last executing test programs: 10.272343534s ago: executing program 4 (id=457): r0 = io_uring_setup(0x1951, &(0x7f00000000c0)={0x0, 0x20, 0x40, 0x2, 0x28f}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3e0400000000000000000000000609000040"}) r5 = epoll_create1(0x0) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x0) 9.339595562s ago: executing program 4 (id=459): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000800)={0x9, {{0x2, 0x0, @multicast2}}, 0x0, 0x2, [{{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @broadcast}}]}, 0x190) 7.002304446s ago: executing program 1 (id=469): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1d00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) close(0xffffffffffffffff) 6.631851467s ago: executing program 3 (id=473): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x5, 0x1, "fd"}, 0x9) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x5}, 0x8) 6.434581024s ago: executing program 4 (id=474): syz_usb_connect(0x0, 0x0, 0x0, 0x0) 5.849596632s ago: executing program 4 (id=478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) io_uring_setup(0x20001782, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x20, 0x8c}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000040)={r7, r5, r6}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000a00)={r7, r5, r6}) socket(0x2b, 0x1, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000040)=0x6185, 0x4) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 4.987229404s ago: executing program 3 (id=481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) close_range(r1, 0xffffffffffffffff, 0x0) 4.953833587s ago: executing program 4 (id=482): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.842404426s ago: executing program 3 (id=483): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 3.559232233s ago: executing program 2 (id=484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c00000000"], 0x30}], 0x1, 0x0) 3.558891213s ago: executing program 3 (id=485): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2], 0x48}}, 0x0) 3.558651063s ago: executing program 1 (id=486): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, 0x0, 0x20008000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x30008c8, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x51, 0x2b8, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) socket(0x2c, 0xa, 0x1) setrlimit(0x0, &(0x7f0000000240)={0x7, 0x200}) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) listen(r6, 0x6) 3.328725132s ago: executing program 3 (id=488): syz_usb_connect(0x0, 0x0, 0x0, 0x0) 2.551538997s ago: executing program 2 (id=489): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ff9000/0x1000)=nil, 0x1000}) 2.51391901s ago: executing program 0 (id=490): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r1 = syz_open_pts(r0, 0x141601) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) 2.473383364s ago: executing program 3 (id=491): syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_io_uring_setup(0x5b7, &(0x7f00000001c0)={0x0, 0x9ab7, 0x800}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000100)=0x8f19, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.199533056s ago: executing program 1 (id=492): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) io_uring_setup(0x20001782, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x20, 0x8c}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000040)={r7, r5, r6}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000a00)={r7, r5, r6}) socket(0x2b, 0x1, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000040)=0x6185, 0x4) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 1.454105928s ago: executing program 2 (id=493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x8, 0xe, 0x0, 0x1, [{0x4}]}]}, 0x1c}}, 0x0) 1.42975141s ago: executing program 4 (id=494): syz_mount_image$ocfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x2a00403, &(0x7f00000003c0)=ANY=[@ANYBLOB="6c6f63616c616c6c6f633d31383434363734343037333730393535313630382c726573765f6c6576656c3d30303030303030303030303030303030303030322c6865617274626561743d6e6f6e652c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c6e6f696e74722c636f686572656e63793d66756c6c2c6e6f61636c2c636f686572656e63793d66756c6c2c646174613d6f7264657265642c00a6bbbf4f1c4504306b696ca03fb375edc4c5f0f579bf2195c3cc88165b8c279abaa84a848971253cb6e898fee96fa6", @ANYRES16=0x0, @ANYRESDEC=0x0], 0x8, 0x446f, &(0x7f0000004500)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000000)={0x0, 0x200002000001, 0x400000, 0x2b, 0x0, 0x0, 0x2401}) 1.368794355s ago: executing program 0 (id=495): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x24, r2, 0x5, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 1.367938205s ago: executing program 1 (id=496): syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ce", 0x14, 0x6, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @empty}, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}}, 0x0) 1.311589811s ago: executing program 2 (id=497): socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.31111684s ago: executing program 1 (id=498): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg2\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.260136325s ago: executing program 0 (id=499): syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c"], 0x0) 1.063868361s ago: executing program 0 (id=500): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x5, 0x3799, 0xfffffff8, 0x608, r1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r4, 0x4b48, &(0x7f0000003d40)=""/175) 1.030712763s ago: executing program 2 (id=501): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}, 0x1c) 871.278197ms ago: executing program 1 (id=502): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x15, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$packet(0x11, 0x0, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 870.958847ms ago: executing program 2 (id=503): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ff9000/0x1000)=nil, 0x1000}) 202.660053ms ago: executing program 0 (id=504): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x2b0, 0x150, 0x150, 0x0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x2000], 0x5, [], 0x0, 0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 0s ago: executing program 0 (id=505): ioperm(0x0, 0x3, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 44][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.316954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.326639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.335131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.362480][ T3573] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.373994][ T3573] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.399383][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.409707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.419565][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.426655][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.435637][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.443897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.452938][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.460822][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.468459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.477782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.486121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.493989][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.507230][ T3576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.566663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.576998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.586492][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.593560][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.603234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.612210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.621517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.631247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.641276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.651147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.660129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.679797][ T3572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.687807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.701727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.736608][ T3571] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.748239][ T3571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.767337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.777410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.786336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.794653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.802801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.811565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.820332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.828667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.836714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.849303][ T3572] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.860276][ T3576] device veth0_vlan entered promiscuous mode [ 46.872607][ T3585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.893001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.902034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.930821][ T3576] device veth1_vlan entered promiscuous mode [ 46.953587][ T3585] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.968793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.978022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.987897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.997192][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.004297][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.012500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.022225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.031011][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.038133][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.047307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.055996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.063398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.070951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.078879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.089927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.109402][ T3573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.122392][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.130535][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.140136][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.148703][ T1244] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.155785][ T1244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.163561][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.172672][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.181079][ T1244] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.188142][ T1244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.195918][ T3618] Bluetooth: hci0: command 0x041b tx timeout [ 47.198214][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.204351][ T3618] Bluetooth: hci1: command 0x041b tx timeout [ 47.215344][ T3618] Bluetooth: hci2: command 0x041b tx timeout [ 47.236083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.243534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.258521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.267032][ T3634] Bluetooth: hci4: command 0x041b tx timeout [ 47.268152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.273773][ T3634] Bluetooth: hci3: command 0x041b tx timeout [ 47.286974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.301153][ T3571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.311114][ T3576] device veth0_macvtap entered promiscuous mode [ 47.320413][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.330289][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.339007][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.348071][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.376188][ T3576] device veth1_macvtap entered promiscuous mode [ 47.386170][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.394035][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.405096][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.413374][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.422352][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.432007][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.440688][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.450383][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.459130][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.467427][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.476049][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.484203][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.510231][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.522258][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.530443][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.540128][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.549011][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.560418][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.568693][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.577144][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.586126][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.594560][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.602356][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.615235][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.623939][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.638246][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.647505][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.662621][ T3576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.670718][ T3573] device veth0_vlan entered promiscuous mode [ 47.692465][ T3571] device veth0_vlan entered promiscuous mode [ 47.709938][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.718944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.728397][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.737547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.749721][ T3576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.765806][ T3573] device veth1_vlan entered promiscuous mode [ 