last executing test programs: 19.515784281s ago: executing program 3 (id=1502): stat(0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xee00) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRES32], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000800)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000001600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c0000000190001000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000008001f0003"], 0xc0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000c0000000000fc0100000000000000000000000000c02ca84723f6c93b000a"], 0xb8}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4208, r2) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000540)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000008, 0x12, r3, 0x0) 15.881874849s ago: executing program 3 (id=1517): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x3, 0xff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x20000004) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100), 0x18) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="c40000001900674c0000000000000000fc0100000000000000000000000000010000900000000007000000000000000000000000000002000a0000000000000048adf62fda246279fe71fe3af1ef4de01ee649264d3d6abfa15af1359894a76a30782a22e2bf352bc128c65a9d9112ab77eccb25ee4384a790e7cb39214fd7fb6cb7e31cb5d6abd5f866f21b91945bcba20fbfc846fd731ed15037ae0e51f025d14c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0010000100000000000000"], 0xc4}, 0x1, 0x0, 0x0, 0x2000c855}, 0x0) connect$can_j1939(r4, &(0x7f0000000140), 0x18) writev(r4, &(0x7f0000000240)=[{&(0x7f00000001c0), 0xfffffef1}], 0x1) 14.436941458s ago: executing program 3 (id=1521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() r0 = socket$inet6(0xa, 0x0, 0x7) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x35, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1000a05, &(0x7f0000000e00)=ANY=[@ANYBLOB='fileset=00000000000000001025,uid=ignore,partition=00001000000000000003,gid=forget\x00adinicb,gid=forget,lastblock=0\'000000000000000000,gid=ignore,\x00'], 0x0, 0xc5a, &(0x7f0000000ec0)="$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") r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0xb, &(0x7f0000000000)=ANY=[], 0x0) ioctl$BTRFS_IOC_ADD_DEV(r2, 0xc0085504, &(0x7f00000010c0)={{r2}, "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"}) mount(&(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='udf\x00', 0x3, 0x0) 13.898566652s ago: executing program 4 (id=1528): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x141, 0x0) write$sequencer(r0, &(0x7f0000000080)=[@s={0x5, @SEQ_MIDIPUTC=0xfd}], 0x4) 13.833423167s ago: executing program 4 (id=1530): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c00028008000180000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000016c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a05000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa908}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x18) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) mmap(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0x1000000, 0x1010, r6, 0x143e000) syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x19, 0x2, 0x2, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "9e0b0100b872"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x40}}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff}}]}}}]}}]}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) r9 = dup2(r8, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r9, 0x29, 0x37, &(0x7f0000000100)=ANY=[], 0x30) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000080)=0x5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) 13.152380443s ago: executing program 1 (id=1533): chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fanotify_init(0x200, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000a40902120001000000000904000000ef0101"], 0x0) 11.83811486s ago: executing program 3 (id=1534): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0/file0\x00', 0x84000, &(0x7f0000000540)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}, 0x0, 0x0, 0x0) 11.661920135s ago: executing program 3 (id=1536): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r1 = dup(r0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10.649909908s ago: executing program 3 (id=1539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x18, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}}, 0x0) 10.176086047s ago: executing program 1 (id=1542): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000016c0), 0x2, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000001f80)=[&(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x5, 0x8, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x3, 0x0, &(0x7f0000000280)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r6, 0xc048aec8, &(0x7f00000004c0)={0x80000002, 0x0, 0x0, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000080)={r10}) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0xffffffffffffffff, 0x38) 10.092870503s ago: executing program 4 (id=1544): io_uring_setup(0x253d, &(0x7f0000000200)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e751d7029f063dd8e2d6bf7da997e6509e8"], 0x24) syz_emit_vhci(0x0, 0x102) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x90}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_vhci(&(0x7f00000006c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x11d}, @l2cap_cid_signaling={{0x119}, [@l2cap_disconn_rsp={{0x7, 0x5, 0x4}, {0x1ff, 0x845}}, @l2cap_conn_req={{0x2, 0x0, 0x4}, {0x3, 0xefe}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x7}}, @l2cap_info_rsp={{0xb, 0x2, 0xff}, {0x40, 0xff, "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"}}]}}, 0x122) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r4, 0x8b2c, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0\x00'}) openat$cgroup_ro(r5, 0x0, 0x26e1, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0xc0, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 9.816369666s ago: executing program 1 (id=1545): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f00000000c0), 0x1, 0x510c, &(0x7f0000005180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x0, 0xffffffff}) 9.210791956s ago: executing program 4 (id=1546): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0/file0\x00', 0x84000, &(0x7f0000000540)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}, 0x0, 0x0, 0x0) 9.080549126s ago: executing program 4 (id=1547): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='qdisc_create\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto$inet6(r2, &(0x7f0000000240)='p', 0x1, 0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x883}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0) sendto$inet6(r2, &(0x7f0000000280)="a431785ae033038224523d772b5e8aa8588a10b50352f59ce383de717fde1765eca11a3a63cbc8ae1e9874b70aa81a5ae0dd1c5aedf727b276ce28404a9e46588b9b30301f3af7f2d30792f4848eb4715e7b39c836081f479618bddecfcae5de89ff70dc32508d55d6fe3fbef7a2e55e2427be016981a751a2e159b22e94a2c1992833f582caf09273c5ef2cd881a6df3b06dbcae6b7afdda3693ea9a118f94f88d7360c4b3a3558e816099c87edd61d96fe4db968ee71356281db2ccaa09a83c5c94988b9ce003ae240c1ae3ab17c298d613f1c60c068968f69f988", 0xdc, 0x40095, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x3d, 0xa}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r7 = accept(r1, &(0x7f0000000440)=@ethernet={0x0, @remote}, &(0x7f0000000140)=0x80) setsockopt$IP_VS_SO_SET_EDITDEST(r7, 0x0, 0x489, &(0x7f0000000800)={{0x2c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x3, 'dh\x00', 0x10, 0x2, 0x1a}, {@multicast2, 0x4e23, 0x10000, 0x4, 0x1, 0x120000}}, 0x44) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r6, 0x123, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2, &(0x7f0000000080)=@raw=[@map_val], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r4}, 0x80) r10 = syz_open_dev$vcsa(&(0x7f0000000400), 0x8, 0x0) r11 = fsmount(0xffffffffffffffff, 0x0, 0x70) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x0, &(0x7f00000005c0), &(0x7f0000000600)='syzkaller\x00', 0xffff8000, 0x93, &(0x7f0000000640)=""/147, 0x41100, 0xa, '\x00', r8, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0xf, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r11]}, 0x80) dup2(r1, r2) r12 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r12, 0x40286608, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x2, 0x0, 0x1000}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000140), 0x1, 0x4e2, &(0x7f0000000b80)="$eJzs3c9vG1kdAPDvTOImm81usrASPwRsWRYKqmon7m602tNyAaHVSogVJw7ZkLhRFDuOYmdpQiXS/wGJSpzgT+CAxAGpJ+7c4MalHJAKVKAGiYPRjCdpSOMkbRMb7M9HGs28eeP5vldr3nO/SfwCGFlXI2IvIq5ExMcRMVOcT4ot3u9u2XWPH91Z3n90ZzmJTuejvyV5fXYujrwm83Jxz8mI+N63I36YPB23tbO7vlSv17aKcqXd2Ky0dnZvrDWWVmurtY1qdWF+Ye7dm+9UL6yvbzR+9fBbax98/7e/+eKD3+9948dZs6aLuqP9uEjdrpcO42TGI+KDywg2AGNFf64MuiE8lzQiPhURb+bP/0yM5e/m+ZzwWAMA/wc6nZnozBwtAwDDLs1zYElaLnIB05Gm5XI3h/d6TKX1Zqt9/VZze2OlmyubjVJ6a61emytyhbNRSrLyfH78pFw9Vr4ZEa9FxE8nXsrL5eXz5xkAgIv18rH5/58T3fkfABhyk2ddsNifdgAA/XPm/A8ADB3zPwCMHvM/AIwe8z8AjB7zPwCMnmL+Hxt0OwCAvvjuhx9mW2e/+P7rlU92ttebn9xYqbXWy43t5fJyc2uzvNpsrtZr5eVm46z71ZvNzfm3Y/t2pV1rtSutnd3FRnN7o72Yf6/3Yq3Ul14BAKd57Y37f0wiYu+9l/ItjqzlYK6G4ZYOugHAwMj5w+jyLdwwuvwfHzhrLc+evyJ87zmCdX7yHC8CLtq1z8n/w6iS/4fRJf8Po0v+H0ZXp5P0WvM/PbwEABgqcvxAX3/+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAENiOt+StFysBT4daVouR7wSEbNRSm6t1WtzEfFqRPxhojSRlecH3WgA4AWlf0mK9b+uzbw1fbz2SvKviXwfET/6+Uc/u73Ubm/NZ+f/fni+fa84Xx1E+wGAsxzM0wfz+IHHj+4sH2z9bM/Db3YXF83i7hdbt2Y8xvP9ZJQiYuofSVHuyj6vjF1A/L27EfHZk/qf5LmR2WLl0+Pxs9iv9DV++l/x07yuu8/+LT79DDHPWusVRsX9bPx5/6TnL42r+X7yxMWPJ/MR6sUdjH/7T41/6eH4N9Zj/Lt63hhv/+47PevuRnx+/KT4yWH8pEf8t84Z/09f+NKbveo6v4i4FifHPxqr0m5sVlo7uzfWGkurtdXaRrW6ML8w9+7Nd6qVPEddOchUP+2v711/9bT+T/WIP3lG/796aq87EwdHv/z3xz/48inxv/6Vk9//10+Jn82JXzs1/hNLU7/uuXx3Fn+l2/+7z/r+Xz9n/Ad/3l0556UAQB+0dnbXl+r12taFHpTigm945CC5pDY7GPKD7PP4i97nM0XK7H+gO5d9MOiRCbhsTx76QbcEAAAAAAAAAAAAAADo5dL/nCgddA8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYZv8JAAD//wqryik=") read$FUSE(0xffffffffffffffff, &(0x7f0000006700)={0x2020}, 0x2020) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) 8.67685597s ago: executing program 4 (id=1548): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x44, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x5, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xf2}}, 0x0) 7.739837276s ago: executing program 1 (id=1555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000400)=""/69, &(0x7f0000000180)=0x45) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x175}, 0x1c) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{0x0}], 0x1) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f00000002c0)=@nullb, 0xee01, &(0x7f0000000380)) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x1) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000140)={0x0, 0x47524247, 0x0, @stepwise}) 6.629327687s ago: executing program 1 (id=1556): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.790185876s ago: executing program 1 (id=1559): syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_sctp(0x2, 0x0, 0x84) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="0000000000000000000016000000"], 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000001340)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000}}]}]}}]}, 0x70}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.966782727s ago: executing program 0 (id=1566): openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)={'filter\x00', 0x7, 0x4, 0x410, 0x218, 0x110, 0x0, 0x328, 0x328, 0x110, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev, @rand_addr, @multicast2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/18, 0x12}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "f7ef9ffbd8e6700354ce0000000000e5ff00"}) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x7, 0x0, "ffffde00"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$igmp6(0xa, 0x3, 0x3a) shmget(0x2, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a310000020038000400200001000a00000000000000ff05000000000000000000000000000103000000140002000a"], 0x60}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@nogrpid}, {@noload}, {@noload}]}, 0x1, 0x612, &(0x7f0000000740)="$eJzs3c1vFOUfAPDvbLfvv58txKh4kCbGQKK0tIIhxkS4E4IvN71UWghSKKE1WiSxJHgxGi8eTDx5EP8KlcSr/4AHL54MCTGGgxgia2Y7U7Yvu3Tb7k7pfj7J0HnpzvMd6Jfvs0+f2QmgY42kf5Qi9kXE5SRiqOZYObKDI0vfd/eva2fSJYlK5a0/k7j2SbJYe64k+7one/G/Q5GkL9878cOaducWrl6YnJmZvpJtj81fvDw2t3D10PmLk+emz01fmnhl4tjRI0ePjR/e+vVlTt54/8Ohz069890395Px7387lcTxeNC1dCy9rtWv7d1Sy2nbI1FZcq92f/r3emyL594p/h7Kf05y/ZGUCwuHJp3Nfh67I+LpGIqumn/Nofj0jUKDA1qqkkReo4COk2wq//u2PxCgzfJ+QP7efr33wWuVWtwrAdrhzomlAYCl3O+OiDz/y9nYWV91bGDgbrJinCeJiK2NzC1J2/jl51M30iXqjMMBrbF4vTcbt19d/5Nqbg5HX3Vr4G5pRf6XapZ0/5ubbH9k1bb8h/ZZvB4Rz2T1vyeayv+Rmvx/b5Pty38AAAAAAADYPrdORMRL683/Ky3P/+lZZ/7PYEQc34b2H/37v9LtbCXZhuaAGndORLy27vzf5Tm+w13Z1v+r8wG6k7PnZ6YPR8QTEXEwunvT7fFV562dIXzoi71f12u/dv5fuqTt53MBszPdLq+6EXdqcn5yq9cNRNy5HvFsdf7v/mzPyvk/af1P1qn/aX5f3mAbe1+4ebresUfnP9AqlW8jDqxb/x92t5PGn88xVu0PjOW9gtzDHsBzH3/5Y7325T8UJ63/A43zvzep/byeuebO3xMRLy+UK/WOb7b/35O83ZWfP/XR5Pz8lfGInuTk2v0TzcUMu1WeD3m+pPl/8PnG43/L/f+aPOyPiMXVJ68zQvfUg8Hf68Wj/kNx0vyfalz/h1fW/+ZXJm4O/1Sv/dMbqv9HqjX9YLbH+B/UWvt5HBtN0ELCBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDHXCki/hdJaXR5vVQaHY0YjIgnY6A0Mzs3/+LZ2Q8uTaXHqs//L+VP+h1a2k7y5/8P12xPrNzuT9vaExFfdfVXj4+emZ2ZKvriAQAAAAAAAAAAAAAAAAAAYIcYrN7zX+ldff9/6o+uoqMDWq6cfZXv0Hmy/P/83aZfWend/miAdioXHQBQmI3nf3dL4wDar37+37tfqWprOEAb6f9D59pk/vt1AewC6j90qg2O6fW1Og6gCOo/AAAAAADsKnv23/o1iYjFV/urS6onO2ayP+xupaIDAApjDi90rvJs0REARfEeH0iW1/5Z92b/+rP/k9YEBAAAAAAAAAAAAACscWCf+/+hUzW+/9/cftjNGtz/X03+8oa/HXjc1H/0h9oPu12D9/ge+AUd4lHV3v3/AAAAAAAAAAAAALAD9F29MDkzM31lbuHxW3l9Z4TR3Mri5I4IY6sr/RGxvOdBa9rqjojir7SIlfwjOAoMo+D/lwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGX/BQAA///uyiaG") 2.218552998s ago: executing program 0 (id=1568): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x4208, &(0x7f0000003240)=ANY=[], 0x2, 0x377, &(0x7f0000000840)="$eJzs3c9rK1UUwPGTNEmTPF6ThSgK8i6+jW6GNroWg7QgBCxtI7aCMG0nGjImJROqEbHtyq24dyW4KN1ZcFHQ/gPduNONCO66EVzYhToyd2aSaX60MaaNr/1+4JHJvffM3Mm9eZybZjLnb3/+Qa3iGBWzJfG0kpiIyIVIXuISigWPcb2dkqh9eenB7z8+v7peTvsFaqm49nJBKTX36LsPP8n4hTMicpZ/9/y3wq9nT589e/732vtVR1UdVW+0lKk2Gz+3zE3bUttVp2YotWxbpmOpat2xmn79N8Hh7MbOTluZ9e2H2Z2m5TjKrLdVzWqrVkO1mm1lvmdW68owDPUwK7hO+XBlxSyOGbw14c7ghjSbRdN7B2b6asqHU+kQAACYqt78P+6l9OPk/xsyVyotriivcTf/P3rhtPXgreO5k1md/5+kBuX/r/zk7+tS/u8tJ7r5f8NfH1Suz/+/lLqaFZGR8v/+jOh+GTv/z99AZzCeR6m+otilZ17+nw3ev9rBO0fzeoP8HwAAAAAAAAAAAAAAAAAAAACAJ8GF6+Zc182Fj+G/7iUEwXPcScPGf1ZE0t7ou4z/Xba6viFpfeGeN8b2Z7vl3bL/GDQ4FRFbrL/cXt7cCK88Up68fG/vBfF7u+UZXVOsSNWLlwXJSV7Pp0i86y69UVpcUL4gvnOZUjYaX5CcPBWN/1bPTi++INlofHD8lLz4OBJvSE5+2JKG2LKtI7vH/3RBqdffLPXEZ3Q7Efnl1gcFAAAAAIAJM1THwPW7YQyr939lpFjRHxNZMi85+bN3fZ/R6+t5HR4u68P4RO65xFRPHQAAAACAe8Npf1wzJW419YZtD9rIyNCqCWwkLpUkRWRg41TTyYhIpyQ5ZIdJL3wmcoaj9icl/h1M/ut5fRW+qv8mKvwihdfxTlVwRxUZrz/h+euSWGL8YYrti54A+9GquIwQnujpvP4aka0GNn48dD8HwYl0SsKPjVJDXmdZ7t9P/IqZkOwrcWPjTYBnvvj6j8m9QV49DmbAR9c3PrAtd09GGZSeDe8Q/VXJG/+PBwAAAMCt6yb9Yclr0erojUSiN8vhL/cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEzQpH7JL31Fm2mfIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPB/8U8AAAD//97I680=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x105042, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0xa37e, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) ftruncate(r2, 0x2088002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8088e3ad122bc192, 0x4002011, r1, 0x0) write$binfmt_aout(r2, &(0x7f0000001540), 0x20) read(r0, &(0x7f0000000000), 0x2000) 2.068268851s ago: executing program 0 (id=1570): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f0000000100)={0x1, 0x1, @raw_data=[0x0, 0x0, 0x1011]}) 1.996209437s ago: executing program 0 (id=1571): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x4, 0x5, 0x1100}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1.921003703s ago: executing program 0 (id=1572): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/185, 0x10}}], 0x1, 0x12040, 0x0) 985.85608ms ago: executing program 0 (id=1576): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000082b6fe8e00000000008040008500000050000000a50000009700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x40) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) close(0xffffffffffffffff) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0000050000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0003020000000003"], 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 968.824661ms ago: executing program 2 (id=1577): syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x42, &(0x7f0000000540)=ANY=[], 