last executing test programs: 42.059722623s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000180)=@framed={{}, [@call, @ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="25003300d0000000080211000001080211000000505050505050000003"], 0x44}}, 0x0) 41.955266779s ago: executing program 2: socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 41.054175599s ago: executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="4865b5944cb5be7b34809a07542d2ab740af40f7099f241e3d6c61ec4066353ff64a113240308c129b", 0x29) 40.774106652s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0x5, &(0x7f00000019c0)={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "544e6b24af869c8bcb343306faffffffff155fadb01fcc19dccce863bc600e4d"}, 0x3c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000002000e2f87f27c85887bc315bcb8f8162e2"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x1e, 0x2, 0x3) socket$xdp(0x2c, 0x3, 0x0) unshare(0x6020400) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x8}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x0, 0x7, 0x2a44}) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r4, 0x0, 0x12, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r5, 0x0) 40.27141107s ago: executing program 2: socket$unix(0x1, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="09000300010001", 0x7) 40.158022848s ago: executing program 2: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xb7}}, {0x4}}]}]}, 0x58}}, 0x0) 38.111271045s ago: executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xb7}}, {0x4}}]}]}, 0x58}}, 0x0) 37.997896523s ago: executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) 37.930643093s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x541b, 0x0) 37.10791179s ago: executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000380)={0x0, 0x0}) setpgid(0x0, r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 36.707859872s ago: executing program 3: socket$packet(0x11, 0x0, 0x300) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0xd9b2794f6a139537, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 36.670647748s ago: executing program 3: socket$unix(0x1, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="09000300010001", 0x7) 36.627331285s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000180)=@framed={{}, [@call, @ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="25003300d0000000080211000001080211000000505050505050000003"], 0x44}}, 0x0) 36.475830128s ago: executing program 3: ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000040)={0x1}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfffffffffffffffd, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000bc0)='sockfs\x00', 0x0) socket(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000002600)={{}, "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"}) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000001600)={{}, "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"}) 36.258370112s ago: executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xb7}}, {0x4}}]}]}, 0x58}}, 0x0) 36.190210872s ago: executing program 4: socket$nl_route(0x10, 0x3, 0x0) unshare(0x0) socket$can_raw(0x1d, 0x3, 0x1) unshare(0x22020400) r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000001ec0), 0x4) close(0xffffffffffffffff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8) close(r2) 35.990503053s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 35.427283921s ago: executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000ec0)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) shutdown(r2, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060101000000000000000000000000050005000a0000000900020073797a32000000000c0007800500150000000000050004000000000011000300686173683a6e65742c6e000000"], 0x58}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f}, [@printk={@u, {}, {}, {0x7, 0x0, 0x9}}]}, &(0x7f00000007c0)='GPL\x00', 0x7}, 0x90) ioperm(0x0, 0x87, 0x3ff) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_settime(0x7, &(0x7f0000007600)={r4, r5+60000000}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0xc08c5334, &(0x7f0000000180)) tkill(0x0, 0x7) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x2, 0x18, 0x0, 0x5, 0x16, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x3, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d2}]}, 0xb0}}, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000140), 0x5, 0x2) r9 = dup(r8) writev(r9, &(0x7f00000005c0)=[{0x0}], 0x1) 35.399193415s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = memfd_create(&(0x7f00000004c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00'/649, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0xce9e1000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) 34.450909502s ago: executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0x2f0, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x25c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x1d4, 0x6, [@m_ctinfo={0xb8, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x81, 0x6, "55eb88be72ea2bba577976ef9b5ab407e07afa05e4594285326849c2ec806d7b79f86d10adeb18245c150ce2b9eaeb2380aa7104a6df31aefd38f6b7bb0a45721ccbc5daab03190ea553ce464d09642e4ff5eeaf1f2e6171c16bc9ed3d7f4e1d714b45e839ac2719fe34dbba607211f211a9b5b79c050373b7bea3b552"}, {0xc}, {0xc}}}, @m_nat={0xd0, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x55, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f16cfa199b042be92c52b0490cb3ccc8a115bd7fba1ddd4a3ea8aa011548c0a44af30d92f016d58b7280bd342"}, {0xc}, {0xc}}}, @m_bpf={0x48, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{}, {}]}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x2f0}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 33.538137894s ago: executing program 4: socket$packet(0x11, 0x0, 0x300) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r1, 0xd9b2794f6a139537, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 32.663960589s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000180)=@framed={{}, [@call, @ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="25003300d0000000080211000001080211000000505050505050000003"], 0x44}}, 0x0) 32.52944761s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x541b, 0x0) 31.650557216s ago: executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000380)={0x0, 0x0}) setpgid(0x0, r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 30.704798952s ago: executing program 0: r0 = syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000003a40), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000040)={0x1}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfffffffffffffffd, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000bc0)='sockfs\x00', 0x0) socket(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x5000940e, &(0x7f0000002600)={{}, "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"}) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x4010942a, &(0x7f0000001600)={{}, "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"}) 30.019125999s ago: executing program 0: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000280)={r2, &(0x7f0000000240), 0x0}, 0x20) 5.970826786s ago: executing program 3: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xb7}}, {0x4}}]}]}, 0x58}}, 0x0) 4.421965686s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000c0605000000000000000800030000060900020073797a31000000000500010007000000"], 0x50}}, 0x24008000) 3.512120316s ago: executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000ec0)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) shutdown(r2, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060101000000000000000000000000050005000a0000000900020073797a32000000000c0007800500150000000000050004000000000011000300686173683a6e65742c6e000000"], 0x58}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f}, [@printk={@u, {}, {}, {0x7, 0x0, 0x9}}]}, &(0x7f00000007c0)='GPL\x00', 0x7}, 0x90) ioperm(0x0, 0x87, 0x3ff) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_settime(0x7, &(0x7f0000007600)={r4, r5+60000000}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0xc08c5334, &(0x7f0000000180)) tkill(0x0, 0x7) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x2, 0x18, 0x0, 0x5, 0x16, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x3, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d2}]}, 0xb0}}, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000140), 0x5, 0x2) r9 = dup(r8) writev(r9, &(0x7f00000005c0)=[{0x0}], 0x1) 0s ago: executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@private}, {@multicast1}, {@remote}, {@dev}, {@broadcast}, {@empty}, {@multicast1}, {@private}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev}, {@remote}, {@multicast2}, {@private}, {}, {@broadcast}, {@multicast2}]}, @noop, @noop, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): utes in process `syz-executor.2'. [ 232.348829][ T7104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.369891][ T7104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.510099][ T7104] team0: Port device team_slave_0 added [ 232.545461][ T7162] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 232.591481][ T7104] team0: Port device team_slave_1 added [ 232.646393][ T7173] loop0: detected capacity change from 0 to 64 [ 232.647147][ T7104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.715207][ T7104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.715993][ T7173] overlayfs: missing 'lowerdir' [ 232.743807][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.827971][ T7176] loop2: detected capacity change from 0 to 128 [ 232.883133][ T7104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.885009][ T7176] FAT-fs (loop2): bogus logical sector size 0 [ 232.992070][ T7176] FAT-fs (loop2): Can't find a valid FAT filesystem [ 233.020065][ T3802] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.026740][ T4446] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 233.082314][ T7104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.097455][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 233.128713][ T7104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.220158][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.241634][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.246146][ T7104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.277984][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.285700][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.295220][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.304896][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.313080][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.324574][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.333987][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.356671][ T3574] Bluetooth: hci1: command tx timeout [ 233.364296][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.375393][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.383808][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.392937][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.427034][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.427692][ T4446] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.434672][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.453732][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.464816][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.465849][ T4446] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.477409][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.489566][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.595091][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.603939][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.616196][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.624064][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.631747][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.636860][ T4446] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 233.639410][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.656016][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.664005][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.672218][ T7192] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 