47.793643][ T3573] device veth0_macvtap entered promiscuous mode [ 47.802077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.813886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.823787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.833145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.842786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.851994][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.860856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.872380][ T3576] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.881506][ T3576] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.890544][ T3576] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.899576][ T3576] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.927511][ T3573] device veth1_macvtap entered promiscuous mode [ 47.942780][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.953869][ T3571] device veth1_vlan entered promiscuous mode [ 47.999660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.008615][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.018460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.028393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.045789][ T3572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.053676][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.066108][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.077865][ T3573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.104161][ T3571] device veth0_macvtap entered promiscuous mode [ 48.127326][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.136629][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.146091][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.155005][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.163404][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.172339][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.186321][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.197087][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.208387][ T3573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.230383][ T3571] device veth1_macvtap entered promiscuous mode [ 48.239311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.247701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.259365][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.268055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.275654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.286566][ T3585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.335863][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.343830][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.350893][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.366841][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.379737][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.391282][ T3573] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.401409][ T3573] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.410688][ T3573] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.420032][ T3573] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.436357][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.447587][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.458157][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.469550][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.480967][ T3571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.500458][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.511666][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.520960][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.530715][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.551595][ T3572] device veth0_vlan entered promiscuous mode [ 48.569287][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.578459][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.586255][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.594861][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.607950][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.623396][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.634793][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.644814][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.655276][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.666486][ T3571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.677253][ T3571] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.686793][ T3571] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.695706][ T3571] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.705856][ T3571] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.727711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.736415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.746086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.755456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.767475][ T3572] device veth1_vlan entered promiscuous mode [ 48.850365][ T3585] device veth0_vlan entered promiscuous mode [ 48.880094][ T3572] device veth0_macvtap entered promiscuous mode [ 48.888232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.901432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.911604][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.920787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.931343][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.940215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.955100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.965081][ T3585] device veth1_vlan entered promiscuous mode [ 48.993562][ T3572] device veth1_macvtap entered promiscuous mode [ 49.040551][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.050239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.070808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.079035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.091095][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.111780][ T3585] device veth0_macvtap entered promiscuous mode [ 49.137794][ T3572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.148848][ T3572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.159432][ T3572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.170240][ T3572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.180502][ T3572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.196017][ T3572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.207899][ T3572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.222552][ T3585] device veth1_macvtap entered promiscuous mode [ 49.239440][ T3653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 49.243764][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.253282][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.263393][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.272199][ T3643] Bluetooth: hci2: command 0x040f tx timeout [ 49.284690][ T3643] Bluetooth: hci1: command 0x040f tx timeout [ 49.286525][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.291456][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.315179][ T3643] Bluetooth: hci0: command 0x040f tx timeout [ 49.327388][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.338267][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.347253][ T3643] Bluetooth: hci3: command 0x040f tx timeout [ 49.353789][ T3643] Bluetooth: hci4: command 0x040f tx timeout [ 49.356634][ T3572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.370391][ T3572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.380559][ T3572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.537949][ T3572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.611359][ T3572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.670944][ T3572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.756670][ T3572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.958888][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.981201][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.036514][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.048111][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.057438][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.073281][ T3572] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.082356][ T3572] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.091675][ T3572] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.100722][ T3572] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.146928][ T3585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.158867][ T3585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.169330][ T3585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.180169][ T3585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.190528][ T3585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.207669][ T3585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.235170][ T3585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.251119][ T3585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.262631][ T3585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.294067][ T1244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.318516][ T1244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.398827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.407724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.417458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.430461][ T3585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.435303][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.442742][ T3585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.450243][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.485163][ T3585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.609340][ T3585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.672343][ T3585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.733187][ T3585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.792451][ T3585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.883511][ T3585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.033358][ T3585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.048264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.059276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.069496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.133844][ T1255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.148845][ T1255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.177129][ T3585] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.229320][ T3585] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.238267][ T3585] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.247016][ T3585] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.269594][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.345311][ T3617] Bluetooth: hci0: command 0x0419 tx timeout [ 51.396221][ T1244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.404951][ T3617] Bluetooth: hci1: command 0x0419 tx timeout [ 51.406571][ T1244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.410990][ T3617] Bluetooth: hci2: command 0x0419 tx timeout [ 51.434819][ T3621] Bluetooth: hci4: command 0x0419 tx timeout [ 51.441400][ T3621] Bluetooth: hci3: command 0x0419 tx timeout [ 51.443772][ T3670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 51.557479][ T3674] loop0: detected capacity change from 0 to 256 [ 51.842657][ T3674] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x3bed3e2a, utbl_chksum : 0xe619d30d) [ 52.603011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.294229][ C0] sched: RT throttling activated [ 54.523500][ T26] audit: type=1804 audit(1729313868.960:2): pid=3674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1" name="/newroot/0/file0/bus" dev="loop0" ino=1048586 res=1 errno=0 [ 54.954606][ T3686] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 54.961858][ T26] audit: type=1800 audit(1729313869.010:3): pid=3674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="bus" dev="loop0" ino=1048586 res=0 errno=0 [ 54.997076][ T3678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.032404][ T3678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.071301][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.103853][ T3678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.164652][ T3678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.182540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.358924][ T3697] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 55.384294][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 55.393310][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 55.402208][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 55.411153][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 55.420026][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 55.428980][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 55.437917][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 55.446891][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 55.455829][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 55.464801][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 57.331237][ T3709] Zero length message leads to an empty skb [ 60.490833][ T3723] bridge0: port 3(erspan0) entered blocking state [ 60.497337][ T3723] bridge0: port 3(erspan0) entered disabled state [ 60.504831][ T3723] device erspan0 entered promiscuous mode [ 60.511022][ T3723] bridge0: port 3(erspan0) entered blocking state [ 60.517677][ T3723] bridge0: port 3(erspan0) entered forwarding state [ 61.858692][ T3728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19'. [ 61.886615][ T3728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.967386][ T3728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.545864][ T21] Bluetooth: hci5: command 0x0409 tx timeout [ 65.681925][ T3738] chnl_net:caif_netlink_parms(): no params data found [ 66.289336][ T3662] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.584388][ T3789] overlayfs: failed to resolve './file1': -2 [ 67.448598][ T3662] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.330308][ T2123] Bluetooth: hci5: command 0x041b tx timeout [ 68.449160][ T3662] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.533674][ T3684] Bluetooth: hci1: command 0x0409 tx timeout [ 68.553283][ T3662] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.298257][ T3738] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.325074][ T3738] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.335676][ T3738] device bridge_slave_0 entered