0xd, 0x1a4, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x2000800) 841.315471ms ago: executing program 2 (id=1578): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f0000000100)={0x1, 0x1, @raw_data=[0x0, 0x0, 0x1011]}) 751.068039ms ago: executing program 2 (id=1579): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x4, 0x5, 0x1100}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 590.923652ms ago: executing program 2 (id=1580): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b03feffe0ff020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 242.28645ms ago: executing program 2 (id=1581): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@huge_advise}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x8001) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000001300), 0x4) 0s ago: executing program 2 (id=1582): unshare(0x20000400) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000069122400000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x4000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r0, &(0x7f0000000540)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) pselect6(0x40, &(0x7f00000001c0)={0x9}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "a83370a1", "a435889722b66244"}, 0x28) poll(0x0, 0x0, 0xf49) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="00000000bd4cd6b4f3969924218e83cb90d215ba2839632bb70662205903a3a1dde2cd956dd5e6eea729d1cd986d9e3ca28c7aef116e4ddd8fa94d36227d65db2c2d143d2b44d17b90f048795c06100e8861382ba79bf1362a5d9cea74af8b480ef1f32c15cf41a6c59b185e893a9fcd5f364abd748a9198e9f4c1db001fcee48629017bb91daf0d302bcb3284d2bfdbc0cb01a12c", @ANYRES16, @ANYBLOB="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"], 0x1c4}, 0x1, 0x0, 0x0, 0x4040884}, 0x20000040) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000580)={0x4000, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000140)="6b32843b92c113892bb3ecbee91537c694ff2c4c30bab3442d209d5b2da4553bd526ee6fd8de867201935da6bd61fdd2b073f569c1beef", 0x37, 0x1, &(0x7f0000000500)={0xa, 0x4e21, 0x800, @remote, 0x3}, 0x1c) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x8, 0x0, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYRESOCT=r3, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): T4016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 275.646020][ T8069] EXT4-fs (loop3): free_blocks=0 [ 275.661079][ T8069] EXT4-fs (loop3): dirty_blocks=48 [ 275.673315][ T7954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 275.686581][ T8069] EXT4-fs (loop3): Block reservation details [ 275.738613][ T8069] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 276.032184][ T8001] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 276.191662][ T8084] loop4: detected capacity change from 0 to 1764 [ 276.271261][ T3823] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 276.282259][ T8001] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 276.541862][ T8001] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 276.755898][ T8001] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 276.792610][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 276.810372][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 276.932412][ T7954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.951239][ T3823] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 276.974008][ T3823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.010660][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 277.031683][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 277.045570][ T3823] usb 1-1: Product: syz [ 277.068936][ T3823] usb 1-1: Manufacturer: syz [ 277.094121][ T3823] usb 1-1: SerialNumber: syz [ 277.241724][ T3823] usb 1-1: config 0 descriptor?? [ 277.263191][ T7954] device veth0_vlan entered promiscuous mode [ 277.271257][ T1077] Bluetooth: hci7: command 0x0419 tx timeout [ 277.292737][ T3823] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 008 [ 277.302897][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 277.311778][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.432360][ T8093] binder: 8090:8093 ioctl 4018620d 0 returned -22 [ 277.504172][ T8093] loop4: detected capacity change from 0 to 1024 [ 278.006466][ T8095] loop3: detected capacity change from 0 to 512 [ 278.009289][ T8001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.064174][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 278.098597][ T8093] hfsplus: invalid attributes max_key_len 768 [ 278.101260][ T8095] EXT4-fs (loop3): Ignoring removed nobh option [ 278.105045][ T8093] hfsplus: failed to load attributes file [ 278.113449][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 278.157139][ T8095] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 278.170476][ T7954] device veth1_vlan entered promiscuous mode [ 278.198090][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.254473][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.308571][ T8095] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 278.311640][ T8001] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.327188][ T8095] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #13: comm syz.3.1007: casefold flag without casefold feature [ 278.404966][ T8001] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 278.439762][ T8095] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #13: comm syz.3.1007: unexpected EA_INODE flag [ 278.451572][ T8001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.474708][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.502366][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.518702][ T8095] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1007: couldn't read orphan inode 13 (err -117) [ 278.551693][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.558806][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.579013][ T8095] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,bsdgroups,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 278.606141][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.644192][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.679898][ T8095] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 278.680736][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.694787][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.750291][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.772615][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.801294][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.831611][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.850444][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 278.869278][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.888056][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 278.908241][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.928711][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 278.937301][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.960212][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.989096][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 278.997038][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 279.020124][ T7954] device veth0_macvtap entered promiscuous mode [ 279.026596][ T3823] (null): failure reading functionality [ 279.064972][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 279.074118][ T3823] i2c i2c-1: failure reading functionality [ 279.082625][ T3823] i2c i2c-1: connected i2c-tiny-usb device [ 279.099438][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.126116][ T3823] usb 1-1: USB disconnect, device number 8 [ 279.144249][ T7954] device veth1_macvtap entered promiscuous mode [ 279.203659][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 279.224553][ T8105] loop3: detected capacity change from 0 to 256 [ 279.233304][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.270969][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.300519][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.321043][ T8108] loop4: detected capacity change from 0 to 2048 [ 279.332074][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.352715][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.381349][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.400976][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.422286][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.440973][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.471049][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.491059][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.511008][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.533100][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.551031][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.573115][ T7954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.582562][ T8105] exfat: Deprecated parameter 'utf8' [ 279.594717][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.609710][ T8105] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d) [ 279.640973][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.677827][ T8108] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 279.691377][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.762707][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.840475][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.501007][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.537136][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.554417][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.575900][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.596398][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.619315][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.639894][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.649919][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.670767][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.697498][ T7954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.792122][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.800888][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.806045][ T8114] loop4: detected capacity change from 0 to 128 [ 280.835992][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 280.861921][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.975223][ T7954] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.041666][ T7954] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.050383][ T7954] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.073171][ T7954] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.148529][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 281.159014][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.191070][ T3823] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 281.235097][ T8001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.356737][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 281.372483][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 281.420640][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.446083][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 281.472181][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.483818][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.503226][ T8001] device veth0_vlan entered promiscuous mode [ 281.531778][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 281.543048][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 281.577626][ T8001] device veth1_vlan entered promiscuous mode [ 281.600371][ T3764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.601191][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 281.641227][ T3823] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 281.641268][ T3764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.649914][ T3823] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.661756][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 281.721825][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 281.745708][ T3823] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 281.781739][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 281.789880][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 281.791017][ T3823] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.850376][ T3823] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.851513][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 282.001155][ T3823] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 282.040116][ T8001] device veth0_macvtap entered promiscuous mode [ 282.056330][ T3823] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 282.071284][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 282.101037][ T3823] usb 1-1: Product: syz [ 282.110975][ T3823] usb 1-1: Manufacturer: syz [ 282.150132][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.962'. [ 282.811924][ T3823] cdc_wdm 1-1:1.0: skipping garbage [ 282.817166][ T3823] cdc_wdm 1-1:1.0: skipping garbage [ 282.829639][ T8001] device veth1_macvtap entered promiscuous mode [ 282.900232][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.902400][ T3823] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 282.916674][ T3823] cdc_wdm 1-1:1.0: Unknown control protocol [ 282.925844][ T3823] usb 1-1: USB disconnect, device number 9 [ 283.025744][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.062852][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.091616][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.120993][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.162222][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.201009][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.237534][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.301048][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.331488][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.361011][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.401683][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.450984][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.491601][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.522362][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.551096][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.583548][ T8001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.592879][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 283.611774][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 283.653814][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.701098][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.741202][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.792241][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.820995][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.861022][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.870847][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.943254][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.976747][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.015297][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.045696][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.081066][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.118315][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.151089][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.196600][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.218272][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.242618][ T8001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.281709][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 284.329571][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 284.365626][ T8001] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.430022][ T8001] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.475210][ T8001] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.510979][ T8001] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.441673][ T8125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.449968][ T8125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.511297][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 285.585982][ T1244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.632629][ T1244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.671888][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 285.679849][ T4016] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 286.312165][ T4016] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 286.428407][ T4016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.463234][ T4016] usb 5-1: Product: syz [ 286.473160][ T4016] usb 5-1: Manufacturer: syz [ 286.483217][ T4016] usb 5-1: SerialNumber: syz [ 286.532796][ T4016] usb 5-1: config 0 descriptor?? [ 286.582664][ T4016] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 015 [ 286.879523][ T3823] hid-generic 