233.672273][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.680798][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.698364][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.706192][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.714685][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 233.728528][ T4347] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 233.739618][ T4446] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 233.768614][ T3802] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.773768][ T4446] usb 2-1: SerialNumber: syz [ 233.891836][ T3802] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.931142][ T7104] device hsr_slave_0 entered promiscuous mode [ 233.954567][ T7104] device hsr_slave_1 entered promiscuous mode [ 233.992508][ T7104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.010214][ T7104] Cannot create hsr debugfs directory [ 234.026949][ T3802] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.263716][ T7203] loop3: detected capacity change from 0 to 64 [ 234.623007][ T7209] loop3: detected capacity change from 0 to 256 [ 234.679566][ T7209] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 234.732435][ T7211] fuse: Bad value for 'fd' [ 234.741875][ T7209] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 234.751994][ T26] audit: type=1800 audit(1718055995.497:36): pid=7211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1950 res=0 errno=0 [ 234.801314][ T7209] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 234.839869][ T7209] UDF-fs: Scanning with blocksize 512 failed [ 234.869561][ T7209] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 234.989434][ T7209] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.458831][ T3574] Bluetooth: hci1: command tx timeout [ 236.261207][ T4446] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 236.389710][ T7104] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 236.409499][ T7242] loop3: detected capacity change from 0 to 64 [ 236.515639][ T4446] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 236.526611][ T4446] usb 2-1: USB disconnect, device number 13 [ 236.533065][ T7104] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 236.558643][ T7104] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 236.570386][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.653156][ T7104] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 236.821440][ T7256] loop0: detected capacity change from 0 to 256 [ 236.995432][ T7256] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 237.050661][ T3802] device hsr_slave_0 left promiscuous mode [ 237.062710][ T3802] device hsr_slave_1 left promiscuous mode [ 237.070773][ T7256] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 237.089314][ T7259] autofs4:pid:7259:autofs_fill_super: called with bogus options [ 237.098059][ T3802] device bond0 left promiscuous mode [ 237.103652][ T7256] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 237.126818][ T3802] bridge0: port 1(bond0) entered disabled state [ 237.151202][ T7256] UDF-fs: Scanning with blocksize 512 failed [ 237.169834][ T3802] device veth1_macvtap left promiscuous mode [ 237.176037][ T3802] device veth0_macvtap left promiscuous mode [ 237.192671][ T7256] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 237.225243][ T3802] device veth1_vlan left promiscuous mode [ 237.242510][ T7256] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.522927][ T3574] Bluetooth: hci1: command tx timeout [ 237.630914][ T3802] bond2 (unregistering): Released all slaves [ 237.665894][ T3802] bond1 (unregistering): Released all slaves [ 237.864518][ T7248] loop2: detected capacity change from 0 to 32768 [ 237.898041][ T7248] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (7248) [ 237.950209][ T7248] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 237.985822][ T7248] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 238.023211][ T7248] BTRFS info (device loop2): force clearing of disk cache [ 238.055772][ T7248] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 238.092807][ T7248] BTRFS info (device loop2): use zstd compression, level 3 [ 238.119468][ T7248] BTRFS info (device loop2): enabling ssd optimizations [ 238.156638][ T7248] BTRFS info (device loop2): using free space tree [ 238.242494][ T3802] bond0 (unregistering): Released all slaves [ 238.488513][ T7248] BTRFS info (device loop2): rebuilding free space tree [ 238.665798][ T7104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.718830][ T3568] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 238.747667][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.765833][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.865838][ T7104] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.991240][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.991892][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.992318][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.992409][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.992926][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.067083][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.067782][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.068222][ T3613] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.068282][ T3613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.068675][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.069471][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.081661][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.265293][ T7299] usb usb9: usbfs: process 7299 (syz-executor.3) did not claim interface 0 before use [ 239.278413][ T7267] loop0: detected capacity change from 0 to 32768 [ 239.365905][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.471858][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.491375][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.546199][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.571605][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.657251][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.686008][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.723426][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.772482][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 239.926660][ T151] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 240.356925][ T151] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.399290][ T151] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.591968][ T151] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 240.627714][ T7340] loop0: detected capacity change from 0 to 2048 [ 240.641852][ T151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 240.658146][ T7340] NILFS (loop0): invalid segment: Sequence number mismatch [ 240.665394][ T7340] NILFS (loop0): trying rollback from an earlier position [ 240.676828][ T7340] NILFS (loop0): recovery complete [ 240.702630][ T7341] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 240.756301][ T151] usb 4-1: SerialNumber: syz [ 240.777266][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.789209][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 240.875778][ T7104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.336810][ T4344] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 241.742562][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 241.758784][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 241.815031][ T7104] device veth0_vlan entered promiscuous mode [ 241.836973][ T4344] usb 3-1: not running at top speed; connect to a high speed hub [ 241.854939][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 241.881764][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 241.909290][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 241.936881][ T4344] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.968922][ T7373] loop1: detected capacity change from 0 to 2048 [ 241.980454][ T7373] NILFS (loop1): invalid segment: Sequence number mismatch [ 241.987707][ T7373] NILFS (loop1): trying rollback from an earlier position [ 242.001529][ T7373] NILFS (loop1): recovery complete [ 242.016995][ T4344] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 242.027288][ T7374] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 242.046952][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.054946][ T4344] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 242.059160][ T7104] device veth1_vlan entered promiscuous mode [ 242.288597][ T151] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 242.358049][ T4344] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 242.380318][ T4344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.457287][ T4344] usb 3-1: Product: syz [ 242.501978][ T4344] usb 3-1: Manufacturer: syz [ 242.540592][ T7104] device veth0_macvtap entered promiscuous mode [ 242.607752][ T4344] usb 3-1: SerialNumber: syz [ 242.774351][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 242.848600][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 242.913237][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 242.936382][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 242.969939][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 243.008003][ T7104] device veth1_macvtap entered promiscuous mode [ 243.046104][ T151] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 243.076947][ T7104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.097899][ T151] usb 4-1: USB disconnect, device number 9 [ 243.119978][ T7104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.129385][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.157488][ T4344] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 243.164316][ T4344] cdc_ncm 3-1:1.0: bind() failure [ 243.181874][ T4344] usb 3-1: USB disconnect, device number 5 [ 243.196515][ T7104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.251431][ T7104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.292457][ T7104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.312956][ T7104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.325524][ T7104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.337530][ T7104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.358647][ T7104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.375353][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 243.407355][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 243.418257][ T7104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.432325][ T7104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.445288][ T7104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.485945][ T7104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.504337][ T7104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.548473][ T7104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.570497][ T7104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.748175][ T7104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.775332][ T7104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.786650][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 243.795907][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.825754][ T7104] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.845664][ T7104] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.881783][ T7104] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.893865][ T7104] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.776628][ T3795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.815462][ T3795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.898279][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 244.936114][ T3801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.955842][ T3801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.003148][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 245.424989][ T7409] loop0: detected capacity change from 0 to 32768 [ 245.474338][ T7409] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (7409) [ 245.575917][ T7409] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 245.637390][ T7409] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 245.672096][ T7409] BTRFS info (device loop0): using free space tree [ 246.014919][ T7449] autofs4:pid:7449:autofs_fill_super: called with bogus options [ 246.157005][ T4440] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 246.233957][ T7409] BTRFS info (device loop0): enabling ssd