last executing test programs: 4.341445459s ago: executing program 1 (id=270): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 4.159206076s ago: executing program 1 (id=273): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001e80)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00500000000000001c0012800b0001006d616373656300000c000280050003"], 0x3c}}, 0x0) 3.972403284s ago: executing program 2 (id=276): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000480)="96bc14585c62", 0x6}], 0x2, &(0x7f00000004c0)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18, 0x1000000}, 0x0) 3.758490083s ago: executing program 1 (id=279): r0 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f00000006c0)={0x20, 0x11, 0x1, '3'}, 0x0, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x3}}) 3.737705405s ago: executing program 2 (id=280): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xe, 0x2}, {0x8, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8000040) 3.439304533s ago: executing program 2 (id=284): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 3.135930901s ago: executing program 0 (id=288): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="4dcd", 0x2, 0x0, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) 3.088277175s ago: executing program 2 (id=289): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 2.81926542s ago: executing program 0 (id=291): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_read_part_table(0x609, &(0x7f0000000d40)="$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") r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0xc1100, 0x94cad4902f9a8f2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="00b7745b1b1800f26cf041e452dc00"/24, @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x4000, r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x9, &(0x7f0000000180)=[{0x6, 0x7, 0x81, 0xfffffff8}, {0x1, 0x0, 0x71, 0x1}, {0xe, 0x10, 0xea, 0x5}, {0x4, 0x2, 0x6, 0x27c}, {0xd61c, 0x3, 0xff, 0x10}, {0xff, 0xf8, 0x10, 0x1000}, {0xc, 0x0, 0xc, 0x6}, {0x1, 0x95, 0x94, 0x739}, {0x100, 0x9, 0x5, 0x7}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r8], 0x20}}, 0x0) 2.326388565s ago: executing program 0 (id=295): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x8000040) 2.160726881s ago: executing program 2 (id=297): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) io_setup(0xba, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) flock(r1, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) 2.117821444s ago: executing program 0 (id=298): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="940000001100010026bd7000fcdbdf2500000000", @ANYRES32=r0], 0x94}}, 0x0) 1.906662674s ago: executing program 0 (id=299): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.853939569s ago: executing program 2 (id=301): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x46, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x1, 0x14a042) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.686331764s ago: executing program 0 (id=304): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f00000006c0)={0x20, 0x11}, 0x0, 0x0}) 1.060652012s ago: executing program 3 (id=310): sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r1, &(0x7f00000003c0)='./file0\x00') readlinkat(r1, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) 1.004221427s ago: executing program 3 (id=311): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="f53d9b43fcfa6ca290a353d9184958c2c78fb91e", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x10, 0x0, 0x7, 0x0, 0x0}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000002300)=[{0x0, 0x1, 0x0, 0x0, &(0x7f0000000ac0)}, {0x0, 0x0, 0x0, 0x0, 0x0}], 0x2) r3 = socket$rds(0x15, 0x5, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000001080)=""/148, 0x94}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = openat$tun(0xffffff9c, &(0x7f0000000500), 0x88000, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) r8 = syz_clone(0x8014a000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000280)={[{@quota}, {@resuid={'resuid', 0x3d, 0xee01}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") creat(&(0x7f00000001c0)='./bus\x00', 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000180)='./file1\x00') open(&(0x7f0000001780)='./bus\x00', 0x64842, 0x0) ptrace(0x4206, r8) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) socket$key(0xf, 0x3, 0x2) 772.422869ms ago: executing program 4 (id=313): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r0}, 0x10) lstat(0x0, 0x0) 705.202005ms ago: executing program 4 (id=314): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 596.929125ms ago: executing program 4 (id=315): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 532.623601ms ago: executing program 1 (id=316): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x400000000}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="10060800", 0x4, 0x400c800, &(0x7f0000000040)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @local}, 0x14) 531.752221ms ago: executing program 4 (id=317): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), 0x0}, 0x20) 468.584577ms ago: executing program 3 (id=318): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000280)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0x40086610, 0x0) 343.400208ms ago: executing program 4 (id=319): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000840)='z', 0x1, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000280)="aa", 0x1, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) socket(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) socket(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000040)="93", 0x34000, 0x0, 0x0, 0x44) 270.471335ms ago: executing program 3 (id=320): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x8000040) 156.344416ms ago: executing program 1 (id=321): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000180000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 147.240896ms ago: executing program 3 (id=322): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) 77.510213ms ago: executing program 3 (id=323): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x1b) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) unshare(0x46060480) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) acct(0x0) unshare(0x2c060000) 462.56µs ago: executing program 1 (id=324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x14, r2, 0xc4fc9e906872378b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 0s ago: executing program 4 (id=325): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f00000000c0), 0x20000000}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.170' (ED25519) to the list of known hosts. [ 59.845803][ T3626] cgroup: Unknown subsys name 'net' [ 59.977445][ T3626] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.483465][ T3626] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.784563][ T3639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.793261][ T3639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.801308][ T3639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.809553][ T3639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.817537][ T3641] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.825449][ T3641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.846473][ T3645] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.861205][ T3645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.868906][ T3645] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.877342][ T3645] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.885192][ T3645] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.892909][ T3645] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.902428][ T3648] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.914043][ T3648] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.922063][ T3648] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.930024][ T3641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.938231][ T3641] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.945872][ T3641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.969820][ T3641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.981061][ T3641] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.986567][ T3652] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.997549][ T3641] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.005497][ T3652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.014239][ T3652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.021961][ T3652] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 63.029375][ T3652] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.052001][ T3652] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.060078][ T3652] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.067915][ T3652] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 63.075742][ T3652] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.282066][ T3638] chnl_net:caif_netlink_parms(): no params data found [ 63.423213][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.432190][ T3638] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.442337][ T3638] device bridge_slave_0 entered promiscuous mode [ 63.497166][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.504397][ T3638] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.512821][ T3638] device bridge_slave_1 entered promiscuous mode [ 63.536633][ T3644] chnl_net:caif_netlink_parms(): no params data found [ 63.554667][ T3638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.566302][ T3638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.576987][ T3642] chnl_net:caif_netlink_parms(): no params data found [ 63.614899][ T3647] chnl_net:caif_netlink_parms(): no params data found [ 63.661218][ T3638] team0: Port device team_slave_0 added [ 63.702912][ T3638] team0: Port device team_slave_1 added [ 63.787670][ T3647] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.795175][ T3647] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.804049][ T3647] device bridge_slave_0 entered promiscuous mode [ 63.824897][ T3638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.832292][ T3638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.858509][ T3638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.879399][ T3647] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.886785][ T3647] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.895920][ T3647] device bridge_slave_1 entered promiscuous mode [ 63.913303][ T3638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.920303][ T3638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.955804][ T3638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.983816][ T3642] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.991326][ T3642] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.999225][ T3642] device bridge_slave_0 entered promiscuous mode [ 64.021775][ T3644] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.028897][ T3644] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.037021][ T3644] device bridge_slave_0 entered promiscuous mode [ 64.056666][ T3647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.071648][ T3647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.080973][ T3642] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.088178][ T3642] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.096451][ T3642] device bridge_slave_1 entered promiscuous mode [ 64.112177][ T3644] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.119396][ T3644] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.127998][ T3644] device bridge_slave_1 entered promiscuous mode [ 64.135195][ T3643] chnl_net:caif_netlink_parms(): no params data found [ 64.173270][ T3638] device hsr_slave_0 entered promiscuous mode [ 64.180145][ T3638] device hsr_slave_1 entered promiscuous mode [ 64.209645][ T3647] team0: Port device team_slave_0 added [ 64.233520][ T3644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.244508][ T3647] team0: Port device team_slave_1 added [ 64.252565][ T3642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.281413][ T3644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.318266][ T3642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.376688][ T3644] team0: Port device team_slave_0 added [ 64.383344][ T3647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.390314][ T3647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.416488][ T3647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.449527][ T3642] team0: Port device team_slave_0 added [ 64.466600][ T3644] team0: Port device team_slave_1 added [ 64.473229][ T3647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.480190][ T3647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.507631][ T3647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.523966][ T3642] team0: Port device team_slave_1 added [ 64.575171][ T3643] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.582756][ T3643] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.590935][ T3643] device bridge_slave_0 entered promiscuous mode [ 64.632717][ T3643] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.639854][ T3643] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.649374][ T3643] device bridge_slave_1 entered promiscuous mode [ 64.656995][ T3644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.664645][ T3644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.691474][ T3644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.708756][ T3642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.716096][ T3642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.743396][ T3642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.756214][ T3642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.763382][ T3642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.789552][ T3642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.817989][ T3644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.825068][ T3644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.851413][ T3644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.878828][ T3647] device hsr_slave_0 entered promiscuous mode [ 64.885897][ T3647] device hsr_slave_1 entered promiscuous mode [ 64.893028][ T3647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.902027][ T3652] Bluetooth: hci0: command tx timeout [ 64.902147][ T3647] Cannot create hsr debugfs directory [ 64.957488][ T3643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.969489][ T3643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.980678][ T3645] Bluetooth: hci2: command tx timeout [ 64.986338][ T3645] Bluetooth: hci1: command tx timeout [ 64.997640][ T3642] device hsr_slave_0 entered promiscuous mode [ 65.004606][ T3642] device hsr_slave_1 entered promiscuous mode [ 65.012028][ T3642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.019627][ T3642] Cannot create hsr debugfs directory [ 65.061346][ T3645] Bluetooth: hci4: command tx timeout [ 65.089600][ T3644] device hsr_slave_0 entered promiscuous mode [ 65.096442][ T3644] device hsr_slave_1 entered promiscuous mode [ 65.103443][ T3644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.111456][ T3644] Cannot create hsr debugfs directory [ 65.128952][ T3643] team0: Port device team_slave_0 added [ 65.140869][ T3645] Bluetooth: hci3: command tx timeout [ 65.168885][ T3643] team0: Port device team_slave_1 added [ 65.235129][ T3643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.242375][ T3643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.268495][ T3643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.289503][ T3643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.296827][ T3643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.323196][ T3643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.416261][ T3638] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.454748][ T3638] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.476240][ T3638] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.490370][ T3638] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.510941][ T3643] device hsr_slave_0 entered promiscuous mode [ 65.518355][ T3643] device hsr_slave_1 entered promiscuous mode [ 65.525517][ T3643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.533319][ T3643] Cannot create hsr debugfs directory [ 65.682616][ T3642] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.696140][ T3642] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.733198][ T3642] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.749309][ T3642] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.788525][ T3647] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.808103][ T3647] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.837477][ T3647] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.869392][ T3647] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.905565][ T3638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.929124][ T3644] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.964206][ T3644] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.003996][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.016945][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.026153][ T3644] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.039006][ T3644] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.064644][ T3638] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.078329][ T3643] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.101743][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.113270][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.122450][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.129675][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.139152][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.153832][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.163913][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.173515][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.180699][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.188643][ T3643] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.202942][ T3643] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.216177][ T3642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.250270][ T3643] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.262845][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.272619][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.282706][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.293374][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.303491][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.326817][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.337579][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.347070][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.358448][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.369488][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.378362][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.407684][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.416682][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.430943][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.447538][ T3642] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.487675][ T3647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.550766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.560067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.569812][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.576993][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.585746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.596016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.604930][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.612099][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.619919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.628861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.637948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.662772][ T3647] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.671741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.706868][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.742808][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.757612][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.768668][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.776572][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.791428][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.801178][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.809794][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.816998][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.825492][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.836157][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.875909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.885490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.895517][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.907173][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.916502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.925643][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.936566][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.946670][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.955624][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.964737][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.973854][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.982559][ T3645] Bluetooth: hci0: command tx timeout [ 66.989107][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.997490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.018581][ T3642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.033517][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.061043][ T3645] Bluetooth: hci1: command tx timeout [ 67.066515][ T3645] Bluetooth: hci2: command tx timeout [ 67.082811][ T3644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.089913][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.107451][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.118048][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.129926][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.139453][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.147341][ T3645] Bluetooth: hci4: command tx timeout [ 67.154369][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.165794][ T3647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.178273][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.202454][ T3643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.221409][ T3645] Bluetooth: hci3: command tx timeout [ 67.234223][ T3644] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.244641][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.257983][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.274426][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.287376][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.303982][ T3638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.320341][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.329629][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.346883][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.358450][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.373801][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.381072][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.395529][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.416783][ T3643] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.438659][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.449467][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.467098][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.474664][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.490334][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.499796][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.538025][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.564712][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.577609][ T3693] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.584791][ T3693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.593506][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.601204][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.624237][ T3642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.651013][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.659161][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.669186][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.679625][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.689485][ T3693] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.696774][ T3693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.705550][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.714663][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.723128][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.732184][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.741465][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.751220][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.759416][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.770326][ T3638] device veth0_vlan entered promiscuous mode [ 67.815339][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.825064][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.835073][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.845103][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.854565][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.864958][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.873894][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.882658][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.892096][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.900051][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.907898][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.916641][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.938040][ T3638] device veth1_vlan entered promiscuous mode [ 67.950287][ T3647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.972143][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.981866][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.990267][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.999630][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.010122][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.019298][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.028706][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.047512][ T3643] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.058391][ T3643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.083519][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.093010][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.103073][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.112663][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.121805][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.130654][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.154396][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.164259][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.173350][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.208930][ T3638] device veth0_macvtap entered promiscuous mode [ 68.228284][ T3642] device veth0_vlan entered promiscuous mode [ 68.244557][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.255972][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.268837][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.284929][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.297397][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.307178][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.333700][ T3638] device veth1_macvtap entered promiscuous mode [ 68.356214][ T3642] device veth1_vlan entered promiscuous mode [ 68.391608][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.399952][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.418538][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.429542][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.440151][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.451780][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.459842][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.509262][ T3647] device veth0_vlan entered promiscuous mode [ 68.531023][ T3638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.558742][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.575566][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.598065][ T3647] device veth1_vlan entered promiscuous mode [ 68.617912][ T3638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.631990][ T3638] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.641366][ T3638] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.650106][ T3638] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.660168][ T3638] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.680761][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.688420][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.699280][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.708938][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.717965][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.727092][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.745773][ T3643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.778509][ T3642] device veth0_macvtap entered promiscuous mode [ 68.805653][ T3644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.813530][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.829835][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.838060][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.868670][ T3642] device veth1_macvtap entered promiscuous mode [ 68.932543][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.948812][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.958478][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.975087][ T3647] device veth0_macvtap entered promiscuous mode [ 69.004608][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.022979][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.032868][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.044987][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.056408][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.069814][ T3642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.071247][ T3645] Bluetooth: hci0: command tx timeout [ 69.087992][ T3647] device veth1_macvtap entered promiscuous mode [ 69.121264][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.130262][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.139825][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.148106][ T3645] Bluetooth: hci1: command tx timeout [ 69.152007][ T3652] Bluetooth: hci2: command tx timeout [ 69.158383][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.170744][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.182405][ T3642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.209499][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.217842][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.226653][ T3652] Bluetooth: hci4: command tx timeout [ 69.238583][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.255084][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.267139][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.277757][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.286546][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.296663][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.305622][ T3652] Bluetooth: hci3: command tx timeout [ 69.312877][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.328247][ T3642] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.344549][ T3642] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.354863][ T3642] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.365502][ T3642] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.387910][ T3644] device veth0_vlan entered promiscuous mode [ 69.394451][ T3693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.417931][ T3693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.437555][ T3644] device veth1_vlan entered promiscuous mode [ 69.459577][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.470238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.478798][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.490123][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.503197][ T3647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.514211][ T3647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.524257][ T3647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.535266][ T3647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.549762][ T3647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.588318][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.605979][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.615712][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.638857][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.647889][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.656710][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.669900][ T3647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.681092][ T3647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.691182][ T3647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.702351][ T3647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.714600][ T3647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.728755][ T3643] device veth0_vlan entered promiscuous mode [ 69.753637][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.764913][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.777773][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.789453][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.802227][ T3647] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.814872][ T3647] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.825421][ T3647] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.840024][ T3647] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.860037][ T3643] device veth1_vlan entered promiscuous mode [ 69.889028][ T3644] device veth0_macvtap entered promiscuous mode [ 69.930077][ T3644] device veth1_macvtap entered promiscuous mode [ 70.011562][ T3643] device veth0_macvtap entered promiscuous mode [ 70.025937][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.042932][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.050813][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.062759][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.072194][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.081873][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.090156][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.102771][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.112066][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.120357][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.208078][ T3643] device veth1_macvtap entered promiscuous mode [ 70.229273][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.248029][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.259929][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.281576][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.291586][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.302407][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.315248][ T3644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.326485][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.337717][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.346835][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.360113][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.370698][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.383466][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.402521][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.421431][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.433910][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.445524][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.456155][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.467350][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.485942][ T3644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.524348][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.544658][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.577226][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.588858][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.598859][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.609680][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.619538][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.630116][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.644532][ T3643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.653086][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.674206][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.687761][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.700597][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.712565][ T3644] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.725204][ T3644] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.737463][ T3644] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.748016][ T3644] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.787859][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.812702][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.870785][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.895679][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.911847][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.927191][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.938307][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.949775][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.972782][ T3643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.116275][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.127741][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.140746][ T3652] Bluetooth: hci0: command tx timeout [ 71.163317][ T3643] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.176852][ T3643] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.187382][ T3643] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.216085][ T3643] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.233193][ T3652] Bluetooth: hci2: command tx timeout [ 71.238756][ T3652] Bluetooth: hci1: command tx timeout [ 71.247683][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.266894][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.298419][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.316062][ T3652] Bluetooth: hci4: command tx timeout [ 71.320775][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.373149][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.376322][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.385319][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.392568][ T3645] Bluetooth: hci3: command tx timeout [ 71.398817][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.435181][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.448088][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.463491][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.507387][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.579592][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.604495][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.661094][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.669409][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.679503][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.690918][ T22] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.694438][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.721696][ T22] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 71.742729][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.771295][ T22] usb 1-1: config 0 descriptor?? [ 71.820002][ T22] pwc: Askey VC010 type 2 USB webcam detected. [ 71.893525][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.920238][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.972114][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.029504][ T3734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.088855][ T3749] device pim6reg1 entered promiscuous mode [ 72.119157][ T3734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.372095][ T22] pwc: recv_control_msg error -32 req 02 val 2b00 [ 72.416619][ T22] pwc: recv_control_msg error -32 req 02 val 2700 [ 72.470633][ T22] pwc: recv_control_msg error -32 req 02 val 2c00 [ 72.530943][ T22] pwc: recv_control_msg error -32 req 04 val 1000 [ 72.568207][ T3745] loop3: detected capacity change from 0 to 32768 [ 72.575645][ T22] pwc: recv_control_msg error -32 req 04 val 1300 [ 72.630611][ T22] pwc: recv_control_msg error -32 req 04 val 1400 [ 72.687217][ T3745] XFS (loop3): Mounting V5 Filesystem [ 72.867645][ T3745] XFS (loop3): Ending clean mount [ 72.894049][ T22] pwc: recv_control_msg error -71 req 02 val 2100 [ 72.907033][ T3745] XFS (loop3): Quotacheck needed: Please wait. [ 72.930702][ T22] pwc: recv_control_msg error -71 req 04 val 1500 [ 72.965019][ T22] pwc: recv_control_msg error -71 req 02 val 2500 [ 73.010684][ T22] pwc: recv_control_msg error -71 req 02 val 2400 [ 73.017551][ T3745] XFS (loop3): Quotacheck: Done. [ 73.040690][ T22] pwc: recv_control_msg error -71 req 02 val 2600 [ 73.065641][ T22] pwc: recv_control_msg error -71 req 02 val 2900 [ 73.090937][ T22] pwc: recv_control_msg error -71 req 02 val 2800 [ 73.126974][ T22] pwc: recv_control_msg error -71 req 04 val 1100 [ 73.158578][ T3745] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 73.160944][ T22] pwc: recv_control_msg error -71 req 04 val 1200 [ 73.188494][ T3745] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 73.228905][ T22] pwc: Registered as video71. [ 73.261020][ T22] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 73.359634][ T22] usb 1-1: USB disconnect, device number 2 [ 73.423375][ T3647] XFS (loop3): Unmounting Filesystem [ 73.762501][ T3784] device syzkaller0 entered promiscuous mode [ 73.960500][ T3679] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.016408][ T3773] loop1: detected capacity change from 0 to 40427 [ 74.079280][ T3773] F2FS-fs (loop1): invalid crc value [ 74.145460][ T3773] F2FS-fs (loop1): Found nat_bits in checkpoint [ 74.224561][ T3679] usb 5-1: Using ep0 maxpacket: 8 [ 74.263799][ T3773] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 74.351011][ T3679] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 74.360305][ T3679] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 74.369417][ T26] audit: type=1800 audit(1727413603.922:2): pid=3773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.22" name=C1FEDC30 dev="loop1" ino=14 res=0 errno=0 [ 74.396631][ T3679] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 74.405854][ T3679] usb 5-1: config 250 has no interface number 0 [ 74.418120][ T3679] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 74.431439][ T3679] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 74.442026][ T3679] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 74.452618][ T3679] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 74.453223][ T3644] syz-executor: attempt to access beyond end of device [ 74.453223][ T3644] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 74.469617][ T3679] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 74.504482][ T3679] usb 5-1: config 250 interface 228 has no altsetting 0 [ 74.640852][ T3679] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 74.650507][ T3679] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 74.658920][ T3679] usb 5-1: Product: syz [ 74.664260][ T3679] usb 5-1: SerialNumber: syz [ 74.726434][ T3679] hub 5-1:250.228: bad descriptor, ignoring hub [ 74.744717][ T3679] hub: probe of 5-1:250.228 failed with error -5 [ 74.936279][ T3789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.953617][ T3789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.959085][ T3679] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 75.102968][ T26] audit: type=1326 audit(1727413604.662:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3799 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c1f7df39 code=0x7ffc0000 [ 75.167045][ T26] audit: type=1326 audit(1727413604.672:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3799 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2c1f7df39 code=0x7ffc0000 [ 75.192902][ T3681] usb 5-1: USB disconnect, device number 2 [ 75.215830][ T26] audit: type=1326 audit(1727413604.672:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3799 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c1f7df39 code=0x7ffc0000 [ 75.239702][ T3681] usblp0: removed [ 75.262673][ T26] audit: type=1326 audit(1727413604.672:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3799 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2c1f7df39 code=0x7ffc0000 [ 75.293245][ T26] audit: type=1326 audit(1727413604.702:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3799 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c1f7df39 code=0x7ffc0000 [ 75.324009][ T26] audit: type=1326 audit(1727413604.702:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3799 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fe2c1f7df39 code=0x7ffc0000 [ 75.377977][ T26] audit: type=1326 audit(1727413604.702:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3799 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c1f7df39 code=0x7ffc0000 [ 75.418047][ T26] audit: type=1326 audit(1727413604.702:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3799 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2c1f7df39 code=0x7ffc0000 [ 75.437240][ T3804] usb usb8: usbfs: process 3804 (syz.1.34) did not claim interface 0 before use [ 75.440742][ T26] audit: type=1326 audit(1727413604.702:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3799 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c1f7df39 code=0x7ffc0000 [ 75.819992][ T3812] loop4: detected capacity change from 0 to 1024 [ 75.913598][ T3812] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 75.925796][ T3817] loop1: detected capacity change from 0 to 128 [ 75.933573][ T3817] ======================================================= [ 75.933573][ T3817] WARNING: The mand mount option has been deprecated and [ 75.933573][ T3817] and is ignored by this kernel. Remove the mand [ 75.933573][ T3817] option from the mount to silence this warning. [ 75.933573][ T3817] ======================================================= [ 75.985281][ T3817] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 75.994972][ T3817] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff) [ 76.048752][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 76.161346][ T3643] EXT4-fs (loop4): unmounting filesystem. [ 76.366427][ T3824] loop1: detected capacity change from 0 to 512 [ 76.389992][ T3822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.38'. [ 76.402522][ T3824] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 76.405754][ T3822] netlink: 20 bytes leftover after parsing attributes in process `syz.4.38'. [ 76.424443][ T3822] netlink: 20 bytes leftover after parsing attributes in process `syz.4.38'. [ 76.498393][ T3824] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 76.509115][ T3824] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 76.963249][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 77.124945][ T3822] bridge0: port 3(vlan2) entered blocking state [ 77.170708][ T3822] bridge0: port 3(vlan2) entered disabled state [ 77.530732][ T3680] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.865708][ T3857] random: crng reseeded on system resumption [ 77.900795][ T3680] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.921794][ T3680] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 77.956977][ T3680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.011589][ T3680] usb 4-1: config 0 descriptor?? [ 78.075126][ T3680] pwc: Askey VC010 type 2 USB webcam detected. [ 78.290674][ T3680] pwc: send_video_command error -71 [ 78.296031][ T3680] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 78.350602][ T3680] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 78.361205][ T3680] usb 4-1: USB disconnect, device number 2 [ 78.476036][ T3872] loop4: detected capacity change from 0 to 2048 [ 78.505689][ T3872] ext4: Unknown parameter 'mask' [ 78.571537][ T3785] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 78.894510][ T3876] netlink: 256 bytes leftover after parsing attributes in process `syz.1.58'. [ 78.913627][ T3876] unsupported nlmsg_type 40 [ 78.990614][ T3679] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 79.364019][ T3679] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.387447][ T3679] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 79.415997][ T3679] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.435055][ T3679] usb 4-1: config 0 descriptor?? [ 79.478122][ T3679] pwc: Askey VC010 type 2 USB webcam detected. [ 79.653411][ T3892] Zero length message leads to an empty skb [ 79.844186][ T26] kauditd_printk_skb: 140 callbacks suppressed [ 79.844203][ T26] audit: type=1326 audit(1727413609.412:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3891 comm="syz.4.64" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f069db7df39 code=0x0 [ 79.924260][ T26] audit: type=1326 audit(1727413609.492:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3895 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c1f7df39 code=0x7ffc0000 [ 79.970301][ T26] audit: type=1326 audit(1727413609.492:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3895 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c1f7df39 code=0x7ffc0000 [ 79.984903][ T3896] loop1: detected capacity change from 0 to 512 [ 80.013882][ T3679] pwc: recv_control_msg error -32 req 02 val 2b00 [ 80.037522][ T26] audit: type=1326 audit(1727413609.532:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3895 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe2c1f7df39 code=0x7ffc0000 [ 80.068735][ T3896] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 80.070658][ T3679] pwc: recv_control_msg error -32 req 02 val 2700 [ 80.094469][ T3896] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 80.094837][ T26] audit: type=1326 audit(1727413609.532:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3895 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c1f7df39 code=0x7ffc0000 [ 80.122273][ T26] audit: type=1326 audit(1727413609.532:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3895 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c1f7df39 code=0x7ffc0000 [ 80.150736][ T3679] pwc: recv_control_msg error -32 req 02 val 2c00 [ 80.165077][ T26] audit: type=1326 audit(1727413609.532:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3895 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe2c1f7df39 code=0x7ffc0000 [ 80.194513][ T26] audit: type=1326 audit(1727413609.532:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3895 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c1f7df39 code=0x7ffc0000 [ 80.217683][ T3679] pwc: recv_control_msg error -32 req 04 val 1000 [ 80.225929][ T26] audit: type=1326 audit(1727413609.532:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3895 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c1f7df39 code=0x7ffc0000 [ 80.249199][ T26] audit: type=1326 audit(1727413609.532:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3895 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fe2c1f7df39 code=0x7ffc0000 [ 80.272071][ T3679] pwc: recv_control_msg error -32 req 04 val 1300 [ 80.281372][ T3896] EXT4-fs (loop1): 1 truncate cleaned up [ 80.309191][ T3896] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 80.310685][ T3679] pwc: recv_control_msg error -32 req 04 val 1400 [ 80.362900][ T3679] pwc: recv_control_msg error -32 req 02 val 2000 [ 80.410633][ T3679] pwc: recv_control_msg error -32 req 02 val 2100 [ 80.450563][ T3679] pwc: recv_control_msg error -32 req 04 val 1500 [ 80.495211][ T3679] pwc: recv_control_msg error -32 req 02 val 2500 [ 80.502536][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 80.540595][ T3679] pwc: recv_control_msg error -32 req 02 val 2400 [ 80.580994][ T3679] pwc: recv_control_msg error -32 req 02 val 2600 [ 80.620558][ T3679] pwc: recv_control_msg error -32 req 02 val 2900 [ 80.661557][ T3679] pwc: recv_control_msg error -32 req 02 val 2800 [ 80.671754][ T3903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.66'. [ 80.811236][ T3906] syz.4.68 uses obsolete (PF_INET,SOCK_PACKET) [ 80.920586][ T3679] pwc: recv_control_msg error -71 req 04 val 1200 [ 80.931114][ T3679] pwc: Registered as video71. [ 80.950364][ T3679] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 81.005335][ T3679] usb 4-1: USB disconnect, device number 3 [ 81.593044][ T3914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.70'. [ 81.602080][ T3914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.609707][ T3914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.635301][ T14] cfg80211: failed to load regulatory.db [ 81.698784][ T3914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.776138][ T3914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.895899][ T3919] loop3: detected capacity change from 0 to 512 [ 81.936910][ T3919] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.994914][ T3919] EXT4-fs (loop3): 1 truncate cleaned up [ 82.060514][ T3919] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 82.482982][ T3647] EXT4-fs (loop3): unmounting filesystem. [ 84.274664][ T3956] netlink: 268 bytes leftover after parsing attributes in process `syz.0.85'. [ 86.398969][ T3944] batman_adv: batadv0: Adding interface: dummy0 [ 86.408545][ T3944] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.446566][ T3944] batman_adv: batadv0: Interface activated: dummy0 [ 86.479096][ T3947] batadv0: mtu less than device minimum [ 86.499815][ T3947] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.512638][ T3947] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.525113][ T3947] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.537834][ T3947] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.550453][ T3947] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.562915][ T3947] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.575434][ T3947] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.588210][ T3947] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.600852][ T3947] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.856466][ T3966] loop1: detected capacity change from 0 to 1024 [ 86.876791][ T3966] EXT4-fs: Ignoring removed bh option [ 86.885237][ T3966] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 86.944557][ T3966] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 87.060607][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.077975][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 87.150519][ T153] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 87.173520][ T3973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.92'. [ 87.185570][ T3975] loop1: detected capacity change from 0 to 256 [ 87.310611][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 87.406690][ T3973] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 87.466710][ T7] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 87.500579][ T7] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 87.509095][ T7] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 87.510940][ T153] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.538964][ T7] usb 1-1: config 250 has no interface number 0 [ 87.546041][ T7] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 87.555404][ T153] usb 4-1: config 0 has no interfaces? [ 87.570638][ T7] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 87.600847][ T7] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 87.630464][ T7] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 87.650468][ T7] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 87.678156][ T7] usb 1-1: config 250 interface 228 has no altsetting 0 [ 87.740695][ T153] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.760236][ T153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.795285][ T153] usb 4-1: Product: syz [ 87.799507][ T153] usb 4-1: Manufacturer: syz [ 87.810967][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 87.820730][ T153] usb 4-1: SerialNumber: syz [ 87.837777][ T7] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 87.838589][ T153] usb 4-1: config 0 descriptor?? [ 87.847012][ T7] usb 1-1: Product: syz [ 87.847035][ T7] usb 1-1: SerialNumber: syz [ 87.902039][ T7] hub 1-1:250.228: bad descriptor, ignoring hub [ 87.908386][ T7] hub: probe of 1-1:250.228 failed with error -5 [ 88.123924][ T7] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 88.181344][ T7] usb 1-1: USB disconnect, device number 3 [ 88.202124][ T7] usblp0: removed [ 88.217175][ T3984] loop2: detected capacity change from 0 to 32768 [ 88.280696][ T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.314781][ T3984] XFS (loop2): Mounting V5 Filesystem [ 88.397949][ T3984] XFS (loop2): Ending clean mount [ 88.408598][ T3984] XFS (loop2): Quotacheck needed: Please wait. [ 88.442689][ T3984] XFS (loop2): Quotacheck: Done. [ 88.486044][ T3984] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 88.496178][ T3984] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 88.520519][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 88.542348][ T3642] XFS (loop2): Unmounting Filesystem [ 88.663451][ T14] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 88.693162][ T14] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 88.743791][ T14] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 88.780542][ T14] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 88.789644][ T14] usb 2-1: config 250 has no interface number 0 [ 88.828976][ T14] usb 2-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 88.860536][ T14] usb 2-1: config 250 interface 228 has no altsetting 0 [ 88.975576][ T4003] loop0: detected capacity change from 0 to 164 [ 88.996350][ T14] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 89.012742][ T14] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 89.053733][ T14] usb 2-1: Product: syz [ 89.068261][ T14] usb 2-1: SerialNumber: syz [ 89.135232][ T14] hub 2-1:250.228: bad descriptor, ignoring hub [ 89.154570][ T14] hub: probe of 2-1:250.228 failed with error -5 [ 89.417466][ T4011] device wg1 entered promiscuous mode [ 89.695814][ T4016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.710758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.729090][ T4016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.828009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 90.122141][ T4009] loop2: detected capacity change from 0 to 32768 [ 90.197121][ T4009] XFS (loop2): Mounting V5 Filesystem [ 90.277938][ T4009] XFS (loop2): Ending clean mount [ 90.302571][ T4009] XFS (loop2): Quotacheck needed: Please wait. [ 90.356844][ T4009] XFS (loop2): Quotacheck: Done. [ 90.447063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 90.570175][ T153] usb 4-1: USB disconnect, device number 4 [ 90.608703][ T3642] XFS (loop2): Unmounting Filesystem [ 90.832120][ T4030] loop4: detected capacity change from 0 to 512 [ 90.870572][ T4030] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.901907][ T4030] EXT4-fs (loop4): 1 truncate cleaned up [ 90.907615][ T4030] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 90.990619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.998937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.007260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 91.069769][ T4034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.107'. [ 91.079602][ T4034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.088549][ T4034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.097290][ T4034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.119734][ T4034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.158850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 91.186761][ T4036] loop3: detected capacity change from 0 to 1024 [ 91.358200][ T4036] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 91.413125][ T3679] usb 2-1: USB disconnect, device number 2 [ 91.567573][ T4043] mmap: syz.2.111 (4043) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 91.634367][ T3647] EXT4-fs (loop3): unmounting filesystem. [ 91.769533][ T4043] loop2: detected capacity change from 0 to 128 [ 91.793798][ T3679] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.821357][ T4043] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 91.856792][ T4043] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 91.885790][ T4043] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 91.969174][ T4050] netlink: 16 bytes leftover after parsing attributes in process `syz.3.113'. [ 91.990134][ T4050] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 92.040463][ T3679] usb 2-1: Using ep0 maxpacket: 8 [ 92.058998][ T4052] loop0: detected capacity change from 0 to 256 [ 92.131594][ T3642] EXT4-fs (loop2): unmounting filesystem. [ 92.160871][ T3679] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 92.202048][ T3679] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 92.240519][ T3679] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 92.249807][ T3679] usb 2-1: config 250 has no interface number 0 [ 92.270524][ T3679] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 92.290475][ T3679] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 92.302146][ T3679] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 92.314155][ T3679] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 92.324945][ T3679] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 92.354748][ T3679] usb 2-1: config 250 interface 228 has no altsetting 0 [ 92.481511][ T3679] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 92.507771][ T3679] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 92.533494][ T3679] usb 2-1: Product: syz [ 92.543011][ T3679] usb 2-1: SerialNumber: syz [ 92.601831][ T3679] hub 2-1:250.228: bad descriptor, ignoring hub [ 92.617638][ T3679] hub: probe of 2-1:250.228 failed with error -5 [ 92.823444][ T3679] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 92.882545][ T3679] usb 2-1: USB disconnect, device number 3 [ 92.898047][ T3679] usblp0: removed [ 93.006642][ T4062] loop3: detected capacity change from 0 to 32768 [ 93.056001][ T4062] XFS (loop3): Mounting V5 Filesystem [ 93.143152][ T3643] EXT4-fs (loop4): unmounting filesystem. [ 93.178121][ T4074] loop2: detected capacity change from 0 to 512 [ 93.198289][ T4074] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 93.201157][ T4062] XFS (loop3): Ending clean mount [ 93.219145][ T4062] XFS (loop3): Quotacheck needed: Please wait. [ 93.241972][ T4064] loop0: detected capacity change from 0 to 32768 [ 93.256913][ T4064] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.119 (4064) [ 93.277518][ T4074] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2808: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 93.314768][ T4062] XFS (loop3): Quotacheck: Done. [ 93.317265][ T4064] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.352625][ T4064] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 93.386492][ T4062] overlayfs: missing 'lowerdir' [ 93.387000][ T4074] EXT4-fs (loop2): 1 truncate cleaned up [ 93.395419][ T4064] BTRFS info (device loop0): using free space tree [ 93.398449][ T4074] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 93.486354][ T3647] XFS (loop3): Unmounting Filesystem [ 93.610503][ T3679] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.706104][ T3642] EXT4-fs (loop2): unmounting filesystem. [ 93.787348][ T4064] BTRFS info (device loop0): enabling ssd optimizations [ 93.841334][ T4101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.125'. [ 93.853978][ T4101] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 93.860219][ T3679] usb 5-1: Using ep0 maxpacket: 8 [ 93.980840][ T3679] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 94.010123][ T26] kauditd_printk_skb: 48 callbacks suppressed [ 94.010140][ T26] audit: type=1326 audit(1727413623.572:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4103 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b857df39 code=0x7ffc0000 [ 94.043555][ T3679] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 94.053860][ T3679] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 94.100628][ T3679] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 94.120585][ T26] audit: type=1326 audit(1727413623.572:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4103 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f17b857df39 code=0x7ffc0000 [ 94.160532][ T3679] usb 5-1: config 250 has no interface number 0 [ 94.166866][ T3679] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 94.188999][ T26] audit: type=1326 audit(1727413623.572:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4103 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b857df39 code=0x7ffc0000 [ 94.200772][ T4109] netlink: 'syz.3.123': attribute type 4 has an invalid length. [ 94.212617][ T3679] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 94.270556][ T3679] usb 5-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 94.289566][ T32] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 94.294413][ T26] audit: type=1326 audit(1727413623.572:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4103 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b857df39 code=0x7ffc0000 [ 94.328234][ T3679] usb 5-1: config 250 interface 228 has no altsetting 0 [ 94.337883][ T26] audit: type=1326 audit(1727413623.572:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4103 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f17b857df39 code=0x7ffc0000 [ 94.340450][ T4110] netlink: 'syz.3.123': attribute type 4 has an invalid length. [ 94.361058][ T26] audit: type=1326 audit(1727413623.572:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4103 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b857df39 code=0x7ffc0000 [ 94.423177][ T4109] syz.3.123 (4109) used greatest stack depth: 19384 bytes left [ 94.464386][ T26] audit: type=1326 audit(1727413623.572:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4103 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b857df39 code=0x7ffc0000 [ 94.469186][ T3638] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 94.487589][ T3679] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 94.569217][ T3679] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 94.578529][ T4097] xt_TPROXY: Can be used only with -p tcp or -p udp [ 94.590647][ T3679] usb 5-1: Product: syz [ 94.594876][ T3679] usb 5-1: SerialNumber: syz [ 94.661869][ T3679] hub 5-1:250.228: bad descriptor, ignoring hub [ 94.661900][ T3679] hub: probe of 5-1:250.228 failed with error -5 [ 94.776395][ T4117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.130'. [ 94.798157][ T4117] device xfrm0 entered promiscuous mode [ 95.229141][ T4133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.238364][ T4133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.943667][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.151421][ T4141] 9pnet: Could not find request transport: tc [ 96.220503][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 96.331128][ T4150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.138'. [ 96.353908][ T4150] device batadv0 entered promiscuous mode [ 96.360336][ T4150] device macvtap1 entered promiscuous mode [ 96.372322][ T4150] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 96.486559][ T4154] loop0: detected capacity change from 0 to 764 [ 96.500539][ T4122] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 96.512136][ T7] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 96.528703][ T7] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 96.539861][ T7] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 96.615011][ T7] usb 3-1: config 250 has no interface number 0 [ 96.785940][ T7] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 96.951294][ T4122] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.027320][ T7] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 97.051819][ T4122] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 97.189130][ T4122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.200217][ T7] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 97.233548][ T7] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 97.246385][ T4122] usb 4-1: config 0 descriptor?? [ 97.251705][ T7] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 97.265717][ T7] usb 3-1: config 250 interface 228 has no altsetting 0 [ 97.315821][ T4122] pwc: Askey VC010 type 2 USB webcam detected. [ 97.440598][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 97.450113][ T7] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 97.462780][ T3629] usb 5-1: USB disconnect, device number 3 [ 97.470351][ T7] usb 3-1: Product: syz [ 97.474634][ T7] usb 3-1: SerialNumber: syz [ 97.511214][ T4154] netlink: 'syz.0.140': attribute type 10 has an invalid length. [ 97.519435][ T4154] bridge0: port 3(team0) entered blocking state [ 97.531941][ T4122] pwc: send_video_command error -71 [ 97.532247][ T4154] bridge0: port 3(team0) entered disabled state [ 97.537170][ T4122] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 97.545763][ T4154] device team0 entered promiscuous mode [ 97.557928][ T7] hub 3-1:250.228: bad descriptor, ignoring hub [ 97.565046][ T7] hub: probe of 3-1:250.228 failed with error -5 [ 97.572314][ T4122] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 97.579153][ T4154] device team_slave_0 entered promiscuous mode [ 97.582420][ T4122] usb 4-1: USB disconnect, device number 5 [ 97.596796][ T4154] device team_slave_1 entered promiscuous mode [ 97.636056][ T4154] bridge0: port 3(team0) entered blocking state [ 97.642806][ T4154] bridge0: port 3(team0) entered forwarding state [ 97.794657][ T7] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 97.823093][ T4168] loop4: detected capacity change from 0 to 1024 [ 97.872336][ T7] usb 3-1: USB disconnect, device number 2 [ 97.912740][ T7] usblp0: removed [ 97.920144][ T4168] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 98.016285][ T3643] EXT4-fs (loop4): unmounting filesystem. [ 98.130770][ T26] audit: type=1326 audit(1727413627.702:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4184 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069db7df39 code=0x7ffc0000 [ 98.157514][ T26] audit: type=1326 audit(1727413627.722:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4184 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f069db7df39 code=0x7ffc0000 [ 98.216360][ T26] audit: type=1326 audit(1727413627.722:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4184 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069db7df39 code=0x7ffc0000 [ 98.331001][ T3629] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 98.426479][ T4197] capability: warning: `syz.1.150' uses deprecated v2 capabilities in a way that may be insecure [ 98.721712][ T3629] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.753388][ T3629] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 98.783194][ T3629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.802539][ T4206] syz.2.153[4206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.802731][ T4206] syz.2.153[4206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.821671][ T3629] usb 4-1: config 0 descriptor?? [ 98.906468][ T3629] pwc: Askey VC010 type 2 USB webcam detected. [ 99.076795][ T4212] loop1: detected capacity change from 0 to 512 [ 99.113747][ T4212] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 99.124817][ T4215] netlink: 16 bytes leftover after parsing attributes in process `syz.0.155'. [ 99.154725][ T4215] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 99.172196][ T4212] EXT4-fs (loop1): 1 truncate cleaned up [ 99.210516][ T4212] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 99.341839][ T3629] pwc: recv_control_msg error -32 req 02 val 2b00 [ 99.357538][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 99.410517][ T3629] pwc: recv_control_msg error -32 req 02 val 2700 [ 99.450783][ T3629] pwc: recv_control_msg error -32 req 02 val 2c00 [ 99.500774][ T3629] pwc: recv_control_msg error -32 req 04 val 1000 [ 99.553092][ T3629] pwc: recv_control_msg error -32 req 04 val 1300 [ 99.611905][ T3629] pwc: recv_control_msg error -32 req 04 val 1400 [ 99.653371][ T3629] pwc: recv_control_msg error -32 req 02 val 2000 [ 99.711018][ T3629] pwc: recv_control_msg error -32 req 02 val 2100 [ 99.770612][ T3629] pwc: recv_control_msg error -32 req 04 val 1500 [ 99.834096][ T3629] pwc: recv_control_msg error -32 req 02 val 2500 [ 99.834646][ T26] audit: type=1326 audit(1727413629.402:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4232 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c1f7df39 code=0x7ffc0000 [ 99.865376][ T4235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'. [ 99.890738][ T26] audit: type=1326 audit(1727413629.402:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4232 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c1f7df39 code=0x7ffc0000 [ 99.917226][ T3629] pwc: recv_control_msg error -32 req 02 val 2400 [ 99.960631][ T26] audit: type=1326 audit(1727413629.432:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4232 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2c1f7df39 code=0x7ffc0000 [ 99.985301][ T3629] pwc: recv_control_msg error -32 req 02 val 2600 [ 99.999449][ T26] audit: type=1326 audit(1727413629.432:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4232 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c1f7df39 code=0x7ffc0000 [ 100.012201][ T4233] loop1: detected capacity change from 0 to 512 [ 100.028420][ T26] audit: type=1326 audit(1727413629.432:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4232 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c1f7df39 code=0x7ffc0000 [ 100.059843][ T3629] pwc: recv_control_msg error -32 req 02 val 2900 [ 100.081227][ T4238] netlink: 16 bytes leftover after parsing attributes in process `syz.2.165'. [ 100.092234][ T26] audit: type=1326 audit(1727413629.442:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4232 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2c1f7df39 code=0x7ffc0000 [ 100.092590][ T4233] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 100.119019][ T4238] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 100.132068][ T3629] pwc: recv_control_msg error -32 req 02 val 2800 [ 100.151313][ T26] audit: type=1326 audit(1727413629.452:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4232 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c1f7df39 code=0x7ffc0000 [ 100.244491][ T26] audit: type=1326 audit(1727413629.452:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4232 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c1f7df39 code=0x7ffc0000 [ 100.285367][ T4233] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 100.327849][ T4233] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038 (0x7fffffff) [ 100.384582][ T26] audit: type=1326 audit(1727413629.452:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4232 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2c1f7df39 code=0x7ffc0000 [ 100.430881][ T3629] pwc: recv_control_msg error -71 req 04 val 1200 [ 100.448993][ T3629] pwc: Registered as video71. [ 100.458556][ T3629] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 100.468646][ T4251] netlink: 16 bytes leftover after parsing attributes in process `syz.4.170'. [ 100.490094][ T4251] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 100.539168][ T26] audit: type=1326 audit(1727413629.522:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4232 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c1f7df39 code=0x7ffc0000 [ 100.584499][ T3629] usb 4-1: USB disconnect, device number 6 [ 101.246461][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 101.298281][ T4272] netlink: 40 bytes leftover after parsing attributes in process `syz.2.180'. [ 101.434456][ T3629] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.490063][ T4281] netlink: 16 bytes leftover after parsing attributes in process `syz.0.183'. [ 101.500154][ T4281] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 101.543023][ T4283] loop1: detected capacity change from 0 to 512 [ 101.550231][ T4283] journal_path: Lookup failure for './file0' [ 101.556581][ T4283] EXT4-fs: error: could not find journal device path [ 101.640715][ T3629] usb 5-1: device descriptor read/64, error -71 [ 101.905003][ T4292] loop0: detected capacity change from 0 to 128 [ 101.920511][ T3629] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 101.924772][ T4297] loop3: detected capacity change from 0 to 512 [ 102.057167][ T4301] loop1: detected capacity change from 0 to 512 [ 102.071405][ T4297] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #3: comm syz.3.189: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 102.093803][ T4301] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 102.111241][ T4297] EXT4-fs error (device loop3): ext4_quota_enable:6994: comm syz.3.189: Bad quota inode: 3, type: 0 [ 102.123188][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.131445][ T3629] usb 5-1: device descriptor read/64, error -71 [ 102.149576][ T4297] EXT4-fs warning (device loop3): ext4_enable_quotas:7035: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 102.166940][ T4297] EXT4-fs (loop3): mount failed [ 102.197200][ T4301] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 102.209698][ T4301] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038 (0x7fffffff) [ 102.250697][ T3629] usb usb5-port1: attempt power cycle [ 102.510665][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.549464][ T7] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 102.569724][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.610703][ T7] usb 3-1: config 0 descriptor?? [ 102.666459][ T7] pwc: Askey VC010 type 2 USB webcam detected. [ 102.672952][ T3629] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 102.780681][ T3629] usb 5-1: device descriptor read/8, error -71 [ 102.861808][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 102.880727][ T7] pwc: send_video_command error -71 [ 102.886339][ T7] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 102.904340][ T7] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 102.924727][ T7] usb 3-1: USB disconnect, device number 3 [ 103.050488][ T3629] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 103.150698][ T3629] usb 5-1: device descriptor read/8, error -71 [ 103.213346][ T4314] loop0: detected capacity change from 0 to 32768 [ 103.280779][ T3629] usb usb5-port1: unable to enumerate USB device [ 103.292945][ T4314] XFS (loop0): Mounting V5 Filesystem [ 103.409559][ T4314] XFS (loop0): Ending clean mount [ 103.419927][ T4314] XFS (loop0): Quotacheck needed: Please wait. [ 103.475126][ T4314] XFS (loop0): Quotacheck: Done. [ 103.497729][ T4314] overlayfs: missing 'workdir' [ 103.570680][ T153] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.607670][ T3638] XFS (loop0): Unmounting Filesystem [ 103.621575][ T4349] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 103.634101][ T4349] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 103.661912][ T4349] vhci_hcd vhci_hcd.0: Device attached [ 103.680058][ T4350] vhci_hcd: connection closed [ 103.689675][ T3842] vhci_hcd: stop threads [ 103.716304][ T3842] vhci_hcd: release socket [ 103.739372][ T3842] vhci_hcd: disconnect device [ 103.902411][ T4358] loop0: detected capacity change from 0 to 512 [ 103.915874][ T4358] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.932151][ T4358] EXT4-fs (loop0): orphan cleanup on readonly fs [ 103.938920][ T4358] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #3: comm syz.0.203: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 103.940827][ T153] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.972154][ T4358] EXT4-fs error (device loop0): ext4_quota_enable:6994: comm syz.0.203: Bad quota inode: 3, type: 0 [ 103.972361][ T153] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 103.993483][ T4358] EXT4-fs warning (device loop0): ext4_enable_quotas:7035: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 103.996149][ T153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.008512][ T4358] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 104.008551][ T4358] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 104.034586][ T4358] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 104.039493][ T153] usb 