0000:0000:0000.0008: unknown main item tag 0xe [ 286.918000][ T3823] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 286.970695][ T3823] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 287.186688][ T8191] netlink: 'syz.1.1032': attribute type 4 has an invalid length. [ 288.082224][ T4016] (null): failure reading functionality [ 288.153505][ T4016] i2c i2c-1: failure reading functionality [ 288.183127][ T4016] i2c i2c-1: connected i2c-tiny-usb device [ 288.201245][ T4016] usb 5-1: USB disconnect, device number 15 [ 289.048769][ T3823] hid-generic 0000:0000:0000.0009: unknown main item tag 0xe [ 289.072454][ T8219] loop4: detected capacity change from 0 to 2048 [ 289.078979][ T3823] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 289.106040][ T3823] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 289.139664][ T8219] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 289.186354][ T8219] 9pnet: Insufficient options for proto=fd [ 291.151070][ T3613] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 291.167295][ T8246] loop4: detected capacity change from 0 to 32768 [ 291.287109][ T8246] XFS (loop4): Mounting V5 Filesystem [ 291.411171][ T3613] usb 1-1: Using ep0 maxpacket: 32 [ 291.499011][ T8246] XFS (loop4): Ending clean mount [ 291.556947][ T8246] XFS (loop4): Quotacheck needed: Please wait. [ 291.655857][ T3613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 291.668301][ T3613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 292.104074][ T8246] XFS (loop4): Quotacheck: Done. [ 292.212598][ T3613] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 292.230566][ T3613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.251038][ T3613] usb 1-1: Product: syz [ 292.255239][ T3613] usb 1-1: Manufacturer: syz [ 292.259984][ T3613] usb 1-1: SerialNumber: syz [ 292.373421][ T7004] XFS (loop4): Unmounting Filesystem [ 292.473911][ T3613] usb 1-1: config 0 descriptor?? [ 292.524441][ T3613] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 292.923681][ T8270] chnl_net:caif_netlink_parms(): no params data found [ 293.313508][ T3613] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 293.324653][ T3613] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 293.333568][ T3613] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 293.341766][ T3613] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 293.349327][ T3613] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 293.391159][ T3613] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 293.411542][ T3617] Bluetooth: hci8: command 0x0409 tx timeout [ 293.437953][ T3613] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 293.507623][ T3613] usb 1-1: USB disconnect, device number 10 [ 293.560348][ T3613] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 293.584773][ T3613] keyspan 1-1:0.0: device disconnected [ 293.644998][ T8270] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.692322][ T8270] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.735269][ T8270] device bridge_slave_0 entered promiscuous mode [ 293.782522][ T8270] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.811642][ T8270] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.866892][ T8270] device bridge_slave_1 entered promiscuous mode [ 293.976235][ T8270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.051815][ T8270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.219378][ T8270] team0: Port device team_slave_0 added [ 294.282738][ T8270] team0: Port device team_slave_1 added [ 294.381383][ T8270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.388340][ T8270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.511084][ T8270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.576186][ T8270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.592905][ T8270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.680983][ T8270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.799221][ T8270] device hsr_slave_0 entered promiscuous mode [ 294.811173][ T3729] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 294.852000][ T8270] device hsr_slave_1 entered promiscuous mode [ 294.877773][ T8270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.903272][ T8270] Cannot create hsr debugfs directory [ 295.361391][ T3729] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 295.380367][ T3729] usb 3-1: config 0 has no interface number 0 [ 295.481222][ T3729] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.571193][ T3729] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.620591][ T3617] Bluetooth: hci8: command 0x041b tx timeout [ 295.662605][ T3729] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 295.691567][ T3729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.728232][ T3729] usb 3-1: config 0 descriptor?? [ 296.324482][ T8270] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.421747][ T3729] logitech-djreceiver 0003:046D:C71B.000A: unknown main item tag 0x0 [ 296.654402][ T3729] logitech-djreceiver 0003:046D:C71B.000A: unknown main item tag 0x0 [ 296.671012][ T3729] logitech-djreceiver 0003:046D:C71B.000A: unknown main item tag 0x0 [ 296.689408][ T3729] logitech-djreceiver 0003:046D:C71B.000A: unknown main item tag 0x0 [ 296.709681][ T3729] logitech-djreceiver 0003:046D:C71B.000A: unknown main item tag 0x0 [ 296.729960][ T3729] logitech-djreceiver 0003:046D:C71B.000A: unknown main item tag 0x0 [ 296.761025][ T3729] logitech-djreceiver 0003:046D:C71B.000A: unknown main item tag 0x0 [ 296.789959][ T3729] logitech-djreceiver 0003:046D:C71B.000A: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.2-1/input32 [ 296.798881][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1081'. [ 296.832375][ T3729] usb 3-1: USB disconnect, device number 7 [ 297.022514][ T8339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1078'. [ 297.196928][ T8270] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.316911][ T8270] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.362564][ T3576] Bluetooth: Wrong link type (-22) [ 297.383202][ T8358] netlink: 'syz.4.1087': attribute type 1 has an invalid length. [ 297.462246][ T8358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1087'. [ 297.553292][ T8270] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.589169][ T8355] netlink: 'syz.1.1083': attribute type 4 has an invalid length. [ 297.598506][ T8355] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1083'. [ 297.651094][ T3822] Bluetooth: hci8: command 0x040f tx timeout [ 297.852834][ T8373] delete_channel: no stack [ 298.042234][ T8270] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 298.093919][ T8270] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 298.139410][ T8270] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 298.192738][ T8270] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 298.421296][ T8270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.474672][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 298.502207][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 298.514482][ T8270] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.531731][ T1077] Bluetooth: hci4: command 0x0406 tx timeout [ 298.533604][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 298.564414][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 298.594911][ T3823] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.602047][ T3823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.639210][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 298.648682][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 298.685454][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 298.716350][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.723597][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.771941][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 298.824896][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 298.862714][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 298.899361][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 298.953224][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 299.609237][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 299.699926][ T8270] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 299.738122][ T4016] Bluetooth: hci8: command 0x0419 tx timeout [ 299.754911][ T8270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 299.789019][ T8405] loop4: detected capacity change from 0 to 1764 [ 299.848502][ T8407] delete_channel: no stack [ 299.866375][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 299.887721][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 299.936133][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.979639][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 300.118545][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.148953][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 300.166280][ T8415] exFAT-fs (nullb0): invalid boot record signature [ 300.172830][ T8415] exFAT-fs (nullb0): failed to read boot sector [ 300.179085][ T8415] exFAT-fs (nullb0): failed to recognize exfat type [ 300.455519][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 300.491871][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 300.505158][ T8270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.644568][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 300.662014][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 300.704274][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 300.712643][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 300.731858][ T8270] device veth0_vlan entered promiscuous mode [ 300.741102][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 300.761741][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 300.791605][ T8270] device veth1_vlan entered promiscuous mode [ 300.894368][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 300.983694][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 301.014811][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 301.047331][ T8270] device veth0_macvtap entered promiscuous mode [ 301.089820][ T8270] device veth1_macvtap entered promiscuous mode [ 301.147493][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.194285][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.231098][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.281071][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.300968][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.311571][ T3613] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 301.312996][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.350097][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.363490][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.389298][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.419050][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.451241][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.469068][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.509414][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.542660][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.584871][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.621145][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.660972][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.671209][ T3613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 301.680956][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.689933][ T3613] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 301.711448][ T8270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.719427][ T3613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.724342][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 301.761882][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 301.781768][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 301.785682][ T3613] usb 1-1: config 0 descriptor?? [ 301.821585][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 301.834163][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.862897][ T3613] gspca_main: spca561-2.14.0 probing abcd:cdee [ 301.869907][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.901146][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.921426][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.951754][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.980962][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.002467][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.025702][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.041559][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.061095][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.087259][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.112708][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.135213][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.155414][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.176178][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.227549][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.248618][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.270285][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.307178][ T8270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.336754][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 302.372471][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 302.399413][ T8270] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.417365][ T8270] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.451133][ T3613] spca561: probe of 1-1:0.0 failed with error -22 [ 302.460213][ T3613] usb 1-1: MIDIStreaming interface descriptor not found [ 302.586694][ T8270] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.606511][ T8270] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.638781][ T8462] exFAT-fs (nullb0): invalid boot record signature [ 302.645472][ T8462] exFAT-fs (nullb0): failed to read boot sector [ 302.651906][ T8462] exFAT-fs (nullb0): failed to recognize exfat type [ 302.728639][ T13] usb 1-1: USB disconnect, device number 11 [ 303.075168][ T5842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.155755][ T8469] trusted_key: encrypted_key: key user:syz not found [ 303.161393][ T8469] kernel read not supported for file /  (pid: 8469 comm: syz.0.1123) [ 303.701100][ T25] audit: type=1800 audit(1722472196.035:169): pid=8469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1123" name=2001 dev="mqueue" ino=54856 res=0 errno=0 [ 303.744066][ T5842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.775142][ T8467] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.786453][ T8467] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.982689][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 304.026845][ T8478] binder: BINDER_SET_CONTEXT_MGR already set [ 304.043936][ T8478] binder: 8477:8478 ioctl 4018620d 20000040 returned -16 [ 304.050172][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.119978][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.198959][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 305.467671][ T1077] hid-generic 0000:0000:0000.000B: unknown main item tag 0xe [ 305.499611][ T1077] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 305.604535][ T1077] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 305.767091][ T8493] netlink: 'syz.3.1062': attribute type 4 has an invalid length. [ 306.055057][ T8507] overlayfs: missing 'workdir' [ 306.459151][ T8511] exFAT-fs (nullb0): invalid boot record signature [ 306.465699][ T8511] exFAT-fs (nullb0): failed to read boot sector [ 306.472032][ T8511] exFAT-fs (nullb0): failed to recognize exfat type [ 308.498841][ T8536] loop4: detected capacity change from 0 to 32768 [ 308.546870][ T8536] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 308.555134][ T8536] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 308.567252][ T8536] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 308.576106][ T3617] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 308.582980][ T3617] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 308.708829][ T3617] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 125ms [ 308.728905][ T3617] gfs2: fsid=syz:syz.0: jid=0: Done [ 308.736796][ T8536] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 308.899147][ T8536] ODEBUG: Out of memory. ODEBUG disabled [ 309.412277][ T8536] syz.4.1142 (8536): drop_caches: 2 [ 309.419870][ T8536] syz.4.1142 (8536): drop_caches: 2 [ 309.906582][ T3822] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 310.118885][ T8547] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 310.173665][ T8547] [U] J"—E:ÀÆ" [ 310.178645][ T8547] [U] ª‡Ó [ 310.221525][ T3822] usb 1-1: Using ep0 maxpacket: 16 [ 310.231115][ T3729] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 