optimizations [ 246.340333][ T7465] fuse: Bad value for 'fd' [ 246.566753][ T4440] usb 2-1: not running at top speed; connect to a high speed hub [ 246.646815][ T4440] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.646844][ T4440] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 246.646885][ T4440] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.806737][ T4440] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 246.815945][ T3800] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 246.886140][ T4440] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.904022][ T3575] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 246.922812][ T4440] usb 2-1: Product: syz [ 246.932248][ T4440] usb 2-1: Manufacturer: syz [ 246.946515][ T4440] usb 2-1: SerialNumber: syz [ 247.892374][ T4440] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 247.903312][ T4440] cdc_ncm 2-1:1.0: bind() failure [ 247.949113][ T4440] usb 2-1: USB disconnect, device number 14 [ 248.447407][ T7496] loop1: detected capacity change from 0 to 2048 [ 248.461843][ T7496] NILFS (loop1): invalid segment: Sequence number mismatch [ 248.469198][ T7496] NILFS (loop1): trying rollback from an earlier position [ 248.484834][ T7496] NILFS (loop1): recovery complete [ 248.505207][ T7496] overlayfs: upper fs does not support tmpfile. [ 248.512304][ T7496] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 248.519316][ T7496] overlayfs: failed to set xattr on upper [ 248.525015][ T7496] overlayfs: ...falling back to index=off,metacopy=off. [ 248.546925][ T7497] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 248.822146][ T7494] usb usb9: usbfs: process 7494 (syz-executor.2) did not claim interface 0 before use [ 249.035933][ T7508] loop1: detected capacity change from 0 to 256 [ 249.078291][ T7508] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 249.336114][ T7510] autofs4:pid:7510:autofs_fill_super: called with bogus options [ 249.351848][ T7508] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 249.387527][ T7508] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 249.407399][ T7508] UDF-fs: Scanning with blocksize 512 failed [ 249.426607][ T4344] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 249.443723][ T7508] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 249.482996][ T7508] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 249.906893][ T4344] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.932912][ T4344] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.756821][ T4344] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 250.807010][ T4344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 250.837043][ T4344] usb 3-1: SerialNumber: syz [ 250.955405][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 251.248826][ T4344] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 251.314287][ T4344] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 251.362030][ T4344] usb 3-1: USB disconnect, device number 6 [ 251.380097][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.867642][ T7523] loop3: detected capacity change from 0 to 32768 [ 251.910365][ T7523] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (7523) [ 251.977127][ T7523] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 252.006071][ T7523] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 252.070674][ T7523] BTRFS info (device loop3): using free space tree [ 252.091504][ T7543] fuse: Bad value for 'fd' [ 252.280262][ T7556] loop1: detected capacity change from 0 to 256 [ 252.314655][ T7556] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 252.337803][ T7556] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 252.358014][ T7556] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 252.369097][ T7556] UDF-fs: Scanning with blocksize 512 failed [ 252.405047][ T7556] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 252.449544][ T7523] BTRFS info (device loop3): enabling ssd optimizations [ 252.491194][ T7556] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.789256][ T7566] autofs4:pid:7566:autofs_fill_super: called with bogus options [ 253.111441][ T1041] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 253.174999][ T5209] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 254.852014][ T7595] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.861700][ T7595] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.870534][ T7595] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.879502][ T7595] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.959237][ T7598] loop0: detected capacity change from 0 to 2048 [ 254.987647][ T7598] NILFS (loop0): invalid segment: Sequence number mismatch [ 254.995009][ T7598] NILFS (loop0): trying rollback from an earlier position [ 255.013290][ T7598] NILFS (loop0): recovery complete [ 255.035336][ T7601] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 255.194585][ T7598] overlayfs: upper fs does not support tmpfile. [ 255.201382][ T7598] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 255.208439][ T7598] overlayfs: failed to set xattr on upper [ 255.214579][ T7598] overlayfs: ...falling back to index=off,metacopy=off. [ 255.395913][ T7604] autofs4:pid:7604:autofs_fill_super: called with bogus options [ 255.406712][ T4344] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 255.738472][ T7600] loop4: detected capacity change from 0 to 32768 [ 255.754595][ T7600] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7600) [ 255.769238][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.769284][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.786703][ T4344] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.812633][ T4344] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.878028][ T7600] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 255.917130][ T4344] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 255.941273][ T7600] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 255.942626][ T4344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 255.958234][ T4344] usb 2-1: SerialNumber: syz [ 255.969999][ T7600] BTRFS info (device loop4): using free space tree [ 256.395979][ T7600] BTRFS info (device loop4): enabling ssd optimizations [ 257.386036][ T3795] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 257.601959][ T7104] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 257.614819][ T7650] fuse: Bad value for 'fd' [ 257.808713][ T4344] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 257.996885][ T4344] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 258.046244][ T4344] usb 2-1: USB disconnect, device number 15 [ 258.131634][ T3562] udevd[3562]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.351834][ T7660] loop2: detected capacity change from 0 to 2048 [ 258.426199][ T7662] loop1: detected capacity change from 0 to 2048 [ 258.434795][ T7662] NILFS (loop1): invalid segment: Sequence number mismatch [ 258.442182][ T7662] NILFS (loop1): trying rollback from an earlier position [ 258.452463][ T7662] NILFS (loop1): recovery complete [ 258.491133][ T7663] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 258.610530][ T7662] overlayfs: upper fs does not support tmpfile. [ 258.617162][ T7662] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 258.624123][ T7662] overlayfs: failed to set xattr on upper [ 258.629946][ T7662] overlayfs: ...falling back to index=off,metacopy=off. [ 258.692562][ T7660] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.057493][ T7666] autofs4:pid:7666:autofs_fill_super: called with bogus options [ 260.415582][ T7683] loop1: detected capacity change from 0 to 128 [ 260.936376][ T7686] loop2: detected capacity change from 0 to 512 [ 260.945199][ T7683] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 260.964049][ T7683] ext4 filesystem being mounted at /root/syzkaller-testdir3703541668/syzkaller.S8XQ9s/123/mnt supports timestamps until 2038 (0x7fffffff) [ 260.998252][ T7686] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 261.126708][ T7686] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 261.148658][ T5524] EXT4-fs (loop1): unmounting filesystem. [ 261.182952][ T7686] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 261.269196][ T7697] loop3: detected capacity change from 0 to 2048 [ 261.279349][ T7697] NILFS (loop3): invalid segment: Sequence number mismatch [ 261.286637][ T7697] NILFS (loop3): trying rollback from an earlier position [ 261.296509][ T7697] NILFS (loop3): recovery complete [ 261.335954][ T7698] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 261.444367][ T7697] overlayfs: upper fs does not support tmpfile. [ 261.451012][ T7697] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 261.458205][ T7697] overlayfs: failed to set xattr on upper [ 261.463926][ T7697] overlayfs: ...falling back to index=off,metacopy=off. [ 261.476583][ T7686] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 261.538775][ T7686] System zones: 0-2, 18-18, 34-34 [ 261.568272][ T7686] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 261.614505][ T4344] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 261.642530][ T7686] EXT4-fs (loop2): 1 truncate cleaned up [ 261.666220][ T7686] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 261.835729][ T7711] loop3: detected capacity change from 0 to 256 [ 261.973645][ T3568] EXT4-fs (loop2): unmounting filesystem. [ 261.981804][ T4256] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 262.036759][ T4344] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.066304][ T4344] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 262.246958][ T4344] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 262.274406][ T4344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 262.303856][ T4344] usb 5-1: SerialNumber: syz [ 262.509665][ T7713] autofs4:pid:7713:autofs_fill_super: called with bogus options [ 262.937569][ T7711] syz-executor.3 (7711): drop_caches: 2 [ 262.956699][ T3585] Bluetooth: hci4: command 0x0406 tx timeout [ 263.194568][ T26] audit: type=1326 audit(1718056023.947:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5567cf69 code=0x7ffc0000 [ 263.217319][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.274915][ T26] audit: type=1326 audit(1718056023.947:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5567cf69 code=0x7ffc0000 [ 263.297852][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.326654][ T26] audit: type=1326 audit(1718056023.947:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d5567cf69 code=0x7ffc0000 [ 263.349408][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.357055][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 263.438848][ T26] audit: type=1326 audit(1718056024.077:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5567cf69 code=0x7ffc0000 [ 263.461781][ T26] audit: type=1326 audit(1718056024.077:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5567cf69 code=0x7ffc0000 [ 263.484475][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.521052][ T7731] loop2: detected capacity change from 0 to 128 [ 263.922340][ T7731] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 263.931384][ T7731] ext4 filesystem being mounted at /root/syzkaller-testdir2284639067/syzkaller.ID92an/267/mnt supports timestamps until 2038 (0x7fffffff) [ 263.956265][ T26] audit: type=1326 audit(1718056024.087:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d5567cf69 code=0x7ffc0000 [ 264.088920][ T7737] loop0: detected capacity change from 0 to 2048 [ 264.100627][ T7737] NILFS (loop0): invalid segment: Sequence number mismatch [ 264.108097][ T7737] NILFS (loop0): trying rollback from an earlier position [ 264.124530][ T7737] NILFS (loop0): recovery complete [ 264.138806][ T4344] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 264.154244][ T7740] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 264.205447][ T26] audit: type=1326 audit(1718056024.087:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5567cf69 code=0x7ffc0000 [ 264.333753][ T7737] overlayfs: upper fs does not support tmpfile. [ 264.340405][ T7737] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 264.348364][ T7737] overlayfs: failed to set xattr on upper [ 264.354090][ T7737] overlayfs: ...falling back to index=off,metacopy=off. [ 264.357442][ T3568] EXT4-fs (loop2): unmounting filesystem. [ 264.419936][ T7743] fuse: Bad value for 'fd' [ 264.461827][ T4344] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 264.463543][ T26] audit: type=1326 audit(1718056024.087:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f8d5567cf69 code=0x7ffc0000 [ 264.507209][ T26] audit: type=1326 audit(1718056024.087:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5567cf69 code=0x7ffc0000 [ 264.531636][ T26] audit: type=1326 audit(1718056024.627:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5567cf69 code=0x7ffc0000 [ 264.539049][ T4344] usb 5-1: USB disconnect, device number 4 [ 264.605418][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.908059][ T7759] loop4: detected capacity change from 0 to 256 [ 265.859276][ T7768] autofs4:pid:7768:autofs_fill_super: called with bogus options [ 267.206952][ T7759] syz-executor.4 (7759): drop_caches: 2 [ 267.545580][ T7787] loop4: detected capacity change from 0 to 128 [ 267.794165][ T7787] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 267.805380][ T7787] ext4 filesystem being mounted at /root/syzkaller-testdir3992433977/syzkaller.MurSQe/14/mnt supports timestamps until 2038 (0x7fffffff) [ 268.066809][ T7791] loop3: detected capacity change from 0 to 2048 [ 268.077355][ T7791] NILFS (loop3): invalid segment: Sequence number mismatch [ 268.084603][ T7791] NILFS (loop3): trying rollback from an earlier position [ 268.096032][ T7791] NILFS (loop3): recovery complete [ 268.114520][ T7792] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 268.273579][ T7104] EXT4-fs (loop4): unmounting filesystem. [ 268.338215][ T7791] overlayfs: upper fs does not support tmpfile. [ 268.344964][ T7791] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 268.352128][ T7791] overlayfs: failed to set xattr on upper [ 268.360072][ T7791] overlayfs: ...falling back to index=off,metacopy=off. [ 269.581996][ T7811] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 269.665637][ T7815] loop4: detected capacity change from 0 to 128 [ 269.994516][ T7823] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 270.020000][ T7824] netlink: 198388 bytes leftover after parsing attributes in process `syz-executor.0'. [ 270.087875][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 270.246138][ T7833] loop1: detected capacity change from 0 to 256 [ 270.292275][ T7833] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 270.359469][ T7833] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 270.381087][ T7833] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 270.400310][ T7833] UDF-fs: Scanning with blocksize 512 failed [ 270.441199][ T7833] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 270.469596][ T7833] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.733117][ T7849] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 270.788427][ T7849] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 270.827542][ T7849] bridge0: port 3(gretap0) entered blocking state [ 270.845921][ T7849] bridge0: port 3(gretap0) entered disabled state [ 270.862907][ T7849] device gretap0 entered promiscuous mode [ 271.141086][ T7863] loop1: detected capacity change from 0 to 128 [ 271.853055][ T3574] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.864735][ T3574] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.874449][ T3574] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.887338][ T3574] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.895890][ T3574] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.903912][ T3574] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.910447][ T7877] loop1: detected capacity change from 0 to 512 [ 272.085683][ T7877] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 272.123916][ T7877] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 272.157542][ T7877] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 272.167335][ T7877] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 272.178483][ T7877] System zones: 0-2, 18-18, 34-34 [ 272.253276][ T7877] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 272.286919][ T7877] EXT4-fs (loop1): 1 truncate cleaned up [ 272.292610][ T7877] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 272.318935][ T7383] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.386800][ T7383] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.460161][ T7873] chnl_net:caif_netlink_parms(): no params data found [ 272.570480][ T7383] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.626573][ T7383] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.687414][ T5524] EXT4-fs (loop1): unmounting filesystem. [ 272.801654][ T7383] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.856385][ T7383] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.971257][ T7902] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 273.062903][ T7902] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 273.113688][ T7913] loop1: detected capacity change from 0 to 512 [ 273.122738][ T7902] bridge0: port 3(gretap0) entered blocking state [ 273.131269][ T7913] EXT4-fs: Ignoring removed nomblk_io_submit option [ 273.171525][ T7913] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 273.181064][ T7902] bridge0: port 3(gretap0) entered disabled state [ 273.188505][ T7913] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 273.209391][ T7913] EXT4-fs (loop1): 1 truncate cleaned up [ 273.212744][ T7902] device gretap0 entered promiscuous mode [ 273.215291][ T7913] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 273.245172][ T7913] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 4: comm syz-executor.1: lblock 0 mapped to illegal pblock 4 (length 1) [ 273.263965][ T7902] bridge0: port 3(gretap0) entered blocking state [ 273.270546][ T7902] bridge0: port 3(gretap0) entered forwarding state [ 273.277554][ T7913] EXT4-fs (loop1): Remounting filesystem read-only [ 273.305147][ T7383] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.345224][ T7383] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.379441][ T5524] EXT4-fs (loop1): unmounting filesystem. [ 273.430990][ T7873] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.469473][ T7873] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.506833][ T7873] device bridge_slave_0 entered promiscuous mode [ 273.533289][ T7873] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.550453][ T7873] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.581105][ T7873] device bridge_slave_1 entered promiscuous mode [ 273.658843][ T7873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.779861][ T3634] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 273.944175][ T7873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.996779][ T3585] Bluetooth: hci0: command tx timeout [ 274.069373][ T7928] autofs4:pid:7928:autofs_fill_super: called with bogus options [ 274.103034][ T7873] team0: Port device team_slave_0 added [ 274.152924][ T7873] team0: Port device team_slave_1 added [ 274.263147][ T7873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.286709][ T3634] usb 2-1: not running at top speed; connect to a high speed hub [ 274.305865][ T7873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.369577][ T7873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.378664][ T3634] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.401647][ T7873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.408807][ T7873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.418370][ T3634] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 274.444381][ T7873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.481688][ T7938] 8021q: VLANs not supported on ipvlan0 [ 274.487841][ T3634] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.511518][ T26] audit: type=1326 audit(1718056035.267:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7933 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc2be7cf69 code=0x0 [ 274.638382][ T7873] device hsr_slave_0 entered promiscuous mode [ 274.653077][ T7873] device hsr_slave_1 entered promiscuous mode [ 274.669562][ T7873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.686237][ T7873] Cannot create hsr debugfs directory [ 274.717101][ T3634] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 274.732883][ T3634] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.750285][ T3634] usb 2-1: Product: syz [ 274.763680][ T3634] usb 2-1: Manufacturer: syz [ 274.774387][ T3634] usb 2-1: SerialNumber: syz [ 274.916399][ T7383] device gretap0 left promiscuous mode [ 274.932531][ T7383] bridge0: port 3(gretap0) entered disabled state [ 275.097511][ T3634] cdc_ncm 2-1:1.0: skipping garbage [ 275.106693][ T3634] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 275.132669][ T3634] cdc_ncm 2-1:1.0: bind() failure [ 275.169203][ T3634] usb 2-1: USB disconnect, device number 16 [ 275.454640][ T7383] device hsr_slave_0 left promiscuous mode [ 275.492908][ T7383] device hsr_slave_1 left promiscuous mode [ 275.553583][ T7383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.567512][ T7383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.585261][ T7960] loop0: detected capacity change from 0 to 1024 [ 275.629079][ T7383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.701034][ T7383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.718749][ T7960] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 275.730344][ T7383] device bridge_slave_1 left promiscuous mode [ 275.823819][ T7383] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.888572][ T7383] device bridge_slave_0 left promiscuous mode [ 275.944401][ T7383] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.096708][ T3575] EXT4-fs (loop0): unmounting filesystem. [ 276.107951][ T3585] Bluetooth: hci0: command tx timeout [ 276.164113][ T7383] device veth1_macvtap left promiscuous mode [ 276.273930][ T7383] device veth0_macvtap left promiscuous mode [ 276.372005][ T7383] device veth1_vlan left promiscuous mode [ 276.611855][ T7383] device veth0_vlan left promiscuous mode [ 276.950401][ T7383] bond3 (unregistering): Released all slaves [ 276.994952][ T7383] bond2 (unregistering): Released all slaves [ 277.009901][ T7383] bond1 (unregistering): Released all slaves [ 277.102433][ T7383] team0 (unregistering): Port device team_slave_1 removed [ 277.148958][ T7383] team0 (unregistering): Port device team_slave_0 removed [ 277.164587][ T7383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.180820][ T7383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.292317][ T7383] bond0 (unregistering): Released all slaves [ 277.476230][ T7986] device dummy0 entered promiscuous mode [ 277.488364][ T7986] batman_adv: batadv0: Adding interface: macsec1 [ 277.507812][ T7986] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.540032][ T7986] batman_adv: batadv0: Interface activated: macsec1 [ 277.548059][ T7989] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 277.558285][ T7989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.573056][ T7989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.592210][ T7989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.603839][ T7989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.628873][ T7989] batman_adv: batadv0: Interface deactivated: macsec1 [ 277.640926][ T7989] batman_adv: batadv0: Removing interface: macsec1 [ 277.741479][ T26] audit: type=1326 audit(1718056038.497:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f657c07cf69 code=0x0 [ 277.909403][ T8001] 8021q: VLANs not supported on ipvlan0 [ 278.156780][ T3574] Bluetooth: hci0: command tx timeout [ 278.218713][ T8013] autofs4:pid:8013:autofs_fill_super: called with bogus options [ 278.403079][ T7873] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 278.429768][ T7873] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 278.462278][ T7873] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 278.498927][ T7873] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 278.641622][ T7873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.657696][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.667224][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.685665][ T7873] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.715748][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.742403][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.771429][ T3634] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.778644][ T3634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.833939][ T8024] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 278.856620][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 278.902351][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.921476][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.941384][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.967775][ T4435] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.974971][ T4435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.032977][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 279.101025][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 279.114472][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 279.155082][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 279.185193][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 279.223168][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 279.242259][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 279.273301][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 279.300343][ T7873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.331072][ T7873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 279.349935][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 279.360522][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 279.380526][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.435540][ T8034] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 279.478265][ T8034] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 280.258052][ T3574] Bluetooth: hci0: command tx timeout [ 280.923353][ T8073] loop1: detected capacity change from 0 to 128 [ 281.161830][ T8073] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 281.172394][ T8073] ext4 filesystem being mounted at /root/syzkaller-testdir3703541668/syzkaller.S8XQ9s/154/mnt supports timestamps until 2038 (0x7fffffff) [ 281.729358][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 281.779127][ T5524] EXT4-fs (loop1): unmounting filesystem. [ 281.785095][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.852382][ T7873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.894051][ T8089] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 282.037215][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 282.060687][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 282.062314][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 282.131132][ T8096] autofs4:pid:8096:autofs_fill_super: called with bogus options [ 282.172035][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 282.190869][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 282.222612][ T7873] device veth0_vlan entered promiscuous mode [ 282.241551][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 282.256869][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 282.301426][ T7873] device veth1_vlan entered promiscuous mode [ 282.560580][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 282.583951][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 282.669040][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 282.753788][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 282.812861][ T7873] device veth0_macvtap entered promiscuous mode [ 282.838533][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 282.861754][ T7873] device veth1_macvtap entered promiscuous mode [ 283.093389][ T7873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.260677][ T7873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.560268][ T7873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.606355][ T7873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.621399][ T7873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.632910][ T7873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.975036][ T8121] loop0: detected capacity change from 0 to 128 [ 284.570051][ T7873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.640069][ T8121] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 284.649987][ T8121] ext4 filesystem being mounted at /root/syzkaller-testdir296708077/syzkaller.ac2va8/257/mnt supports timestamps until 2038 (0x7fffffff) [ 284.663278][ T7873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.679808][ T7873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.690109][ T7873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.700896][ T7873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.711349][ T7873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.722041][ T7873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.734013][ T7873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.841288][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 284.866179][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 284.879095][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 284.888138][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 284.902211][ T7873] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.909196][ T3575] EXT4-fs (loop0): unmounting filesystem. [ 284.977791][ T7873] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.013122][ T7873] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.032013][ T7873] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.043857][ T8126] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 285.212428][ T8137] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 285.346694][ T3800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.396586][ T3800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.458971][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 285.492064][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 285.543786][ T8145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.606547][ T8145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.650187][ T8145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.694364][ T8145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.805038][ T3801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.868123][ T3801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.915136][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 286.174003][ T8167] loop2: detected capacity change from 0 to 256 [ 287.149271][ T8180] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 287.482862][ T8195] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 287.540582][ T8195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.576556][ T8195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.639632][ T8195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.683370][ T8195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.714551][ T8206] loop3: detected capacity change from 0 to 256 [ 287.780290][ T8202] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 287.893334][ T8202] team0: Device dummy0 failed to register rx_handler [ 288.980488][ T8222] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 289.375375][ T8236] device dummy0 entered promiscuous mode [ 289.396544][ T3615] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 289.433827][ T8236] device dummy0 left promiscuous mode [ 289.476927][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 289.499389][ T8241] loop2: detected capacity change from 0 to 256 [ 289.847943][ T3615] usb 5-1: not running at top speed; connect to a high speed hub [ 289.946733][ T3615] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.001599][ T3615] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 290.021438][ T3615] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.168729][ T8267] loop3: detected capacity change from 0 to 256 [ 290.178491][ T8269] device dummy0 entered promiscuous mode [ 290.197574][ T8269] device dummy0 left promiscuous mode [ 290.214697][ T8263] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 290.228981][ T3615] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 290.252217][ T3615] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.262510][ T3615] usb 5-1: Product: syz [ 290.269205][ T3615] usb 5-1: Manufacturer: syz [ 290.274496][ T3615] usb 5-1: SerialNumber: syz [ 290.297228][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 290.318005][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 290.567580][ T3615] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 290.578668][ T3615] cdc_ncm 5-1:1.0: bind() failure [ 290.594590][ T3615] usb 5-1: USB disconnect, device number 5 [ 290.984936][ T8298] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 291.232111][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 291.257964][ T8298] team0: Port device dummy0 added [ 291.318857][ T8313] loop4: detected capacity change from 0 to 256 [ 291.472176][ T8316] autofs4:pid:8316:autofs_fill_super: called with bogus options [ 291.926085][ T8335] device team0 entered promiscuous mode [ 291.939081][ T8335] device team_slave_0 entered promiscuous mode [ 291.955843][ T8335] device team_slave_1 entered promiscuous mode [ 292.027264][ T8335] device dummy0 entered promiscuous mode [ 292.063187][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 292.113407][ T8342] loop0: detected capacity change from 0 to 256 [ 292.836208][ T8375] autofs4:pid:8375:autofs_fill_super: called with bogus options [ 292.872185][ T8374] loop2: detected capacity change from 0 to 256 [ 293.375109][ T8404] Bluetooth: MGMT ver 1.22 [ 293.399010][ T8403] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 293.455304][ T8408] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 293.922036][ T8374] syz-executor.2 (8374): drop_caches: 2 [ 294.349335][ T8437] loop2: detected capacity change from 0 to 128 [ 295.338188][ T8437] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 295.347055][ T8437] ext4 filesystem being mounted at /root/syzkaller-testdir292608631/syzkaller.ld3fAa/21/mnt supports timestamps until 2038 (0x7fffffff) [ 295.488615][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 295.505193][ T7873] EXT4-fs (loop2): unmounting filesystem. [ 295.514337][ T8444] autofs4:pid:8444:autofs_fill_super: called with bogus options [ 295.787847][ T8453] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 295.997943][ T8464] loop2: detected capacity change from 0 to 256 [ 296.368889][ T8485] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 296.394569][ T8464] syz-executor.2 (8464): drop_caches: 2 [ 296.394726][ T8484] autofs4:pid:8484:autofs_fill_super: called with bogus options [ 296.492883][ T8464] syz-executor.2 (8464): drop_caches: 2 [ 296.555384][ T8496] Illegal XDP return value 4294967294 on prog (id 390) dev N/A, expect packet loss! [ 297.138041][ T8524] loop4: detected capacity change from 0 to 256 [ 297.215908][ T8524] syz-executor.4 (8524): drop_caches: 2 [ 297.231441][ T8524] syz-executor.4 (8524): drop_caches: 2 [ 297.319204][ T8532] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 297.733026][ T8553] autofs4:pid:8553:autofs_fill_super: called with bogus options [ 298.149195][ T8563] loop3: detected capacity change from 0 to 256 [ 298.285062][ T8563] syz-executor.3 (8563): drop_caches: 2 [ 298.316109][ T8563] syz-executor.3 (8563): drop_caches: 2 [ 298.548967][ T8572] loop0: detected capacity change from 0 to 2048 [ 298.567874][ T8572] NILFS (loop0): invalid segment: Sequence number mismatch [ 298.575481][ T8572] NILFS (loop0): trying rollback from an earlier position [ 298.589117][ T8572] NILFS (loop0): recovery complete [ 298.606960][ T8576] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 298.849306][ T8583] overlayfs: upper fs does not support tmpfile. [ 298.855961][ T8583] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 298.863074][ T8583] overlayfs: failed to set xattr on upper [ 298.868953][ T8583] overlayfs: ...falling back to index=off,metacopy=off. [ 299.620993][ T8599] loop2: detected capacity change from 0 to 256 [ 299.811461][ T8607] autofs4:pid:8607:autofs_fill_super: called with bogus options [ 299.834821][ T8599] syz-executor.2 (8599): drop_caches: 2 [ 299.861447][ T8599] syz-executor.2 (8599): drop_caches: 2 [ 300.178441][ T8618] loop2: detected capacity change from 0 to 128 [ 300.235925][ T8617] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 300.737646][ T8618] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 300.748683][ T8618] ext4 filesystem being mounted at /root/syzkaller-testdir292608631/syzkaller.ld3fAa/33/mnt