last executing test programs: 8.035656695s ago: executing program 0 (id=2774): ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 8.013535537s ago: executing program 3 (id=2775): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001780)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xd}]}]}, 0x28}}, 0x0) 7.018070798s ago: executing program 0 (id=2777): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'batadv0\x00'}, 0x18) 6.974596281s ago: executing program 3 (id=2778): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, r1, 0x1, 0x0, 0x0, {0x2}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0x9}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}]}, 0x50}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x44, r3, 0x1, 0x0, 0x0, {0x4}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x44}}, 0x0) 5.852435233s ago: executing program 3 (id=2783): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xcc) 5.817179446s ago: executing program 0 (id=2784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}]}], {0x14}}, 0xe8}}, 0x0) 5.704996615s ago: executing program 3 (id=2787): r0 = io_uring_setup(0x1699, &(0x7f0000000180)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000032c0)=[{0xf00, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, {0x0, 0x0, 0x0, 0x0, 0x0}], 0x2) 5.654901429s ago: executing program 0 (id=2789): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) mremap(&(0x7f00008d5000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/80, 0x50}], 0x7) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100), 0x4) syz_emit_ethernet(0x96, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @gre={{0x11, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1, {[@ssrr={0x89, 0xf, 0x0, [@private, @dev, @broadcast]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback}]}, @ssrr={0x89, 0x7, 0x0, [@empty]}]}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x4008011) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) fallocate(r6, 0x3, 0x0, 0x3) close(r4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000000, &(0x7f0000000080), 0x1, 0x4f5, &(0x7f0000000740)="$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") 5.5133055s ago: executing program 3 (id=2791): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 5.198635066s ago: executing program 3 (id=2793): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) 4.895832081s ago: executing program 0 (id=2795): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007bc0), 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r3, &(0x7f0000000340)=""/254, 0xfe, 0x0) 4.730574574s ago: executing program 1 (id=2797): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x0, 0x7ad, &(0x7f00000007c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="2e5113abb96490e8baa757031fd3113d8fd231aecab2c455591d3bec0b6d42a1d9572dc5078c0de5a68dc252aeb457f345aaef1744f717c71738086a77f819bf8ec2164ad9d225996868d5440c2a1f1759386c920214f5b07fdeaa34d7cbb895ee45108d8715e8678c9e65c8b76f3f4f2a1537de01264b0f6c5a5083f49b6737a25758553b72788c48c129ab89ff000e7d0b1da439dc5e7e6cfad150a664ab7d70dd127f473015976f8f2a3603f45a042d8c3578e6eb3060b986ee9e6b4dbf79896d68301c5d9ea34afe122934", @ANYRES8, @ANYRES32, @ANYRES16, @ANYRES32, @ANYRES8, @ANYRES64], 0x0, 0x1c7, &(0x7f0000000dc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40286608, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x0, 0x0}) 4.496716313s ago: executing program 1 (id=2798): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x1}]}]}, 0x28}}, 0x0) 4.190379078s ago: executing program 1 (id=2799): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x1}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x28}, 0x20) 4.071234998s ago: executing program 1 (id=2800): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffd8) 4.071052138s ago: executing program 4 (id=2801): socket$kcm(0x10, 0x2, 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r3 = inotify_init() inotify_add_watch(r3, 0x0, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0xffffffff, 0x2003) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[], 0x69) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002180)='/sys/power/sync_on_suspend', 0xa82, 0x0) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x2000000e) 3.004337375s ago: executing program 4 (id=2802): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat2(r4, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000013c0)={0x0, 0x0, 0x10}, 0x18) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fstat(r5, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, 0x0, &(0x7f0000000040)=0xc) 1.996186827s ago: executing program 4 (id=2805): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='\x15\xa7\f\x8e0\x01&\xa2@\xc6\x91~\xa9u\xa7\xdc', 0xfffffffffffffffe) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000940)={0x2020}, 0x2020) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r4, 0x40087543, &(0x7f0000000000)={0x0, 0x2, [{r5, 0x0, 0x0, 0x8000}, {}]}) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r7}, 0x10) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x24, 0x4a, 0x492dfc465ae32a8d, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) sendfile(r6, r3, &(0x7f00000000c0)=0x58, 0x5) 1.936323282s ago: executing program 2 (id=2806): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x1, 0x9}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r6}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet(0x2, 0x2, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x57) io_setup(0x800, &(0x7f0000000280)) openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000005000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181a0000", @ANYRES32=r7, @ANYBLOB="0000000000000000186500000d0000000000000014fc0000185100000f000000000000000000000018480000feffffff00000000000000000d53ffff0800000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x101, 0xb6, &(0x7f0000000680)=""/182, 0x41100, 0x22, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x5, 0xb, 0x100, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000800)=[0xffffffffffffffff, r4], &(0x7f0000000900)=[{0x5, 0x1, 0x2}, {0x3, 0x1, 0x6, 0x7}, {0x5, 0x2, 0x7, 0x7}], 0x10, 0xc000000}, 0x90) 1.870005667s ago: executing program 1 (id=2807): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) 1.682092882s ago: executing program 1 (id=2808): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "0cd22d74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 715.258591ms ago: executing program 4 (id=2810): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace_dev_match', 0x412003, 0x3c) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0xb, 0x4) syz_open_dev$vcsu(&(0x7f0000000740), 0xffffffffffffffc0, 0x701) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES64], 0xd, 0x2a0, &(0x7f0000000840)="$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") r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cc, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0xc2) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x414a00, 0x10) r4 = getpgrp(0x0) r5 = syz_open_dev$loop(&(0x7f00000000c0), 0x40800000, 0x0) ioctl$BLKGETSIZE64(r5, 0x80081272, 0x0) sched_setscheduler(r4, 0x6, &(0x7f0000000080)=0x5) socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000e40)="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", 0x7f0}, {&(0x7f0000000200)="af4898e15441af728fb1e6dd795736600de99b62a136462e08ec83207215c9d8ab", 0x21}, {0x0}], 0x3}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) r6 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) open(&(0x7f0000000240)='./file0\x00', 0x141142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 711.008311ms ago: executing program 2 (id=2811): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000200de007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 521.221487ms ago: executing program 2 (id=2812): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730106000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) 395.331247ms ago: executing program 2 (id=2813): r0 = openat$capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000180)) 306.624534ms ago: executing program 2 (id=2814): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) set_mempolicy(0x0, &(0x7f0000000200), 0x200) 212.940542ms ago: executing program 4 (id=2815): set_mempolicy(0x2002, &(0x7f0000000400)=0x7, 0x5) set_mempolicy(0x0, 0x0, 0x0) 46.636276ms ago: executing program 4 (id=2816): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) 45.784216ms ago: executing program 2 (id=2826): socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x541b, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000004c0)={@loopback, @initdev}, &(0x7f0000000500)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x8910, &(0x7f0000000000)='bridge0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) mkdir(0x0, 0x0) socket$unix(0x1, 0x0, 0x0) 0s ago: executing program 0 (id=2817): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x10000011}) kernel console output (not intermixed with test programs): 1][T11322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.780487][T11290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.790692][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 561.805695][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 561.836672][T11322] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.865562][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 561.881882][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 561.925731][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 561.965682][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 561.992122][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 562.721183][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 562.729701][ T4659] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.736834][ T4659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.745145][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 562.761814][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 562.771023][ T4659] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.778157][ T4659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.803300][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.809672][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.870257][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 562.897364][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 562.926666][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 562.955964][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 562.999829][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 563.023674][T11491] loop3: detected capacity change from 0 to 128 [ 563.043850][T11290] device veth0_vlan entered promiscuous mode [ 563.073739][T11290] device veth1_vlan entered promiscuous mode [ 563.088705][T11322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 563.133591][T11322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 563.191419][ T3647] Bluetooth: hci5: command tx timeout [ 563.593562][T11497] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 563.955001][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 563.963052][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 563.970997][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 563.981859][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 564.023320][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 564.034565][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 564.044302][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 564.053022][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 564.076834][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 564.091953][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 564.151068][T11290] device veth0_macvtap entered promiscuous mode [ 564.205513][T11290] device veth1_macvtap entered promiscuous mode [ 564.264507][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 564.278020][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 564.304552][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 564.348726][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 564.367705][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 564.389114][T11290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.441230][T11290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.451091][T11290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.502089][T11290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.531203][T11290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.571280][ T14] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 564.579021][T11290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.619416][T11290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.641734][T11290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.660411][T11290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.668652][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 564.686349][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 564.700124][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 564.740776][T11322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.755062][T11290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.767636][T11290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.778018][T11290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.801256][T11290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.821327][T11290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.851079][T11290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.881454][T11290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.901267][T11290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.922817][T11290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.930214][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 564.931569][ T14] usb 2-1: config 0 has an invalid interface number: 244 but max is 0 [ 564.942352][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 564.955700][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 564.964422][ T14] usb 2-1: config 0 has no interface number 0 [ 564.964828][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 564.984379][T11290] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.991344][ T14] usb 2-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 565.007873][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.016271][T11290] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.016305][T11290] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.016331][T11290] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.068162][ T14] usb 2-1: config 0 descriptor?? [ 565.130295][ T14] flexcop_usb: set interface failed. [ 565.141259][ T14] b2c2_flexcop_usb: probe of 2-1:0.244 failed with error -22 [ 565.204215][ T5814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.243362][ T5814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.287355][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 565.311412][ T5814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.320525][ T5814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.373468][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 565.428243][ T3627] usb 2-1: USB disconnect, device number 23 [ 565.506470][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 565.522229][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 565.570636][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 565.582057][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 565.609337][T11322] device veth0_vlan entered promiscuous mode [ 565.626344][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 565.647448][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 565.679714][T11322] device veth1_vlan entered promiscuous mode [ 565.723372][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 565.732888][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 565.752414][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 565.769194][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 565.787964][T11322] device veth0_macvtap entered promiscuous mode [ 565.806688][T11322] device veth1_macvtap entered promiscuous mode [ 565.835175][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.846144][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.856035][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.866519][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.876383][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.891778][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.917035][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.929027][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.950922][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.986391][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.007043][T11322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.021049][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 566.037138][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 566.047709][ T5698] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 566.060796][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 566.061977][T11533] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2110'. [ 566.071768][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 566.113543][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.115454][T11533] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2110'. [ 566.142880][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.163067][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.179753][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.190128][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.207750][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.217898][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.245318][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.268902][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.280203][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.298228][T11322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.324741][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 566.336910][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 566.349160][T11537] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2113'. [ 566.359113][T11537] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2113'. [ 566.368752][T11537] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2113'. [ 566.382425][T11322] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.391816][T11322] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.401569][T11322] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.410285][T11322] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.421477][ T5698] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.451375][ T5698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 566.472004][ T5698] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 566.472047][ T5698] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 566.472070][ T5698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.473616][ T5698] usb 4-1: config 0 descriptor?? [ 566.514152][ T5698] radioshark2 4-1:0.0: Invalid radioSHARK2 device [ 566.514181][ T5698] radioshark2: probe of 4-1:0.0 failed with error -22 [ 566.514371][ T5698] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 566.604518][T11542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2116'. [ 566.622463][ T5814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.622576][ T5814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.629332][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 566.705821][ T5814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.705905][ T5814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.717489][ T5698] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 566.744752][ T4558] usb 4-1: USB disconnect, device number 28 [ 567.094686][ T14] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 567.343466][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 567.463379][ T14] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.486520][ T14] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.506645][ T14] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 567.532357][ T14] usb 5-1: config 0 interface 0 has no altsetting 0 [ 567.539032][ T14] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 567.563905][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.589490][ T14] usb 5-1: config 0 descriptor?? [ 567.615878][T11558] batman_adv: batadv0: Adding interface: vlan2 [ 567.663849][T11558] batman_adv: batadv0: The MTU of interface vlan2 is too small (1480) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.719473][T11558] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 568.083987][ T14] hid-generic 0003:045E:05DA.0010: unknown main item tag 0x0 [ 568.134527][ T14] hid-generic 0003:045E:05DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.4-1/input0 [ 568.426995][ T3627] usb 5-1: USB disconnect, device number 20 [ 569.588578][T11587] loop4: detected capacity change from 0 to 512 [ 569.617969][T11587] EXT4-fs: Ignoring removed bh option [ 569.658941][T11587] EXT4-fs error (device loop4): __ext4_iget:5044: inode #15: block 1803188595: comm syz.4.2133: invalid block [ 569.711906][T11587] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.2133: couldn't read orphan inode 15 (err -117) [ 569.871659][T11587] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 569.911497][ C0] eth0: bad gso: type: 1, size: 1408 [ 569.991333][T11587] loop4: detected capacity change from 512 to 511 [ 570.005116][T11594] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz.4.2133: path /2/file0/file0: bad entry in directory: directory entry too close to block end - offset=52, inode=1701603686, rec_len=48, size=60 fake=0 [ 570.072498][ T3647] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 570.085102][ T3647] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 570.106821][ T3647] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 570.127020][T11595] loop3: detected capacity change from 0 to 4096 [ 570.141943][ T3647] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 570.154924][ T3647] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 570.162367][ T3647] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 570.262234][T11599] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 570.263202][T11322] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=46, rec_len=2, size=1024 fake=0 [ 570.473329][T11322] EXT4-fs (loop4): unmounting filesystem. [ 570.688968][T11596] chnl_net:caif_netlink_parms(): no params data found [ 571.533267][T11616] Bluetooth: MGMT ver 1.22 [ 571.768588][T11596] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.821340][T11596] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.861495][T11596] device bridge_slave_0 entered promiscuous mode [ 571.904486][T11596] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.922302][T11596] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.930480][T11596] device bridge_slave_1 entered promiscuous mode [ 572.125511][ T6900] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.231629][ T3647] Bluetooth: hci6: command tx timeout [ 572.354472][ T6900] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.394425][T11596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.414560][T11596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.512706][ T6900] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.740757][ T6900] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.782877][ T3647] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 572.797666][ T3647] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 572.807612][ T3647] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 572.834034][ T3647] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 572.841849][ T3647] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 572.857928][ T3647] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 572.867239][T11596] team0: Port device team_slave_0 added [ 572.942114][T11596] team0: Port device team_slave_1 added [ 573.105778][ T3647] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 573.118213][ T3647] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 573.127227][ T3647] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 573.137248][ T3647] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 573.148760][ T3647] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 573.161664][ T3647] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 573.230163][T11596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.268854][T11596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.307306][T11596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.348390][T11596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.360418][T11596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.387707][T11596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.790919][T11596] device hsr_slave_0 entered promiscuous mode [ 573.813083][T11596] device hsr_slave_1 entered promiscuous mode [ 573.842020][T11596] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 573.849617][T11596] Cannot create hsr debugfs directory [ 573.927838][T11626] chnl_net:caif_netlink_parms(): no params data found [ 574.311512][ T3648] Bluetooth: hci6: command tx timeout [ 574.403192][T11626] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.410286][T11626] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.423041][T11626] device bridge_slave_0 entered promiscuous mode [ 574.523124][T11626] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.530257][T11626] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.569492][T11626] device bridge_slave_1 entered promiscuous mode [ 574.735835][ T27] kauditd_printk_skb: 99 callbacks suppressed [ 574.735853][ T27] audit: type=1804 audit(1723099742.407:333): pid=11666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2164" name="/newroot/130/bus/file0" dev="overlay" ino=714 res=1 errno=0 [ 574.794076][T11633] chnl_net:caif_netlink_parms(): no params data found [ 574.868081][T11626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.952306][ T3648] Bluetooth: hci1: command tx timeout [ 574.963906][T11626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.191386][ T3648] Bluetooth: hci5: command tx timeout [ 575.536091][T11596] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.118685][T11679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2170'. [ 576.162323][T11682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2170'. [ 576.193105][T11682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.391327][ T3647] Bluetooth: hci6: command tx timeout [ 576.483901][T11682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.620161][T11596] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.019203][T11626] team0: Port device team_slave_0 added [ 577.031555][ T3647] Bluetooth: hci1: command tx timeout [ 577.062688][T11596] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.108199][T11626] team0: Port device team_slave_1 added [ 577.137987][T11633] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.162086][T11633] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.170403][T11633] device bridge_slave_0 entered promiscuous mode [ 577.243339][T11596] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.271308][ T3647] Bluetooth: hci5: command tx timeout [ 577.312062][ T6900] device hsr_slave_0 left promiscuous mode [ 577.331422][ T6900] device hsr_slave_1 left promiscuous mode [ 577.341991][ T6900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.349467][ T6900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.372245][ T6900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.379705][ T6900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.392049][ T6900] device bridge_slave_1 left promiscuous mode [ 577.398289][ T6900] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.423414][ T6900] device bridge_slave_0 left promiscuous mode [ 577.429675][ T6900] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.487231][ T6900] device veth1_macvtap left promiscuous mode [ 577.493545][ T6900] device veth0_macvtap left promiscuous mode [ 577.499752][ T6900] device veth1_vlan left promiscuous mode [ 577.518607][ T6900] device veth0_vlan left promiscuous mode [ 578.471374][ T3647] Bluetooth: hci6: command tx timeout [ 578.802373][ T6900] team0 (unregistering): Port device team_slave_1 removed [ 579.040701][ T6900] team0 (unregistering): Port device team_slave_0 removed [ 579.399390][ T6900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.562720][ T3647] Bluetooth: hci1: command tx timeout [ 579.569046][ T3647] Bluetooth: hci5: command tx timeout [ 579.638188][ T6900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.940482][ T6900] bond0 (unregistering): Released all slaves [ 581.069513][T11633] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.088644][T11633] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.133056][T11633] device bridge_slave_1 entered promiscuous mode [ 581.169375][T11626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.176540][T11626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.204248][T11626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.279913][T11626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.290095][T11626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.337265][T11626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.363334][T11633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.431703][T11633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.560102][T11626] device hsr_slave_0 entered promiscuous mode [ 581.590606][T11626] device hsr_slave_1 entered promiscuous mode [ 581.591286][ T3647] Bluetooth: hci5: command tx timeout [ 581.605823][ T3648] Bluetooth: hci1: command tx timeout [ 581.605856][T11626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 581.621389][T11626] Cannot create hsr debugfs directory [ 581.726157][T11633] team0: Port device team_slave_0 added [ 581.810235][T11633] team0: Port device team_slave_1 added [ 