310.351357][ T3822] usb 1-1: config 0 has too many interfaces: 98, using maximum allowed: 32 [ 310.371145][ T3822] usb 1-1: config 0 has an invalid interface number: 153 but max is 97 [ 310.454808][ T3822] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 98 [ 310.491676][ T3822] usb 1-1: config 0 has no interface number 0 [ 310.791241][ T3729] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 310.847545][ T3729] usb 4-1: config 0 has no interface number 0 [ 310.997683][ T3729] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.175744][ T8557] overlayfs: failed to resolve './file0': -2 [ 311.188540][ T3729] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.242300][ T8567] loop4: detected capacity change from 0 to 164 [ 311.261787][ T3729] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 311.293656][ T3729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.330669][ T3027] udevd[3027]: worker [3811] terminated by signal 33 (Unknown signal 33) [ 311.356469][ T3729] usb 4-1: config 0 descriptor?? [ 311.371326][ T3027] udevd[3027]: worker [3811] failed while handling '/devices/virtual/block/loop4' [ 311.372176][ T3822] usb 1-1: New USB device found, idVendor=1199, idProduct=0025, bcdDevice=1e.64 [ 311.428351][ T3822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.461004][ T3822] usb 1-1: Product: syz [ 311.465219][ T3822] usb 1-1: Manufacturer: syz [ 311.469813][ T3822] usb 1-1: SerialNumber: syz [ 311.527877][ T3822] usb 1-1: config 0 descriptor?? [ 311.582089][ T3822] sierra 1-1:0.153: Sierra USB modem converter detected [ 311.723056][ T3822] usb 1-1: USB disconnect, device number 12 [ 311.729341][ T3822] sierra 1-1:0.153: device disconnected [ 311.871012][ T13] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 311.987970][ T3729] logitech-djreceiver 0003:046D:C71B.000C: unknown main item tag 0x0 [ 311.996350][ T3729] logitech-djreceiver 0003:046D:C71B.000C: unknown main item tag 0x0 [ 312.004596][ T3729] logitech-djreceiver 0003:046D:C71B.000C: unknown main item tag 0x0 [ 312.013142][ T3729] logitech-djreceiver 0003:046D:C71B.000C: unknown main item tag 0x0 [ 312.021270][ T3729] logitech-djreceiver 0003:046D:C71B.000C: unknown main item tag 0x0 [ 312.029343][ T3729] logitech-djreceiver 0003:046D:C71B.000C: unknown main item tag 0x0 [ 312.037720][ T3729] logitech-djreceiver 0003:046D:C71B.000C: unknown main item tag 0x0 [ 312.088653][ T3729] logitech-djreceiver 0003:046D:C71B.000C: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.3-1/input32 [ 312.727794][ T3729] usb 4-1: USB disconnect, device number 13 [ 312.984063][ T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.055563][ T8597] tmpfs: Cannot retroactively limit inodes [ 313.081233][ T13] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 313.109358][ T8599] loop4: detected capacity change from 0 to 164 [ 313.121056][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 313.146169][ T13] usb 3-1: SerialNumber: syz [ 313.222011][ T13] usb 3-1: bad CDC descriptors [ 313.357180][ T8608] netlink: 'syz.1.1168': attribute type 4 has an invalid length. [ 313.432905][ T8611] netlink: 'syz.1.1168': attribute type 4 has an invalid length. [ 313.462056][ T13] usb 3-1: USB disconnect, device number 8 [ 313.631124][ T4016] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 313.991185][ T4016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 314.000866][ T4016] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 314.071009][ T4016] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.101730][ T4016] usb 1-1: config 0 descriptor?? [ 314.143589][ T4016] gspca_main: spca561-2.14.0 probing abcd:cdee [ 314.492245][ T4171] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 314.657855][ T8610] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1169'. [ 314.721201][ T4016] spca561: probe of 1-1:0.0 failed with error -22 [ 314.802427][ T4016] usb 1-1: MIDIStreaming interface descriptor not found [ 314.961165][ T4016] usb 1-1: USB disconnect, device number 13 [ 314.981113][ T4171] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 314.999496][ T4171] usb 3-1: config 0 has no interface number 0 [ 315.623391][ T4171] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.635832][ T4171] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.646077][ T4171] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 315.657912][ T4171] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.742735][ T4171] usb 3-1: config 0 descriptor?? [ 315.916330][ T8663] loop4: detected capacity change from 0 to 256 [ 315.970400][ T8663] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 316.004515][ T8663] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 316.061310][ T8663] vhci_hcd: invalid port number 0 [ 316.151131][ T3613] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 316.243782][ T4171] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0 [ 316.272223][ T4171] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0 [ 316.291376][ T4171] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0 [ 316.334835][ T4171] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0 [ 316.341243][ T8673] hfs: can't find a HFS filesystem on dev nullb0 [ 316.361096][ T4171] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0 [ 316.400859][ T4171] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0 [ 316.431024][ T4171] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0 [ 316.460613][ T4171] logitech-djreceiver 0003:046D:C71B.000D: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.2-1/input32 [ 316.502813][ T4171] usb 3-1: USB disconnect, device number 9 [ 316.880431][ T3613] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.093310][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.124549][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.701201][ T3613] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 317.710503][ T3613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 317.718920][ T3613] usb 4-1: SerialNumber: syz [ 317.777409][ T3613] usb 4-1: bad CDC descriptors [ 318.386629][ T3609] usb 4-1: USB disconnect, device number 14 [ 319.231921][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1202'. [ 319.552822][ T8714] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 319.648626][ T8723] loop4: detected capacity change from 0 to 512 [ 319.780628][ T8723] EXT4-fs (loop4): 1 truncate cleaned up [ 319.802689][ T8723] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,,errors=continue. Quota mode: none. [ 319.821754][ T8728] netlink: 'syz.1.1210': attribute type 7 has an invalid length. [ 321.297802][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1217'. [ 323.631112][ T3822] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 323.805259][ T8796] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 323.891078][ T3822] usb 4-1: Using ep0 maxpacket: 16 [ 324.004634][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1228'. [ 324.021280][ T3822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 324.044898][ T3822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 324.062161][ T8802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1228'. [ 324.084288][ T8802] netlink: 'syz.0.1228': attribute type 1 has an invalid length. [ 324.241330][ T3822] usb 4-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=ec.06 [ 324.254693][ T3822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.272926][ T3822] usb 4-1: Product: syz [ 324.282839][ T3822] usb 4-1: Manufacturer: syz [ 324.310211][ T3822] usb 4-1: SerialNumber: syz [ 324.325261][ T3822] usb 4-1: config 0 descriptor?? [ 324.403056][ T3822] HFC-S_USB: probe of 4-1:0.0 failed with error -5 [ 324.451249][ T4016] Bluetooth: hci1: command 0x0406 tx timeout [ 324.637461][ T3822] usb 4-1: USB disconnect, device number 15 [ 325.983297][ T3823] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 326.183518][ T8832] tmpfs: Unknown parameter 'usrquota' [ 326.266189][ T3823] usb 5-1: Using ep0 maxpacket: 32 [ 326.483401][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1240'. [ 326.548750][ T8838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1240'. [ 326.581276][ T3823] usb 5-1: New USB device found, idVendor=0979, idProduct=0280, bcdDevice=89.a5 [ 326.602628][ T3823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.618395][ T3823] usb 5-1: Product: syz [ 326.631016][ T8838] netlink: 'syz.3.1240': attribute type 1 has an invalid length. [ 326.636835][ T3823] usb 5-1: Manufacturer: syz [ 326.655889][ T3823] usb 5-1: SerialNumber: syz [ 326.676619][ T3823] usb 5-1: config 0 descriptor?? [ 326.732939][ T3823] gspca_main: jeilinj-2.14.0 probing 0979:0280 [ 326.982132][ T3823] usb 5-1: USB disconnect, device number 16 [ 327.269825][ T8851] netlink: 'syz.1.1244': attribute type 25 has an invalid length. [ 327.921768][ T8854] x_tables: duplicate entry at hook 1 [ 328.094678][ T8860] loop4: detected capacity change from 0 to 256 [ 328.156671][ T8861] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 328.169336][ T8860] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 328.475520][ T8866] loop4: detected capacity change from 0 to 2048 [ 328.531252][ T8866] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 329.057743][ T8881] loop4: detected capacity change from 0 to 2048 [ 329.163412][ T8881] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 329.986925][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1261'. [ 330.103768][ T8897] netlink: 'syz.3.1257': attribute type 25 has an invalid length. [ 331.782812][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1266'. [ 332.101078][ T2988] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 332.361022][ T2988] usb 3-1: Using ep0 maxpacket: 16 [ 332.511196][ T3617] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 332.751109][ T2988] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 332.751142][ T2988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.751162][ T2988] usb 3-1: Product: syz [ 332.751176][ T2988] usb 3-1: Manufacturer: syz [ 332.751191][ T2988] usb 3-1: SerialNumber: syz [ 332.752939][ T2988] usb 3-1: config 0 descriptor?? [ 332.771224][ T3617] usb 1-1: Using ep0 maxpacket: 16 [ 332.812686][ T2988] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 333.111288][ T3617] usb 1-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice= 8.e8 [ 333.111318][ T3617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.111343][ T3617] usb 1-1: Product: syz [ 333.111357][ T3617] usb 1-1: Manufacturer: syz [ 333.111371][ T3617] usb 1-1: SerialNumber: syz [ 333.114129][ T3617] usb 1-1: config 0 descriptor?? [ 333.281098][ T2988] usb 3-1: clie_3_5_startup: get interface number failed: -71 [ 333.281191][ T2988] visor: probe of 3-1:0.0 failed with error -71 [ 333.283110][ T2988] usb 3-1: USB disconnect, device number 10 [ 333.368970][ T3617] usb 1-1: USB disconnect, device number 14 [ 333.702683][ T8930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1273'. [ 334.281080][ T4016] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 334.621784][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1286'. [ 334.641264][ T4016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 334.641297][ T4016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 334.641323][ T4016] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 334.641357][ T4016] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 334.641379][ T4016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.643029][ T4016] usb 4-1: config 0 descriptor?? [ 334.661329][ T8944] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 334.886606][ T8936] udc-core: couldn't find an available UDC or it's busy [ 334.886626][ T8936] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 335.162692][ T4016] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xd [ 335.163087][ T4016] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 335.166673][ T4016] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 335.464071][ T4016] usb 4-1: USB disconnect, device number 16 [ 336.411247][ T9000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1300'. [ 336.524743][ T9000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1300'. [ 336.646499][ T9000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1300'. [ 337.026647][ T9012] hub 9-0:1.0: USB hub found [ 337.044013][ T9012] hub 9-0:1.0: 8 ports detected [ 339.711193][ T4016] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 339.731631][ T9036] device batadv0 entered promiscuous mode [ 339.731825][ T9036] device vlan2 entered promiscuous mode [ 339.791326][ T9036] device batadv0 left promiscuous mode [ 340.071404][ T4016] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 340.071437][ T4016] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 340.071462][ T4016] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 340.071496][ T4016] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 340.071519][ T4016] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.073169][ T4016] usb 5-1: config 0 descriptor?? [ 340.091406][ T9033] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 340.316876][ T9033] udc-core: couldn't find an available UDC or it's busy [ 340.352750][ T9033] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 340.652905][ T4016] plantronics 0003:047F:FFFF.000F: unknown main item tag 0xd [ 340.670898][ T4016] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 340.682042][ T4016] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 340.744294][ T9057] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1317'. [ 340.808328][ T9057] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1317'. [ 340.962167][ T3822] usb 5-1: USB disconnect, device number 17 [ 341.720697][ T9075] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 341.811439][ T3617] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 342.061907][ T9086] tmpfs: Unknown parameter 'usrquota' [ 342.201539][ T3617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.201570][ T3617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.201602][ T3617] usb 3-1: New USB device found, idVendor=056a, idProduct=0101, bcdDevice= 0.00 [ 342.201625][ T3617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.203498][ T3617] usb 3-1: config 0 descriptor?? [ 342.714563][ T3617] wacom 0003:056A:0101.0010: unknown main item tag 0x0 [ 342.717490][ T3617] wacom 0003:056A:0101.0010: hidraw0: USB HID v0.00 Device [HID 056a:0101] on usb-dummy_hcd.2-1/input0 [ 343.942829][ T3617] usb 3-1: USB disconnect, device number 11 [ 344.495718][ T9106] "syz.1.1323" (9106) uses obsolete ecb(arc4) skcipher [ 344.612497][ T4100] Bluetooth: hci2: command 0x0406 tx timeout [ 345.244517][ T25] audit: type=1326 audit(1722472238.095:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9108 comm="syz.3.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99b0443b9 code=0x7ffc0000 [ 345.301280][ T4100] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 345.379930][ T25] audit: type=1326 audit(1722472238.125:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9108 comm="syz.3.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99b0443b9 code=0x7ffc0000 [ 345.402257][ C1] vkms_vblank_simulate: vblank timer overrun [ 345.721693][ T4100] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.878327][ T4100] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.960200][ T25] audit: type=1326 audit(1722472238.125:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9108 comm="syz.3.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7ff99b0443b9 code=0x7ffc0000 [ 346.081067][ T4100] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 346.113534][ T25] audit: type=1326 audit(1722472238.125:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9108 comm="syz.3.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99b0443b9 code=0x7ffc0000 [ 346.125868][ T9123] netlink: 'syz.0.1334': attribute type 1 has an invalid length. [ 346.153030][ T4100] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.165206][ T25] audit: type=1326 audit(1722472238.125:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9108 comm="syz.3.