780][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.619821][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.664094][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.712900][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.763787][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.782166][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.793543][ T8077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.804199][ T8077] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.813021][ T8077] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.821751][ T8077] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.830693][ T8077] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.843337][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 213.875413][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 214.133136][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.141505][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.223133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 214.247091][ T4994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.268672][ T4994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.334721][ T8438] Invalid ELF header type: 3 != 1 [ 214.492872][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 216.888996][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029a35000: rx timeout, send abort [ 217.047184][ T8522] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 217.326275][ T8536] binder: 8535:8536 ioctl c0306201 2000000004c0 returned -22 [ 217.394844][ T8540] netlink: 'syz.3.1626': attribute type 27 has an invalid length. [ 217.432104][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029a35000: abort rx timeout. Force session deactivation [ 217.521547][ T8544] mmap: syz.4.1627 (8544) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 217.580489][ T8548] loop6: detected capacity change from 0 to 128 [ 217.587066][ T8544] [ 217.589422][ T8544] ====================================================== [ 217.596463][ T8544] WARNING: possible circular locking dependency detected [ 217.603515][ T8544] syzkaller #0 Not tainted [ 217.607946][ T8544] ------------------------------------------------------ [ 217.614983][ T8544] syz.4.1627/8544 is trying to acquire lock: [ 217.620983][ T8544] ffff8880681ed4a0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x33c/0x1a10 [ 217.631769][ T8544] [ 217.631769][ T8544] but task is already holding lock: [ 217.639152][ T8544] ffff88801c7f7958 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 217.649212][ T8544] [ 217.649212][ T8544] which lock already depends on the new lock. [ 217.649212][ T8544] [ 217.659655][ T8544] [ 217.659655][ T8544] the existing dependency chain (in reverse order) is: [ 217.668710][ T8544] [ 217.668710][ T8544] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 217.676310][ T8544] down_read_killable+0x4c/0x340 [ 217.681815][ T8544] mmap_read_lock_killable+0x1d/0x60 [ 217.687651][ T8544] lock_mm_and_find_vma+0x2b1/0x2f0 [ 217.693421][ T8544] do_user_addr_fault+0x2db/0xb10 [ 217.698990][ T8544] exc_page_fault+0x60/0x100 [ 217.704118][ T8544] asm_exc_page_fault+0x22/0x30 [ 217.709500][ T8544] fault_in_readable+0x13e/0x1f0 [ 217.714971][ T8544] fault_in_iov_iter_readable+0xbb/0x2e0 [ 217.721136][ T8544] generic_perform_write+0x1d2/0x560 [ 217.726953][ T8544] __generic_file_write_iter+0x172/0x430 [ 217.733113][ T8544] generic_file_write_iter+0xab/0x2e0 [ 217.739016][ T8544] vfs_write+0x44c/0x960 [ 217.743789][ T8544] ksys_write+0x143/0x240 [ 217.748648][ T8544] do_syscall_64+0x4c/0xa0 [ 217.753594][ T8544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.760012][ T8544] [ 217.760012][ T8544] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 217.768713][ T8544] __lock_acquire+0x2cf8/0x7c50 [ 217.774096][ T8544] lock_acquire+0x1b4/0x490 [ 217.779127][ T8544] down_write+0x36/0x60 [ 217.783815][ T8544] process_measurement+0x33c/0x1a10 [ 