581.902836][T11633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.910024][T11633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.974477][T11633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.040848][T11633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.059346][T11633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.396761][T11633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.662184][T11596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 582.793408][T11596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 582.856264][T11596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 582.890283][T11633] device hsr_slave_0 entered promiscuous mode [ 582.905183][T11741] input: syz1 as /devices/virtual/input/input22 [ 582.917279][T11633] device hsr_slave_1 entered promiscuous mode [ 582.933698][T11633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 582.951637][T11633] Cannot create hsr debugfs directory [ 582.986381][T11596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 583.423161][T11596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.635435][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 584.643453][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 584.665915][T11596] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.723235][ T3652] Bluetooth: hci3: command tx timeout [ 584.729082][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 584.752053][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 584.784199][ T4566] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.791366][ T4566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.879197][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 584.887860][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 584.924406][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 584.934196][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.941361][ T4705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.971704][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 584.981788][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 585.125324][T11633] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.147863][T11596] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 585.189488][T11596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 585.807805][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 585.833615][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 585.842393][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 585.871988][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 585.890037][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 585.910265][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 585.934112][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 585.960163][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 585.987477][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 586.016368][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 586.157868][T11633] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.333339][T11784] netlink: 'syz.1.2200': attribute type 29 has an invalid length. [ 586.356114][T11633] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.406371][T11784] netlink: 'syz.1.2200': attribute type 29 has an invalid length. [ 586.505466][T11633] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.533184][T11786] netlink: 'syz.1.2200': attribute type 29 has an invalid length. [ 586.572925][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 586.580569][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 586.598883][T11790] netlink: 'syz.1.2200': attribute type 29 has an invalid length. [ 586.639584][T11596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.650873][T11784] netlink: 'syz.1.2200': attribute type 29 has an invalid length. [ 586.730298][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 586.739903][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 586.757828][T11794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2202'. [ 586.843381][T11596] device veth0_vlan entered promiscuous mode [ 586.850054][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 586.875362][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 586.893630][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 586.911801][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 586.934857][T11596] device veth1_vlan entered promiscuous mode [ 587.033427][ T3647] Bluetooth: hci0: unexpected event 0x31 length: 23 > 6 [ 587.044896][T11626] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 587.083139][T11626] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 587.122476][T11626] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 587.147087][T11626] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 587.178724][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 587.194068][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 587.208361][T11796] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 587.219309][T11796] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 587.233504][T11596] device veth0_macvtap entered promiscuous mode [ 587.280109][T11596] device veth1_macvtap entered promiscuous mode [ 587.396114][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.423650][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.441305][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.482083][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.500409][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.510990][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.654095][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.680253][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.717898][T11596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.761850][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 587.772874][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 587.780909][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 587.804538][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 587.824438][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.838205][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.856179][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.877332][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.897645][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.917993][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.931290][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.971221][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.981105][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.011287][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.103334][T11596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.137940][T11596] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.170189][T11596] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.208742][T11596] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.235388][T11596] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.848666][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 588.857765][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 588.953464][ T3652] Bluetooth: hci0: command tx timeout [ 589.054961][T11633] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 589.150556][T11633] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 589.254755][T11633] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 589.333976][T11633] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 589.478065][T11626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.857128][ T5978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.877581][ T5978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.880690][T11626] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.894592][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 589.938465][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 590.042355][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 590.141637][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 590.150217][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 590.192508][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.199620][ T4705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.217565][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 590.241931][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 590.250487][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.257416][T11822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2211'. [ 590.257628][ T4705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.307240][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 590.331698][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.342351][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.427982][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 590.436987][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 590.452260][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 590.463507][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 590.492536][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 590.531710][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 590.572386][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 590.599683][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 591.347064][ T3647] Bluetooth: hci0: command 0x0406 tx timeout [ 591.354413][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 591.374396][T11626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 591.428911][T11626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 591.501457][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 591.509634][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 591.533372][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 591.551438][ T5697] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 591.635032][T11633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.708212][ T6900] batman_adv: batadv0: Removing interface: vlan2 [ 591.752350][T11633] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.759684][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 591.778174][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 591.808182][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 591.871823][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 591.919984][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.927176][ T4705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.941268][ T5697] usb 1-1: Using ep0 maxpacket: 16 [ 591.945790][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 593.442593][ T5697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.483714][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 593.492304][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.499416][ T4705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.501439][ T5697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.527998][T11633] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 593.568321][ T5697] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 593.610010][T11633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 593.610406][ T5697] usb 1-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 593.650432][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.652025][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 593.675756][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 593.682284][ T5697] usb 1-1: config 0 descriptor?? [ 593.710681][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 593.730428][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 593.753826][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 593.778579][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 593.793121][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 593.811797][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 593.820130][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 593.842202][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 593.850674][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 594.035349][T11860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2223'. [ 594.105804][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 594.142089][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 594.160863][T11626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.200139][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 594.222511][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 594.283193][ T5697] hid-multitouch 0003:045E:9994.0011: unknown main item tag 0x2 [ 594.291016][ T5697] hid-multitouch 0003:045E:9994.0011: unknown main item tag 0x0 [ 594.331348][ T5697] hid-multitouch 0003:045E:9994.0011: unknown main item tag 0x0 [ 594.352156][T11871] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 594.381497][ T5697] hid-multitouch 0003:045E:9994.0011: unknown main item tag 0x0 [ 594.411513][ T5697] hid-multitouch 0003:045E:9994.0011: unknown main item tag 0x0 [ 594.425445][ T5697] hid-multitouch 0003:045E:9994.0011: unknown main item tag 0x0 [ 594.441357][ T5697] hid-multitouch 0003:045E:9994.0011: unknown main item tag 0x0 [ 594.459337][ T5697] hid-multitouch 0003:045E:9994.0011: unknown main item tag 0x0 [ 594.500136][ T5697] hid-multitouch 0003:045E:9994.0011: unknown main item tag 0x0 [ 594.526488][ T5697] hid-multitouch 0003:045E:9994.0011: unknown main item tag 0x0 [ 594.554722][ T5697] hid-multitouch 0003:045E:9994.0011: unknown main item tag 0x0 [ 594.606569][ T5697] hid-multitouch 0003:045E:9994.0011: hidraw0: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.0-1/input0 [ 594.651907][ T5697] usb 1-1: USB disconnect, device number 14 [ 594.821724][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 594.830113][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 594.855679][T11633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.917145][ T6900] device hsr_slave_0 left promiscuous mode [ 594.932491][ T6900] device hsr_slave_1 left promiscuous mode [ 594.942238][ T6900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.949686][ T6900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.982532][ T6900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.991512][ T6900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.011342][ T4707] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 595.020254][ T6900] device bridge_slave_1 left promiscuous mode [ 595.035675][ T6900] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.049420][ T6900] device bridge_slave_0 left promiscuous mode [ 595.060738][ T6900] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.115839][ T6900] device veth1_macvtap left promiscuous mode [ 595.122083][ T6900] device veth0_macvtap left promiscuous mode [ 595.128190][ T6900] device veth1_vlan left promiscuous mode [ 595.134857][ T6900] device veth0_vlan left promiscuous mode [ 595.251233][ T4707] usb 2-1: Using ep0 maxpacket: 32 [ 595.257454][ T6900] bond1 (unregistering): Released all slaves [ 595.380169][ T4707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 595.389982][ T4707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 595.551457][ T4707] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=51.44 [ 595.560541][ T4707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.569859][ T4707] usb 2-1: Product: syz [ 595.574426][ T4707] usb 2-1: Manufacturer: syz [ 595.579233][ T4707] usb 2-1: SerialNumber: syz [ 595.585693][ T4707] usb 2-1: config 0 descriptor?? [ 595.636469][ T4707] legousbtower 2-1:0.0: interrupt endpoints not found [ 595.842567][ T4707] usb 2-1: USB disconnect, device number 24 [ 596.130219][ T6900] team0 (unregistering): Port device team_slave_1 removed [ 596.255272][ T6900] team0 (unregistering): Port device team_slave_0 removed [ 596.325878][ T6900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.450650][T11902] netlink: 'syz.1.2238': attribute type 10 has an invalid length. [ 596.469073][ T6900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.181213][ T4566] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 597.555851][ T4566] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.579479][ T4566] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 597.660659][ T6900] bond0 (unregistering): Released all slaves [ 597.687031][ T4566] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 597.698514][ T4566] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 597.714826][ T4566] usb 2-1: SerialNumber: syz [ 597.829298][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 597.842380][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 597.861642][T11908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2241'. [ 597.884994][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 597.902272][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 597.916205][T11633] device veth0_vlan entered promiscuous mode [ 597.924412][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 597.948976][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 597.998564][T11633] device veth1_vlan entered promiscuous mode [ 598.023322][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 598.033625][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 598.049154][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 598.065142][T11909] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2241'. [ 598.132072][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 598.144661][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 598.162215][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 598.231741][T11633] device veth0_macvtap entered promiscuous mode [ 598.271639][T11909] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2241'. [ 598.289285][T11626] device veth0_vlan entered promiscuous mode [ 598.302415][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 598.310379][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 598.336002][ T4566] usb 2-1: 0:2 : does not exist [ 598.359469][ T4566] usb 2-1: unit 5 not found! [ 598.365750][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 598.395722][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 598.404289][ T4566] usb 2-1: USB disconnect, device number 25 [ 598.429590][T11633] device veth1_macvtap entered promiscuous mode [ 598.477821][T11626] device veth1_vlan entered promiscuous mode [ 598.490410][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 598.509766][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 598.540949][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 598.615391][T11633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.638952][T11633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.673446][T11633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.694029][T11633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.715066][T11633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.726065][T11633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.820864][T11633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.850676][T11633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.904414][T11633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.967400][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 599.077910][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 599.195295][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 599.310842][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 599.432522][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 599.537725][ T3679] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 599.762860][T11633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.805015][T11633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.920340][T11633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.987865][T11633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.044302][T11633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.100542][T11633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.156462][T11633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.221255][T11633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.221263][ T3679] usb 1-1: Using ep0 maxpacket: 16 [ 600.271253][T11633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.301191][T11633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.411489][T11633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.420011][T11626] device veth0_macvtap entered promiscuous mode [ 600.428722][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 600.438106][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 600.448506][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 600.460498][T11633] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.470271][T11633] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.480034][T11633] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.489699][T11633] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.502831][T11626] device veth1_macvtap entered promiscuous mode [ 600.541396][ T3679] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 600.581311][ T3679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.589355][ T3679] usb 1-1: Product: syz [ 600.612828][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.641242][ T3679] usb 1-1: Manufacturer: syz [ 600.646547][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.651206][ T3679] usb 1-1: SerialNumber: syz [ 600.663940][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.681594][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.696419][ T3679] r8152-cfgselector 1-1: config 0 descriptor?? [ 600.701796][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.741315][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.761235][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.781212][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.801365][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.821288][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.849046][T11626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.899431][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 600.918679][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 600.947891][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.981319][ T3679] r8152-cfgselector 1-1: Unknown version 0x0000 [ 600.981737][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.005092][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.019542][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.040126][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.060167][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.070422][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.091845][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.102549][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.113623][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.123826][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.142217][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.160939][T11626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 601.187700][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 601.197975][ T6882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.215225][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 601.241563][ T6882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.245459][T11626] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.281360][ T3679] r8152-cfgselector 1-1: Unknown version 0x0000 [ 601.290981][ T3679] r8152-cfgselector 1-1: USB disconnect, device number 15 [ 601.292314][T11626] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.335247][T11626] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.369363][T11626] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.415568][ T5697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 601.441996][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.461263][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.507560][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 601.601746][ T6882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.650924][ T6882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.694969][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.695044][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 601.717769][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.754407][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 601.860106][T11957] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 603.906634][T11987] input: syz1 as /devices/virtual/input/input24 [ 604.224866][ T5697] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 604.342983][ T27] audit: type=1326 audit(1723099772.017:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11994 comm="syz.3.2270" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f13a25779f9 code=0x0 [ 605.141592][ T5697] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 605.161729][ T5697] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 605.187011][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.252449][ T5697] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 605.341452][ T14] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 605.500586][T11986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.509238][T11986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.520894][ T5697] usb 1-1: USB disconnect, device number 16 [ 605.791922][ T14] usb 2-1: config 0 has an invalid interface number: 154 but max is 0 [ 605.816439][ T14] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 605.902867][ T14] usb 2-1: config 0 has no interface number 0 [ 605.953942][ T14] usb 2-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 608.770175][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.818927][ T14] usb 2-1: config 0 descriptor?? [ 608.912020][ T14] usb 2-1: can't set config #0, error -71 [ 608.949466][ T14] usb 2-1: USB disconnect, device number 26 [ 609.032878][T12020] loop3: detected capacity change from 0 to 2048 [ 609.057945][ C0] eth0: bad gso: type: 1, size: 1408 [ 609.160628][T12020] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 609.283770][T12037] EXT4-fs error (device loop3): ext4_resize_begin:62: comm syz.3.2276: resize_inode disabled but reserved GDT blocks non-zero [ 609.495895][T11633] EXT4-fs (loop3): unmounting filesystem. [ 609.614985][T12044] loop4: detected capacity change from 0 to 32768 [ 609.726090][T12044] XFS (loop4): Mounting V5 Filesystem [ 609.753619][T12059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2288'. [ 610.580595][T12044] XFS (loop4): Ending clean mount [ 611.804878][ T27] audit: type=1800 audit(1723099778.497:335): pid=12077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2296" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 612.061954][T11626] XFS (loop4): Unmounting Filesystem [ 612.257512][ T27] audit: type=1326 audit(1723099779.927:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12090 comm="syz.3.2302" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13a25779f9 code=0x0 [ 613.737477][T12114] loop4: detected capacity change from 0 to 512 [ 614.619811][T12114] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #16: comm syz.4.2299: casefold flag without casefold feature [ 614.653487][T12114] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #3: comm syz.4.2299: corrupted inode contents [ 614.696519][T12114] EXT4-fs error (device loop4): ext4_dirty_inode:6072: inode #3: comm syz.4.2299: mark_inode_dirty error [ 614.716910][T12139] loop3: detected capacity change from 0 to 128 [ 614.746573][T12114] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #3: comm syz.4.2299: corrupted inode contents [ 614.759789][T12114] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.2299: mark_inode_dirty error [ 614.760683][T12139] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 614.778171][T12114] Quota error (device loop4): write_blk: dquota write failed [ 614.787863][T12114] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 614.810241][T12114] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.2299: Failed to acquire dquot type 0 [ 614.850143][T12139] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 615.377639][T12114] EXT4-fs (loop4): 1 orphan inode deleted [ 615.401937][ T6901] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 615.481378][T12114] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 615.490462][T12114] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038 (0x7fffffff) [ 615.506044][ T6901] EXT4-fs error (device loop4): ext4_release_dquot:6800: comm kworker/u4:27: Failed to release dquot type 1 [ 615.565781][T11633] EXT4-fs (loop3): unmounting filesystem. [ 615.626612][T11626] EXT4-fs (loop4): unmounting filesystem. [ 615.884916][T12163] loop4: detected capacity change from 0 to 16 [ 615.912196][T12163] erofs: (device loop4): check_layout_compatibility: unidentified incompatible feature 9000000, please upgrade kernel version [ 617.886612][T12218] loop3: detected capacity change from 0 to 512 [ 617.975021][T12221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2347'. [ 618.004307][T12218] EXT4-fs (loop3): 1 orphan inode deleted [ 618.023780][T12218] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 618.072855][T12218] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038 (0x7fffffff) [ 618.238016][T11633] EXT4-fs (loop3): unmounting filesystem. [ 618.507077][T12252] dccp_close: ABORT with 20 bytes unread [ 621.828380][T12285] loop4: detected capacity change from 0 to 256 [ 622.284026][T12298] loop3: detected capacity change from 0 to 512 [ 622.291380][ T3679] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 622.303408][ C0] eth0: bad gso: type: 1, size: 1408 [ 622.758370][ T3679] usb 2-1: Using ep0 maxpacket: 8 [ 623.052982][ T3679] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 623.141189][ T3679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.169723][ T3679] usb 2-1: Product: syz [ 623.189353][ T3679] usb 2-1: Manufacturer: syz [ 623.201218][ T3679] usb 2-1: SerialNumber: syz [ 623.232217][ T3679] usb 2-1: config 0 descriptor?? [ 623.525845][ T3679] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 623.598078][T12316] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 623.712033][ T3911] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.007404][ T3911] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.249277][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.256260][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.850828][ T3911] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.116222][ T3652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 625.130385][ T3652] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 625.354231][ T3648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 625.403798][ T3679] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 625.417141][ T3648] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 625.443355][ T3648] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 625.457299][ T3648] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 625.613917][ T3679] usb 2-1: USB disconnect, device number 27 [ 625.722242][ T3911] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.941237][ T4704] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 625.975076][T12341] loop4: detected capacity change from 0 to 16 [ 625.997823][T12341] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 626.252923][T12352] ALSA: seq fatal error: cannot create timer (-22) [ 626.301564][ T4704] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=a2.b4 [ 626.310650][ T4704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.382792][T12327] chnl_net:caif_netlink_parms(): no params data found [ 626.397370][ T4704] usb 3-1: config 0 descriptor?? [ 626.452895][ T4704] usb 3-1: Waiting for MOTU Microbook II to boot up... [ 626.459753][ T4704] usb 3-1: failed setting the sample rate for Motu MicroBook II: -22 [ 626.489066][ T4704] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 626.660070][ T4704] usb 3-1: USB disconnect, device number 26 [ 626.939938][T12327] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.952225][T12327] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.979052][T12327] device bridge_slave_0 entered promiscuous mode [ 627.083956][T12327] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.101986][T12327] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.110276][T12327] device bridge_slave_1 entered promiscuous mode [ 627.338085][T12327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.484469][T12327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.673796][ T3648] Bluetooth: hci5: command tx timeout [ 628.582845][T12327] team0: Port device team_slave_0 added [ 628.658903][T12327] team0: Port device team_slave_1 added [ 628.802234][T12371] loop4: detected capacity change from 0 to 32768 [ 628.878841][T12371] XFS (loop4): Mounting V5 Filesystem [ 628.900027][T12327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.915448][T12327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.016663][T12371] XFS (loop4): Ending clean mount [ 629.037883][T12371] XFS (loop4): Quotacheck needed: Please wait. [ 629.052148][T12393] loop0: detected capacity change from 256 to 0 [ 629.064097][T12327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.128924][T12327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.144927][T12327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.144954][T12327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.188566][T12371] XFS (loop4): Quotacheck: Done. [ 629.288918][T11626] XFS (loop4): Unmounting Filesystem [ 629.522790][T12327] device hsr_slave_0 entered promiscuous mode [ 629.552765][T12327] device hsr_slave_1 entered promiscuous mode [ 629.573347][T12327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 629.582107][T12327] Cannot create hsr debugfs directory [ 629.751377][ T3647] Bluetooth: hci5: command tx timeout [ 629.844303][ T3911] device hsr_slave_0 left promiscuous mode [ 629.853033][ T3911] device hsr_slave_1 left promiscuous mode [ 630.008914][ T3911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.079149][ T3911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.160657][ T3911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.234665][ T3911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.330663][ T3911] device bridge_slave_1 left promiscuous mode [ 630.400736][ T3911] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.451522][ T3911] device bridge_slave_0 left promiscuous mode [ 630.457791][ T3911] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.549411][ T3911] device veth1_macvtap left promiscuous mode [ 630.567043][ T3911] device veth0_macvtap left promiscuous mode [ 630.589667][ T3911] device veth1_vlan left promiscuous mode [ 630.606885][ T3911] device veth0_vlan left promiscuous mode [ 630.661372][ T4566] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 631.051456][ T4566] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.070916][ T4566] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.083453][ T4566] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 631.101215][ T4566] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.143192][ T4566] usb 5-1: config 0 descriptor?? [ 631.614551][ T4566] logitech 0003:046D:CA04.0012: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.4-1/input0 [ 631.651286][ T4566] logitech 0003:046D:CA04.0012: no inputs found [ 631.816258][ T4705] usb 5-1: USB disconnect, device number 21 [ 631.836692][ T3647] Bluetooth: hci5: command tx timeout [ 632.008734][ T3911] team0 (unregistering): Port device team_slave_1 removed [ 632.111512][ T4566] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 632.174842][ T3911] team0 (unregistering): Port device team_slave_0 removed [ 632.327943][ T3911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.381258][ T4566] usb 1-1: Using ep0 maxpacket: 16 [ 632.540868][ T3911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.701439][ T4566] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 632.710670][ T4566] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.739470][ T4566] usb 1-1: Product: syz [ 632.751285][ T4566] usb 1-1: Manufacturer: syz [ 632.756055][ T4566] usb 1-1: SerialNumber: syz [ 632.791086][ T4566] usb 1-1: config 0 descriptor?? [ 632.842599][ T4566] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 633.331416][ T4566] usb 1-1: clie_3_5_startup: get interface number failed: -32 [ 633.339204][ T4566] visor: probe of 1-1:0.0 failed with error -32 [ 633.921520][ T3647] Bluetooth: hci5: command tx timeout [ 635.938240][ T3911] bond0 (unregistering): Released all slaves [ 636.610491][ T4659] usb 1-1: USB disconnect, device number 17 [ 636.641316][ T3681] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 637.041506][ T3681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.070198][ T3681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.100589][ T3681] usb 5-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 637.116290][ T3681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.147935][ T3681] usb 5-1: config 0 descriptor?? [ 637.459713][T12327] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 637.504124][T12327] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 637.526884][T12327] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 637.568674][T12327] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 637.701666][ T3681] usbhid 5-1:0.0: can't add hid device: -71 [ 637.732680][ T3681] usbhid: probe of 5-1:0.0 failed with error -71 [ 637.753781][ T3681] usb 5-1: USB disconnect, device number 22 [ 637.830465][T12327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.883056][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 637.902130][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 637.927077][T12327] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.962045][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 637.970866][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 637.994346][T12494] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 638.012111][ T4558] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.019224][ T4558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.058806][T12490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2444'. [ 638.181953][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 638.210006][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 638.240846][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 638.971047][ T4704] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.978230][ T4704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.993230][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 639.072801][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 639.082593][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 639.117349][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 639.142348][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 639.175367][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 639.212177][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 639.251773][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 639.281076][T12511] netlink: 'syz.4.2452': attribute type 1 has an invalid length. [ 639.302031][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 639.330191][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2452'. [ 639.342330][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 639.427617][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 640.411463][ T3627] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 640.442825][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 640.450319][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 640.489266][T12327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.540178][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 640.563095][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 640.614389][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 640.632018][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 640.645209][T12327] device veth0_vlan entered promiscuous mode [ 640.662743][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 640.670709][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 640.686418][T12327] device veth1_vlan entered promiscuous mode [ 640.772199][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 640.780449][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 640.806135][ T3627] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 640.826203][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 640.841004][ T3627] usb 5-1: config 17 has 0 interfaces, different from the descriptor's value: 1 [ 640.862261][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 640.873323][T12327] device veth0_macvtap entered promiscuous mode [ 640.885383][ T3627] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 640.897570][T12327] device veth1_macvtap entered promiscuous mode [ 640.905258][ T3627] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.929794][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.971573][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.001235][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.021249][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.051194][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.081257][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.101529][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.141201][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.173162][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.191429][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.202956][T12520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.211482][T12520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.220911][ T3627] usb 5-1: USB disconnect, device number 23 [ 641.265980][T12327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.300196][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 641.313173][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 641.341829][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 641.350586][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 641.387629][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.412289][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.441442][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.461264][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.493132][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.524314][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.564783][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.612799][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.720334][T12542] loop4: detected capacity change from 0 to 16 [ 641.755935][T12542] erofs: (device loop4): mounted with root inode @ nid 36. [ 641.938171][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.139510][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.213495][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.224722][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.236445][T12327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 642.271556][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 642.280343][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 642.305252][T12327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.324643][T12327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.351204][T12327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.359947][T12327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.560428][ T5814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.578853][ T5814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.630838][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 642.691018][ T5814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.712693][ T5814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.749727][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 643.019234][T12546] loop3: detected capacity change from 0 to 2048 [ 643.085271][T12546] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 643.102738][T12548] syz.1.2463[12548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 643.103158][T12548] syz.1.2463[12548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 643.392251][T12546] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 643.635035][ C0] eth0: bad gso: type: 1, size: 1408 [ 644.524517][T12564] netlink: 'syz.3.2468': attribute type 5 has an invalid length. [ 644.725217][T12569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2474'. [ 644.954393][ T4704] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 646.616477][T12580] loop3: detected capacity change from 0 to 512 [ 646.695619][T12580] EXT4-fs error (device loop3): __ext4_fill_super:5399: inode #2: comm syz.3.2475: iget: special inode unallocated [ 646.730395][T12580] EXT4-fs (loop3): get root inode failed [ 646.736519][ T3627] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 646.758552][T12580] EXT4-fs (loop3): mount failed [ 647.051283][ T4704] usb 5-1: Using ep0 maxpacket: 16 [ 647.331871][ T4704] usb 5-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=f3.7f [ 647.340999][ T4704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.363096][ T4704] usb 5-1: Product: syz [ 647.384081][ T4704] usb 5-1: Manufacturer: syz [ 647.398854][ T4704] usb 5-1: SerialNumber: syz [ 647.420860][ T4704] usb 5-1: config 0 descriptor?? [ 647.475696][ T4704] ftdi_sio 5-1:0.0: Ignoring interface reserved for JTAG [ 647.530997][ T4704] usb 