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99b0443b9 code=0x7ffc0000 [ 346.194014][ T4100] usb 5-1: config 0 descriptor?? [ 346.267149][ T9127] overlayfs: failed to clone upperpath [ 346.377021][ T9130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1338'. [ 346.674015][ T4100] hid-led 0003:0FC5:B080.0011: unknown main item tag 0x0 [ 346.891183][ T4100] hid-led: probe of 0003:0FC5:B080.0011 failed with error -71 [ 346.892657][ T4100] usb 5-1: USB disconnect, device number 18 [ 347.591727][ T3617] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 347.772201][ T9145] loop4: detected capacity change from 0 to 16 [ 347.852471][ T3617] usb 3-1: Using ep0 maxpacket: 8 [ 348.374999][ T9145] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 348.571125][ T3617] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 348.611069][ T3617] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 348.668430][ T3617] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 348.729466][ T3617] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.774531][ T3617] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 348.793119][ T3617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.121120][ T3617] usb 3-1: usb_control_msg returned -32 [ 349.126742][ T3822] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 349.134459][ T3617] usbtmc 3-1:16.0: can't read capabilities [ 349.411098][ T3822] usb 1-1: Using ep0 maxpacket: 8 [ 349.538470][ T9165] loop4: detected capacity change from 0 to 32768 [ 349.545259][ T3822] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 349.558682][ T3822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.571578][ T4100] Bluetooth: hci8: command 0x0405 tx timeout [ 349.585059][ T3822] usb 1-1: config 0 descriptor?? [ 349.643902][ T3822] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 349.660354][ T3822] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input24 [ 349.780789][ T9165] XFS (loop4): Mounting V5 Filesystem [ 349.816956][ T4100] Bluetooth: hci0: command 0x0406 tx timeout [ 349.824544][ T4100] Bluetooth: hci3: command 0x0406 tx timeout [ 349.920671][ T9165] XFS (loop4): Ending clean mount [ 350.026007][ T4100] usb 1-1: USB disconnect, device number 15 [ 350.187498][ T7004] XFS (loop4): Unmounting Filesystem [ 350.689673][ T3822] usb 3-1: USB disconnect, device number 12 [ 350.734637][ T25] audit: type=1326 audit(1722472243.585:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a570423b9 code=0x7ffc0000 [ 350.802985][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1356'. [ 350.815405][ T25] audit: type=1326 audit(1722472243.615:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a570423b9 code=0x7ffc0000 [ 350.895856][ T25] audit: type=1326 audit(1722472243.615:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f3a570423b9 code=0x7ffc0000 [ 350.973632][ T25] audit: type=1326 audit(1722472243.615:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a570423b9 code=0x7ffc0000 [ 351.042945][ T25] audit: type=1326 audit(1722472243.615:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a570423b9 code=0x7ffc0000 [ 351.216934][ T9202] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1362'. [ 351.305278][ T9206] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 351.702157][ T9219] tmpfs: Bad value for 'mpol' [ 351.750736][ T9220] netlink: 'syz.3.1367': attribute type 13 has an invalid length. [ 352.601157][ T13] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 352.991208][ T13] usb 5-1: config 0 has no interfaces? [ 352.997517][ T13] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 353.031017][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.063266][ T13] usb 5-1: config 0 descriptor?? [ 353.267921][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1371'. [ 353.339503][ T13] usb 5-1: USB disconnect, device number 19 [ 353.769211][ T9241] netlink: 4156 bytes leftover after parsing attributes in process `syz.1.1375'. [ 355.582245][ T9275] netlink: 4156 bytes leftover after parsing attributes in process `syz.4.1387'. [ 355.724967][ T25] audit: type=1804 audit(1722472248.575:180): pid=9281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1389" name="/newroot/162/bus/bus" dev="overlay" ino=889 res=1 errno=0 [ 356.765918][ T9254] chnl_net:caif_netlink_parms(): no params data found [ 356.870284][ T3763] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.954818][ T3763] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.011266][ T3729] Bluetooth: hci9: command 0x0409 tx timeout [ 357.084927][ T3763] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.138192][ T9254] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.151487][ T9254] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.175057][ T9254] device bridge_slave_0 entered promiscuous mode [ 357.197685][ T3763] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.220740][ T9254] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.231183][ T9254] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.272345][ T9254] device bridge_slave_1 entered promiscuous mode [ 357.322458][ T9310] netlink: 4156 bytes leftover after parsing attributes in process `syz.4.1399'. [ 357.417407][ T9254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.472739][ T9254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.474441][ T25] audit: type=1804 audit(1722472250.325:181): pid=9312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1400" name="/newroot/169/bus/bus" dev="overlay" ino=934 res=1 errno=0 [ 357.654634][ T9254] team0: Port device team_slave_0 added [ 357.688959][ T9254] team0: Port device team_slave_1 added [ 357.723691][ T9320] vivid-000: disconnect [ 357.783526][ T9317] vivid-000: reconnect [ 357.831829][ T9254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.838784][ T9254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.951038][ T9254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.007419][ T9254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.019808][ T9254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.066605][ T9254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.290387][ T3729] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 358.311690][ T9254] device hsr_slave_0 entered promiscuous mode [ 358.346471][ T9254] device hsr_slave_1 entered promiscuous mode [ 358.356820][ T9254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.423003][ T9337] netlink: 'syz.0.1410': attribute type 25 has an invalid length. [ 358.673759][ T9254] Cannot create hsr debugfs directory [ 358.971092][ T3729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.000969][ T3729] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 359.051135][ T3729] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 359.091205][ T3729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.124129][ T3729] usb 3-1: config 0 descriptor?? [ 359.131137][ T4100] Bluetooth: hci9: command 0x041b tx timeout [ 360.133345][ T3729] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 360.151671][ T3729] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 360.188776][ T9254] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 360.241348][ T9254] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 360.262546][ T9254] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 360.348792][ T3763] device hsr_slave_0 left promiscuous mode [ 360.361700][ T3763] device hsr_slave_1 left promiscuous mode [ 360.398176][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.411063][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.431854][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.459649][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.491298][ T3763] device bridge_slave_1 left promiscuous mode [ 360.507789][ T3763] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.564312][ T3763] device bridge_slave_0 left promiscuous mode [ 360.570526][ T3763] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.638131][ T3763] device veth1_macvtap left promiscuous mode [ 360.651265][ T3763] device veth0_macvtap left promiscuous mode [ 360.657325][ T3763] device veth1_vlan left promiscuous mode [ 360.663540][ T4100] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 360.666592][ T9345] loop4: detected capacity change from 0 to 32768 [ 360.696409][ T3763] device veth0_vlan left promiscuous mode [ 360.775378][ T9345] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1413 (9345) [ 360.853989][ T9345] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 360.879317][ T9345] BTRFS info (device loop4): using free space tree [ 360.904924][ T9345] BTRFS info (device loop4): has skinny extents [ 360.921261][ T4100] usb 2-1: Using ep0 maxpacket: 8 [ 361.051451][ T4100] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 361.071069][ T4100] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 361.134465][ T9345] BTRFS info (device loop4): enabling ssd optimizations [ 361.150504][ T3763] team0 (unregistering): Port device team_slave_1 removed [ 361.171433][ T4013] Bluetooth: hci9: command 0x040f tx timeout [ 361.226250][ T3763] team0 (unregistering): Port device team_slave_0 removed [ 361.291118][ T4100] usb 2-1: New USB device found, idVendor=0499, idProduct=5005, bcdDevice= 8.ff [ 361.307605][ T4100] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.323401][ T4100] usb 2-1: Product: syz [ 361.333099][ T4100] usb 2-1: Manufacturer: syz [ 361.342358][ T4100] usb 2-1: SerialNumber: syz [ 361.354376][ T4100] usb 2-1: config 0 descriptor?? [ 361.372903][ T3763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.443082][ T4100] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 361.713563][ T2988] usb 2-1: USB disconnect, device number 11 [ 361.790815][ T3763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.059984][ T3763] bond0 (unregistering): Released all slaves [ 362.144678][ T25] audit: type=1804 audit(1722472254.995:182): pid=9385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1421" name="/newroot/177/bus/bus" dev="overlay" ino=984 res=1 errno=0 [ 362.175092][ T9254] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 362.471435][ T9254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.510162][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 362.528685][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 362.572656][ T9254] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.598636][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 362.618025][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 362.644984][ T4013] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.652169][ T4013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.785076][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 362.801916][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 362.832889][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 362.871833][ T3609] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.878901][ T3609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.907139][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 362.928370][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 362.972155][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 363.024108][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 363.058117][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 363.083622][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 363.105650][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 363.141839][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 363.186653][ T9254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.219699][ T9387] loop4: detected capacity change from 0 to 40427 [ 363.233623][ T9254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 363.261471][ T3609] Bluetooth: hci9: command 0x0419 tx timeout [ 363.263261][ T9400] device wlan1 entered promiscuous mode [ 363.297674][ T9387] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 363.297710][ T9400] device macvlan2 entered promiscuous mode [ 363.327333][ T9387] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 363.337708][ T9400] device wlan1 left promiscuous mode [ 363.357679][ T9387] F2FS-fs (loop4): Unrecognized mount option "ÿ" or missing value [ 363.392152][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 363.412563][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 363.448101][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 363.588668][ T9404] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1428'. [ 363.868631][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 363.883805][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 363.927085][ T9254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.017588][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 364.055128][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 364.549882][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 364.558295][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 364.567819][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 364.576314][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 364.621828][ T9254] device veth0_vlan entered promiscuous mode [ 364.632552][ T9425] netlink: 'syz.1.1434': attribute type 1 has an invalid length. [ 364.652299][ T9254] device veth1_vlan entered promiscuous mode [ 364.725412][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 364.736538][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 364.756348][ T9254] device veth0_macvtap entered promiscuous mode [ 364.782851][ T9254] device veth1_macvtap entered promiscuous mode [ 364.831133][ T3609] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 364.844767][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.908228][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.937708][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.960338][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.027166][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.087532][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.111246][ T3609] usb 1-1: Using ep0 maxpacket: 8 [ 365.129943][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.166281][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.197638][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.250875][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.261696][ T3609] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 365.279812][ T3609] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 365.304355][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.323852][ T3609] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 365.342827][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.357223][ T3609] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 365.376954][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.403465][ T3609] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 365.418216][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.440302][ T3609] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.461162][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.558659][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.589162][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.630277][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.689955][ T9254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.741601][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 365.749880][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 365.758217][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 365.768237][ T3609] usb 1-1: usb_control_msg returned -32 [ 365.773869][ T3609] usbtmc 1-1:16.0: can't read capabilities [ 365.780573][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 365.823298][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.894530][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.941602][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.942141][ T9442] loop4: detected capacity change from 0 to 512 [ 365.984405][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.030400][ T25] audit: type=1326 audit(1722472258.875:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.1.1438" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f02cf13a3b9 code=0x0 [ 366.053422][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.081053][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.090885][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.150990][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.160828][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.211258][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.241014][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.270984][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.280819][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.330993][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.340833][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.390989][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.400830][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.460984][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.492549][ T9254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.498008][ T9442] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 366.510089][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 366.534671][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 