promiscuous mode [ 69.376194][ T3738] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.426455][ T3738] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.460130][ T3738] device bridge_slave_1 entered promiscuous mode [ 70.343402][ T3829] netlink: 'syz.2.47': attribute type 10 has an invalid length. [ 70.354867][ T3829] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 70.468474][ T3738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.639239][ T3738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.688668][ T3619] Bluetooth: hci1: command 0x041b tx timeout [ 70.708855][ T3619] Bluetooth: hci5: command 0x040f tx timeout [ 70.726788][ T3776] chnl_net:caif_netlink_parms(): no params data found [ 71.235570][ T1391] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.245217][ T1391] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.830830][ T3738] team0: Port device team_slave_0 added [ 71.988353][ T3738] team0: Port device team_slave_1 added [ 74.568830][ T3619] Bluetooth: hci5: command 0x0419 tx timeout [ 74.576169][ T3619] Bluetooth: hci1: command 0x040f tx timeout [ 74.875796][ T3776] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.888632][ T3776] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.923372][ T3776] device bridge_slave_0 entered promiscuous mode [ 75.054363][ T3864] device sit0 entered promiscuous mode [ 75.075320][ T3864] netlink: 'syz.4.57': attribute type 1 has an invalid length. [ 75.084476][ T3864] netlink: 1 bytes leftover after parsing attributes in process `syz.4.57'. [ 75.093497][ T3776] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.124335][ T3776] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.132542][ T3776] device bridge_slave_1 entered promiscuous mode [ 75.184408][ T21] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 75.226530][ T3738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.233493][ T3738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.276659][ T3738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.304867][ T3738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.311934][ T3738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.351079][ T3738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.395423][ T3776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.430903][ T3776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.461329][ T3738] device hsr_slave_0 entered promiscuous mode [ 75.468219][ T3738] device hsr_slave_1 entered promiscuous mode [ 75.475265][ T3738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.483541][ T3738] Cannot create hsr debugfs directory [ 75.494297][ T3616] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.512926][ T3573] syz-executor (3573) used greatest stack depth: 19320 bytes left [ 75.565180][ T3776] team0: Port device team_slave_0 added [ 75.612632][ T3776] team0: Port device team_slave_1 added [ 75.697586][ T3776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.710960][ T3776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.737437][ T3616] usb 5-1: Using ep0 maxpacket: 32 [ 75.744936][ T3776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.767882][ T3776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.775661][ T3776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.802689][ T3776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.834279][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 75.904422][ T21] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 75.912782][ T21] usb 3-1: can't read configurations, error -71 [ 76.149253][ T3776] device hsr_slave_0 entered promiscuous mode [ 76.222105][ T3776] device hsr_slave_1 entered promiscuous mode [ 76.302864][ T3776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.331992][ T1074] cfg80211: failed to load regulatory.db [ 76.440743][ T3776] Cannot create hsr debugfs directory [ 76.626778][ T3619] Bluetooth: hci1: command 0x0419 tx timeout [ 76.684546][ T3616] usb 5-1: New USB device found, idVendor=1d6f, idProduct=0010, bcdDevice= a.a7 [ 76.693611][ T3616] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.703512][ T3616] usb 5-1: Product: syz [ 76.707954][ T3616] usb 5-1: Manufacturer: syz [ 76.712558][ T3616] usb 5-1: SerialNumber: syz [ 76.768637][ T3616] usb 5-1: config 0 descriptor?? [ 76.817703][ T3616] usb 5-1: bad CDC descriptors [ 76.832904][ T3616] cp210x 5-1:0.0: cp210x converter detected [ 77.341987][ T3868] udc-core: couldn't find an available UDC or it's busy [ 77.512437][ T3868] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 77.708734][ T3616] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 77.724719][ T3616] cp210x 5-1:0.0: querying part number failed [ 77.749237][ T3616] usb 5-1: cp210x converter now attached to ttyUSB0 [ 77.760658][ T3616] usb 5-1: USB disconnect, device number 2 [ 77.809527][ T3616] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 77.820043][ T3616] cp210x 5-1:0.0: device disconnected [ 78.587947][ T3662] device hsr_slave_0 left promiscuous mode [ 78.603987][ T3662] device hsr_slave_1 left promiscuous mode [ 78.656256][ T3662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.693920][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.875345][ T3662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.909110][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.003099][ T3901] netlink: 'syz.3.68': attribute type 2 has an invalid length. [ 79.011021][ T3901] netlink: 244 bytes leftover after parsing attributes in process `syz.3.68'. [ 80.279104][ T3903] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 80.491615][ T3662] device bridge_slave_1 left promiscuous mode [ 80.499305][ T3903] vhci_hcd: default hub control req: 4012 v0007 i0006 l0 [ 80.514843][ T3662] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.537109][ T3662] device bridge_slave_0 left promiscuous mode [ 80.543390][ T3662] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.593884][ T3662] device veth1_macvtap left promiscuous mode [ 80.600841][ T3662] device veth0_macvtap left promiscuous mode [ 80.607269][ T3662] device veth1_vlan left promiscuous mode [ 80.613467][ T3662] device veth0_vlan left promiscuous mode [ 81.050173][ T3662] team0 (unregistering): Port device team_slave_1 removed [ 81.062847][ T3662] team0 (unregistering): Port device team_slave_0 removed [ 81.080388][ T3662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.095620][ T3662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.157835][ T3662] bond0 (unregistering): Released all slaves [ 81.280504][ T3738] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.338828][ T3776] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.365836][ T3924] netlink: 'syz.2.80': attribute type 2 has an invalid length. [ 81.378484][ T3924] netlink: 244 bytes leftover after parsing attributes in process `syz.2.80'. [ 82.614936][ T3738] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.665382][ T3738] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.743429][ T3776] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.821432][ T3738] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.998798][ T3776] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.165074][ T3776] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.964324][ T3738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.285459][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.286051][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.306138][ T3738] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.313079][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.414976][ T3963] syz.2.92 uses obsolete (PF_INET,SOCK_PACKET) [ 87.437438][ T3963] netlink: 36 bytes leftover after parsing attributes in process `syz.2.92'. [ 87.448556][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.457655][ T3677] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.464795][ T3677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.474044][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.501326][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.511042][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.528483][ T3677] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.535623][ T3677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.572432][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.627746][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.686400][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.360363][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.397654][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.406714][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.440830][ T3776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.518390][ T3776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.552334][ T3738] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.616795][ T3738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.679062][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.689542][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.894089][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.924155][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.954966][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.001338][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.121933][ T3776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.205329][ T3776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.275103][ T3672] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 89.305796][ T3982] netlink: 40 bytes leftover after parsing attributes in process `syz.3.93'. [ 90.292809][ T3738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.350829][ T3672] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 90.534395][ T3672] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 90.576309][ T3672] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 90.804370][ T3672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.843525][ T3738] device veth0_vlan entered promiscuous mode [ 90.889853][ T3976] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 90.961211][ T3738] device veth1_vlan entered promiscuous mode [ 91.140984][ T3738] device veth0_macvtap entered promiscuous mode [ 91.190040][ T3738] device veth1_macvtap entered promiscuous mode [ 91.312379][ T3738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.331027][ T3738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.341406][ T3738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.362356][ T3738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.372592][ T3738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.389963][ T3738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.413426][ T3738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.585112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.624112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.675780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.717041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.899299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.907694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.182998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.191241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.264525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.301258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.335657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.403381][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.435415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.473293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.493733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.525124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.867649][ T4010] capability: warning: `syz.3.105' uses 32-bit capabilities (legacy support in use) [ 93.029422][ T3738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.040027][ T3738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.050397][ T3738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.075587][ T3738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.113795][ T3738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.133706][ T3738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.151375][ T3738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.175762][ T3738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.643810][ T3738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.928956][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.005102][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.132385][ T3776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.141718][ T3738] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.184441][ T3738] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.238647][ T4019] netlink: 'syz.4.107': attribute type 2 has an invalid length. [ 94.246493][ T4019] netlink: 244 bytes leftover after parsing attributes in process `syz.4.107'. [ 94.902266][ T3738] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.911044][ T3738] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.955091][ T21] usb 3-1: USB disconnect, device number 4 [ 95.052724][ T3776] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.135714][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.162823][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.217915][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.242717][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.255157][ T3673] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.262230][ T3673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.303259][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.321884][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.332095][ T3673] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.339213][ T3673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.372340][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.429657][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.471965][ T3776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.482519][ T3776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.503775][ T4025] netlink: 40 bytes leftover after parsing attributes in process `syz.4.110'. [ 