217.789547][ T8544] ima_file_mmap+0x104/0x150 [ 217.794670][ T8544] __se_sys_remap_file_pages+0x53e/0x770 [ 217.800839][ T8544] do_syscall_64+0x4c/0xa0 [ 217.805780][ T8544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.812206][ T8544] [ 217.812206][ T8544] other info that might help us debug this: [ 217.812206][ T8544] [ 217.822436][ T8544] Possible unsafe locking scenario: [ 217.822436][ T8544] [ 217.829884][ T8544] CPU0 CPU1 [ 217.835250][ T8544] ---- ---- [ 217.840616][ T8544] lock(&mm->mmap_lock); [ 217.844951][ T8544] lock(&sb->s_type->i_mutex_key#12); [ 217.852940][ T8544] lock(&mm->mmap_lock); [ 217.859794][ T8544] lock(&sb->s_type->i_mutex_key#12); [ 217.865261][ T8544] [ 217.865261][ T8544] *** DEADLOCK *** [ 217.865261][ T8544] [ 217.873403][ T8544] 1 lock held by syz.4.1627/8544: [ 217.878427][ T8544] #0: ffff88801c7f7958 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 217.888886][ T8544] [ 217.888886][ T8544] stack backtrace: [ 217.894785][ T8544] CPU: 0 PID: 8544 Comm: syz.4.1627 Not tainted syzkaller #0 [ 217.902162][ T8544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 217.912229][ T8544] Call Trace: [ 217.915523][ T8544] [ 217.918557][ T8544] dump_stack_lvl+0x168/0x22e [ 217.923273][ T8544] ? load_image+0x3b0/0x3b0 [ 217.927811][ T8544] ? show_regs_print_info+0x12/0x12 [ 217.933025][ T8544] ? print_circular_bug+0x12b/0x1a0 [ 217.938241][ T8544] check_noncircular+0x274/0x310 [ 217.943200][ T8544] ? add_chain_block+0x940/0x940 [ 217.948154][ T8544] ? lockdep_lock+0xdc/0x1e0 [ 217.952772][ T8544] ? _find_first_zero_bit+0xcf/0x100 [ 217.958079][ T8544] __lock_acquire+0x2cf8/0x7c50 [ 217.962952][ T8544] ? ima_match_policy+0x104/0x2100 [ 217.968071][ T8544] ? verify_lock_unused+0x140/0x140 [ 217.973283][ T8544] ? ima_match_policy+0x207a/0x2100 [ 217.978497][ T8544] lock_acquire+0x1b4/0x490 [ 217.983021][ T8544] ? process_measurement+0x33c/0x1a10 [ 217.988417][ T8544] ? __might_sleep+0xd0/0xd0 [ 217.993028][ T8544] ? read_lock_is_recursive+0x10/0x10 [ 217.998422][ T8544] ? ima_get_action+0x71/0xa0 [ 218.003120][ T8544] down_write+0x36/0x60 [ 218.007293][ T8544] ? process_measurement+0x33c/0x1a10 [ 218.012702][ T8544] process_measurement+0x33c/0x1a10 [ 218.017941][ T8544] ? ima_file_mmap+0x150/0x150 [ 218.022732][ T8544] ? aa_file_perm+0x117/0xec0 [ 218.027438][ T8544] ? mtree_range_walk+0x672/0x7b0 [ 218.032471][ T8544] ? aa_get_current_label+0x110/0x1d0 [ 218.037865][ T8544] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 218.044050][ T8544] ima_file_mmap+0x104/0x150 [ 218.048694][ T8544] ? ima_file_free+0x3e0/0x3e0 [ 218.053488][ T8544] ? common_file_perm+0x171/0x1c0 [ 218.058547][ T8544] ? bpf_lsm_mmap_file+0x5/0x10 [ 218.063437][ T8544] ? security_mmap_file+0x11b/0x180 [ 218.068655][ T8544] __se_sys_remap_file_pages+0x53e/0x770 [ 218.074311][ T8544] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 218.080047][ T8544] ? lockdep_hardirqs_on+0x94/0x140 [ 218.085261][ T8544] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 218.090990][ T8544] do_syscall_64+0x4c/0xa0 [ 218.095415][ T8544] ? clear_bhb_loop+0x60/0xb0 [ 218.100106][ T8544] ? clear_bhb_loop+0x60/0xb0 [ 218.104793][ T8544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.110698][ T8544] RIP: 0033:0x7f061158f6c9 [ 218.115129][ T8544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.134750][ T8544] RSP: 002b:00007f061249c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 218.143166][ T8544] RAX: ffffffffffffffda RBX: 00007f06117e5fa0 RCX: 00007f061158f6c9 [ 218.151141][ T8544] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffb000 [ 218.159113][ T8544] RBP: 00007f0611611f91 R08: 0000000000080000 R09: 0000000000000000 [ 218.167100][ T8544] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 218.175072][ T8544] R13: 00007f06117e6038 R14: 00007f06117e5fa0 R15: 00007ffd2dca2698 [ 218.183094][ T8544] [ 218.217398][ T4385] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2