5-1: USB disconnect, device number 24 [ 647.756091][T12611] loop4: detected capacity change from 0 to 512 [ 647.821261][ T4566] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 647.830294][T12611] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 647.854702][T12611] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038 (0x7fffffff) [ 647.992221][T11626] EXT4-fs (loop4): unmounting filesystem. [ 648.201527][ T4566] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.225748][ T4566] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.256281][ T4566] usb 4-1: New USB device found, idVendor=05ac, idProduct=0062, bcdDevice= 0.00 [ 648.291328][ T4566] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.315991][ T4566] usb 4-1: config 0 descriptor?? [ 648.332675][T12624] overlayfs: statfs failed on './file0' [ 648.351537][T12624] overlayfs: statfs failed on './file0' [ 648.374794][T12618] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 648.382017][T12618] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 648.440772][T12618] vhci_hcd vhci_hcd.0: Device attached [ 648.891544][ T5697] usb 12-1: SetAddress Request (2) to port 0 [ 648.910374][ T5697] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 649.473194][ T14] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 649.486529][ T4566] hid-generic 0003:05AC:0062.0013: unbalanced delimiter at end of report description [ 649.510253][ T4566] hid-generic: probe of 0003:05AC:0062.0013 failed with error -22 [ 650.163256][T12638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.352345][ T4566] usb 4-1: USB disconnect, device number 29 [ 651.330295][ T14] usb 2-1: config 0 has an invalid interface number: 172 but max is 0 [ 651.350168][ T14] usb 2-1: config 0 has an invalid descriptor of length 238, skipping remainder of the config [ 651.361801][ T14] usb 2-1: config 0 has no interface number 0 [ 651.367995][ T14] usb 2-1: config 0 interface 172 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 651.379508][ T14] usb 2-1: config 0 interface 172 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 651.791539][T12627] vhci_hcd: connection reset by peer [ 651.835684][ T5978] vhci_hcd: stop threads [ 651.855436][ T5978] vhci_hcd: release socket [ 651.901177][ T5978] vhci_hcd: disconnect device [ 651.932589][ T14] usb 2-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=a2.34 [ 651.941838][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.952322][ T14] usb 2-1: config 0 descriptor?? [ 651.971328][ T14] usb 2-1: can't set config #0, error -71 [ 651.991377][ T14] usb 2-1: USB disconnect, device number 28 [ 652.082584][T12662] program syz.0.2501 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 652.167416][T12664] autofs4:pid:12664:autofs_fill_super: pipe file descriptor does not contain proper ops [ 652.310068][T12673] overlayfs: failed to get inode (-116) [ 652.791408][ T3627] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 652.821235][ T14] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 652.841305][ T4566] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 653.071365][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 653.091418][ T4566] usb 1-1: Using ep0 maxpacket: 16 [ 653.171667][ T3627] usb 5-1: config 45 has too many interfaces: 194, using maximum allowed: 32 [ 653.185453][ T3627] usb 5-1: config 45 has 1 interface, different from the descriptor's value: 194 [ 653.195278][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.211375][ T4566] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.233556][ T3627] usb 5-1: config 45 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.240369][ T4566] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.255420][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.263430][ T3627] usb 5-1: config 45 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.274512][ T14] usb 2-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 653.298887][ T4566] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 653.322829][ T3627] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 653.332033][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.348163][ T4566] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 653.357946][ T3627] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.360145][ T14] usb 2-1: config 0 descriptor?? [ 653.375115][ T4566] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.415582][ T4566] usb 1-1: config 0 descriptor?? [ 653.701467][ T4704] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 653.883858][ T14] apple 0003:05AC:026C.0014: unknown main item tag 0x0 [ 653.884283][ T3627] uclogic 0003:5543:0042.0015: unknown main item tag 0x0 [ 653.899299][ T14] apple 0003:05AC:026C.0014: unbalanced collection at end of report description [ 653.910068][ T3627] uclogic 0003:5543:0042.0015: unknown main item tag 0x0 [ 653.935403][ T4566] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0016/input/input26 [ 653.935757][ T3627] uclogic 0003:5543:0042.0015: unknown main item tag 0x0 [ 653.957609][ T14] apple 0003:05AC:026C.0014: parse failed [ 653.963631][ T4704] usb 3-1: Using ep0 maxpacket: 16 [ 653.965623][ T3627] uclogic 0003:5543:0042.0015: unknown main item tag 0x0 [ 653.978711][ T14] apple: probe of 0003:05AC:026C.0014 failed with error -22 [ 654.015182][ T3627] uclogic 0003:5543:0042.0015: unknown main item tag 0x0 [ 654.042326][ T3627] uclogic 0003:5543:0042.0015: No inputs registered, leaving [ 654.043838][ T4566] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 654.072164][ T5697] usb 12-1: device descriptor read/8, error -110 [ 654.081463][ T4704] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 654.104100][ T4704] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 654.119368][ T3627] uclogic 0003:5543:0042.0015: hidraw1: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.4-1/input0 [ 654.123876][ T4704] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 654.147192][ T4704] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 654.165294][ T3647] Bluetooth: hci5: command tx timeout [ 654.168675][ T4704] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 654.189702][ T3627] usb 5-1: USB disconnect, device number 25 [ 654.254860][ T4704] usb 3-1: config 1 interface 0 has no altsetting 0 [ 654.282195][ T4704] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 654.342886][ T4704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.375936][ T14] usb 2-1: USB disconnect, device number 29 [ 654.382065][ T4558] usb 1-1: USB disconnect, device number 18 [ 654.412424][ T4704] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 654.494115][ T5697] usb usb12-port1: attempt power cycle [ 654.686609][ T4704] ums-sddr09: probe of 3-1:1.0 failed with error -22 [ 654.730892][ T4704] usb 3-1: USB disconnect, device number 28 [ 654.932216][T12710] loop3: detected capacity change from 0 to 32768 [ 654.956560][T12710] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2519 (12710) [ 655.014895][T12710] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 655.031938][T12710] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 655.050906][T12710] BTRFS info (device loop3): using free space tree [ 655.142359][ T5697] usb usb12-port1: unable to enumerate USB device [ 655.471467][T12710] BTRFS info (device loop3): enabling ssd optimizations [ 655.595737][T12759] Bluetooth: MGMT ver 1.22 [ 655.981981][T12327] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 656.387476][ T14] kernel write not supported for file /dsp (pid: 14 comm: kworker/0:1) [ 657.026274][T12789] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 657.038242][ T8535] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 657.311780][ T8535] usb 2-1: Using ep0 maxpacket: 32 [ 657.483172][ T8535] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 657.527578][ T8535] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 657.720469][ T8535] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 657.763893][ T8535] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 657.801241][ T8535] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 657.826378][ T8535] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 657.855682][ T8535] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 657.871286][ T8535] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.951570][ T8535] usb 2-1: config 0 descriptor?? [ 658.210297][ T8535] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 658.242750][ T8535] usb 2-1: USB disconnect, device number 30 [ 658.262634][ T8535] usblp0: removed [ 658.438199][T12814] loop3: detected capacity change from 0 to 4096 [ 658.443139][T12821] loop4: detected capacity change from 0 to 256 [ 658.456962][T12814] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 658.517743][T12814] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 658.541739][T12814] ntfs3: loop3: Failed to load $BadClus. [ 658.544073][T12821] 9pnet_virtio: no channels available for device @ [ 658.781397][ T8535] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 659.071501][ T8535] usb 2-1: Using ep0 maxpacket: 32 [ 659.195360][T12844] loop3: detected capacity change from 0 to 2048 [ 659.216600][ T8535] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 659.232590][ T8535] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 659.251502][T12844] loop3: p3 < > p4 < > [ 659.255841][T12844] loop3: partition table partially beyond EOD, truncated [ 659.278749][ T8535] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 659.286256][T12844] loop3: p3 start 4284289 is beyond EOD, truncated [ 659.294824][ T8535] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 659.325240][ T8535] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 659.340085][ T8535] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 659.361344][ T8535] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 659.370772][ T8535] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.426950][ T8535] usb 2-1: config 0 descriptor?? [ 659.468764][ T8535] usb 2-1: can't set config #0, error -71 [ 659.477802][ T8535] usb 2-1: USB disconnect, device number 31 [ 659.527970][ T4176] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.591301][ T4704] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 659.599883][ C0] eth0: bad gso: type: 1, size: 1408 [ 659.683037][ T4176] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.836669][ T4176] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.847220][ T4704] usb 4-1: Using ep0 maxpacket: 16 [ 659.911910][ T27] audit: type=1326 audit(1723099827.587:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12862 comm="syz.1.2578" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89953779f9 code=0x0 [ 659.977397][ T4704] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 660.001517][ T4704] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 660.018464][ T4704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.040067][ T4704] usb 4-1: config 0 descriptor?? [ 660.056486][ T4176] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.083277][ T4704] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 660.161748][ T3648] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 660.178634][ T3648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 660.188756][ T3648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 660.197041][ T3648] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 660.210710][ T3648] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 660.227664][ T3648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 660.271228][ T3683] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 660.391790][T12844] loop3: detected capacity change from 0 to 512 [ 660.521590][ T3683] usb 1-1: Using ep0 maxpacket: 16 [ 660.671328][ T3683] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 660.680454][ T3683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.691218][ T5696] usb 4-1: USB disconnect, device number 30 [ 660.699072][ T3683] usb 1-1: config 0 descriptor?? [ 660.753218][ T3683] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 660.859909][T12869] chnl_net:caif_netlink_parms(): no params data found [ 661.580105][T12869] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.611369][T12869] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.667190][T12869] device bridge_slave_0 entered promiscuous mode [ 661.781317][ T4704] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 661.826180][T12896] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2589'. [ 661.852145][T12869] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.868196][T12869] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.913171][T12869] device bridge_slave_1 entered promiscuous mode [ 662.052271][T12869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.084796][T12869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.181321][ T4704] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 662.195049][ T4704] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.212218][T12869] team0: Port device team_slave_0 added [ 662.221682][ T4704] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 662.305203][T12869] team0: Port device team_slave_1 added [ 662.311446][ T3648] Bluetooth: hci1: command tx timeout [ 662.392122][ T4704] usb 4-1: New USB device found, idVendor=04da, idProduct=2372, bcdDevice=33.a1 [ 662.430188][ T4704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.461735][ T4704] usb 4-1: Product: syz [ 662.470665][ T4704] usb 4-1: Manufacturer: syz [ 662.491344][ T4704] usb 4-1: SerialNumber: syz [ 662.513672][ T4704] usb 4-1: config 0 descriptor?? [ 662.545329][T12869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.559400][T12869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.572161][ T4704] usb-storage 4-1:0.0: USB Mass Storage device detected [ 662.602960][T12869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.615234][T12914] netlink: 'syz.2.2596': attribute type 7 has an invalid length. [ 662.624129][T12914] netlink: 'syz.2.2596': attribute type 39 has an invalid length. [ 662.649592][ T4704] usb-storage 4-1:0.0: Quirks match for vid 04da pid 2372: 90 [ 662.657050][T12918] bridge1: port 1(gretap1) entered blocking state [ 662.687069][T12918] bridge1: port 1(gretap1) entered disabled state [ 662.725377][T12918] device gretap1 entered promiscuous mode [ 662.733737][T12869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.740715][T12869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.799740][ T5566] usb 4-1: USB disconnect, device number 31 [ 662.811217][T12869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.773115][ T3683] gspca_sonixj: reg_w1 err -71 [ 663.823266][ T3683] sonixj: probe of 1-1:0.0 failed with error -71 [ 663.840935][ T3683] usb 1-1: USB disconnect, device number 19 [ 664.012750][T12869] device hsr_slave_0 entered promiscuous mode [ 664.037875][T12869] device hsr_slave_1 entered promiscuous mode [ 664.058053][T12869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 664.067051][T12869] Cannot create hsr debugfs directory [ 664.160798][ T4176] device hsr_slave_0 left promiscuous mode [ 664.187134][ T4176] device hsr_slave_1 left promiscuous mode [ 664.225754][ T4176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.251256][ T4176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.289876][ T4176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.299328][ T4176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.337739][ T4176] device bridge_slave_1 left promiscuous mode [ 664.358373][ T4176] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.391497][ T3648] Bluetooth: hci1: command tx timeout [ 664.398479][ T4176] device bridge_slave_0 left promiscuous mode [ 664.447346][ T4176] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.619987][ T4176] device veth1_macvtap left promiscuous mode [ 664.636824][T12947] kvm: vcpu 0: requested 394 ns lapic timer period limited to 200000 ns [ 664.646792][ T4176] device veth0_macvtap left promiscuous mode [ 664.671470][ T4176] device veth1_vlan left promiscuous mode [ 664.677328][ T4176] device veth0_vlan left promiscuous mode [ 664.961333][ T3683] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 665.721759][ T3683] usb 2-1: New USB device found, idVendor=0547, idProduct=2727, bcdDevice=c8.d3 [ 665.730896][ T3683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.769333][ T3683] usb 2-1: Product: syz [ 665.787160][ T3683] usb 2-1: Manufacturer: syz [ 665.797603][ T3683] usb 2-1: SerialNumber: syz [ 665.812261][ T3683] usb 2-1: config 0 descriptor?? [ 666.085484][ T3683] cdc_subset: probe of 2-1:0.0 failed with error -22 [ 666.257226][T12984] loop3: detected capacity change from 0 to 256 [ 666.288417][ T3683] usb 2-1: USB disconnect, device number 32 [ 666.288795][T12984] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 666.365908][T12986] vivid-000: ================= START STATUS ================= [ 666.398510][T12986] vivid-000: Generate PTS: true [ 666.409517][T12986] vivid-000: Generate SCR: true [ 666.437369][T12986] tpg source WxH: 720x576 (HSV) [ 666.450714][T12986] tpg field: 4 [ 666.471996][ T3648] Bluetooth: hci1: command tx timeout [ 666.476758][T12988] loop3: detected capacity change from 0 to 2048 [ 666.485841][T12986] tpg crop: 64x64@0x0 [ 666.503830][T12986] tpg compose: 16x16@0x0 [ 666.528580][T12986] tpg colorspace: 1 [ 666.536107][T12986] tpg transfer function: 0/0 [ 666.549728][T12986] tpg HSV encoding: 0/0 [ 666.555603][T12986] tpg quantization: 0/0 [ 666.559876][T12986] tpg RGB range: 0/2 [ 666.567589][T12988] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 666.602846][T12986] vivid-000: ================== END STATUS ================== [ 666.908747][T12327] EXT4-fs (loop3): unmounting filesystem. [ 667.078960][ T4176] team0 (unregistering): Port device team_slave_1 removed [ 667.202299][ T4176] team0 (unregistering): Port device team_slave_0 removed [ 667.329932][ T4176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.448438][ T4176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.449548][ T4176] bond0 (unregistering): Released all slaves [ 668.561269][ T3648] Bluetooth: hci1: command tx timeout [ 668.633734][T13004] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2629'. [ 668.929348][ C0] eth0: bad gso: type: 1, size: 1408 [ 669.149579][ C0] eth0: bad gso: type: 1, size: 1408 [ 669.671119][T13038] loop3: detected capacity change from 0 to 1024 [ 669.720537][T13038] hfsplus: failed to load catalog file [ 669.736931][T12869] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 669.770605][T12869] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 669.810651][T13038] loop3: detected capacity change from 0 to 256 [ 669.820249][T13038] exfat: Unknown parameter '' [ 669.820579][T12869] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 669.860469][T12869] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 669.871704][ T3683] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 670.023361][T13045] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2647'. [ 670.069906][T12869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.113175][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 670.131965][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 670.143237][T12869] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.199453][ T8535] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 670.202017][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 670.226360][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 670.256538][ T4558] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.263764][ T4558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.271555][ T3683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.302736][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 670.305455][ T3683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.332097][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 670.340564][ T4558] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.347733][ T4558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.355591][ T3683] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 670.381565][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 670.400681][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 670.401878][ T3683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.465354][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 670.473217][ T8535] usb 1-1: Using ep0 maxpacket: 16 [ 670.486431][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 670.603104][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 670.727902][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 670.864818][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 671.045722][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 671.082726][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 671.100646][ T3683] usb 2-1: config 0 descriptor?? [ 671.113556][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 671.155232][T12869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 671.211447][ T8535] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.212857][T12869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 671.239907][ T8535] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.251774][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 671.275195][ T8535] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 671.288805][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 671.321235][ T8535] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 671.330399][ T8535] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.377275][ T8535] usb 1-1: config 0 descriptor?? [ 671.606433][ T3683] logitech-hidpp-device 0003:046D:C086.0017: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.1-1/input0 [ 671.708673][T13061] loop3: detected capacity change from 0 to 8 [ 671.728130][T13061] squashfs: Unknown parameter 'F$d-;YD<3X߮Nq4Sŕs۵ZQPu2%lW\Yf:?x|:BE}Ce2f' [ 671.809677][ T4704] usb 2-1: USB disconnect, device number 33 [ 671.851941][T12869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.881709][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 671.890020][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 671.903160][ T8535] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 671.918693][ T8535] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 671.946383][ T8535] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 671.981233][ T8535] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 672.008886][ T8535] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 672.039286][ T8535] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 672.069625][ T8535] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 672.100386][ T8535] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 672.128643][ T8535] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 672.168726][ T8535] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 672.196884][ T8535] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 672.231031][ T8535] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0018/input/input28 [ 672.287430][ T8535] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 672.299931][T13071] netlink: 'syz.3.2652': attribute type 10 has an invalid length. [ 672.328981][T13071] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 672.371684][T13071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 672.391558][ T3647] Bluetooth: hci3: command 0x0406 tx timeout [ 672.713025][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 672.735311][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 672.737602][T13080] loop3: detected capacity change from 0 to 512 [ 672.809641][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 672.810345][T13080] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 672.827000][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 672.865110][T12869] device veth0_vlan entered promiscuous mode [ 672.893416][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 672.905420][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 672.930739][T12869] device veth1_vlan entered promiscuous mode [ 673.012260][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 673.029085][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 673.060774][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 673.094627][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 673.129490][T12869] device veth0_macvtap entered promiscuous mode [ 673.169573][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 673.184663][T12869] device veth1_macvtap entered promiscuous mode [ 673.257614][T12869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.289650][ T5696] usb 1-1: USB disconnect, device number 20 [ 673.299602][T12869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.331294][T12869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.350111][T12869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.424089][T12869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.465615][T12869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.506317][T12869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.540447][T12869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.581321][T12869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.624197][T12869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.678102][T12869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.711131][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 673.735126][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 673.768449][T12869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.799533][T12869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.830240][T12869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.862676][T12869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.886443][T12869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.917884][T12869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.948476][T12869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.987439][T12869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.027962][T12869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.050364][T12869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.104644][T12869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.137990][T12869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.175353][T12869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.199278][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 674.217445][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 674.242349][T12869] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.261694][T12869] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.302693][T12869] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.332744][T12869] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.365887][T13094] device ipip0 entered promiscuous mode [ 674.556175][ T2531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.581824][ T3859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.590416][ T3859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.616219][ T2531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.647787][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 674.664401][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 678.533789][T13144] TCP: TCP_TX_DELAY enabled [ 679.073181][T13149] loop4: detected capacity change from 0 to 512 [ 679.142942][T13137] loop3: detected capacity change from 0 to 8192 [ 679.254743][T13149] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 679.297543][T13149] ext4 filesystem being mounted at /3/bus supports timestamps until 2038 (0x7fffffff) [ 682.414733][T12869] EXT4-fs (loop4): unmounting filesystem. [ 683.537918][T13194] loop3: detected capacity change from 0 to 4096 [ 683.611095][T13204] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 683.716686][T13206] device syzkaller0 entered promiscuous mode [ 683.770908][ T27] audit: type=1804 audit(1723099851.437:338): pid=13209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2694" name="/newroot/60/file0/file1" dev="loop3" ino=15 res=1 errno=0 [ 684.094229][T13215] loop4: detected capacity change from 0 to 512 [ 684.285226][T13215] EXT4-fs (loop4): unsupported inode size: 264 [ 684.325190][ T3647] Bluetooth: hci3: unexpected event for opcode 0x0c46 [ 684.388166][T13216] netlink: 'syz.0.2699': attribute type 1 has an invalid length. [ 684.425239][T13215] EXT4-fs (loop4): blocksize: 1024 [ 685.177735][T13233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2702'. [ 685.464296][ T27] audit: type=1326 audit(1723099853.137:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13229 comm="syz.2.2706" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb25bb779f9 code=0x0 [ 685.660307][T13240] loop4: detected capacity change from 0 to 4096 [ 685.675305][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.686743][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.708900][T13240] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 685.891112][T13240] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 688.292019][T13260] loop3: detected capacity change from 0 to 40427 [ 688.313956][T13260] F2FS-fs (loop3): invalid crc value [ 688.349193][T13260] F2FS-fs (loop3): Found nat_bits in checkpoint [ 688.391390][ T3647] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 688.400996][ T3647] Bluetooth: hci3: Injecting HCI hardware error event [ 688.414261][ T3648] Bluetooth: hci3: hardware error 0x00 [ 688.511310][T13260] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 688.625936][T12327] syz-executor: attempt to access beyond end of device [ 688.625936][T12327] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 689.014111][T13286] fuse: Bad value for 'fd' [ 689.081605][T13286] device pim6reg1 entered promiscuous mode [ 689.689273][ T27] audit: type=1804 audit(1723099857.357:340): pid=13288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2726" name="/newroot/12/bus/file0" dev="overlay" ino=89 res=1 errno=0 [ 690.091519][T13300] device wlan0 entered promiscuous mode [ 690.173017][T13302] netlink: 4156 bytes leftover after parsing attributes in process `syz.2.2734'. [ 690.287321][ T4705] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 