95.525996][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.333983][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.377927][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.397210][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.420781][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.445467][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.470992][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.488759][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.508269][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.633621][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.693190][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.724419][ T3618] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.753020][ T3673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.811319][ T3673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.900705][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.959309][ T3677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.024249][ T3677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.034908][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.148215][ T4051] tipc: Started in network mode [ 97.153826][ T4051] tipc: Node identity 7ff, cluster identity 4711 [ 97.160393][ T4051] tipc: Node number set to 2047 [ 97.272953][ T4047] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 97.347527][ T3618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.518641][ T3618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.697007][ T3618] usb 5-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 97.731389][ T3618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.817369][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.821378][ T3618] usb 5-1: config 0 descriptor?? [ 97.834449][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.856801][ T3776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.008933][ T3776] device veth0_vlan entered promiscuous mode [ 98.089644][ T3776] device veth1_vlan entered promiscuous mode [ 98.106073][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.134955][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.217900][ T4062] netlink: 100 bytes leftover after parsing attributes in process `syz.3.116'. [ 98.262295][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.270662][ T3618] usbhid 5-1:0.0: can't add hid device: -71 [ 98.407886][ T3618] usbhid: probe of 5-1:0.0 failed with error -71 [ 98.630899][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.809964][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.822853][ T3618] usb 5-1: USB disconnect, device number 3 [ 98.897677][ T4064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.996669][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.033277][ T4063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.037423][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 99.094752][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.116589][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.222836][ T4066] af_packet: tpacket_rcv: packet too big, clamped from 11468 to 3952. macoff=96 [ 99.240026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.250010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.275712][ T4071] netlink: 'syz.4.121': attribute type 4 has an invalid length. [ 99.288823][ T4071] netlink: 17 bytes leftover after parsing attributes in process `syz.4.121'. [ 99.990266][ T3776] device veth0_macvtap entered promiscuous mode [ 100.034002][ T3776] device veth1_macvtap entered promiscuous mode [ 100.081903][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.121155][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.228973][ T3776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.471141][ T3776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.493809][ T3776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.534152][ T3776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.564093][ T3776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.592589][ T3776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.622861][ T3776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.659421][ T3776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.694385][ T3776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.718146][ T3619] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 100.732817][ T3776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.768096][ T3776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.800032][ T3776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.834077][ T3776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.865543][ T3776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.897963][ T3776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.925864][ T3776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.956278][ T3776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.988611][ T3776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.017376][ T3776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.172941][ T3776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.253621][ T3776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.283180][ T3776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.336472][ T3776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.361598][ T3776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.335958][ T4083] sch_tbf: burst 53766 is lower than device lo mtu (65550) ! [ 102.363566][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.371781][ T3619] usb 5-1: unable to get BOS descriptor or descriptor too short [ 102.381725][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.625224][ T3619] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 102.692487][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.925985][ T3619] usb 5-1: can't read configurations, error -71 [ 102.960422][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.082045][ T4090] tipc: Started in network mode [ 103.086961][ T4090] tipc: Node identity 7ff, cluster identity 4711 [ 103.093709][ T4090] tipc: Node number set to 2047 [ 103.353658][ T3830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.412121][ T3830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.470195][ T4093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.490995][ T4093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.508652][ T1255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.554932][ T4109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.132'. [ 103.653275][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.890989][ T4113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.142'. [ 104.986306][ T4120] netlink: 'syz.1.133': attribute type 4 has an invalid length. [ 105.025703][ T4120] netlink: 17 bytes leftover after parsing attributes in process `syz.1.133'. [ 105.101977][ T3662] device hsr_slave_0 left promiscuous mode [ 105.120091][ T3662] device hsr_slave_1 left promiscuous mode [ 105.160797][ T3662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.194373][ T13] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 105.208933][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.264371][ T3662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.295305][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.320374][ T3662] device bridge_slave_1 left promiscuous mode [ 105.349424][ T3662] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.402290][ T3662] device bridge_slave_0 left promiscuous mode [ 105.429603][ T3662] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.454493][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 105.485895][ T3662] device veth1_macvtap left promiscuous mode [ 105.521189][ T3662] device veth0_macvtap left promiscuous mode [ 105.543522][ T3662] device veth1_vlan left promiscuous mode [ 105.561854][ T3662] device veth0_vlan left promiscuous mode [ 105.856469][ T13] usb 5-1: New USB device found, idVendor=1608, idProduct=0303, bcdDevice=a1.cb [ 105.866339][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.874807][ T13] usb 5-1: Product: syz [ 105.878979][ T13] usb 5-1: Manufacturer: syz [ 105.883573][ T13] usb 5-1: SerialNumber: syz [ 105.893161][ T13] usb 5-1: config 0 descriptor?? [ 105.945764][ T13] io_ti 5-1:0.0: required endpoints missing [ 106.034462][ T3672] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 106.625499][ T3672] usb 1-1: unable to get BOS descriptor or descriptor too short [ 106.639921][ T3662] team0 (unregistering): Port device team_slave_1 removed [ 106.656606][ T3662] team0 (unregistering): Port device team_slave_0 removed [ 106.680932][ T3662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.702559][ T3662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.711435][ T3672] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 106.719621][ T3672] usb 1-1: can't read configurations, error -71 [ 106.770983][ T3662] bond0 (unregistering): Released all slaves [ 106.832662][ T4123] device vcan0 entered promiscuous mode [ 106.838808][ T4123] device vlan2 entered promiscuous mode [ 106.847399][ T4123] device vcan0 left promiscuous mode [ 106.887949][ T3616] usb 5-1: USB disconnect, device number 6 [ 106.898631][ T4135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.139'. [ 106.915443][ T4135] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.148807][ T4166] device vcan0 entered promiscuous mode [ 109.159307][ T4166] device vlan2 entered promiscuous mode [ 109.202281][ T4166] device vcan0 left promiscuous mode [ 110.234294][ T3684] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 110.465520][ T4186] netlink: 20 bytes leftover after parsing attributes in process `syz.1.157'. [ 110.687280][ T4186] device vlan2 entered promiscuous mode [ 110.692972][ T4186] device syz_tun entered promiscuous mode [ 112.104304][ T3619] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 112.587201][ T3684] usb 4-1: device descriptor read/all, error -71 [ 112.675003][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 112.994575][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 113.974439][ T21] usb 2-1: New USB device found, idVendor=1608, idProduct=0303, bcdDevice=a1.cb [ 113.983519][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.992272][ T4211] device vcan0 entered promiscuous mode [ 114.074551][ T4211] device vlan2 entered promiscuous mode [ 114.100867][ T4211] device vcan0 left promiscuous mode [ 114.147138][ T21] usb 2-1: Product: syz [ 114.152181][ T21] usb 2-1: Manufacturer: syz [ 114.156954][ T21] usb 2-1: SerialNumber: syz [ 114.163264][ T21] usb 2-1: config 0 descriptor?? [ 114.217779][ T21] io_ti 2-1:0.0: required endpoints missing [ 114.871278][ T3684] usb 2-1: USB disconnect, device number 2 [ 115.006577][ T4227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.170'. [ 116.224997][ T4242] netlink: 20 bytes leftover after parsing attributes in process `syz.4.172'. [ 116.303358][ T4242] device vlan2 entered promiscuous mode [ 116.309119][ T4242] device syz_tun entered promiscuous mode [ 116.736943][ T4241] loop1: detected capacity change from 0 to 1024 [ 116.785463][ T4241] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 116.896392][ T4204] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 116.903878][ T3684] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 118.252501][ T4251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.178'. [ 118.267966][ T4241] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 118.299975][ T26] audit: type=1800 audit(1729313932.740:4): pid=4241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.175" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 118.340391][ T4241] Trying to write to read-only block-device loop1 [ 118.991010][ T4241] Trying to write to read-only block-device loop1 [ 118.996680][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.005880][ T4241] Trying to write to read-only block-device loop1 [ 119.015001][ T3684] usb 1-1: Using ep0 maxpacket: 8 [ 119.044227][ C1] raw-gadget.0 gadget: ignoring, device is not running [ 119.108832][ T4204] usb 3-1: device descriptor read/all, error -71 [ 119.115315][ T3684] usb 1-1: device descriptor read/all, error -71 [ 119.221802][ T4264] device vcan0 entered promiscuous mode [ 119.237779][ T4264] device vlan2 entered promiscuous mode [ 119.251067][ T1255] Trying to write to read-only block-device loop1 [ 119.259099][ T3776] Trying to write to read-only block-device loop1 [ 119.274369][ T1255] Trying to write to read-only block-device loop1 [ 119.298847][ T3776] Trying to write to read-only block-device loop1 [ 119.322929][ T4264] device vcan0 left promiscuous mode [ 119.386108][ T3776] Trying to write to read-only block-device loop1 [ 119.396353][ T1255] Trying to write to read-only block-device loop1 [ 119.404933][ T3776] Trying to write to read-only block-device loop1 [ 119.694515][ T3684] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 120.024272][ T3684] usb 1-1: Using ep0 maxpacket: 16 [ 121.372575][ T26] audit: type=1800 audit(1729313935.810:5): pid=4283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.188" name="/" dev="sda1" ino=48 res=0 errno=0 [ 121.881322][ T1074] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 121.915101][ T3684] usb 1-1: New USB device found, idVendor=1608, idProduct=0303, bcdDevice=a1.cb [ 121.925506][ T3684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.933860][ T3684] usb 1-1: Product: syz [ 121.959100][ T3684] usb 1-1: Manufacturer: syz [ 121.963718][ T3684] usb 1-1: SerialNumber: syz [ 121.981172][ T3684] usb 1-1: config 0 descriptor?? [ 122.003215][ T4291] loop3: detected capacity change from 0 to 1024 [ 122.037758][ T4291] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.114278][ T3672] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 122.139714][ T4291] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 122.177289][ T26] audit: type=1800 audit(1729313936.620:6): pid=4291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.191" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 122.198654][ T3684] io_ti 1-1:0.0: required endpoints missing [ 122.240822][ T1074] usb 5-1: Using ep0 maxpacket: 32 [ 122.247107][ T1077] usb 1-1: USB disconnect, device number 5 [ 122.595383][ T1074] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 122.630388][ T1074] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 122.699907][ T1074] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 122.741014][ T1074] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.903449][ T1074] usb 5-1: config 0 descriptor?? [ 122.964443][ T1074] usb 5-1: can't set config #0, error -71 [ 123.012574][ T1074] usb 5-1: USB disconnect, device number 7 [ 123.084311][ T3672] usb 2-1: Using ep0 maxpacket: 16 [ 123.465277][ T3672] usb 