3-1: config 0 descriptor?? [ 104.063835][ T4358] EXT4-fs warning (device loop0): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 104.082878][ T153] pwc: Askey VC010 type 2 USB webcam detected. [ 104.105310][ T3638] EXT4-fs (loop0): unmounting filesystem. [ 104.254155][ T4363] loop4: detected capacity change from 0 to 512 [ 104.271471][ T3732] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 104.358496][ T4363] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 104.388532][ T4363] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038 (0x7fffffff) [ 104.485874][ T3643] EXT4-fs (loop4): unmounting filesystem. [ 104.490519][ T3732] usb 2-1: device descriptor read/64, error -71 [ 104.510636][ T153] pwc: recv_control_msg error -32 req 02 val 2b00 [ 104.723501][ T153] pwc: recv_control_msg error -32 req 02 val 2700 [ 104.770706][ T153] pwc: recv_control_msg error -32 req 02 val 2c00 [ 104.770826][ T3732] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 104.978963][ T153] pwc: recv_control_msg error -32 req 04 val 1000 [ 105.121299][ T153] pwc: recv_control_msg error -32 req 04 val 1300 [ 105.191521][ T153] pwc: recv_control_msg error -32 req 04 val 1400 [ 105.260918][ T153] pwc: recv_control_msg error -32 req 02 val 2000 [ 105.341376][ T153] pwc: recv_control_msg error -32 req 02 val 2100 [ 105.541453][ T153] pwc: recv_control_msg error -32 req 04 val 1500 [ 105.590626][ T153] pwc: recv_control_msg error -32 req 02 val 2500 [ 105.610663][ T3732] usb 2-1: device descriptor read/64, error -71 [ 105.630692][ T153] pwc: recv_control_msg error -32 req 02 val 2400 [ 105.636472][ T4388] loop3: detected capacity change from 0 to 1024 [ 105.649275][ T4388] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 105.672612][ T4388] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 105.680875][ T153] pwc: recv_control_msg error -32 req 02 val 2600 [ 105.709700][ T4388] JBD2: no valid journal superblock found [ 105.718105][ T4388] EXT4-fs (loop3): error loading journal [ 105.724315][ T153] pwc: recv_control_msg error -32 req 02 val 2900 [ 105.738299][ T4391] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 105.747094][ T3732] usb usb2-port1: attempt power cycle [ 105.770719][ T153] pwc: recv_control_msg error -32 req 02 val 2800 [ 106.044186][ T153] pwc: recv_control_msg error -71 req 04 val 1200 [ 106.063532][ T153] pwc: Registered as video71. [ 106.078876][ T153] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 106.154606][ T153] usb 3-1: USB disconnect, device number 4 [ 106.190553][ T3732] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 106.281990][ T3732] usb 2-1: device descriptor read/8, error -71 [ 106.348449][ T4394] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 106.348449][ T4394] program syz.4.218 not setting count and/or reply_len properly [ 106.550598][ T3732] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 106.611621][ T4414] netlink: 16 bytes leftover after parsing attributes in process `syz.0.225'. [ 106.650772][ T4414] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 106.667410][ T3732] usb 2-1: device descriptor read/8, error -71 [ 106.793584][ T3732] usb usb2-port1: unable to enumerate USB device [ 106.922069][ T26] kauditd_printk_skb: 112 callbacks suppressed [ 106.922086][ T26] audit: type=1326 audit(1727413636.492:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4421 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069db7df39 code=0x7ffc0000 [ 106.972698][ T26] audit: type=1326 audit(1727413636.522:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4421 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069db7df39 code=0x7ffc0000 [ 107.066899][ T26] audit: type=1326 audit(1727413636.522:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4421 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f069db7df39 code=0x7ffc0000 [ 107.163990][ T26] audit: type=1326 audit(1727413636.522:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4421 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069db7df39 code=0x7ffc0000 [ 107.233274][ T26] audit: type=1326 audit(1727413636.522:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4421 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069db7df39 code=0x7ffc0000 [ 107.304647][ T26] audit: type=1326 audit(1727413636.522:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4421 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f069db7df39 code=0x7ffc0000 [ 107.378549][ T26] audit: type=1326 audit(1727413636.522:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4421 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069db7df39 code=0x7ffc0000 [ 107.434101][ T26] audit: type=1326 audit(1727413636.532:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4421 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069db7df39 code=0x7ffc0000 [ 107.499867][ T26] audit: type=1326 audit(1727413636.532:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4421 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f069db7df39 code=0x7ffc0000 [ 107.562217][ T26] audit: type=1326 audit(1727413636.532:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4421 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069db7df39 code=0x7ffc0000 [ 107.614558][ T4423] netlink: 28 bytes leftover after parsing attributes in process `syz.4.229'. [ 107.625059][ T4438] usb usb8: usbfs: process 4438 (syz.2.236) did not claim interface 0 before use [ 107.635868][ T4423] netlink: 28 bytes leftover after parsing attributes in process `syz.4.229'. [ 107.658613][ T4423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 108.100659][ T4449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.238'. [ 108.103936][ T4450] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.239'. [ 108.130558][ T4449] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 108.175464][ T4450] net_ratelimit: 10 callbacks suppressed [ 108.175481][ T4450] netlink: zone id is out of range [ 108.230737][ T4450] netlink: zone id is out of range [ 108.243945][ T4451] netlink: 20 bytes leftover after parsing attributes in process `syz.0.239'. [ 108.265189][ T4450] netlink: zone id is out of range [ 108.284874][ T4450] netlink: get zone limit has 4 unknown bytes [ 108.304899][ T4451] device hsr_slave_0 left promiscuous mode [ 108.324083][ T4451] device hsr_slave_1 left promiscuous mode [ 108.376416][ T4435] loop1: detected capacity change from 0 to 32768 [ 108.384933][ T4458] loop4: detected capacity change from 0 to 1024 [ 108.452245][ T4458] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 108.476641][ T4435] XFS (loop1): Mounting V5 Filesystem [ 108.603039][ T3643] EXT4-fs (loop4): unmounting filesystem. [ 108.629792][ T4435] XFS (loop1): Ending clean mount [ 108.654258][ T4435] XFS (loop1): Quotacheck needed: Please wait. [ 108.729081][ T4435] XFS (loop1): Quotacheck: Done. [ 108.730564][ T153] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 108.842261][ T4479] device hsr_slave_0 left promiscuous mode [ 108.849584][ T4479] device hsr_slave_1 left promiscuous mode [ 108.943042][ T4481] loop3: detected capacity change from 0 to 2048 [ 108.952884][ T153] usb 3-1: device descriptor read/64, error -71 [ 109.087069][ T4481] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 109.094999][ T4485] syz.4.249[4485] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.095634][ T4485] syz.4.249[4485] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.108939][ T3644] XFS (loop1): Unmounting Filesystem [ 109.175954][ T4481] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038 (0x7fffffff) [ 109.312475][ T4490] netlink: 132 bytes leftover after parsing attributes in process `syz.4.250'. [ 109.376610][ T3647] EXT4-fs (loop3): unmounting filesystem. [ 109.403284][ T153] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 109.536278][ T4492] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 109.536278][ T4492] program syz.0.251 not setting count and/or reply_len properly [ 109.630906][ T153] usb 3-1: device descriptor read/64, error -71 [ 109.784789][ T153] usb usb3-port1: attempt power cycle [ 110.116402][ T4494] netlink: 16 bytes leftover after parsing attributes in process `syz.3.252'. [ 110.179375][ T4494] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 110.189052][ T4496] netlink: 116 bytes leftover after parsing attributes in process `syz.4.253'. [ 110.200466][ T153] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 110.298968][ T4498] xt_CT: You must specify a L4 protocol and not use inversions on it [ 110.330952][ T153] usb 3-1: device descriptor read/8, error -71 [ 110.601497][ T153] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 110.700837][ T153] usb 3-1: device descriptor read/8, error -71 [ 110.711502][ T4512] netlink: 'syz.1.248': attribute type 29 has an invalid length. [ 110.742083][ T4512] netlink: 'syz.1.248': attribute type 29 has an invalid length. [ 110.760829][ T4516] loop4: detected capacity change from 0 to 1024 [ 110.769415][ T4517] netlink: 'syz.1.248': attribute type 29 has an invalid length. [ 110.807586][ T4516] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 110.820698][ T153] usb usb3-port1: unable to enumerate USB device [ 111.231996][ T3643] EXT4-fs (loop4): unmounting filesystem. [ 111.633392][ T4556] __nla_validate_parse: 2 callbacks suppressed [ 111.633409][ T4556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.271'. [ 111.680998][ T4555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.272'. [ 111.759382][ T4556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.271'. [ 111.815700][ T4556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'. [ 111.972812][ T4566] syz.3.275 (4566) used greatest stack depth: 18008 bytes left [ 112.162223][ T4577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.280'. [ 112.277283][ T26] kauditd_printk_skb: 134 callbacks suppressed [ 112.277300][ T26] audit: type=1326 audit(1727413641.842:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069db7df39 code=0x7ffc0000 [ 112.377809][ T26] audit: type=1326 audit(1727413641.882:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069db7df39 code=0x7ffc0000 [ 112.472224][ T26] audit: type=1326 audit(1727413641.882:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f069db7df39 code=0x7ffc0000 [ 112.527519][ T4594] 9pnet: p9_errstr2errno: server reported unknown error œæøýÓ [ 112.545684][ T26] audit: type=1326 audit(1727413641.882:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069db7df39 code=0x7ffc0000 [ 112.565540][ T4593] loop4: detected capacity change from 0 to 1024 [ 112.580599][ T22] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 112.623344][ T4593] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 112.673879][ T26] audit: type=1326 audit(1727413641.882:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069db7df39 code=0x7ffc0000 [ 112.720572][ T26] audit: type=1326 audit(1727413641.882:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f069db7df39 code=0x7ffc0000 [ 112.726343][ T3643] EXT4-fs (loop4): unmounting filesystem. [ 112.743679][ T26] audit: type=1326 audit(1727413641.882:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069db7df39 code=0x7ffc0000 [ 112.770776][ T22] usb 2-1: device descriptor read/64, error -71 [ 112.779091][ T26] audit: type=1326 audit(1727413641.882:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069db7df39 code=0x7ffc0000 [ 112.817817][ T26] audit: type=1326 audit(1727413641.882:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f069db7df39 code=0x7ffc0000 [ 112.880558][ T26] audit: type=1326 audit(1727413641.882:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069db7df39 code=0x7ffc0000 [ 113.035796][ T4611] loop0: detected capacity change from 0 to 2048 [ 113.042498][ T22] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 113.094266][ T4611] loop0: p2 < > [ 113.240536][ T22] usb 2-1: device descriptor read/64, error -71 [ 113.297947][ T4625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'. [ 113.330150][ T4625] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.339633][ T4625] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.348587][ T4625] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.357602][ T4625] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.374011][ T22] usb usb2-port1: attempt power cycle [ 113.423299][ T4625] device vxlan0 entered promiscuous mode [ 113.457235][ T4628] loop4: detected capacity change from 0 to 1024 [ 113.487478][ T4628] JBD2: no valid journal superblock found [ 113.508747][ T4628] EXT4-fs (loop4): error loading journal [ 113.541401][ T4628] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 113.635794][ T4633] loop3: detected capacity change from 0 to 736 [ 113.741667][ T4637] netlink: 116 bytes leftover after parsing attributes in process `syz.0.298'. [ 113.753190][ T4638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.297'. [ 113.804903][ T4638] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 113.820634][ T22] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 113.930887][ T22] usb 2-1: device descriptor read/8, error -71 [ 114.213794][ T22] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 114.221615][ T153] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 114.236233][ T4656] ebt_among: dst integrity fail: 10d [ 114.277168][ T4656] loop3: detected capacity change from 0 to 512 [ 114.302195][ T4656] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.320711][ T22] usb 2-1: device descriptor read/8, error -71 [ 114.363685][ T4656] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #17: comm syz.3.306: iget: bad i_size value: -6917529027641081756 [ 114.383286][ T4656] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.306: couldn't read orphan inode 17 (err -117) [ 114.401095][ T4656] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 114.444300][ T22] usb usb2-port1: unable to enumerate USB device [ 114.458585][ T3647] EXT4-fs (loop3): unmounting filesystem. [ 114.465018][ T153] usb 3-1: Using ep0 maxpacket: 8 [ 114.581639][ T153] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 114.593771][ T153] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 114.609442][ T153] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 114.622873][ T153] usb 3-1: config 250 has no interface number 0 [ 114.645394][ T153] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 114.673177][ T153] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 114.684762][ T153] usb 3-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 114.699497][ T153] usb 3-1: config 250 interface 228 has no altsetting 0 [ 114.752982][ T4668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.309'. [ 114.796811][ T4670] rdma_op ffff8881472651f0 conn xmit_rdma 0000000000000000 [ 114.820788][ T153] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 114.849635][ T153] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 114.858412][ T153] usb 3-1: Product: syz [ 114.865947][ T153] usb 3-1: SerialNumber: syz [ 114.923468][ T4670] loop3: detected capacity change from 0 to 512 [ 114.931923][ T153] hub 3-1:250.228: bad descriptor, ignoring hub [ 114.938684][ T153] hub: probe of 3-1:250.228 failed with error -5 [ 114.960641][ T4670] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 115.015153][ T4670] EXT4-fs (loop3): 1 truncate cleaned up [ 115.021633][ T4670] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 115.062442][ T4670] ptrace attach of ""[4675] was attempted by "./syz-executor exec"[4670] [ 115.239529][ T3647] EXT4-fs (loop3): unmounting filesystem. [ 115.499658][ T4694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.542639][ T4694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.787652][ T4705] ------------[ cut here ]------------ [ 115.793641][ T4705] WARNING: CPU: 0 PID: 4705 at net/wireless/core.h:231 wdev_lock+0x96/0xc0 [ 115.802478][ T4705] Modules linked in: [ 115.806439][ T4705] CPU: 0 PID: 4705 Comm: syz.1.324 Not tainted 6.1.111-syzkaller #0 [ 115.814537][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 115.824774][ T4705] RIP: 0010:wdev_lock+0x96/0xc0 [ 115.829719][ T4705] Code: e8 7d f7 85 ed 74 1e e8 98 e4 7d f7 eb 05 e8 91 e4 7d f7 48 83 c3 48 48 89 df 31 f6 5b 41 5e 5d e9 ef 18 a3 00 e8 7a e4 7d f7 <0f> 0b eb e5 48 c7 c1 24 1a 9a 8e 80 e1 07 80 c1 03 38 c1 0f 8c 7b [ 115.850239][ T4705] RSP: 0018:ffffc90016ad6f40 EFLAGS: 00010283 [ 115.856926][ T4705] RAX: ffffffff8a0ccac6 RBX: ffff88807928cc90 RCX: 0000000000040000 [ 115.865088][ T4705] RDX: ffffc90004081000 RSI: 0000000000001049 RDI: 000000000000104a [ 115.873140][ T4705] RBP: 0000000000000000 R08: ffffffff8a0cca9f R09: ffffed100e7c5012 [ 115.881205][ T4705] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 115.889310][ T4705] R13: ffff88805db468c0 R14: dffffc0000000000 R15: ffff888073e28014 [ 115.897417][ T4705] FS: 00007fe2c2dfc6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 115.907227][ T4705] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.913925][ T4705] CR2: 000000110c451ae3 CR3: 0000000029266000 CR4: 00000000003506f0 [ 115.921986][ T4705] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 115.930012][ T4705] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 115.938081][ T4705] Call Trace: [ 115.941437][ T4705] [ 115.944406][ T4705] ? __warn+0x15a/0x520 [ 115.948608][ T4705] ? wdev_lock+0x96/0xc0 [ 115.952974][ T4705] ? report_bug+0x2af/0x500 [ 115.957517][ T4705] ? wdev_lock+0x96/0xc0 [ 115.961880][ T4705] ? handle_bug+0x3d/0x70 [ 115.966310][ T4705] ? exc_invalid_op+0x16/0x40 [ 115.971166][ T4705] ? asm_exc_invalid_op+0x16/0x20 [ 115.976249][ T4705] ? wdev_lock+0x6f/0xc0 [ 115.980598][ T4705] ? wdev_lock+0x96/0xc0 [ 115.984892][ T4705] ? wdev_lock+0x96/0xc0 [ 115.989188][ T4705] nl80211_send_iface+0x816/0x1470 [ 115.994414][ T4705] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 116.000483][ T4705] ? nl80211_notify_iface+0x160/0x160 [ 116.005923][ T4705] ? kasan_quarantine_put+0xd4/0x220 [ 116.011309][ T4705] ? lockdep_hardirqs_on+0x94/0x130 [ 116.016570][ T4705] ? __kmem_cache_free+0x25c/0x3c0 [ 116.021791][ T4705] ? nl80211_dump_wiphy_parse+0x19c/0x580 [ 116.027600][ T4705] ? nl80211_dump_wiphy_parse+0x19c/0x580 [ 116.033454][ T4705] ? nl80211_exit+0x20/0x20 [ 116.038123][ T4705] nl80211_dump_interface+0x490/0x6a0 [ 116.043869][ T4705] ? nl80211_get_interface+0x200/0x200 [ 116.049375][ T4705] ? netlink_dump+0x267/0xca0 [ 116.054181][ T4705] ? __alloc_skb+0x419/0x670 [ 116.058827][ T4705] netlink_dump+0x5a2/0xca0 [ 116.063450][ T4705] ? netlink_lookup+0x200/0x200 [ 116.068354][ T4705] ? genl_start+0x2e1/0x490 [ 116.072955][ T4705] __netlink_dump_start+0x521/0x6c0 [ 116.078226][ T4705] genl_rcv_msg+0x9f3/0xf70 [ 116.082831][ T4705] ? nl80211_get_interface+0x200/0x200 [ 116.088349][ T4705] ? genl_bind+0x400/0x400 [ 116.092864][ T4705] ? genl_rcv_msg+0xf70/0xf70 [ 116.097581][ T4705] ? nl80211_get_interface+0x200/0x200 [ 116.103122][ T4705] ? genl_lock_done+0xd0/0xd0 [ 116.107843][ T4705] ? read_lock_is_recursive+0x10/0x10 [ 116.113304][ T4705] ? __might_sleep+0xb0/0xb0 [ 116.117938][ T4705] ? ref_tracker_free+0x638/0x7d0 [ 116.123126][ T4705] ? nl80211_set_wiphy+0x2f60/0x2f60 [ 116.128452][ T4705] ? nl80211_get_interface+0x200/0x200 [ 116.133988][ T4705] ? refcount_inc+0x80/0x80 [ 116.138529][ T4705] ? __copy_skb_header+0x47b/0x600 [ 116.143744][ T4705] netlink_rcv_skb+0x1cd/0x410 [ 116.148558][ T4705] ? genl_bind+0x400/0x400 [ 116.153094][ T4705] ? netlink_ack+0x1290/0x1290 [ 116.157927][ T4705] genl_rcv+0x24/0x40 [ 116.162009][ T4705] netlink_unicast+0x7d8/0x970 [ 116.166835][ T4705] ? netlink_detachskb+0x90/0x90 [ 116.171862][ T4705] ? __virt_addr_valid+0x45b/0x530 [ 116.177023][ T4705] ? __phys_addr_symbol+0x2b/0x70 [ 116.182129][ T4705] ? __check_object_size+0x4dd/0xa30 [ 116.187448][ T4705] ? bpf_lsm_netlink_send+0x5/0x10 [ 116.192658][ T4705] netlink_sendmsg+0xa26/0xd60 [ 116.197494][ T4705] ? netlink_getsockopt+0x580/0x580 [ 116.202885][ T4705] ? aa_sock_msg_perm+0x91/0x150 [ 116.207913][ T4705] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 116.213373][ T4705] ? security_socket_sendmsg+0x7d/0xa0 [ 116.218885][ T4705] ? netlink_getsockopt+0x580/0x580 [ 116.224193][ T4705] ____sys_sendmsg+0x5a5/0x8f0 [ 116.229022][ T4705] ? __sys_sendmsg_sock+0x30/0x30 [ 116.234156][ T4705] __sys_sendmsg+0x2a9/0x390 [ 116.238811][ T4705] ? ____sys_sendmsg+0x8f0/0x8f0 [ 116.243882][ T4705] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 116.249968][ T4705] ? syscall_enter_from_user_mode+0x2e/0x230 [ 116.256200][ T4705] ? lockdep_hardirqs_on+0x94/0x130 [ 116.261496][ T4705] ? syscall_enter_from_user_mode+0x2e/0x230 [ 116.267545][ T4705] do_syscall_64+0x3b/0xb0 [ 116.272054][ T4705] ? clear_bhb_loop+0x45/0xa0 [ 116.276825][ T4705] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.282799][ T4705] RIP: 0033:0x7fe2c1f7df39 [ 116.287266][ T4705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.307222][ T4705] RSP: 002b:00007fe2c2dfc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.315839][ T4705] RAX: ffffffffffffffda RBX: 00007fe2c2135f80 RCX: 00007fe2c1f7df39 [ 116.323896][ T4705] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 116.332059][ T4705] RBP: 00007fe2c1ff0216 R08: 0000000000000000 R09: 0000000000000000 [ 116.340078][ T4705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.348152][ T4705] R13: 0000000000000000 R14: 00007fe2c2135f80 R15: 00007ffe80ce4c28 [ 116.356230][ T4705] [ 116.359297][ T4705] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 116.366621][ T4705] CPU: 0 PID: 4705 Comm: syz.1.324 Not tainted 6.1.111-syzkaller #0 [ 116.374756][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 116.385929][ T4705] Call Trace: [ 116.389245][ T4705] [ 116.392214][ T4705] dump_stack_lvl+0x1e3/0x2cb [ 116.396948][ T4705] ? nf_tcp_handle_invalid+0x642/0x642 [ 116.402461][ T4705] ? panic+0x764/0x764 [ 116.406573][ T4705] ? 0xffffffffa00007e0 [ 116.410779][ T4705] ? vscnprintf+0x59/0x80 [ 116.415149][ T4705] panic+0x318/0x764 [ 116.419087][ T4705] ? __warn+0x169/0x520 [ 116.423292][ T4705] ? memcpy_page_flushcache+0xfc/0xfc [ 116.428989][ T4705] __warn+0x348/0x520 [ 116.433004][ T4705] ? wdev_lock+0x96/0xc0 [ 116.437294][ T4705] report_bug+0x2af/0x500 [ 116.441659][ T4705] ? wdev_lock+0x96/0xc0 [ 116.446036][ T4705] handle_bug+0x3d/0x70 [ 116.450224][ T4705] exc_invalid_op+0x16/0x40 [ 116.454767][ T4705] asm_exc_invalid_op+0x16/0x20 [ 116.459657][ T4705] RIP: 0010:wdev_lock+0x96/0xc0 [ 116.464552][ T4705] Code: e8 7d f7 85 ed 74 1e e8 98 e4 7d f7 eb 05 e8 91 e4 7d f7 48 83 c3 48 48 89 df 31 f6 5b 41 5e 5d e9 ef 18 a3 00 e8 7a e4 7d f7 <0f> 0b eb e5 48 c7 c1 24 1a 9a 8e 80 e1 07 80 c1 03 38 c1 0f 8c 7b [ 116.484636][ T4705] RSP: 0018:ffffc90016ad6f40 EFLAGS: 00010283 [ 116.490748][ T4705] RAX: ffffffff8a0ccac6 RBX: ffff88807928cc90 RCX: 0000000000040000 [ 116.498757][ T4705] RDX: ffffc90004081000 RSI: 0000000000001049 RDI: 000000000000104a [ 116.506770][ T4705] RBP: 0000000000000000 R08: ffffffff8a0cca9f R09: ffffed100e7c5012 [ 116.514783][ T4705] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 116.522796][ T4705] R13: ffff88805db468c0 R14: dffffc0000000000 R15: ffff888073e28014 [ 116.531031][ T4705] ? wdev_lock+0x6f/0xc0 [ 116.535314][ T4705] ? wdev_lock+0x96/0xc0 [ 116.539610][ T4705] nl80211_send_iface+0x816/0x1470 [ 116.544781][ T4705] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 116.550811][ T4705] ? nl80211_notify_iface+0x160/0x160 [ 116.556316][ T4705] ? kasan_quarantine_put+0xd4/0x220 [ 116.561638][ T4705] ? lockdep_hardirqs_on+0x94/0x130 [ 116.566971][ T4705] ? __kmem_cache_free+0x25c/0x3c0 [ 116.572124][ T4705] ? nl80211_dump_wiphy_parse+0x19c/0x580 [ 116.577890][ T4705] ? nl80211_dump_wiphy_parse+0x19c/0x580 [ 116.583829][ T4705] ? nl80211_exit+0x20/0x20 [ 116.588389][ T4705] nl80211_dump_interface+0x490/0x6a0 [ 116.593803][ T4705] ? nl80211_get_interface+0x200/0x200 [ 116.599290][ T4705] ? netlink_dump+0x267/0xca0 [ 116.604021][ T4705] ? __alloc_skb+0x419/0x670 [ 116.608671][ T4705] netlink_dump+0x5a2/0xca0 [ 116.613211][ T4705] ? netlink_lookup+0x200/0x200 [ 116.618095][ T4705] ? genl_start+0x2e1/0x490 [ 116.622611][ T4705] __netlink_dump_start+0x521/0x6c0 [ 116.627836][ T4705] genl_rcv_msg+0x9f3/0xf70 [ 116.632349][ T4705] ? nl80211_get_interface+0x200/0x200 [ 116.637816][ T4705] ? genl_bind+0x400/0x400 [ 116.642249][ T4705] ? genl_rcv_msg+0xf70/0xf70 [ 116.646924][ T4705] ? nl80211_get_interface+0x200/0x200 [ 116.652385][ T4705] ? genl_lock_done+0xd0/0xd0 [ 116.657066][ T4705] ? read_lock_is_recursive+0x10/0x10 [ 116.662454][ T4705] ? __might_sleep+0xb0/0xb0 [ 116.667055][ T4705] ? ref_tracker_free+0x638/0x7d0 [ 116.672086][ T4705] ? nl80211_set_wiphy+0x2f60/0x2f60 [ 116.677376][ T4705] ? nl80211_get_interface+0x200/0x200 [ 116.682864][ T4705] ? refcount_inc+0x80/0x80 [ 116.687502][ T4705] ? __copy_skb_header+0x47b/0x600 [ 116.692666][ T4705] netlink_rcv_skb+0x1cd/0x410 [ 116.697455][ T4705] ? genl_bind+0x400/0x400 [ 116.701881][ T4705] ? netlink_ack+0x1290/0x1290 [ 116.706675][ T4705] genl_rcv+0x24/0x40 [ 116.710663][ T4705] netlink_unicast+0x7d8/0x970 [ 116.715445][ T4705] ? netlink_detachskb+0x90/0x90 [ 116.720481][ T4705] ? __virt_addr_valid+0x45b/0x530 [ 116.725610][ T4705] ? __phys_addr_symbol+0x2b/0x70 [ 116.730748][ T4705] ? __check_object_size+0x4dd/0xa30 [ 116.736038][ T4705] ? bpf_lsm_netlink_send+0x5/0x10 [ 116.741173][ T4705] netlink_sendmsg+0xa26/0xd60 [ 116.745995][ T4705] ? netlink_getsockopt+0x580/0x580 [ 116.751325][ T4705] ? aa_sock_msg_perm+0x91/0x150 [ 116.756291][ T4705] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 116.761599][ T4705] ? security_socket_sendmsg+0x7d/0xa0 [ 116.767068][ T4705] ? netlink_getsockopt+0x580/0x580 [ 116.772282][ T4705] ____sys_sendmsg+0x5a5/0x8f0 [ 116.777070][ T4705] ? __sys_sendmsg_sock+0x30/0x30 [ 116.782124][ T4705] __sys_sendmsg+0x2a9/0x390 [ 116.786820][ T4705] ? ____sys_sendmsg+0x8f0/0x8f0 [ 116.791799][ T4705] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 116.797803][ T4705] ? syscall_enter_from_user_mode+0x2e/0x230 [ 116.803800][ T4705] ? lockdep_hardirqs_on+0x94/0x130 [ 116.809006][ T4705] ? syscall_enter_from_user_mode+0x2e/0x230 [ 116.814998][ T4705] do_syscall_64+0x3b/0xb0 [ 116.819424][ T4705] ? clear_bhb_loop+0x45/0xa0 [ 116.824123][ T4705] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.830026][ T4705] RIP: 0033:0x7fe2c1f7df39 [ 116.834444][ T4705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.854052][ T4705] RSP: 002b:00007fe2c2dfc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.862475][ T4705] RAX: ffffffffffffffda RBX: 00007fe2c2135f80 RCX: 00007fe2c1f7df39 [ 116.870470][ T4705] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 116.878467][ T4705] RBP: 00007fe2c1ff0216 R08: 0000000000000000 R09: 0000000000000000 [ 116.886450][ T4705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.894517][ T4705] R13: 0000000000000000 R14: 00007fe2c2135f80 R15: 00007ffe80ce4c28 [ 116.902622][ T4705] [ 116.906238][ T4705] Kernel Offset: disabled [ 116.910658][ T4705] Rebooting in 86400 seconds..