690.480930][ T3648] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 691.296013][ T4705] usb 5-1: Using ep0 maxpacket: 8 [ 691.421466][ T4705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 691.443133][ T4705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 691.498438][ T4705] usb 5-1: New USB device found, idVendor=06f8, idProduct=0003, bcdDevice= e.dd [ 691.520575][ T4705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.553920][ T4705] usb 5-1: config 0 descriptor?? [ 692.928555][ T3648] Bluetooth: hci6: command 0x0406 tx timeout [ 693.188556][ T4705] usb 5-1: USB disconnect, device number 26 [ 693.331435][ T26] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 693.342192][T13342] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2745'. [ 693.369664][T13342] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2745'. [ 694.061522][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 694.471338][ T26] usb 4-1: device descriptor read/all, error -71 [ 695.671304][ T3647] Bluetooth: hci1: command tx timeout [ 695.814946][T13354] loop4: detected capacity change from 0 to 32768 [ 695.866323][T13354] XFS (loop4): Mounting V5 Filesystem [ 695.968913][T13354] XFS (loop4): Ending clean mount [ 696.259059][T12869] XFS (loop4): Unmounting Filesystem [ 696.354912][T13380] netlink: 'syz.3.2755': attribute type 10 has an invalid length. [ 697.730776][T13395] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2760'. [ 698.773754][T13410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2764'. [ 698.860264][ T3647] Bluetooth: hci6: unexpected event 0x31 length: 23 > 6 [ 700.030930][T13405] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 700.070914][T13437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2773'. [ 700.085381][T13405] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 700.401551][ T3647] Bluetooth: hci6: command 0x0406 tx timeout [ 702.200331][T13455] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 702.511474][ T3683] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 702.707702][ T27] audit: type=1800 audit(1723099870.377:341): pid=13480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2792" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 702.728246][ C1] vkms_vblank_simulate: vblank timer overrun [ 702.791731][ T3683] usb 3-1: Using ep0 maxpacket: 16 [ 702.919957][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2794'. [ 702.945262][ T3683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.958348][ T3683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.968936][ T3683] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 702.986024][ T3683] usb 3-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 702.996865][ T3683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.007224][ T3683] usb 3-1: config 0 descriptor?? [ 703.038711][ T6900] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.176287][ T6900] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.193050][ C0] eth0: bad gso: type: 1, size: 1408 [ 703.333697][ T6900] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.498544][ T6900] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.528097][ T3683] hid-multitouch 0003:045E:9994.0019: unknown main item tag 0x2 [ 703.546234][ T3683] hid-multitouch 0003:045E:9994.0019: unknown main item tag 0x0 [ 703.564811][ T3683] hid-multitouch 0003:045E:9994.0019: unknown main item tag 0x0 [ 703.584235][ T3683] hid-multitouch 0003:045E:9994.0019: unknown main item tag 0x0 [ 703.623772][ T3683] hid-multitouch 0003:045E:9994.0019: unknown main item tag 0x0 [ 703.642181][ T3648] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 703.660279][ T3648] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 703.669327][ T3683] hid-multitouch 0003:045E:9994.0019: unknown main item tag 0x0 [ 703.679173][ T3648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 703.686611][ T3683] hid-multitouch 0003:045E:9994.0019: unknown main item tag 0x0 [ 703.694740][ T3683] hid-multitouch 0003:045E:9994.0019: unknown main item tag 0x0 [ 703.703330][ T3648] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 703.710664][ T3683] hid-multitouch 0003:045E:9994.0019: unknown main item tag 0x0 [ 703.718653][ T3683] hid-multitouch 0003:045E:9994.0019: unknown main item tag 0x0 [ 703.726456][ T3648] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 703.734133][ T3683] hid-multitouch 0003:045E:9994.0019: unknown main item tag 0x0 [ 703.741963][ T3648] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 703.776209][ T3683] hid-multitouch 0003:045E:9994.0019: hidraw0: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.2-1/input0 [ 703.790260][ T3683] usb 3-1: USB disconnect, device number 29 [ 705.411680][ T27] audit: type=1326 audit(1723099873.077:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13513 comm="syz.4.2802" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcbdf7779f9 code=0x0 [ 705.833959][ T3648] Bluetooth: hci5: command tx timeout [ 706.274228][T13495] chnl_net:caif_netlink_parms(): no params data found [ 707.131111][ T8535] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 707.324853][T13495] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.342547][T13495] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.371218][ T8535] usb 2-1: Using ep0 maxpacket: 16 [ 707.408045][T13495] device bridge_slave_0 entered promiscuous mode [ 707.484095][T13495] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.492453][T13495] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.510867][T13495] device bridge_slave_1 entered promiscuous mode [ 707.535125][T13538] loop4: detected capacity change from 0 to 256 [ 707.663948][T13495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.681582][ T8535] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 707.705561][ T8535] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.716707][ T8535] usb 2-1: Product: syz [ 707.721042][ T8535] usb 2-1: Manufacturer: syz [ 707.741293][ T8535] usb 2-1: SerialNumber: syz [ 707.760969][ T8535] r8152-cfgselector 2-1: config 0 descriptor?? [ 707.825873][T13495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.911616][ T3648] Bluetooth: hci5: command tx timeout [ 708.015688][T13495] team0: Port device team_slave_0 added [ 708.030457][T13495] team0: Port device team_slave_1 added [ 708.051294][ T8535] r8152-cfgselector 2-1: Unknown version 0x0000 [ 708.071564][ T28] INFO: task syz.2.2085:11449 blocked for more than 143 seconds. [ 708.079356][ T28] Not tainted 6.1.103-syzkaller #0 [ 708.096977][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 708.106748][ T28] task:syz.2.2085 state:D stack:26152 pid:11449 ppid:7877 flags:0x00004004 [ 708.117859][ T28] Call Trace: [ 708.121655][ T28] [ 708.124612][ T28] __schedule+0x143f/0x4570 [ 708.129229][ T28] ? __mutex_lock+0x6b4/0xd80 [ 708.134416][ T28] ? release_firmware_map_entry+0x186/0x186 [ 708.156604][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 708.162684][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 708.172789][ T28] schedule+0xbf/0x180 [ 708.176901][ T28] schedule_preempt_disabled+0xf/0x20 [ 708.185160][ T28] __mutex_lock+0x6b9/0xd80 [ 708.189963][ T28] ? __mutex_lock+0x53c/0xd80 [ 708.195103][ T28] ? exfat_sync_fs+0x67/0x100 [ 708.199809][ T28] ? mutex_lock_nested+0x10/0x10 [ 708.210018][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 708.215816][ T28] exfat_sync_fs+0x67/0x100 [ 708.220459][ T28] iterate_supers+0x127/0x1e0 [ 708.225598][ T28] ? sync_inodes_one_sb+0x60/0x60 [ 708.230747][ T28] ksys_sync+0xd7/0x1c0 [ 708.246326][ T28] ? sync_filesystem+0x220/0x220 [ 708.251613][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 708.257680][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 708.264611][ T28] __do_sys_sync+0xa/0x10 [ 708.269879][ T28] do_syscall_64+0x3b/0xb0 [ 708.275085][ T28] ? clear_bhb_loop+0x45/0xa0 [ 708.279969][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 708.295291][ T28] RIP: 0033:0x7f0a119779f9 [ 708.299797][ T28] RSP: 002b:00007f0a126e8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 708.317878][ T28] RAX: ffffffffffffffda RBX: 00007f0a11b05f80 RCX: 00007f0a119779f9 [ 708.328505][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 708.341291][ T8535] r8152-cfgselector 2-1: Unknown version 0x0000 [ 708.351391][ T28] RBP: 00007f0a119e58ee R08: 0000000000000000 R09: 0000000000000000 [ 708.359384][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 708.377962][ T8535] r8152-cfgselector 2-1: USB disconnect, device number 34 [ 708.389740][ T28] R13: 0000000000000000 R14: 00007f0a11b05f80 R15: 00007fff6b62c2e8 [ 708.406619][ T28] [ 708.409818][ T28] [ 708.409818][ T28] Showing all locks held in the system: [ 708.420408][ T28] 4 locks held by kworker/u4:0/9: [ 708.451502][ T28] #0: ffff888015ef9938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 708.480043][ T28] #1: ffffc900000e7d20 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 708.499679][ T28] #2: ffff8880b9828358 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 708.512630][ T28] #3: ffffffff921cd620 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x68/0x4e0 [ 708.529814][ T28] 1 lock held by rcu_tasks_kthre/12: [ 708.537443][ T28] #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 708.558655][ T28] 1 lock held by rcu_tasks_trace/13: [ 708.564288][ T28] #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 708.576429][ T28] 3 locks held by kworker/1:1/26: [ 708.584874][ T28] #0: ffff888012870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 708.595741][ T28] #1: ffffc90000a1fd20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 708.606724][ T28] #2: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 708.616290][ T28] 1 lock held by khungtaskd/28: [ 708.621585][ T28] #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 708.631931][ T28] 2 locks held by kworker/u4:3/46: [ 708.637128][ T28] #0: ffff8880b983a9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa8/0x140 [ 708.650220][ T28] #1: ffff8880b9927788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x43d/0x770 [ 708.662368][ T28] 3 locks held by kworker/u4:5/2531: [ 708.667730][ T28] #0: ffff88801a2ce138 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 708.688172][ T28] #1: ffffc9000b127d20 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 708.713500][ T28] #2: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_dfs_channels_update_work+0xbb/0x610 [ 708.732357][ T28] 2 locks held by getty/3392: [ 708.739023][ T28] #0: ffff888029b92098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 708.749361][ T28] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 708.759955][ T28] 2 locks held by kworker/u4:12/4176: [ 708.765571][ T28] #0: ffff888012879138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 708.776963][ T28] #1: ffffc9000353fd20 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 708.789033][ T28] 2 locks held by kworker/0:20/5566: [ 708.794935][ T28] #0: ffff888012872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 708.805655][ T28] #1: ffffc9000317fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 708.817413][ T28] 5 locks held by kworker/u4:26/6900: [ 708.825550][ T28] #0: ffff888012a1e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 708.836216][ T28] #1: ffffc90003cdfd20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 708.847596][ T28] #2: ffffffff8e4eb8d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 708.886701][ T28] #3: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x51/0x290 [ 708.915739][ T28] #4: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 708.930064][ T28] 3 locks held by syz-executor/8167: [ 708.946705][ T28] 2 locks held by syz.2.2085/11449: [ 708.954037][ T28] #0: ffff8880622fe0e0 (&type->s_umount_key#51){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 708.970659][ T28] #1: ffff8880622fc0e0 (&sbi->s_lock){+.+.}-{3:3}, at: exfat_sync_fs+0x67/0x100 [ 708.989219][ T28] 1 lock held by syz-executor/13495: [ 708.995670][ T28] #0: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 709.013760][ T28] 1 lock held by syz.2.2826/13554: [ 709.018897][ T28] #0: ffff8880531ce210 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x98/0x230 [ 709.041744][ T28] [ 709.046399][ T28] ============================================= [ 709.046399][ T28] [ 709.076459][ T28] NMI backtrace for cpu 1 [ 709.080828][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.103-syzkaller #0 [ 709.088720][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 709.098758][ T28] Call Trace: [ 709.102021][ T28] [ 709.104931][ T28] dump_stack_lvl+0x1e3/0x2cb [ 709.109593][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 709.115033][ T28] ? panic+0x764/0x764 [ 709.119079][ T28] ? vprintk_emit+0x622/0x740 [ 709.123741][ T28] ? printk_sprint+0x490/0x490 [ 709.128487][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 709.133582][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 709.138503][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 709.144636][ T28] ? _printk+0xd1/0x111 [ 709.148785][ T28] ? panic+0x764/0x764 [ 709.152846][ T28] ? __wake_up_klogd+0xcc/0x100 [ 709.157706][ T28] ? panic+0x764/0x764 [ 709.161774][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 709.167832][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 709.173896][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 709.179876][ T28] watchdog+0xf88/0xfd0 [ 709.184028][ T28] ? watchdog+0x1f8/0xfd0 [ 709.188352][ T28] kthread+0x28d/0x320 [ 709.192407][ T28] ? hungtask_pm_notify+0x50/0x50 [ 709.197416][ T28] ? kthread_blkcg+0xd0/0xd0 [ 709.201985][ T28] ret_from_fork+0x1f/0x30 [ 709.206388][ T28] [ 709.210393][ T28] Sending NMI from CPU 1 to CPUs 0: [ 709.215820][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_idle_do_entry+0x10f/0x340 [ 709.309439][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 709.316333][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.103-syzkaller #0 [ 709.324229][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 709.334278][ T28] Call Trace: [ 709.337560][ T28] [ 709.340487][ T28] dump_stack_lvl+0x1e3/0x2cb [ 709.345173][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 709.350636][ T28] ? panic+0x764/0x764 [ 709.354702][ T28] ? llist_add_batch+0x160/0x1d0 [ 709.359646][ T28] ? vscnprintf+0x59/0x80 [ 709.363987][ T28] panic+0x318/0x764 [ 709.367895][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 709.374057][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 709.379430][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 709.385584][ T28] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 709.391741][ T28] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 709.397907][ T28] watchdog+0xfc7/0xfd0 [ 709.402074][ T28] ? watchdog+0x1f8/0xfd0 [ 709.406412][ T28] kthread+0x28d/0x320 [ 709.410474][ T28] ? hungtask_pm_notify+0x50/0x50 [ 709.415501][ T28] ? kthread_blkcg+0xd0/0xd0 [ 709.420092][ T28] ret_from_fork+0x1f/0x30 [ 709.424527][ T28] [ 709.427768][ T28] Kernel Offset: disabled [ 709.432080][ T28] Rebooting in 86400 seconds..