2-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 123.553375][ T3672] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.725497][ T3672] usb 2-1: Product: syz [ 123.789837][ T3672] usb 2-1: Manufacturer: syz [ 123.803330][ T3672] usb 2-1: SerialNumber: syz [ 123.897702][ T3672] usb 2-1: config 0 descriptor?? [ 123.974608][ T4318] netlink: 144 bytes leftover after parsing attributes in process `syz.0.199'. [ 124.982819][ T3643] usb 2-1: USB disconnect, device number 3 [ 125.505211][ T4329] netlink: 165 bytes leftover after parsing attributes in process `syz.4.203'. [ 125.519648][ T4329] netlink: 277 bytes leftover after parsing attributes in process `syz.4.203'. [ 126.039302][ T3589] udevd[3589]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.415061][ T4336] device bridge_slave_1 left promiscuous mode [ 126.421306][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.705074][ T4343] vhci_hcd: default hub control req: 4012 v0007 i0006 l0 [ 128.206801][ T4341] device syz_tun left promiscuous mode [ 128.724544][ T4204] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 129.044438][ T4204] usb 4-1: Using ep0 maxpacket: 16 [ 129.664660][ T4204] usb 4-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 129.682268][ T4204] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.733730][ T4204] usb 4-1: Product: syz [ 129.742507][ T4204] usb 4-1: Manufacturer: syz [ 129.756387][ T4369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'. [ 129.765450][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.821732][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.882324][ T4204] usb 4-1: SerialNumber: syz [ 129.903117][ T4204] usb 4-1: config 0 descriptor?? [ 130.713025][ T3589] udevd[3589]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.756086][ T3684] usb 4-1: USB disconnect, device number 4 [ 130.885982][ T4388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.220'. [ 132.058781][ T4413] netlink: 'syz.2.227': attribute type 2 has an invalid length. [ 132.066599][ T4413] netlink: 244 bytes leftover after parsing attributes in process `syz.2.227'. [ 132.708027][ T1391] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.784343][ T1391] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.095883][ T4421] tipc: Started in network mode [ 133.100890][ T4421] tipc: Node identity 7ff, cluster identity 4711 [ 133.107307][ T4421] tipc: Node number set to 2047 [ 135.854396][ T3672] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 135.948627][ T4458] netlink: 'syz.3.242': attribute type 2 has an invalid length. [ 135.956341][ T4458] netlink: 244 bytes leftover after parsing attributes in process `syz.3.242'. [ 136.214288][ T3672] usb 1-1: Using ep0 maxpacket: 8 [ 137.894376][ T3672] usb 1-1: unable to read config index 0 descriptor/all [ 137.901406][ T3672] usb 1-1: can't read configurations, error -71 [ 137.922691][ T4475] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.932105][ T4475] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.940859][ T4475] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.949579][ T4475] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.029564][ T4477] device vcan0 entered promiscuous mode [ 138.054366][ T4477] device vlan2 entered promiscuous mode [ 138.079917][ T4477] device vcan0 left promiscuous mode [ 138.256713][ T26] audit: type=1326 audit(1729313952.700:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4480 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856efbdff9 code=0x7ffc0000 [ 138.341240][ T26] audit: type=1326 audit(1729313952.740:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4480 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f856efbdff9 code=0x7ffc0000 [ 138.363967][ T26] audit: type=1326 audit(1729313952.740:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4480 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856efbdff9 code=0x7ffc0000 [ 138.386113][ T26] audit: type=1326 audit(1729313952.740:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4480 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f856efbdff9 code=0x7ffc0000 [ 138.408379][ T26] audit: type=1326 audit(1729313952.740:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4480 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856efbdff9 code=0x7ffc0000 [ 138.431550][ T26] audit: type=1326 audit(1729313952.740:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4480 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856efbdff9 code=0x7ffc0000 [ 142.048957][ T4517] netlink: 'syz.3.258': attribute type 2 has an invalid length. [ 142.056740][ T4517] netlink: 244 bytes leftover after parsing attributes in process `syz.3.258'. [ 142.145254][ T3619] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 142.264648][ T4518] chnl_net:caif_netlink_parms(): no params data found [ 143.304434][ T3619] usb 1-1: device not accepting address 8, error -71 [ 144.144970][ T3684] Bluetooth: hci3: command 0x0409 tx timeout [ 144.301448][ T4518] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.318520][ T4518] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.293105][ T4518] device bridge_slave_0 entered promiscuous mode [ 145.336756][ T4518] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.352036][ T4518] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.373476][ T4518] device bridge_slave_1 entered promiscuous mode [ 145.388144][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 145.414132][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.421673][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.437231][ T4554] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 145.489375][ T4518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.553681][ T4554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.571519][ T4554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.588540][ T4554] bond0 (unregistering): Released all slaves [ 145.615890][ T4518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.640789][ T4562] tipc: Enabled bearer , priority 10 [ 145.663869][ T4518] team0: Port device team_slave_0 added [ 145.679967][ T4518] team0: Port device team_slave_1 added [ 145.702456][ T4563] netlink: 'syz.0.273': attribute type 2 has an invalid length. [ 145.710385][ T4563] netlink: 244 bytes leftover after parsing attributes in process `syz.0.273'. [ 145.733852][ T4518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.741004][ T4518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.769206][ T4518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.793472][ T4518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.800859][ T1294] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 145.800983][ T4518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.836033][ T4518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.867112][ T4518] device hsr_slave_0 entered promiscuous mode [ 145.873950][ T4518] device hsr_slave_1 entered promiscuous mode [ 146.165300][ T1294] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 146.238001][ T1294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.362058][ T1294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.493508][ T1294] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 146.554645][ T3684] Bluetooth: hci3: command 0x041b tx timeout [ 146.589734][ T1294] usb 4-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 146.599668][ T1294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.047765][ T1294] usb 4-1: config 0 descriptor?? [ 147.912474][ T1294] uclogic 0003:5543:0003.0001: No inputs registered, leaving [ 147.959485][ T1294] uclogic 0003:5543:0003.0001: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.3-1/input0 [ 148.112499][ T1294] usb 4-1: USB disconnect, device number 5 [ 148.149970][ T4518] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.641117][ T4518] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.674685][ T3684] Bluetooth: hci3: command 0x040f tx timeout [ 149.456748][ T4518] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.532943][ T4606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 149.563673][ T4606] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.268338][ T4518] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.493894][ T4518] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 150.515687][ T4518] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 150.541195][ T4518] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 150.581875][ T4518] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 151.501989][ T3684] Bluetooth: hci3: command 0x0419 tx timeout [ 152.198944][ T4518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.215574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.227280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.249375][ T4518] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.262826][ T4655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.300'. [ 152.516988][ T4645] crypto_alloc_aead failed rc=-2 [ 152.932275][ T4655] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.987262][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.002931][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.033021][ T3679] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.040166][ T3679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.159677][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.382746][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.602971][ T3679] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.610212][ T3679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.627499][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.794146][ T4675] xt_TCPMSS: Only works on TCP SYN packets [ 154.392058][ T4663] device syz_tun left promiscuous mode [ 155.528551][ T4518] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 155.545558][ T4518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.572041][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.591829][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.601043][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.611602][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.621942][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.638019][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.649482][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.660666][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.673508][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.806943][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.242112][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.340536][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.361974][ T4695] device vcan0 entered promiscuous mode [ 156.388349][ T4695] device vlan2 entered promiscuous mode [ 156.449836][ T4695] device vcan0 left promiscuous mode [ 156.604140][ T1255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.612867][ T1255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.635714][ T4518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.756033][ T4708] ======================================================= [ 156.756033][ T4708] WARNING: The mand mount option has been deprecated and [ 156.756033][ T4708] and is ignored by this kernel. Remove the mand [ 156.756033][ T4708] option from the mount to silence this warning. [ 156.756033][ T4708] ======================================================= [ 157.025029][ T1077] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 159.008717][ T4721] 9pnet: Insufficient options for proto=fd [ 160.222717][ T1077] usb 3-1: unable to get BOS descriptor or descriptor too short [ 160.419680][ T1077] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 160.672715][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.691542][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.696836][ T1077] usb 3-1: can't read configurations, error -71 [ 160.741469][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 160.750402][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.761253][ T4518] device veth0_vlan entered promiscuous mode [ 160.769360][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.778630][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.809333][ T4518] device veth1_vlan entered promiscuous mode [ 160.833650][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 160.845212][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 160.853520][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 160.863172][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.881270][ T4518] device veth0_macvtap entered promiscuous mode [ 160.921694][ T4518] device veth1_macvtap entered promiscuous mode [ 160.970032][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.046725][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.132318][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.268568][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.407507][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.614139][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.684528][ T4518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.697579][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.708177][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.718092][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.728706][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.739058][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.750469][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.769747][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.817704][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.827895][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.840544][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.852510][ T4518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.970680][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 161.979246][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 161.988905][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 161.997914][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 162.035427][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 162.200091][ T26] audit: type=1326 audit(1729313976.620:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4751 comm="syz.2.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ebea5ff9 code=0x7ffc0000 [ 162.319595][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 162.396352][ T3830] Bluetooth: hci6: Frame reassembly failed (-84) [ 162.680030][ T26] audit: type=1326 audit(1729313976.620:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4751 comm="syz.2.