supports timestamps until 2038 (0x7fffffff) [ 300.801656][ T8626] loop1: detected capacity change from 0 to 2048 [ 300.812799][ T8626] NILFS (loop1): invalid segment: Sequence number mismatch [ 300.820129][ T8626] NILFS (loop1): trying rollback from an earlier position [ 300.831771][ T8626] NILFS (loop1): recovery complete [ 300.846106][ T8627] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 300.927585][ T7873] EXT4-fs (loop2): unmounting filesystem. [ 301.077300][ T8628] overlayfs: upper fs does not support tmpfile. [ 301.084130][ T8628] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 301.091793][ T8628] overlayfs: failed to set xattr on upper [ 301.097594][ T8628] overlayfs: ...falling back to index=off,metacopy=off. [ 302.058717][ T8647] loop1: detected capacity change from 0 to 256 [ 302.126366][ T8647] syz-executor.1 (8647): drop_caches: 2 [ 302.247353][ T8647] syz-executor.1 (8647): drop_caches: 2 [ 302.282154][ T8655] autofs4:pid:8655:autofs_fill_super: called with bogus options [ 302.633817][ T8663] loop1: detected capacity change from 0 to 128 [ 302.704378][ T8663] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 302.715820][ T8663] ext4 filesystem being mounted at /root/syzkaller-testdir3703541668/syzkaller.S8XQ9s/192/mnt supports timestamps until 2038 (0x7fffffff) [ 302.897860][ T8666] loop0: detected capacity change from 0 to 2048 [ 302.910928][ T8666] NILFS (loop0): invalid segment: Sequence number mismatch [ 302.918559][ T8666] NILFS (loop0): trying rollback from an earlier position [ 302.945744][ T8666] NILFS (loop0): recovery complete [ 303.147412][ T8667] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 303.243579][ T5524] EXT4-fs (loop1): unmounting filesystem. [ 303.475110][ T8670] overlayfs: upper fs does not support tmpfile. [ 303.482129][ T8670] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 303.489142][ T8670] overlayfs: failed to set xattr on upper [ 303.494885][ T8670] overlayfs: ...falling back to index=off,metacopy=off. [ 303.958464][ T8691] loop0: detected capacity change from 0 to 256 [ 303.971085][ T8661] loop2: detected capacity change from 0 to 32768 [ 304.029344][ T8691] syz-executor.0 (8691): drop_caches: 2 [ 304.067212][ T8691] syz-executor.0 (8691): drop_caches: 2 [ 304.116882][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 304.381321][ T8707] autofs4:pid:8707:autofs_fill_super: called with bogus options [ 305.922174][ T8733] loop3: detected capacity change from 0 to 256 [ 306.005464][ T8733] syz-executor.3 (8733): drop_caches: 2 [ 306.049295][ T8733] syz-executor.3 (8733): drop_caches: 2 [ 306.248210][ T8751] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 306.392004][ T8751] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 306.406824][ T3574] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 306.415834][ T3574] Bluetooth: hci0: Injecting HCI hardware error event [ 306.429089][ T3585] Bluetooth: hci0: hardware error 0x00 [ 306.437128][ T8762] autofs4:pid:8762:autofs_fill_super: called with bogus options [ 306.466111][ T8758] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 306.604328][ T8737] loop2: detected capacity change from 0 to 32768 [ 306.642447][ T8751] bridge0: port 3(gretap0) entered disabled state [ 306.929632][ T8751] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.937229][ T8751] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.118206][ T8751] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.127224][ T8751] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.136187][ T8751] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.145648][ T8751] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.723248][ T3585] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 308.872095][ T8819] loop3: detected capacity change from 0 to 128 [ 309.133930][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 309.293984][ T8819] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 309.303322][ T8819] ext4 filesystem being mounted at /root/syzkaller-testdir3032605866/syzkaller.IpbfoE/226/mnt supports timestamps until 2038 (0x7fffffff) [ 309.458238][ T8833] fuse: Bad value for 'fd' [ 309.563982][ T5209] EXT4-fs (loop3): unmounting filesystem. [ 310.610170][ T8842] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 310.660617][ T8842] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 310.719829][ T8844] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 311.572524][ T8842] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.589353][ T8842] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.728266][ T8868] Bluetooth: MGMT ver 1.22 [ 311.873168][ T8862] loop0: detected capacity change from 0 to 32768 [ 311.890443][ T8862] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (8862) [ 311.916655][ T8862] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 311.926968][ T8862] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 311.945251][ T8862] BTRFS info (device loop0): using free space tree [ 312.059087][ T8884] loop1: detected capacity change from 0 to 128 [ 312.267055][ T8884] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 312.279765][ T8884] ext4 filesystem being mounted at /root/syzkaller-testdir3703541668/syzkaller.S8XQ9s/202/mnt supports timestamps until 2038 (0x7fffffff) [ 312.504076][ T8862] BTRFS info (device loop0): enabling ssd optimizations [ 312.573809][ T3802] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 312.772003][ T5524] EXT4-fs (loop1): unmounting filesystem. [ 312.909071][ T3575] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 313.075778][ T8898] loop1: detected capacity change from 0 to 64 [ 313.093665][ T8898] Trying to free block not in datazone [ 313.099403][ T8898] Trying to free block not in datazone [ 313.105199][ T8898] Trying to free block not in datazone [ 313.110696][ T8898] Trying to free block not in datazone [ 313.116146][ T8898] Trying to free block not in datazone [ 313.121707][ T8898] minix_free_block (loop1:6): bit already cleared [ 313.128286][ T8898] Trying to free block not in datazone [ 313.133730][ T8898] Trying to free block not in datazone [ 313.277206][ T8842] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.286127][ T8842] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.295816][ T8842] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.320764][ T8842] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.618084][ T8918] fuse: Bad value for 'fd' [ 314.899790][ T8931] loop3: detected capacity change from 0 to 128 [ 314.949453][ T8931] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 314.958496][ T8931] ext4 filesystem being mounted at /root/syzkaller-testdir3032605866/syzkaller.IpbfoE/230/mnt supports timestamps until 2038 (0x7fffffff) [ 315.484437][ T8936] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 315.691595][ T5209] EXT4-fs (loop3): unmounting filesystem. [ 315.718669][ T8940] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 315.720243][ T8940] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 315.721556][ T8940] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 316.216526][ T3634] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 317.169571][ T8956] loop1: detected capacity change from 0 to 2048 [ 317.203200][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.209562][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.229034][ T8956] NILFS (loop1): invalid segment: Sequence number mismatch [ 317.236296][ T8956] NILFS (loop1): trying rollback from an earlier position [ 317.249413][ T8956] NILFS (loop1): recovery complete [ 317.263344][ T8961] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 317.515559][ T8956] overlayfs: upper fs does not support tmpfile. [ 317.522623][ T8956] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 317.529729][ T8956] overlayfs: failed to set xattr on upper [ 317.535534][ T8956] overlayfs: ...falling back to index=off,metacopy=off. [ 317.546647][ T3634] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.566550][ T3634] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.446618][ T3634] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 318.455684][ T3634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 318.463960][ T3634] usb 5-1: SerialNumber: syz [ 318.509545][ T8969] fuse: Bad value for 'fd' [ 318.526604][ T3634] usb 5-1: can't set config #1, error -71 [ 318.547791][ T3634] usb 5-1: USB disconnect, device number 6 [ 318.604730][ T8974] loop2: detected capacity change from 0 to 128 [ 318.657214][ T8974] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 318.670173][ T8974] ext4 filesystem being mounted at /root/syzkaller-testdir292608631/syzkaller.ld3fAa/48/mnt supports timestamps until 2038 (0x7fffffff) [ 318.890150][ T8984] loop4: detected capacity change from 0 to 512 [ 318.944112][ T8984] EXT4-fs: Ignoring removed nomblk_io_submit option [ 318.969582][ T8984] ext3: Bad value for 'commit' [ 319.998640][ T7873] EXT4-fs (loop2): unmounting filesystem. [ 320.092829][ T8993] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 320.424445][ T9001] loop0: detected capacity change from 0 to 2048 [ 320.437776][ T9001] NILFS (loop0): invalid segment: Sequence number mismatch [ 320.445396][ T9001] NILFS (loop0): trying rollback from an earlier position [ 320.468787][ T9001] NILFS (loop0): recovery complete [ 320.567685][ T9004] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 320.766585][ T9001] overlayfs: upper fs does not support tmpfile. [ 320.777009][ T9001] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 320.785531][ T9001] overlayfs: failed to set xattr on upper [ 320.791334][ T9001] overlayfs: ...falling back to index=off,metacopy=off. [ 321.742408][ T9024] usb usb9: usbfs: process 9024 (syz-executor.4) did not claim interface 0 before use [ 322.876594][ T3619] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 323.104801][ T9048] loop3: detected capacity change from 0 to 512 [ 323.143288][ T9048] EXT4-fs: Ignoring removed nomblk_io_submit option [ 323.173133][ T9048] ext3: Bad value for 'commit' [ 323.258084][ T3619] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.291798][ T3619] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 323.436751][ T3619] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 323.452426][ T3619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 323.492263][ T3619] usb 5-1: SerialNumber: syz [ 324.758469][ T3619] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 324.783224][ T9085] loop2: detected capacity change from 0 to 1024 [ 324.801533][ T3619] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 324.811300][ T3619] usb 5-1: USB disconnect, device number 7 [ 325.008740][ T9096] loop4: detected capacity change from 0 to 64 [ 325.020613][ T9085] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 325.053932][ T9088] Trying to free block not in datazone [ 325.059809][ T9088] Trying to free block not in datazone [ 325.065335][ T9088] Trying to free block not in datazone [ 325.072103][ T9088] Trying to free block not in datazone [ 325.077669][ T9088] Trying to free block not in datazone [ 325.083147][ T9088] minix_free_block (loop4:6): bit already cleared [ 325.089587][ T9088] Trying to free block not in datazone [ 325.095023][ T9088] Trying to free block not in datazone [ 325.110599][ T7873] EXT4-fs (loop2): unmounting filesystem. [ 325.427105][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 325.467463][ T9113] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 326.696127][ T9130] loop2: detected capacity change from 0 to 1024 [ 326.743608][ T9135] loop1: detected capacity change from 0 to 512 [ 326.753223][ T9130] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 326.763174][ T9135] EXT4-fs: Ignoring removed nomblk_io_submit option [ 326.769988][ T9135] ext3: Bad value for 'commit' [ 326.807710][ T7873] EXT4-fs (loop2): unmounting filesystem. [ 327.362152][ T9145] loop2: detected capacity change from 0 to 64 [ 327.371897][ T9145] Trying to free block not in datazone [ 327.377735][ T9145] Trying to free block not in datazone [ 327.383242][ T9145] Trying to free block not in datazone [ 327.388772][ T9145] Trying to free block not in datazone [ 327.394240][ T9145] Trying to free block not in datazone [ 327.399780][ T9145] minix_free_block (loop2:6): bit already cleared [ 