366.547522][ T9442] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 366.558911][ T9442] System zones: 1-12 [ 366.618977][ T9254] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.661074][ T9442] EXT4-fs (loop4): 1 truncate cleaned up [ 366.674281][ T9254] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.703248][ T9442] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,,errors=continue. Quota mode: writeback. [ 366.737521][ T9254] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.775452][ T9254] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.974220][ T3734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.992283][ T3734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.052378][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 367.073418][ T8125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.092158][ T8125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.122418][ T4100] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 367.143965][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 367.501576][ T4100] usb 5-1: Using ep0 maxpacket: 32 [ 368.140687][ T3613] usb 1-1: USB disconnect, device number 16 [ 368.181448][ T4100] usb 5-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 368.231502][ T4100] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 368.275173][ T4100] usb 5-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 368.293243][ T9461] netlink: 'syz.1.1444': attribute type 1 has an invalid length. [ 368.305512][ T4100] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.337506][ T4100] usb 5-1: config 0 descriptor?? [ 368.407244][ T4100] usb 5-1: bad CDC descriptors [ 368.417241][ T4100] usb 5-1: bad CDC descriptors [ 368.650815][ T4100] usb 5-1: USB disconnect, device number 20 [ 368.671426][ T9470] device syzkaller1 entered promiscuous mode [ 368.959387][ T9467] chnl_net:caif_netlink_parms(): no params data found [ 369.302194][ T9467] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.309300][ T9467] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.371078][ T9467] device bridge_slave_0 entered promiscuous mode [ 369.457442][ T9467] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.471148][ T9467] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.480242][ T9467] device bridge_slave_1 entered promiscuous mode [ 369.594739][ T9467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.633955][ T9467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.722726][ T9467] team0: Port device team_slave_0 added [ 369.730802][ T9467] team0: Port device team_slave_1 added [ 369.761021][ T13] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 369.817705][ T9467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.835928][ T9467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.881129][ T9467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.910802][ T9467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.921054][ T2988] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 369.931865][ T9467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.021194][ T9467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.131362][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.153600][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 370.171018][ T2988] usb 2-1: Using ep0 maxpacket: 8 [ 370.227912][ T13] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 370.301593][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.751998][ T9329] plantronics 0003:047F:FFFF.0012: timeout initializing reports [ 370.899021][ T2988] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 370.909562][ T2988] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 370.922127][ T13] usb 1-1: config 0 descriptor?? [ 370.927217][ T2988] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 370.947696][ T9499] loop4: detected capacity change from 0 to 256 [ 370.961229][ T2988] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.010431][ T9499] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 371.011034][ T2988] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 371.060219][ T2988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.080623][ T3823] Bluetooth: hci8: command 0x0409 tx timeout [ 371.253005][ T9467] device hsr_slave_0 entered promiscuous mode [ 371.503865][ T9467] device hsr_slave_1 entered promiscuous mode [ 371.526017][ T9467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.668531][ T2988] usb 2-1: usb_control_msg returned -32 [ 371.676765][ T13] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 371.684887][ T2988] usbtmc 2-1:16.0: can't read capabilities [ 371.692680][ T9467] Cannot create hsr debugfs directory [ 371.693296][ T13] plantronics 0003:047F:FFFF.0013: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 371.796241][ T9510] loop4: detected capacity change from 0 to 512 [ 371.910016][ T9510] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 372.001143][ T9510] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038 (0x7fffffff) [ 372.267663][ T3613] usb 3-1: USB disconnect, device number 13 [ 372.422696][ T3763] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.014288][ T3763] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.107039][ T3613] usb 1-1: USB disconnect, device number 17 [ 373.128322][ T3763] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.191262][ T9531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1461'. [ 373.235708][ T9531] tipc: Started in network mode [ 373.252756][ T13] Bluetooth: hci8: command 0x041b tx timeout [ 373.272143][ T9531] tipc: Node identity , cluster identity 8 [ 373.298639][ T13] usb 2-1: USB disconnect, device number 12 [ 373.328155][ T3763] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.374208][ T9536] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1463'. [ 373.452494][ T9537] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 375.326352][ T9555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1467'. [ 375.335801][ T7] Bluetooth: hci8: command 0x040f tx timeout [ 375.418425][ T25] audit: type=1326 audit(1722472268.265:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9543 comm="syz.4.1465" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda649c73b9 code=0x0 [ 376.528984][ T9467] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 376.571320][ T9467] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 376.609770][ T9467] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 376.666579][ T9467] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 376.908365][ T9467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.915152][ T26] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 376.982509][ T9467] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.001599][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 377.009851][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 377.049451][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 377.067258][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 377.089062][ T3609] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.096156][ T3609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.123586][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 377.142243][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 377.161003][ T7] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 377.161329][ T3609] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.175620][ T3609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.294502][ T3763] device hsr_slave_0 left promiscuous mode [ 377.301274][ T3763] device hsr_slave_1 left promiscuous mode [ 377.325366][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.333268][ T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.351070][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.358225][ T26] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 377.393393][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.401047][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.411115][ T3823] Bluetooth: hci8: command 0x0419 tx timeout [ 377.412463][ T3763] device bridge_slave_1 left promiscuous mode [ 377.417191][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 377.437381][ T3763] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.453648][ T3763] device bridge_slave_0 left promiscuous mode [ 377.471482][ T3763] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.482684][ T9582] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 377.491384][ T26] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 377.535156][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 377.559680][ T26] usb 2-1: SerialNumber: syz [ 377.561179][ T7] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 377.604978][ T7] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1596, setting to 1024 [ 377.790801][ T7] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 377.928335][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.172671][ T9576] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 378.233102][ T7] hub 5-1:4.0: USB hub found [ 378.246665][ T3763] device veth1_macvtap left promiscuous mode [ 378.253473][ T3763] device veth0_macvtap left promiscuous mode [ 378.260000][ T3763] device veth1_vlan left promiscuous mode [ 378.271285][ T3763] device veth0_vlan left promiscuous mode [ 378.293238][ T9571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1472'. [ 378.423364][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.429735][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.461129][ T7] hub 5-1:4.0: 2 ports detected [ 378.491630][ T7] hub 5-1:4.0: insufficient power available to use all downstream ports [ 379.180409][ T7] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 379.202296][ T7] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 379.272316][ T7] usb 5-1: USB disconnect, device number 21 [ 380.131061][ T3617] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 380.183723][ T3763] team0 (unregistering): Port device team_slave_1 removed [ 380.253731][ T3763] team0 (unregistering): Port device team_slave_0 removed [ 380.302450][ T3763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.360892][ T3763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.531370][ T3617] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x31, skipping [ 380.551954][ T3617] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 380.601291][ T3617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.630789][ T3617] usb 1-1: config 0 descriptor?? [ 380.634486][ T3763] bond0 (unregistering): Released all slaves [ 380.746923][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 380.766997][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 380.807232][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 380.842510][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 380.890874][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 381.007595][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 381.042474][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 381.062809][ T26] usb 2-1: 0:2 : does not exist [ 381.067672][ T26] usb 2-1: unit 5 not found! [ 381.206750][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 381.234128][ T26] usb 2-1: USB disconnect, device number 13 [ 381.237312][ T9609] loop4: detected capacity change from 0 to 8192 [ 381.240700][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 381.785348][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 381.801347][ T3617] ath6kl: Failed to submit usb control message: -110 [ 381.808062][ T3617] ath6kl: unable to send the bmi data to the device: -110 [ 381.809522][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 381.826261][ T9609] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 381.835509][ T3617] ath6kl: Unable to send get target info: -110 [ 381.842056][ T9609] REISERFS (device loop4): using ordered data mode [ 381.849917][ T9609] reiserfs: using flush barriers [ 381.858791][ T9609] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 381.860772][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 381.876749][ T9609] REISERFS (device loop4): checking transaction log (loop4) [ 381.979246][ T9467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 382.009400][ T3617] ath6kl: Failed to init ath6kl core: -110 [ 382.145315][ T9609] REISERFS (device loop4): Using tea hash to sort names [ 382.181525][ T9609] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 382.222579][ T9609] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 382.358434][ T9609] REISERFS error (device loop4): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 382.410218][ T3617] ath6kl_usb: probe of 1-1:0.0 failed with error -110 [ 382.432087][ T9609] REISERFS (device loop4): Remounting filesystem read-only [ 382.455834][ T9467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.462948][ T3617] usb 1-1: USB disconnect, device number 18 [ 382.494761][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 382.509702][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 382.558540][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 382.597045][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 382.673623][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 382.699526][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 382.791268][ T9467] device veth0_vlan entered promiscuous mode [ 382.798555][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 382.821814][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 382.864247][ T9467] device veth1_vlan entered promiscuous mode [ 382.952448][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 382.973489][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 383.008444][ T9637] loop4: detected capacity change from 0 to 256 [ 383.016135][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 383.051933][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 383.073831][ T9467] device veth0_macvtap entered promiscuous mode [ 383.084035][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 383.125103][ T9637] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x84cb8d72, utbl_chksum : 0xe619d30d) [ 383.132440][ T9467] device veth1_macvtap entered promiscuous mode [ 383.161072][ T3822] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 383.222721][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.256748][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.289949][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.324828][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.365859][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.399623][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.409813][ T3822] usb 1-1: Using ep0 maxpacket: 32 [ 383.439283][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.472944][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.508996][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.531234][ T3822] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 383.553338][ T3822] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1596, setting to 1024 [ 383.568952][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.596508][ T3822] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 383.606862][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.634133][ T3822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.644503][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.674450][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.685395][ T9632] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 383.701844][ T3822] hub 1-1:4.0: USB hub found [ 383.715401][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.761639][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.801989][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.830915][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.852997][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.885194][ T9467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.921153][ T3822] hub 1-1:4.0: 2 ports detected [ 383.934557][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 383.942826][ T3822] hub 1-1:4.0: insufficient power available to use all downstream ports [ 383.963804][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 383.993835][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.017819][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.053130][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.195626][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.209599][ T3822] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 384.216459][ T3822] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 384.251650][ T3822] usb 1-1: USB disconnect, device number 19 [ 