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ebea5ff9 code=0x7ffc0000 [ 162.720487][ T26] audit: type=1326 audit(1729313976.620:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4751 comm="syz.2.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f21ebea5ff9 code=0x7ffc0000 [ 162.743528][ T4518] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.764226][ T4518] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.773231][ T4518] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.782307][ T26] audit: type=1326 audit(1729313976.620:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4751 comm="syz.2.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ebea5ff9 code=0x7ffc0000 [ 162.827295][ T4518] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.863317][ T26] audit: type=1326 audit(1729313976.620:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4751 comm="syz.2.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ebea5ff9 code=0x7ffc0000 [ 163.051875][ T26] audit: type=1326 audit(1729313976.620:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4751 comm="syz.2.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f21ebea5ff9 code=0x7ffc0000 [ 163.089165][ T26] audit: type=1326 audit(1729313976.630:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4751 comm="syz.2.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ebea5ff9 code=0x7ffc0000 [ 163.134641][ T1244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.142783][ T1244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.172287][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 163.189638][ T1244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.234632][ T26] audit: type=1326 audit(1729313976.630:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4751 comm="syz.2.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ebea5ff9 code=0x7ffc0000 [ 163.257755][ T1244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.269738][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 164.384982][ T1294] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 164.664949][ T1294] usb 5-1: Using ep0 maxpacket: 16 [ 164.945279][ T1294] usb 5-1: New USB device found, idVendor=1608, idProduct=0303, bcdDevice=a1.cb [ 165.026456][ T1294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.094913][ T1294] usb 5-1: Product: syz [ 165.106392][ T1294] usb 5-1: Manufacturer: syz [ 165.141201][ T1294] usb 5-1: SerialNumber: syz [ 165.254786][ T1294] usb 5-1: config 0 descriptor?? [ 165.295573][ T1294] io_ti 5-1:0.0: required endpoints missing [ 165.448012][ T2123] Bluetooth: hci6: command 0x1003 tx timeout [ 165.454255][ T3582] Bluetooth: hci6: sending frame failed (-49) [ 165.461854][ T3618] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 165.470958][ T3618] Bluetooth: hci1: Injecting HCI hardware error event [ 165.479342][ T3582] Bluetooth: hci1: hardware error 0x00 [ 165.927860][ T4782] netlink: 36 bytes leftover after parsing attributes in process `syz.1.331'. [ 165.949441][ T2123] Bluetooth: hci2: command 0x0406 tx timeout [ 165.955787][ T2123] Bluetooth: hci4: command 0x0406 tx timeout [ 166.045993][ T3619] usb 5-1: USB disconnect, device number 8 [ 167.431923][ T4805] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 167.462748][ T4805] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 167.507334][ T1074] Bluetooth: hci6: command 0x1001 tx timeout [ 167.513436][ T3574] Bluetooth: hci6: sending frame failed (-49) [ 167.687925][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.710779][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.736966][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.766299][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.794716][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.811272][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.556329][ T1077] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 169.593329][ T21] Bluetooth: hci6: command 0x1009 tx timeout [ 170.384576][ T1077] usb 2-1: Using ep0 maxpacket: 16 [ 170.664466][ T1077] usb 2-1: New USB device found, idVendor=1608, idProduct=0303, bcdDevice=a1.cb [ 170.700030][ T1077] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.722993][ T1077] usb 2-1: Product: syz [ 170.733270][ T1077] usb 2-1: Manufacturer: syz [ 170.748629][ T1077] usb 2-1: SerialNumber: syz [ 170.790566][ T1077] usb 2-1: config 0 descriptor?? [ 170.846107][ T1077] io_ti 2-1:0.0: required endpoints missing [ 171.056333][ T7] usb 2-1: USB disconnect, device number 4 [ 171.304490][ T21] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 173.004385][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 174.244432][ T21] usb 1-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 174.253495][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.434056][ T21] usb 1-1: Product: syz [ 174.463657][ T21] usb 1-1: Manufacturer: syz [ 174.468650][ T4883] netlink: 36 bytes leftover after parsing attributes in process `syz.1.360'. [ 174.479290][ T21] usb 1-1: SerialNumber: syz [ 174.517084][ T21] usb 1-1: config 0 descriptor?? [ 174.544583][ T21] usb 1-1: can't set config #0, error -71 [ 174.560847][ T21] usb 1-1: USB disconnect, device number 10 [ 174.674315][ T1077] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 176.054487][ T1077] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 176.085558][ T1077] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.093575][ T1077] usb 5-1: Product: syz [ 176.133707][ T4901] loop1: detected capacity change from 0 to 1024 [ 176.152079][ T1077] usb 5-1: Manufacturer: syz [ 176.164650][ T1077] usb 5-1: SerialNumber: syz [ 176.200878][ T1077] usb 5-1: config 0 descriptor?? [ 176.245968][ T1077] powermate: probe of 5-1:0.0 failed with error -22 [ 176.251967][ T4885] chnl_net:caif_netlink_parms(): no params data found [ 177.360127][ T21] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 177.366046][ T1077] usb 5-1: USB disconnect, device number 9 [ 177.372878][ T3619] Bluetooth: hci0: command 0x0409 tx timeout [ 177.754262][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 177.887804][ T26] audit: type=1326 audit(1729313992.310:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.1.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42c91cff9 code=0x7ffc0000 [ 178.701717][ T26] audit: type=1326 audit(1729313992.310:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.1.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42c91cff9 code=0x7ffc0000 [ 178.737628][ T21] usb 1-1: New USB device found, idVendor=1608, idProduct=0303, bcdDevice=a1.cb [ 178.764622][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.783726][ T21] usb 1-1: Product: syz [ 178.803343][ T21] usb 1-1: Manufacturer: syz [ 178.816116][ T21] usb 1-1: SerialNumber: syz [ 178.822853][ T4885] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.835981][ T26] audit: type=1326 audit(1729313992.310:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.1.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa42c91cff9 code=0x7ffc0000 [ 178.858721][ T3619] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 178.892844][ T4885] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.903602][ T21] usb 1-1: config 0 descriptor?? [ 178.934247][ T26] audit: type=1326 audit(1729313992.320:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.1.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42c91cff9 code=0x7ffc0000 [ 178.989787][ T21] io_ti 1-1:0.0: required endpoints missing [ 179.064367][ T4984] 9pnet: Insufficient options for proto=fd [ 179.249951][ T4885] device bridge_slave_0 entered promiscuous mode [ 179.274826][ T3619] usb 4-1: Using ep0 maxpacket: 16 [ 179.436139][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 179.629027][ T26] audit: type=1326 audit(1729313992.320:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.1.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42c91cff9 code=0x7ffc0000 [ 179.662309][ T1077] usb 1-1: USB disconnect, device number 11 [ 179.663622][ T26] audit: type=1326 audit(1729313992.320:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.1.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fa42c91cff9 code=0x7ffc0000 [ 179.686380][ T4885] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.698370][ T26] audit: type=1326 audit(1729313992.320:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.1.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42c91cff9 code=0x7ffc0000 [ 179.720884][ T26] audit: type=1326 audit(1729313992.330:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.1.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42c91cff9 code=0x7ffc0000 [ 179.784282][ T4885] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.784541][ T3619] usb 4-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 179.792997][ T4885] device bridge_slave_1 entered promiscuous mode [ 179.831670][ T3619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.989386][ T3619] usb 4-1: Product: syz [ 179.994505][ T3619] usb 4-1: Manufacturer: syz [ 180.003037][ T3619] usb 4-1: SerialNumber: syz [ 180.013825][ T3619] usb 4-1: config 0 descriptor?? [ 180.870311][ T3619] usb 4-1: USB disconnect, device number 6 [ 180.970796][ T4885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.143363][ T4885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.382539][ T3589] udevd[3589]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.274325][ T26] audit: type=1326 audit(1729313996.700:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5007 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856efbdff9 code=0x7ffc0000 [ 182.333589][ T3619] Bluetooth: hci0: command 0x040f tx timeout [ 182.397948][ T4885] team0: Port device team_slave_0 added [ 182.433701][ T26] audit: type=1326 audit(1729313996.710:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5007 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f856efbdff9 code=0x7ffc0000 [ 182.455954][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.141983][ T26] audit: type=1326 audit(1729313996.710:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5007 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856efbdff9 code=0x7ffc0000 [ 183.195863][ T4885] team0: Port device team_slave_1 added [ 183.394378][ T5020] tipc: Enabled bearer , priority 10 [ 184.376367][ T4885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.383335][ T4885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.409283][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.414810][ T1074] Bluetooth: hci0: command 0x0419 tx timeout [ 184.416531][ T1294] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 184.602103][ T4885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.614549][ T4885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.621530][ T4885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.647525][ T4885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.714509][ T4885] device hsr_slave_0 entered promiscuous mode [ 184.744540][ T1074] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 184.788308][ T4885] device hsr_slave_1 entered promiscuous mode [ 184.821724][ T4885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.822011][ T1294] usb 1-1: Using ep0 maxpacket: 16 [ 184.830473][ T4885] Cannot create hsr debugfs directory [ 185.054772][ T1074] usb 5-1: Using ep0 maxpacket: 16 [ 185.343703][ T5015] loop1: detected capacity change from 0 to 32768 [ 185.382508][ T4885] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.393053][ T1074] usb 5-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 185.405041][ T1074] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.413304][ T1074] usb 5-1: Product: syz [ 185.418772][ T1074] usb 5-1: Manufacturer: syz [ 185.423489][ T1074] usb 5-1: SerialNumber: syz [ 185.433888][ T1074] usb 5-1: config 0 descriptor?? [ 185.484825][ T5015] /dev/loop1: Can't open blockdev [ 185.516534][ T4885] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.534389][ T1294] usb 1-1: New USB device found, idVendor=1608, idProduct=0303, bcdDevice=a1.cb [ 185.553756][ T1294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.569380][ T3589] udevd[3589]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.574024][ T1294] usb 1-1: Product: syz [ 185.619427][ T1294] usb 1-1: Manufacturer: syz [ 185.632036][ T4885] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.634377][ T1294] usb 1-1: SerialNumber: syz [ 185.650838][ T1244] tipc: Disabling bearer [ 185.668953][ T1294] usb 1-1: config 0 descriptor?? [ 185.684212][ T1244] tipc: Left network mode [ 185.693500][ T3620] usb 5-1: USB disconnect, device number 10 [ 185.726360][ T1294] io_ti 1-1:0.0: required endpoints missing [ 185.757469][ T4885] bond0: (slave netdevsim0): Releasing backup interface [ 185.768511][ T4885] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.834570][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 185.908666][ T4885] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 185.936671][ T5039] bridge0: port 3(team0) entered blocking state [ 185.943618][ T5039] bridge0: port 3(team0) entered disabled state [ 185.952151][ T5039] device team0 entered promiscuous mode [ 185.958389][ T5039] device team_slave_0 entered promiscuous mode [ 185.966434][ T5039] device team_slave_1 entered promiscuous mode [ 185.973696][ T5039] bridge0: port 3(team0) entered blocking state [ 185.980405][ T5039] bridge0: port 3(team0) entered forwarding state [ 185.993627][ T1294] usb 1-1: USB disconnect, device number 12 [ 185.999978][ T4885] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 186.013577][ T4885] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 186.051702][ T4885] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 186.386306][ T3618] Bluetooth: hci5: command 0x0406 tx timeout [ 186.917577][ T7] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 186.935279][ T7] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 186.963719][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 186.973031][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 187.007773][ T5050] device vcan0 entered promiscuous mode [ 187.013613][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 187.035635][ T5050] device vlan2 entered promiscuous mode [ 187.042792][ T5050] device vcan0 left promiscuous mode [ 187.063086][ T4885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.896544][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.904847][ T7] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 187.913896][ T7] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 187.946191][ T7] usb 4-1: Product: syz [ 187.950379][ T7] usb 4-1: Manufacturer: syz [ 187.973379][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.995397][ T7] cdc_wdm 4-1:1.0: skipping garbage [ 188.010865][ T7] cdc_wdm 4-1:1.0: skipping garbage [ 188.018705][ T4885] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.044580][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.089969][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.092961][ T7] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 188.102241][ T3677] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.105632][ T7] cdc_wdm 4-1:1.0: Unknown control protocol [ 188.111215][ T3677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.314042][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.344880][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.354531][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.370798][ T3830] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.377895][ T3830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.397833][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.415032][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.444610][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.456023][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.474832][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.483722][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.501624][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.511792][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.528739][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.547310][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.555808][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.580226][ T1294] usb 4-1: USB disconnect, device number 7 [ 188.616442][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.684327][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 188.834765][ T1077] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 188.862611][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.870410][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.985708][ T1074] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 189.277787][ T4885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.328779][ T4885] device veth0_vlan entered promiscuous mode [ 189.340596][ T4885] device veth1_vlan entered promiscuous mode [ 189.361216][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 189.375359][ T1074] usb 5-1: Using ep0 maxpacket: 16 [ 189.381460][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 189.384567][ T1077] usb 1-1: Using ep0 maxpacket: 16 [ 189.390991][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 189.403279][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.413468][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 189.424639][ T7] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 189.428560][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.453981][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.463015][ T7] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 189.484623][ T7] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 189.493799][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.528854][ T5063] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 189.565860][ T1244] device hsr_slave_0 left promiscuous mode [ 189.572598][ T1244] device hsr_slave_1 left promiscuous mode [ 189.642643][ T1244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.655170][ T1244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.671444][ T1244] device bridge_slave_1 left promiscuous mode [ 189.721740][ T1244] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.836418][ T1074] usb 5-1: New USB device found, idVendor=1608, idProduct=0303, bcdDevice=a1.cb [ 189.890646][ T1244] device bridge_slave_0 left promiscuous mode [ 189.915301][ T1074] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.969136][ T1244] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.012136][ T1074] usb 5-1: Product: syz [ 190.058136][ T1074] usb 5-1: Manufacturer: syz [ 190.106671][ T1074] usb 5-1: SerialNumber: syz [ 190.241001][ T1074] usb 5-1: config 0 descriptor?? [ 190.287970][ T1077] usb 1-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 190.299012][ T1077] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.308340][ T1077] usb 1-1: Product: syz [ 190.312542][ T1077] usb 1-1: Manufacturer: syz [ 190.317631][ T1077] usb 1-1: SerialNumber: syz [ 190.327083][ T1244] device veth1_macvtap left promiscuous mode [ 190.327869][ T1077] usb 1-1: config 0 descriptor?? [ 190.333124][ T1244] device veth0_macvtap left promiscuous mode [ 190.345848][ T1074] io_ti 5-1:0.0: required endpoints missing [ 190.351955][ T1244] device veth1_vlan left promiscuous mode [ 190.360998][ T1244] device veth0_vlan left promiscuous mode [ 190.423969][ T3589] udevd[3589]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 190.487730][ T3619] usb 2-1: USB disconnect, device number 5 [ 190.586076][ T1077] usb 1-1: USB disconnect, device number 13 [ 190.610177][ T1244] team0 (unregistering): Port device team_slave_1 removed [ 190.626451][ T1244] team0 (unregistering): Port device team_slave_0 removed [ 190.645132][ T1244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.661209][ T1244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.724467][ T1244] bond0 (unregistering): Released all slaves [ 190.783695][ T4885] device veth0_macvtap entered promiscuous mode [ 190.799675][ T4885] device veth1_macvtap entered promiscuous mode [ 190.818392][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.835442][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.855600][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.884376][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.897645][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.910892][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.920951][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.931438][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.060014][ T4885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.146746][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.336700][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.519274][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 191.529138][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 191.557896][ T26] audit: type=1326 audit(1729314006.000:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5088 comm="syz.3.405" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f856efbdff9 code=0x0 [ 191.582144][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.596754][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.621108][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.626697][ T1077] usb 5-1: USB disconnect, device number 11 [ 191.653118][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.680389][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.702877][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.721024][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.754217][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.784336][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.809464][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.830484][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.852209][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.888265][ T4885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.916279][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 191.947872][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 191.985345][ T4885] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.994067][ T4885] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.022102][ T4885] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.031354][ T4885] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.047465][ T5099] device vcan0 entered promiscuous mode [ 192.053531][ T5099] device vlan2 entered promiscuous mode [ 192.062411][ T5099] device vcan0 left promiscuous mode [ 192.256545][ T4950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.268302][ T4950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.292864][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 192.322885][ T4950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.329109][ T5104] loop3: detected capacity change from 0 to 1024 [ 192.340116][ T4950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.376883][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 192.533934][ T3618] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 193.264296][ T3618] usb 5-1: Using ep0 maxpacket: 32 [ 193.404473][ T3618] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 193.487608][ T3618] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 193.588048][ T3618] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 193.627614][ T3618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 193.627643][ T3618] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 193.627666][ T3618] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 193.627703][ T3618] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 193.627726][ T3618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.630129][ T3618] usb 5-1: config 0 descriptor?? [ 193.927244][ T3618] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 193.929672][ T3618] usb 5-1: USB disconnect, device number 12 [ 193.957258][ T3618] usblp0: removed [ 194.074568][ T1391] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.074668][ T1391] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.314465][ T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 194.504247][ T3618] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 194.552360][ T5141] device vcan0 entered promiscuous mode [ 194.568530][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 194.608818][ T5141] device vlan2 entered promiscuous mode [ 194.649394][ T5141] device vcan0 left promiscuous mode [ 194.774285][ T3618] usb 5-1: Using ep0 maxpacket: 32 [ 194.844541][ T7] usb 3-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 194.871419][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.890235][ T7] usb 3-1: Product: syz [ 194.900323][ T7] usb 3-1: Manufacturer: syz [ 194.905075][ T5143] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 194.914407][ T3618] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 194.924194][ T7] usb 3-1: SerialNumber: syz [ 194.957523][ T7] usb 3-1: config 0 descriptor?? [ 195.003018][ T3618] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 195.063812][ T3589] udevd[3589]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.153858][ T3618] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 195.224314][ T3672] usb 3-1: USB disconnect, device number 10 [ 195.309278][ T5148] binder: BINDER_SET_CONTEXT_MGR already set [ 195.337471][ T5148] binder: 5147:5148 ioctl 4018620d 20004a80 returned -16 [ 195.365215][ T3618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 195.426068][ T3618] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 195.435839][ T3618] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 195.448868][ T3618] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 195.458388][ T3618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.468276][ T3618] usb 5-1: config 0 descriptor?? [ 195.717542][ T3618] usb 5-1: can't set config #0, error -71 [ 195.725012][ T3618] usb 5-1: USB disconnect, device number 13 [ 195.930048][ T5160] loop3: detected capacity change from 0 to 1024 [ 197.014414][ T3672] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 197.654370][ T3672] usb 3-1: Using ep0 maxpacket: 16 [ 197.714564][ T5180] device vcan0 entered promiscuous mode [ 197.725956][ T5180] device vlan2 entered promiscuous mode [ 197.762194][ T5180] device vcan0 left promiscuous mode [ 197.774448][ T3672] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.796980][ T3672] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.829023][ T3672] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 197.888491][ T3672] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 197.938329][ T3672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.014583][ T3672] usb 3-1: config 0 descriptor?? [ 198.453907][ T5189] ODEBUG: Out of memory. ODEBUG disabled [ 199.015156][ T5189] syz.4.433 (5189): drop_caches: 2 [ 199.067933][ T3672] HID 045e:07da: Invalid code 65791 type 1 [ 199.185753][ T3672] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0002/input/input5 [ 199.330169][ T3672] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 199.424518][ T3672] usb 3-1: USB disconnect, device number 11 [ 200.203417][ T3619] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 200.513517][ T5206] netlink: 32 bytes leftover after parsing attributes in process `syz.2.442'. [ 200.554300][ T3619] usb 5-1: Using ep0 maxpacket: 16 [ 200.643311][ T5210] loop1: detected capacity change from 0 to 1024 [ 200.794313][ T3616] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 200.934425][ T3619] usb 5-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 200.943485][ T3619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.329663][ T3619] usb 5-1: Product: syz [ 201.333925][ T3619] usb 5-1: Manufacturer: syz [ 201.338941][ T3619] usb 5-1: SerialNumber: syz [ 201.411264][ T3616] usb 1-1: Using ep0 maxpacket: 32 [ 201.481217][ T3619] usb 5-1: config 0 descriptor?? [ 201.693061][ T3616] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 201.864269][ T3616] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 201.884286][ T3616] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 201.901944][ T3616] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 201.931317][ T3589] udevd[3589]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.954051][ T3616] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 201.976934][ T3616] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 201.996512][ T3616] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 202.018195][ T3616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.047011][ T3616] usb 1-1: config 0 descriptor?? [ 202.056156][ T3672] usb 5-1: USB disconnect, device number 14 [ 202.318342][ T3616] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 202.374848][ T3616] usb 1-1: USB disconnect, device number 14 [ 202.399489][ T3616] usblp0: removed [ 202.777675][ T5229] tipc: Started in