384.394086][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.635131][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.862926][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.873649][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.972270][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.025065][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.054295][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.085283][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.125014][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.160957][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.192939][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.230954][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.253467][ T25] audit: type=1326 audit(1722472278.105:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.3.1497" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f4a8a83b9 code=0x0 [ 385.258437][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.348522][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.398698][ T9467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.433550][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 385.449992][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 385.484817][ T9655] netlink: 'syz.4.1499': attribute type 2 has an invalid length. [ 385.484921][ T9467] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.521638][ T9655] netlink: 'syz.4.1499': attribute type 9 has an invalid length. [ 385.532030][ T9467] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.569128][ T9467] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.598957][ T9467] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.289103][ T7394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.351771][ T3735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.360135][ T3735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.391051][ T7394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.429546][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 388.458997][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 388.852961][ T9675] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1506'. [ 388.952177][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1506'. [ 389.403536][ T9687] netlink: 'syz.2.1510': attribute type 2 has an invalid length. [ 389.453092][ T9687] netlink: 'syz.2.1510': attribute type 9 has an invalid length. [ 389.611009][ T13] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 389.724270][ T9696] binder: 9695:9696 ioctl c0306201 0 returned -14 [ 389.891830][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 390.691306][ T2988] Bluetooth: hci5: command 0x0406 tx timeout [ 390.697475][ T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.759233][ T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 390.788550][ T13] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 390.808780][ T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 390.849272][ T13] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 390.869460][ T13] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25 [ 390.991266][ T13] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 391.010988][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 391.039413][ T13] usb 5-1: SerialNumber: syz [ 391.092151][ T13] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 391.102909][ T13] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 391.349841][ T9670] device batadv0 entered promiscuous mode [ 391.421370][ T9670] device macsec1 entered promiscuous mode [ 391.441572][ T9670] device batadv0 left promiscuous mode [ 391.616169][ T3609] usb 5-1: USB disconnect, device number 22 [ 393.273579][ T9727] netlink: 'syz.4.1524': attribute type 2 has an invalid length. [ 393.309630][ T9727] netlink: 'syz.4.1524': attribute type 9 has an invalid length. [ 393.750973][ T9743] binder: 9742:9743 ioctl c0306201 0 returned -14 [ 394.671096][ T2988] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 394.771091][ T26] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 394.931033][ T2988] usb 5-1: Using ep0 maxpacket: 16 [ 395.051239][ T2988] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.089355][ T2988] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 395.101118][ T26] usb 2-1: too many configurations: 164, using maximum allowed: 8 [ 395.130097][ T2988] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 395.180984][ T2988] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 395.221045][ T2988] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 395.251870][ T2988] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25 [ 395.371238][ T2988] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 395.410898][ T2988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 395.419585][ T2988] usb 5-1: SerialNumber: syz [ 395.491862][ T2988] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 395.531488][ T2988] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 395.751761][ T9745] device batadv0 entered promiscuous mode [ 395.757550][ T9745] device macsec1 entered promiscuous mode [ 395.811485][ T7] Bluetooth: hci7: command 0x0406 tx timeout [ 395.852267][ T9745] device batadv0 left promiscuous mode [ 395.921210][ T26] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 395.950601][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.972581][ T26] usb 2-1: config 0 descriptor?? [ 396.004687][ T13] usb 5-1: USB disconnect, device number 23 [ 396.041397][ T26] usb 2-1: bad CDC descriptors [ 396.060528][ T26] usb 2-1: bad CDC descriptors [ 396.284863][ T26] usb 2-1: USB disconnect, device number 14 [ 398.050090][ T9778] chnl_net:caif_netlink_parms(): no params data found [ 398.251427][ T9778] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.297168][ T9778] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.352738][ T9778] device bridge_slave_0 entered promiscuous mode [ 398.397508][ T9778] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.433606][ T9778] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.464938][ T9778] device bridge_slave_1 entered promiscuous mode [ 398.725598][ T9778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.766479][ T9778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.883976][ T9778] team0: Port device team_slave_0 added [ 398.933525][ T9778] team0: Port device team_slave_1 added [ 399.021234][ T9778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.028237][ T9778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.135137][ T9778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.209589][ T9778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.237310][ T9778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.263267][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.293384][ T9778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.564125][ T9778] device hsr_slave_0 entered promiscuous mode [ 399.592231][ T9778] device hsr_slave_1 entered promiscuous mode [ 399.600642][ T9778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.618444][ T9778] Cannot create hsr debugfs directory [ 399.811039][ T3617] Bluetooth: hci6: command 0x0409 tx timeout [ 399.963638][ T9792] chnl_net:caif_netlink_parms(): no params data found [ 400.873801][ T9778] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.168578][ T9778] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.341339][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 401.607868][ T9778] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.683340][ T9792] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.702022][ T9792] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.731301][ T9792] device bridge_slave_0 entered promiscuous mode [ 401.753527][ T9792] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.791250][ T9792] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.818735][ T9792] device bridge_slave_1 entered promiscuous mode [ 401.883144][ T9778] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.898175][ T13] Bluetooth: hci6: command 0x041b tx timeout [ 402.094737][ T9792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.122386][ T9792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.331155][ T9792] team0: Port device team_slave_0 added [ 402.396446][ T9792] team0: Port device team_slave_1 added [ 402.463606][ T9778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 402.566858][ T9778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 402.595778][ T9830] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 402.629828][ T9792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.652543][ T9792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.957288][ T9792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.061769][ T9778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 403.089980][ T9792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.106192][ T9792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.251061][ T9792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.312721][ T9778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 403.411082][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 403.497228][ T9792] device hsr_slave_0 entered promiscuous mode [ 403.524201][ T9792] device hsr_slave_1 entered promiscuous mode [ 403.582949][ T9792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.621018][ T9792] Cannot create hsr debugfs directory [ 403.971750][ T9826] chnl_net:caif_netlink_parms(): no params data found [ 403.980614][ T3617] Bluetooth: hci6: command 0x040f tx timeout [ 404.044823][ T9778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.133102][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 404.153988][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 404.197819][ T9778] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.268602][ T9792] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.291182][ T2988] Bluetooth: hci7: command 0x0409 tx timeout [ 404.332500][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 404.420760][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 404.581310][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.588398][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.726104][ T9792] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.813461][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 404.843592][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 404.872971][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 404.911996][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.919086][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.980247][ T9839] tipc: Started in network mode [ 404.985792][ T9839] tipc: Node identity ff050000000000000000000000000001, cluster identity 8 [ 405.029960][ T9839] tipc: Enabling of bearer rejected, failed to enable media [ 405.147521][ T9792] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.194056][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 405.203754][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 405.337713][ T9792] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.391354][ T9826] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.398462][ T9826] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.410706][ T9826] device bridge_slave_0 entered promiscuous mode [ 405.432863][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 405.452241][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 405.464950][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 405.492149][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 405.521996][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 405.561642][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 405.603978][ T9826] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.611657][ T3617] Bluetooth: hci2: command 0x040f tx timeout [ 405.630148][ T9826] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.669583][ T9826] device bridge_slave_1 entered promiscuous mode [ 405.733411][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 405.761988][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 405.781806][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 405.825782][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 405.874585][ T9826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.930302][ T9826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.028053][ T3763] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.051575][ T13] Bluetooth: hci6: command 0x0419 tx timeout [ 406.090455][ T9826] team0: Port device team_slave_0 added [ 406.124447][ T9826] team0: Port device team_slave_1 added [ 406.177071][ T3763] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.233143][ T9826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.240104][ T9826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.321083][ T9826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.373192][ T2988] Bluetooth: hci7: command 0x041b tx timeout [ 406.388690][ T3763] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.413504][ T9826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.420454][ T9826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.481056][ T9826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.510779][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 406.521244][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 406.560154][ T3763] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.598297][ T9778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.661872][ T9826] device hsr_slave_0 entered promiscuous mode [ 406.685504][ T9826] device hsr_slave_1 entered promiscuous mode [ 406.704859][ T9826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.721717][ T9826] Cannot create hsr debugfs directory [ 406.742359][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 406.762016][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 406.833156][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 406.851825][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 406.861370][ T13] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 406.899184][ T9778] device veth0_vlan entered promiscuous mode [ 406.943718][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 406.959018][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 407.022265][ T9778] device veth1_vlan entered promiscuous mode [ 407.038149][ T9792] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 407.195181][ T9792] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 407.222065][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.233249][ T9792] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 407.251076][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.271094][ T13] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 407.291148][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.311869][ T13] usb 1-1: config 0 descriptor?? [ 407.374358][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 407.391901][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 407.410376][ T9792] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 407.451103][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 407.459670][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 407.494147][ T9778] device veth0_macvtap entered promiscuous mode [ 407.526788][ T9778] device veth1_macvtap entered promiscuous mode [ 407.620712][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.651102][ T3823] Bluetooth: hci2: command 0x0419 tx timeout [ 407.657161][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.680988][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.701110][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.718475][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.741114][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.761240][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.786424][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.810519][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.842235][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.861020][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.888842][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.909295][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.930324][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.950615][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.972239][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.993520][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.017224][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.027757][ T13] usb 1-1: string descriptor 0 read error: -22 [ 408.048200][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.072496][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.106743][ T9778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.144241][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 408.157032][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 408.182019][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 408.202452][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 408.235688][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.264976][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.294298][ T13] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0014/input/input27 [ 408.306325][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.330958][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.361040][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.393474][ T13] uclogic 0003:256C:006D.0014: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 408.400966][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.435452][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.451908][ T13] Bluetooth: hci7: command 0x040f tx timeout [ 408.461487][ T27] INFO: task syz.0.910:7772 blocked for more than 143 seconds. [ 408.471759][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.490980][ T27] Not tainted 5.15.164-syzkaller #0 [ 408.495302][ T13] usb 1-1: USB disconnect, device number 20 [ 408.505840][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 408.519346][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.540232][ T27] task:syz.0.910 state:D stack:23872 pid: 7772 ppid: 6237 flags:0x00004004 [ 408.557623][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.575438][ T27] Call Trace: [ 408.584388][ T27] [ 408.590743][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.602447][ T27] __schedule+0x12c4/0x45b0 [ 408.613866][ T27] ? release_firmware_map_entry+0x190/0x190 [ 408.625927][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.638145][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 408.650375][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 408.658069][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.671970][ T27] schedule+0x11b/0x1f0 [ 408.680615][ T27] schedule_preempt_disabled+0xf/0x20 [ 408.691396][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.703978][ T27] __mutex_lock_common+0xe34/0x25a0 [ 408.716943][ T27] ? exfat_sync_fs+0x67/0x100 [ 408.723991][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.739444][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 408.751406][ T27] ? __lock_acquire+0x1ff0/0x1ff0 [ 408.758773][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.772098][ T27] ? do_raw_spin_lock+0x14a/0x370 [ 408.782734][ T27] mutex_lock_nested+0x17/0x20 [ 408.789331][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.804429][ T27] exfat_sync_fs+0x67/0x100 [ 408.814701][ T27] iterate_supers+0x127/0x1e0 [ 408.823883][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.834985][ T27] ? sync_inodes_one_sb+0x60/0x60 [ 408.845728][ T27] ksys_sync+0xd7/0x1c0 [ 408.855691][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.868528][ T27] ? sync_filesystem+0x220/0x220 [ 408.879118][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 408.889668][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.901862][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 408.917372][ T27] __do_sys_sync+0xa/0x10 [ 408.927957][ T9778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.936603][ T27] do_syscall_64+0x3b/0xb0 [ 408.945824][ T27] ? clear_bhb_loop+0x15/0x70 [ 408.960579][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 408.974863][ T27] RIP: 0033:0x7f1927ce73b9 [ 408.981470][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1583'. [ 408.983810][ T27] RSP: 002b:00007f1926166048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 409.021191][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 409.032621][ T27] RAX: ffffffffffffffda RBX: 00007f1927e75f80 RCX: 00007f1927ce73b9 [ 409.044834][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 409.059716][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 409.074696][ T9778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.089175][ T27] RBP: 00007f1927d548e6 R08: 0000000000000000 R09: 0000000000000000 [ 409.102301][ T9778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.123843][ T9778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.132984][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.149906][ T27] R13: 000000000000000b R14: 00007f1927e75f80 R15: 00007ffd4702f308 [ 409.158624][ T9778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.176283][ T27] [ 409.185212][ T27] [ 409.185212][ T27] Showing all locks held in the system: [ 409.218146][ T27] 3 locks held by kworker/0:1/13: [ 409.239134][ T27] #0: ffff8881417c3938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 409.263109][ T27] #1: ffffc90000d27d20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 409.286650][ T27] #2: ffff888148490220 (&dev->mutex){....}-{3:3}, at: hub_event+0x208/0x54c0 [ 409.305645][ T27] 3 locks held by kworker/1:1/26: [ 409.318120][ T27] #0: ffff8880b9a3a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa8/0x140 [ 409.351754][ T27] #1: ffffffff8c91fb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 409.377887][ T27] #2: ffff8880b9b28098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 409.395204][ T27] 1 lock held by khungtaskd/27: [ 409.404735][ T27] #0: ffffffff8c91fb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 409.422033][ T27] 3 locks held by kworker/1:2/1077: [ 409.437112][ T27] #0: ffff888011c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 409.456516][ T27] #1: ffffc90004957d20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 409.494305][ T27] #2: ffff88804f34a240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2cd/0x4120 [ 409.516047][ T27] 2 locks held by getty/3329: [ 409.528273][ T27] #0: ffff8880240ee098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 409.548340][ T27] #1: ffffc9000249c2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 409.588918][ T27] 3 locks held by kworker/1:4/3609: [ 409.605477][ T27] #0: ffff88814b314938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 409.641071][ T27] #1: ffffc90002ff7d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 409.691014][ T27] #2: ffffffff8da308c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x1720 [ 409.700478][ T27] 5 locks held by kworker/u4:11/3763: [ 409.731708][ T27] #0: ffff888011dd5138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 409.761001][ T27] #1: ffffc90003077d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 409.782103][ T27] #2: ffffffff8da24d10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 409.801022][ T27] #3: ffffffff8da308c8 (rtnl_mutex){+.+.}-{3:3}, at: ip6_tnl_exit_batch_net+0xc0/0x5e0 [ 409.810811][ T27] #4: ffffffff8c9240e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x280/0x740 [ 409.845514][ T27] 3 locks held by kworker/0:10/3823: [ 409.856456][ T27] #0: ffff88814b314938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 409.878722][ T27] #1: ffffc90003187d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 409.920427][ T27] #2: ffffffff8da308c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x1720 [ 409.943104][ T27] 2 locks held by kworker/1:11/4013: [ 409.955127][ T27] #0: ffff888011c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 409.978573][ T27] #1: ffffc90003197d20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 410.005560][ T27] 1 lock held by kworker/u4:15/5842: [ 410.019326][ T27] 3 locks held by syz-executor/6167: [ 410.031002][ T27] 3 locks held by syz-executor/7040: [ 410.043743][ T27] 3 locks held by syz-executor/7082: [ 410.058273][ T27] 2 locks held by syz.0.910/7772: [ 410.068944][ T27] #0: ffff8880227e20e0 (&type->s_umount_key#81){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 410.093201][ T27] #1: ffff8880227e00e0 (&sbi->s_lock#2){+.+.}-{3:3}, at: exfat_sync_fs+0x67/0x100 [ 410.114334][ T27] 4 locks held by kworker/u4:17/7812: [ 410.128130][ T27] #0: ffff8880b9a3a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa8/0x140 [ 410.166347][ T27] #1: ffffc900013cfd20 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 410.206676][ T27] #2: ffffffff8c91fb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 410.237670][ T27] #3: ffffffff8c91fb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 410.269987][ T27] 1 lock held by syz-executor/9778: [ 410.299319][ T27] #0: ffffffff8da308c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 410.329640][ T27] 1 lock held by syz-executor/9792: [ 410.336287][ T27] #0: ffffffff8da308c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 410.372289][ T27] 6 locks held by syz-executor/9826: [ 410.381241][ T27] #0: ffff88807f282460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x29a/0xe50 [ 410.400337][ T27] #1: ffff888048a5fc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 410.420545][ T27] #2: ffff8881482b83a8 (kn->active#233){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 410.461081][ T27] #3: ffffffff8d372948 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b0/0x910 [ 410.491812][ T27] #4: ffff888059af9178 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570 [ 410.521210][ T27] #5: ffffffff8da308c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x80/0x270 [ 410.531691][ T13] Bluetooth: hci7: command 0x0419 tx timeout [ 410.552167][ T27] 2 locks held by syz.2.1583/9884: [ 410.557299][ T27] #0: ffff888072a34410 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x98/0x230 [ 410.588353][ T27] #1: ffffffff8c9240e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 410.610411][ T27] [ 410.630611][ T27] ============================================= [ 410.630611][ T27] [ 410.662320][ T27] NMI backtrace for cpu 0 [ 410.666683][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.164-syzkaller #0 [ 410.674664][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 410.684866][ T27] Call Trace: [ 410.688147][ T27] [ 410.691073][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 410.695755][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 410.701396][ T27] ? panic+0x860/0x860 [ 410.705475][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 410.710595][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 410.715530][ T27] ? __wake_up_klogd+0xd5/0x100 [ 410.720380][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 410.726528][ T27] ? _printk+0xd1/0x120 [ 410.730684][ T27] ? panic+0x860/0x860 [ 410.734746][ T27] ? __wake_up_klogd+0xcc/0x100 [ 410.739591][ T27] ? panic+0x860/0x860 [ 410.743661][ T27] ? __rcu_read_unlock+0x92/0x100 [ 410.748682][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 410.754747][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 410.760731][ T27] watchdog+0xe72/0xeb0 [ 410.764897][ T27] kthread+0x3f6/0x4f0 [ 410.769101][ T27] ? hungtask_pm_notify+0x50/0x50 [ 410.774135][ T27] ? kthread_blkcg+0xd0/0xd0 [ 410.778736][ T27] ret_from_fork+0x1f/0x30 [ 410.783170][ T27] [ 410.787315][ T27] Sending NMI from CPU 0 to CPUs 1: [ 410.793051][ C1] NMI backtrace for cpu 1 [ 410.793062][ C1] CPU: 1 PID: 8162 Comm: kworker/u4:21 Not tainted 5.15.164-syzkaller #0 [ 410.793078][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 410.793088][ C1] Workqueue: phy55 ieee80211_iface_work [ 410.793120][ C1] RIP: 0010:deref_stack_reg+0x34/0x110 [ 410.793139][ C1] Code: 49 89 d6 49 89 f7 48 89 fb 49 bc 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 7c 8d 91 00 <4c> 8b 6b 08 48 8d 7b 10 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 [ 410.793163][ C1] RSP: 0018:ffffc90003667630 EFLAGS: 00000246 [ 410.793175][ C1] RAX: 1ffff920006ccee5 RBX: ffffc90003667720 RCX: 0000000000000000 [ 410.793187][ C1] RDX: ffffc90003667760 RSI: ffffc90003667b70 RDI: ffffc90003667728 [ 410.793198][ C1] RBP: ffffffff8e6a4a4e R08: ffffc90003667b70 R09: ffffc90003667770 [ 410.793209][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 410.793220][ C1] R13: 1ffffffff1cd4949 R14: ffffc90003667760 R15: ffffc90003667b70 [ 410.793231][ C1] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 410.793243][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 410.793254][ C1] CR2: 00007ff75c70eab8 CR3: 00000000650d8000 CR4: 00000000003506e0 [ 410.793267][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 410.793276][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 410.793285][ C1] Call Trace: [ 410.793289][ C1] [ 410.793295][ C1] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 410.793312][ C1] ? read_lock_is_recursive+0x10/0x10 [ 410.793329][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 410.793345][ C1] ? unknown_nmi_error+0xd0/0xd0 [ 410.793366][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 410.793381][ C1] ? nmi_handle+0xf7/0x370 [ 410.793397][ C1] ? deref_stack_reg+0x34/0x110 [ 410.793411][ C1] ? default_do_nmi+0x62/0x150 [ 410.793428][ C1] ? exc_nmi+0xa8/0x100 [ 410.793442][ C1] ? end_repeat_nmi+0x16/0x31 [ 410.793464][ C1] ? deref_stack_reg+0x34/0x110 [ 410.793479][ C1] ? deref_stack_reg+0x34/0x110 [ 410.793494][ C1] ? deref_stack_reg+0x34/0x110 [ 410.793510][ C1] [ 410.793514][ C1] [ 410.793521][ C1] unwind_next_frame+0x12f1/0x1fa0 [ 410.793540][ C1] ? slab_free_freelist_hook+0xdd/0x160 [ 410.793559][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 410.793575][ C1] arch_stack_walk+0x10d/0x140 [ 410.793593][ C1] ? kmem_cache_free+0x91/0x1f0 [ 410.793611][ C1] stack_trace_save+0x113/0x1c0 [ 410.793626][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 410.793640][ C1] ? kasan_set_track+0x62/0x80 [ 410.793656][ C1] ? slab_free_freelist_hook+0xdd/0x160 [ 410.793672][ C1] ? kfree+0xf1/0x270 [ 410.793684][ C1] ? skb_release_data+0x73a/0x8a0 [ 410.793703][ C1] ? kfree_skb_reason+0xb3/0x170 [ 410.793717][ C1] ? ieee80211_iface_work+0x251/0xcc0 [ 410.793732][ C1] ? worker_thread+0xaca/0x1280 [ 410.793748][ C1] ? kthread+0x3f6/0x4f0 [ 410.793760][ C1] ? ret_from_fork+0x1f/0x30 [ 410.793776][ C1] ? kmem_cache_free+0x91/0x1f0 [ 410.793791][ C1] kasan_set_track+0x4b/0x80 [ 410.793806][ C1] ? kasan_set_track+0x4b/0x80 [ 410.793821][ C1] ? kasan_set_free_info+0x1f/0x40 [ 410.793834][ C1] ? ____kasan_slab_free+0xd8/0x120 [ 410.793847][ C1] ? slab_free_freelist_hook+0xdd/0x160 [ 410.793883][ C1] ? skb_release_data+0x73a/0x8a0 [ 410.793899][ C1] kasan_set_free_info+0x1f/0x40 [ 410.793912][ C1] ____kasan_slab_free+0xd8/0x120 [ 410.793927][ C1] slab_free_freelist_hook+0xdd/0x160 [ 410.793944][ C1] ? ieee80211_iface_work+0x251/0xcc0 [ 410.793961][ C1] kmem_cache_free+0x91/0x1f0 [ 410.793979][ C1] ieee80211_iface_work+0x251/0xcc0 [ 410.793999][ C1] process_one_work+0x8a1/0x10c0 [ 410.794022][ C1] ? worker_detach_from_pool+0x260/0x260 [ 410.794039][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 410.794055][ C1] ? kthread_data+0x4e/0xc0 [ 410.794068][ C1] ? wq_worker_running+0x97/0x170 [ 410.794084][ C1] worker_thread+0xaca/0x1280 [ 410.794117][ C1] kthread+0x3f6/0x4f0 [ 410.794130][ C1] ? rcu_lock_release+0x20/0x20 [ 410.794145][ C1] ? kthread_blkcg+0xd0/0xd0 [ 410.794159][ C1] ret_from_fork+0x1f/0x30 [ 410.794181][ C1] [ 411.081004][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 411.096770][ T9792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.098231][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.164-syzkaller #0 [ 411.111883][ T9792] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.112612][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 411.139122][ T9792] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 411.143560][ T27] Call Trace: [ 411.143569][ T27] [ 411.143575][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 411.143600][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 411.148938][ T9792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 411.153583][ T27] ? panic+0x860/0x860 [ 411.153612][ T27] panic+0x318/0x860 [ 411.170202][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 411.174891][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 411.174917][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 411.179961][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 411.184387][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 411.184411][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 411.184432][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 411.184448][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 411.184468][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 411.184489][ T27] watchdog+0xeb0/0xeb0 [ 411.184518][ T27] kthread+0x3f6/0x4f0 [ 411.184535][ T27] ? hungtask_pm_notify+0x50/0x50 [ 411.184552][ T27] ? kthread_blkcg+0xd0/0xd0 [ 411.184570][ T27] ret_from_fork+0x1f/0x30 [ 411.184601][ T27] [ 411.184796][ T27] Kernel Offset: disabled [ 411.378110][ T27] Rebooting in 86400 seconds..