network mode [ 202.782564][ T5229] tipc: Node identity 7ff, cluster identity 4711 [ 202.789073][ T5229] tipc: Node number set to 2047 [ 202.861093][ T5222] loop2: detected capacity change from 0 to 32768 [ 202.924242][ T3616] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 203.144463][ T5222] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 203.165387][ T3616] usb 1-1: Using ep0 maxpacket: 32 [ 203.313256][ T5222] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 204.104478][ T3616] usb 1-1: unable to read config index 0 descriptor/all [ 204.111488][ T3616] usb 1-1: can't read configurations, error -71 [ 204.141102][ T5222] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 204.222145][ T7] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 204.237387][ T7] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 205.868068][ T7] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1630ms [ 205.876711][ T7] gfs2: fsid=syz:syz.0: jid=0: Done [ 205.883233][ T5222] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 205.930790][ T5222] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 207.049459][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.133526][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.145480][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.153314][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.164267][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.171878][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.182043][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.191450][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.217441][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.232854][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.242732][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.252095][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.261465][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.270557][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.279812][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.363803][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.460225][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.584007][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.640432][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.684544][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.722494][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.743354][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.753020][ T5265] device vcan0 entered promiscuous mode [ 207.767024][ T5265] device vlan2 entered promiscuous mode [ 207.776176][ T5265] device vcan0 left promiscuous mode [ 207.786576][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.798842][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.924239][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.931657][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.954244][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.961654][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 208.009035][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 208.148165][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 208.306471][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 208.444749][ T3618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 208.672858][ T3618] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 208.680868][ T5274] loop3: detected capacity change from 0 to 512 [ 209.084538][ T3618] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 209.161011][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 209.182453][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.193696][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.330135][ T5283] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 209.678985][ T3618] usb 3-1: device descriptor read/64, error -71 [ 209.974284][ T3618] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 210.484290][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 210.854327][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.865530][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.876005][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.889259][ T7] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 210.898408][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.908907][ T7] usb 2-1: config 0 descriptor?? [ 211.983677][ T7] corsair-cpro 0003:1B1C:1D00.0004: unknown main item tag 0x0 [ 212.160727][ T7] corsair-cpro 0003:1B1C:1D00.0004: unknown main item tag 0x0 [ 212.168709][ T7] corsair-cpro 0003:1B1C:1D00.0004: item fetching failed at offset 2/5 [ 212.178006][ T7] corsair-cpro: probe of 0003:1B1C:1D00.0004 failed with error -22 [ 212.188432][ T7] usb 2-1: USB disconnect, device number 6 [ 213.639796][ T3618] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 213.640343][ T5343] netlink: 40 bytes leftover after parsing attributes in process `syz.3.485'. [ 213.694657][ T5344] loop1: detected capacity change from 0 to 64 [ 213.944372][ T3618] usb 5-1: Using ep0 maxpacket: 32 [ 214.103026][ T3618] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 214.142981][ T3618] usb 5-1: config 0 has no interface number 0 [ 214.844394][ T3618] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 214.854401][ T3618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.862598][ T3618] usb 5-1: Product: syz [ 214.868009][ T3618] usb 5-1: Manufacturer: syz [ 215.633789][ T3618] usb 5-1: SerialNumber: syz [ 215.689640][ T3618] usb 5-1: config 0 descriptor?? [ 215.758589][ T3618] usb 5-1: can't set config #0, error -71 [ 215.812217][ T3618] usb 5-1: USB disconnect, device number 15 [ 215.858295][ T5380] kvm: pic: single mode not supported [ 215.921339][ T5380] kvm: pic: level sensitive irq not supported [ 216.303270][ T26] audit: type=1326 audit(1729314030.740:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5392 comm="syz.1.502" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa42c91cff9 code=0x0 [ 216.634534][ T5372] loop4: detected capacity change from 0 to 32768 [ 216.888965][ T5372] ocfs2: Readonly device (7,4) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 216.925784][ T5372] ocfs2: Mounting device (7,4) on (node local, slot 65535) with ordered data mode. [ 217.002279][ T5397] xt_CT: No such helper "pptp" [ 217.013085][ T5372] ------------[ cut here ]------------ [ 217.019567][ T5372] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 217.020031][ T5372] WARNING: CPU: 1 PID: 5372 at kernel/locking/mutex.c:575 __mutex_lock_common+0x1a52/0x25a0 [ 217.054359][ T5372] Modules linked in: [ 217.059663][ T5372] CPU: 0 PID: 5372 Comm: syz.4.494 Not tainted 5.15.168-syzkaller #0 [ 217.075946][ T5372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 217.101116][ T5372] RIP: 0010:__mutex_lock_common+0x1a52/0x25a0 [ 217.117454][ T5372] Code: 04 08 84 c0 0f 85 d9 08 00 00 83 3d ef a1 ac 03 00 0f 85 e9 e6 ff ff 48 c7 c7 80 19 8b 8a 48 c7 c6 c0 19 8b 8a e8 be 17 0f f7 <0f> 0b e9 cf e6 ff ff e8 e2 94 c3 f6 e9 58 fb ff ff 0f 0b e9 d1 f0 [ 217.137809][ T5372] RSP: 0018:ffffc900035477c0 EFLAGS: 00010246 [ 217.144008][ T5372] RAX: 2edcfe337c16e100 RBX: dffffc0000000000 RCX: 0000000000040000 [ 217.153579][ T5372] RDX: ffffc9000b89b000 RSI: 00000000000021fb RDI: 00000000000021fc [ 217.164286][ T5372] RBP: ffffc90003547928 R08: ffffffff81669a2c R09: ffffed1017224f24 [ 217.172377][ T5372] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 217.180513][ T5372] R13: ffff88802900ccd0 R14: 0000000000000000 R15: 0000000000000000 [ 217.189072][ T5372] FS: 00007fbd9e27f6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 217.199292][ T5372] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.206053][ T5372] CR2: 00007f31f62632d8 CR3: 0000000066d62000 CR4: 00000000003506f0 [ 217.214080][ T5372] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 217.222228][ T5372] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 217.230284][ T5372] Call Trace: [ 217.233588][ T5372] [ 217.236579][ T5372] ? __warn+0x15b/0x300 [ 217.240832][ T5372] ? __mutex_lock_common+0x1a52/0x25a0 [ 217.246392][ T5372] ? report_bug+0x1b7/0x2e0 [ 217.250956][ T5372] ? handle_bug+0x3d/0x70 [ 217.255500][ T5372] ? exc_invalid_op+0x16/0x40 [ 217.260262][ T5372] ? asm_exc_invalid_op+0x16/0x20 [ 217.265759][ T5372] ? __wake_up_klogd+0xcc/0x100 [ 217.270845][ T5372] ? __mutex_lock_common+0x1a52/0x25a0 [ 217.276442][ T5372] ? ocfs2_trim_fs_lock_res_init+0x31/0x4c0 [ 217.282389][ T5372] ? mutex_lock_io_nested+0x60/0x60 [ 217.287700][ T5372] ? kfree+0xf1/0x270 [ 217.291770][ T5372] ? reacquire_held_locks+0x660/0x660 [ 217.297553][ T5372] ? kasan_set_free_info+0x1f/0x40 [ 217.302872][ T5372] ? slab_free_freelist_hook+0xdd/0x160 [ 217.308534][ T5372] ? kfree+0xf1/0x270 [ 217.312575][ T5372] ? tomoyo_path_number_perm+0x648/0x810 [ 217.318308][ T5372] mutex_lock_nested+0x17/0x20 [ 217.323154][ T5372] ocfs2_trim_fs_lock_res_init+0x31/0x4c0 [ 217.328990][ T5372] ocfs2_trim_fs+0x138/0x2830 [ 217.333773][ T5372] ? mark_lock+0x98/0x340 [ 217.338228][ T5372] ? __lock_acquire+0x1295/0x1ff0 [ 217.343331][ T5372] ? ocfs2_truncate_inline+0x880/0x880 [ 217.349083][ T5372] ? __lock_acquire+0x1ff0/0x1ff0 [ 217.354210][ T5372] ? __might_fault+0xb4/0x110 [ 217.358928][ T5372] ocfs2_ioctl+0x72c/0x7d0 [ 217.363407][ T5372] ? ocfs2_fileattr_set+0x860/0x860 [ 217.369280][ T5372] ? bpf_lsm_file_ioctl+0x5/0x10 [ 217.374336][ T5372] ? security_file_ioctl+0x7d/0xa0 [ 217.379504][ T5372] ? ocfs2_fileattr_set+0x860/0x860 [ 217.384963][ T5372] __se_sys_ioctl+0xf1/0x160 [ 217.389625][ T5372] do_syscall_64+0x3b/0xb0 [ 217.394085][ T5372] ? clear_bhb_loop+0x15/0x70 [ 217.398842][ T5372] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 217.405920][ T5372] RIP: 0033:0x7fbd9fe06ff9 [ 217.410388][ T5372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.430162][ T5372] RSP: 002b:00007fbd9e27f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.438709][ T5372] RAX: ffffffffffffffda RBX: 00007fbd9ffbef80 RCX: 00007fbd9fe06ff9 [ 217.446940][ T5372] RDX: 0000000020000000 RSI: 00000000c0185879 RDI: 0000000000000004 [ 217.455123][ T5372] RBP: 00007fbd9fe79296 R08: 0000000000000000 R09: 0000000000000000 [ 217.463221][ T5372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.471656][ T5372] R13: 0000000000000000 R14: 00007fbd9ffbef80 R15: 00007ffd93719948 [ 217.479860][ T5372] [ 217.482968][ T5372] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 217.490238][ T5372] CPU: 1 PID: 5372 Comm: syz.4.494 Not tainted 5.15.168-syzkaller #0 [ 217.498279][ T5372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 217.508322][ T5372] Call Trace: [ 217.511591][ T5372] [ 217.514502][ T5372] dump_stack_lvl+0x1e3/0x2d0 [ 217.519183][ T5372] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 217.524799][ T5372] ? panic+0x860/0x860 [ 217.528855][ T5372] ? preempt_schedule_irq+0x155/0x1c0 [ 217.534209][ T5372] ? __mutex_lock_common+0x19a0/0x25a0 [ 217.539664][ T5372] ? __mutex_lock_common+0x19a0/0x25a0 [ 217.545146][ T5372] panic+0x318/0x860 [ 217.549024][ T5372] ? __warn+0x16a/0x300 [ 217.553196][ T5372] ? fb_is_primary_device+0xd0/0xd0 [ 217.558390][ T5372] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 217.564009][ T5372] ? __warn+0x16a/0x300 [ 217.568145][ T5372] ? __warn+0x29a/0x300 [ 217.572307][ T5372] ? __mutex_lock_common+0x1a52/0x25a0 [ 217.577769][ T5372] __warn+0x2b2/0x300 [ 217.581741][ T5372] ? __mutex_lock_common+0x1a52/0x25a0 [ 217.587178][ T5372] report_bug+0x1b7/0x2e0 [ 217.591491][ T5372] handle_bug+0x3d/0x70 [ 217.595631][ T5372] exc_invalid_op+0x16/0x40 [ 217.600133][ T5372] asm_exc_invalid_op+0x16/0x20 [ 217.604966][ T5372] RIP: 0010:__mutex_lock_common+0x1a52/0x25a0 [ 217.611030][ T5372] Code: 04 08 84 c0 0f 85 d9 08 00 00 83 3d ef a1 ac 03 00 0f 85 e9 e6 ff ff 48 c7 c7 80 19 8b 8a 48 c7 c6 c0 19 8b 8a e8 be 17 0f f7 <0f> 0b e9 cf e6 ff ff e8 e2 94 c3 f6 e9 58 fb ff ff 0f 0b e9 d1 f0 [ 217.630618][ T5372] RSP: 0018:ffffc900035477c0 EFLAGS: 00010246 [ 217.636696][ T5372] RAX: 2edcfe337c16e100 RBX: dffffc0000000000 RCX: 0000000000040000 [ 217.644654][ T5372] RDX: ffffc9000b89b000 RSI: 00000000000021fb RDI: 00000000000021fc [ 217.652605][ T5372] RBP: ffffc90003547928 R08: ffffffff81669a2c R09: ffffed1017224f24 [ 217.660553][ T5372] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 217.668517][ T5372] R13: ffff88802900ccd0 R14: 0000000000000000 R15: 0000000000000000 [ 217.676481][ T5372] ? __wake_up_klogd+0xcc/0x100 [ 217.681371][ T5372] ? ocfs2_trim_fs_lock_res_init+0x31/0x4c0 [ 217.687276][ T5372] ? mutex_lock_io_nested+0x60/0x60 [ 217.692458][ T5372] ? kfree+0xf1/0x270 [ 217.696434][ T5372] ? reacquire_held_locks+0x660/0x660 [ 217.701800][ T5372] ? kasan_set_free_info+0x1f/0x40 [ 217.706888][ T5372] ? slab_free_freelist_hook+0xdd/0x160 [ 217.712413][ T5372] ? kfree+0xf1/0x270 [ 217.716379][ T5372] ? tomoyo_path_number_perm+0x648/0x810 [ 217.721991][ T5372] mutex_lock_nested+0x17/0x20 [ 217.726738][ T5372] ocfs2_trim_fs_lock_res_init+0x31/0x4c0 [ 217.732436][ T5372] ocfs2_trim_fs+0x138/0x2830 [ 217.737094][ T5372] ? mark_lock+0x98/0x340 [ 217.741402][ T5372] ? __lock_acquire+0x1295/0x1ff0 [ 217.746583][ T5372] ? ocfs2_truncate_inline+0x880/0x880 [ 217.752028][ T5372] ? __lock_acquire+0x1ff0/0x1ff0 [ 217.757033][ T5372] ? __might_fault+0xb4/0x110 [ 217.761689][ T5372] ocfs2_ioctl+0x72c/0x7d0 [ 217.766088][ T5372] ? ocfs2_fileattr_set+0x860/0x860 [ 217.771271][ T5372] ? bpf_lsm_file_ioctl+0x5/0x10 [ 217.776191][ T5372] ? security_file_ioctl+0x7d/0xa0 [ 217.781279][ T5372] ? ocfs2_fileattr_set+0x860/0x860 [ 217.786471][ T5372] __se_sys_ioctl+0xf1/0x160 [ 217.791041][ T5372] do_syscall_64+0x3b/0xb0 [ 217.795441][ T5372] ? clear_bhb_loop+0x15/0x70 [ 217.800114][ T5372] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 217.806006][ T5372] RIP: 0033:0x7fbd9fe06ff9 [ 217.810400][ T5372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.829989][ T5372] RSP: 002b:00007fbd9e27f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.838382][ T5372] RAX: ffffffffffffffda RBX: 00007fbd9ffbef80 RCX: 00007fbd9fe06ff9 [ 217.846338][ T5372] RDX: 0000000020000000 RSI: 00000000c0185879 RDI: 0000000000000004 [ 217.854295][ T5372] RBP: 00007fbd9fe79296 R08: 0000000000000000 R09: 0000000000000000 [ 217.862264][ T5372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.870218][ T5372] R13: 0000000000000000 R14: 00007fbd9ffbef80 R15: 00007ffd93719948 [ 217.878179][ T5372] [ 217.881432][ T5372] Kernel Offset: disabled [ 217.885748][ T5372] Rebooting in 86400 seconds..