327.406697][ T9145] Trying to free block not in datazone [ 327.412177][ T9145] Trying to free block not in datazone [ 327.764592][ T9160] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 328.509989][ T9170] loop2: detected capacity change from 0 to 1024 [ 328.569193][ T9170] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 328.632242][ T9181] loop0: detected capacity change from 0 to 512 [ 328.651658][ T7873] EXT4-fs (loop2): unmounting filesystem. [ 328.674489][ T9181] EXT4-fs: Ignoring removed nomblk_io_submit option [ 328.717312][ T9181] ext3: Bad value for 'commit' [ 330.017615][ T9205] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 330.090271][ T9179] loop3: detected capacity change from 0 to 32768 [ 330.248586][ T3615] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 330.258216][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 330.298531][ T9213] loop4: detected capacity change from 0 to 1024 [ 330.353648][ T9213] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 330.376010][ T9221] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 330.431779][ T7104] EXT4-fs (loop4): unmounting filesystem. [ 330.710001][ T9238] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 330.826836][ T3615] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.848398][ T3615] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 330.946751][ T3615] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 330.962670][ T9245] loop4: detected capacity change from 0 to 512 [ 330.969505][ T3615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 330.977778][ T3615] usb 2-1: SerialNumber: syz [ 330.987633][ T9245] EXT4-fs: Ignoring removed nomblk_io_submit option [ 330.998891][ T9245] ext3: Bad value for 'commit' [ 331.250084][ T9258] loop0: detected capacity change from 0 to 1024 [ 331.328782][ T3615] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 331.339381][ T9258] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 331.430404][ T3615] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 331.482734][ T3615] usb 2-1: USB disconnect, device number 17 [ 331.544609][ T9247] loop3: detected capacity change from 0 to 32768 [ 331.573093][ T3575] EXT4-fs (loop0): unmounting filesystem. [ 331.844459][ T3574] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 331.856316][ T3574] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 331.865848][ T3574] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 331.875185][ T3574] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 331.883224][ T3574] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 331.892236][ T3574] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 331.902073][ T3795] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.042096][ T9271] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 332.092011][ T9286] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 332.138184][ T3795] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.260171][ T3795] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.312661][ T9294] loop3: detected capacity change from 0 to 1024 [ 332.422158][ T3795] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.497720][ T9292] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 332.542305][ T9294] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 332.632908][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 332.937604][ T5209] EXT4-fs (loop3): unmounting filesystem. [ 333.043425][ T9310] loop4: detected capacity change from 0 to 512 [ 333.079933][ T9310] EXT4-fs: Ignoring removed nomblk_io_submit option [ 333.132959][ T9310] ext3: Bad value for 'commit' [ 333.356520][ T3619] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 333.454445][ T3574] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 333.467123][ T3574] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 333.475779][ T3574] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 333.484947][ T3574] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 333.498114][ T3574] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 333.507296][ T3574] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 333.564827][ T9307] loop0: detected capacity change from 0 to 32768 [ 333.758896][ T3619] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.774930][ T3619] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 333.829227][ T9316] chnl_net:caif_netlink_parms(): no params data found [ 333.897017][ T3619] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 333.906879][ T3795] device hsr_slave_0 left promiscuous mode [ 333.913484][ T3795] device hsr_slave_1 left promiscuous mode [ 333.921682][ T3795] device bridge_slave_1 left promiscuous mode [ 333.928053][ T3795] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.932925][ T3619] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 333.951739][ T3795] device bridge_slave_0 left promiscuous mode [ 333.957081][ T3619] usb 2-1: SerialNumber: syz [ 333.965046][ T3795] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.023023][ T3795] device veth1_macvtap left promiscuous mode [ 334.041719][ T3795] device veth0_macvtap left promiscuous mode [ 334.048426][ T3795] device veth1_vlan left promiscuous mode [ 334.054511][ T3795] device veth0_vlan left promiscuous mode [ 334.285216][ T9337] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 334.294823][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 334.384617][ T9338] loop0: detected capacity change from 0 to 64 [ 335.121969][ T9336] Trying to free block not in datazone [ 335.127929][ T9336] Trying to free block not in datazone [ 335.133417][ T9336] Trying to free block not in datazone [ 335.139343][ T9336] Trying to free block not in datazone [ 335.144853][ T9336] Trying to free block not in datazone [ 335.150365][ T9336] minix_free_block (loop0:6): bit already cleared [ 335.157248][ T9336] Trying to free block not in datazone [ 335.162745][ T9336] Trying to free block not in datazone [ 335.170624][ T3619] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 335.189759][ T3619] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 335.204915][ T3619] usb 2-1: USB disconnect, device number 18 [ 335.216217][ T9340] loop3: detected capacity change from 0 to 1024 [ 335.228428][ T3795] bond1 (unregistering): Released all slaves [ 335.239830][ T9340] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 335.286058][ T5209] EXT4-fs (loop3): unmounting filesystem. [ 335.425410][ T3795] team0 (unregistering): Port device team_slave_1 removed [ 335.441807][ T3795] team0 (unregistering): Port device team_slave_0 removed [ 335.453435][ T3795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.466521][ T3795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.516756][ T3795] bond0 (unregistering): Released all slaves [ 335.598697][ T9345] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 335.606605][ T3574] Bluetooth: hci0: command tx timeout [ 335.613784][ T9345] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 335.653537][ T9345] device dummy0 left promiscuous mode [ 335.663712][ T9345] bridge0: port 4(dummy0) entered blocking state [ 335.673671][ T9345] bridge0: port 4(dummy0) entered disabled state [ 335.681539][ T9345] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 335.729299][ T9316] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.769921][ T9316] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.781821][ T9316] device bridge_slave_0 entered promiscuous mode [ 335.793031][ T9316] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.802542][ T9316] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.813499][ T9316] device bridge_slave_1 entered promiscuous mode [ 335.889995][ T9316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.904859][ T9316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.998967][ T9316] team0: Port device team_slave_0 added [ 336.016954][ T9358] loop4: detected capacity change from 0 to 32768 [ 336.028883][ T9316] team0: Port device team_slave_1 added [ 336.077611][ T9316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.086552][ T9316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.123475][ T9316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.141239][ T9316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.148290][ T9316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.182579][ T9316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.187661][ T151] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 336.245149][ T9316] device hsr_slave_0 entered promiscuous mode [ 336.258542][ T9316] device hsr_slave_1 entered promiscuous mode [ 336.273599][ T9316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.290013][ T9316] Cannot create hsr debugfs directory [ 336.396890][ T9367] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 336.421732][ T9367] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 336.610823][ T151] usb 1-1: unable to get BOS descriptor or descriptor too short [ 336.816724][ T151] usb 1-1: not running at top speed; connect to a high speed hub [ 336.901388][ T9380] loop1: detected capacity change from 0 to 64 [ 336.927426][ T151] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.983987][ T9380] Trying to free block not in datazone [ 336.993090][ T9380] Trying to free block not in datazone [ 336.998821][ T9380] Trying to free block not in datazone [ 337.004357][ T9380] Trying to free block not in datazone [ 337.009907][ T9380] Trying to free block not in datazone [ 337.015389][ T9380] minix_free_block (loop1:6): bit already cleared [ 337.022120][ T9380] Trying to free block not in datazone [ 337.028041][ T9380] Trying to free block not in datazone [ 337.111387][ T151] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 337.258833][ T151] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 337.548491][ T9316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 337.577394][ T9316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 337.579573][ T151] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.595881][ T9316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 337.613214][ T151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.626568][ T151] usb 1-1: Product: syz [ 337.630763][ T151] usb 1-1: Manufacturer: syz [ 337.650689][ T151] usb 1-1: SerialNumber: syz [ 337.668283][ T9316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 337.681947][ T3574] Bluetooth: hci0: command tx timeout [ 337.908417][ T9316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.940677][ T151] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 337.947625][ T9316] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.967959][ T151] cdc_ncm 1-1:1.0: bind() failure [ 337.981809][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 337.988326][ T151] usb 1-1: USB disconnect, device number 8 [ 338.007284][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 338.040007][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 338.046623][ T4440] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 338.053569][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 338.079367][ T3619] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.086610][ T3619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.111083][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 338.129070][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 338.147585][ T3619] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.154742][ T3619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.170317][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 338.179704][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 338.211861][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 338.227689][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 338.250887][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 338.270515][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 338.282123][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 338.292861][ T9395] loop4: detected capacity change from 0 to 32768 [ 338.302496][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 338.314342][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 338.323408][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 338.344695][ T9316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.360746][ T9316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 338.374308][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 338.384319][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 338.431259][ T4440] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.456971][ T4440] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 338.579792][ T4440] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 338.599663][ T4440] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 338.618613][ T4440] usb 4-1: SerialNumber: syz [ 338.763010][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 338.774282][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 338.780286][ T9412] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 338.797804][ T9316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.804777][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 338.831784][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 338.841403][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 338.872320][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 338.885030][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 338.896369][ T9316] device veth0_vlan entered promiscuous mode [ 338.908234][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 338.919737][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 338.932538][ T9316] device veth1_vlan entered promiscuous mode [ 338.948524][ T4440] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 338.984737][ T4440] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 338.998514][ T9316] device veth0_macvtap entered promiscuous mode [ 339.006559][ T4440] usb 4-1: USB disconnect, device number 10 [ 339.018749][ T9316] device veth1_macvtap entered promiscuous mode [ 339.058954][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 339.071712][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 339.085927][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 339.096155][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 339.104812][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 339.120568][ T9316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.132194][ T9316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.145610][ T9316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.156241][ T9316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.167960][ T9316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.175850][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 339.189789][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 339.202505][ T9420] loop4: detected capacity change from 0 to 64 [ 339.866538][ T3574] Bluetooth: hci0: command tx timeout [ 339.868867][ T3585] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 339.872828][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 339.890751][ T3585] Bluetooth: hci1: Injecting HCI hardware error event [ 339.891598][ T9316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.900078][ T3579] Bluetooth: hci1: hardware error 0x00 [ 339.912115][ T9316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.926098][ T9316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.937655][ T9316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.951274][ T9316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.985814][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 340.005120][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 340.017764][ T9316] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.036017][ T9316] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.045427][ T9316] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.054269][ T9316] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.078723][ T9426] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 340.091356][ T9426] device geneve0 entered promiscuous mode [ 340.106342][ T9426] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 340.265797][ T9433] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 340.286094][ T3661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.305704][ T3661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.332829][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 340.362379][ T3795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.377293][ T3795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.387130][ T4469] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 340.398759][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 340.544325][ T9458] sctp: [Deprecated]: syz-executor.3 (pid 9458) Use of struct sctp_assoc_value in delayed_ack socket option. [ 340.544325][ T9458] Use struct sctp_sack_info instead [ 340.605838][ T9460] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 340.774601][ T9464] loop4: detected capacity change from 0 to 64 [ 341.673114][ T4469] usb 2-1: unable to get BOS descriptor or descriptor too short [ 341.798723][ T9481] autofs4:pid:9481:autofs_fill_super: called with bogus options [ 341.821346][ T4469] usb 2-1: not running at top speed; connect to a high speed hub [ 341.907072][ T4469] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.917833][ T4469] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 341.926953][ T4469] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 342.501826][ T3585] Bluetooth: hci0: command tx timeout [ 342.507657][ T3579] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 342.636574][ T4346] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 342.686638][ T4469] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 342.699312][ T4469] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.710812][ T4469] usb 2-1: Product: syz [ 342.715195][ T4469] usb 2-1: Manufacturer: syz [ 342.720498][ T4469] usb 2-1: SerialNumber: syz [ 343.027519][ T4469] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 343.040719][ T4469] cdc_ncm 2-1:1.0: bind() failure [ 343.048217][ T4346] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.064063][ T4346] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 343.080063][ T4469] usb 2-1: USB disconnect, device number 19 [ 343.186665][ T4346] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 343.200610][ T4346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 343.215164][ T4346] usb 4-1: SerialNumber: syz [ 343.648379][ T9501] loop4: detected capacity change from 0 to 64 [ 344.367351][ T9503] Cannot find add_set index 0 as target [ 344.639261][ T4346] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 344.692848][ T4346] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 344.710664][ T4346] usb 4-1: USB disconnect, device number 11 [ 345.060627][ T9530] loop1: detected capacity change from 0 to 128 [ 345.121005][ T9530] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 345.133409][ T9530] ext4 filesystem being mounted at /root/syzkaller-testdir3703541668/syzkaller.S8XQ9s/247/mnt supports timestamps until 2038 (0x7fffffff) [ 345.576515][ T4346] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 345.806302][ T5524] EXT4-fs (loop1): unmounting filesystem. [ 345.995023][ T9545] loop0: detected capacity change from 0 to 64 [ 346.177131][ T4346] usb 5-1: unable to get BOS descriptor or descriptor too short [ 346.237130][ T4346] usb 5-1: not running at top speed; connect to a high speed hub [ 346.300457][ T9545] Trying to free block not in datazone [ 346.307508][ T9545] Trying to free block not in datazone [ 346.313086][ T9545] Trying to free block not in datazone [ 346.318937][ T9545] Trying to free block not in datazone [ 346.324429][ T9545] Trying to free block not in datazone [ 346.329941][ T9545] minix_free_block (loop0:6): bit already cleared [ 346.336465][ T9545] Trying to free block not in datazone [ 346.342001][ T9545] Trying to free block not in datazone [ 346.387745][ T4346] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.445371][ T4346] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 346.462069][ T4346] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 346.691790][ T9555] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 346.747594][ T4346] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 346.770764][ T4346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.797755][ T4346] usb 5-1: Product: syz [ 346.802755][ T4346] usb 5-1: Manufacturer: syz [ 346.819429][ T4346] usb 5-1: SerialNumber: syz [ 347.011510][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 347.083607][ T9563] device ip6gretap0 entered promiscuous mode [ 347.104806][ T9563] device macvtap1 entered promiscuous mode [ 347.111824][ T4346] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 347.122186][ T4346] cdc_ncm 5-1:1.0: bind() failure [ 347.135529][ T4346] usb 5-1: USB disconnect, device number 8 [ 347.172185][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 347.188067][ T9564] device ip6gretap0 left promiscuous mode [ 347.236545][ T4446] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 347.248600][ T9564] device macvtap1 left promiscuous mode [ 347.595190][ T9570] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 347.606875][ T4446] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.659100][ T4446] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 347.782357][ T9577] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 347.797776][ T4446] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 347.823814][ T4446] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 347.846547][ T4446] usb 4-1: SerialNumber: syz [ 348.086463][ T9590] loop1: detected capacity change from 0 to 64 [ 348.791039][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 348.808383][ T9582] Trying to free block not in datazone [ 348.814075][ T9582] Trying to free block not in datazone [ 348.819632][ T9582] Trying to free block not in datazone [ 348.825090][ T9582] Trying to free block not in datazone [ 348.830575][ T9582] Trying to free block not in datazone [ 348.836042][ T9582] minix_free_block (loop1:6): bit already cleared [ 348.842599][ T9582] Trying to free block not in datazone [ 348.848115][ T9582] Trying to free block not in datazone [ 348.882542][ T9596] tipc: Can't bind to reserved service type 0 [ 349.326687][ T4469] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 349.797000][ T4469] usb 1-1: unable to get BOS descriptor or descriptor too short [ 349.866723][ T4469] usb 1-1: not running at top speed; connect to a high speed hub [ 349.967018][ T4469] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.995646][ T4469] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 350.013686][ T4469] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 350.039910][ T9614] loop2: detected capacity change from 0 to 2048 [ 350.054283][ T9614] NILFS (loop2): invalid segment: Sequence number mismatch [ 350.061606][ T9614] NILFS (loop2): trying rollback from an earlier position [ 350.071462][ T9614] NILFS (loop2): recovery complete [ 350.108100][ T9615] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 350.300969][ T4446] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 350.335979][ T4469] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 350.378205][ T9619] overlayfs: upper fs does not support tmpfile. [ 350.389495][ T9619] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 350.396580][ T9619] overlayfs: failed to set xattr on upper [ 350.402347][ T9619] overlayfs: ...falling back to index=off,metacopy=off. [ 350.427522][ T4469] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.435683][ T4469] usb 1-1: Product: syz [ 350.440246][ T4469] usb 1-1: Manufacturer: syz [ 350.447887][ T4469] usb 1-1: SerialNumber: syz [ 350.795385][ T4469] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 350.848380][ T4469] cdc_ncm 1-1:1.0: bind() failure [ 350.919140][ T4469] usb 1-1: USB disconnect, device number 9 [ 350.944758][ T9623] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 350.985712][ T4446] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 350.994225][ T4446] usb 4-1: USB disconnect, device number 12 [ 351.578520][ T9644] loop0: detected capacity change from 0 to 64 [ 351.630288][ T9644] Trying to free block not in datazone [ 351.637395][ T9644] Trying to free block not in datazone [ 351.642960][ T9644] Trying to free block not in datazone [ 351.648546][ T9644] Trying to free block not in datazone [ 351.654102][ T9644] Trying to free block not in datazone [ 351.659634][ T9644] minix_free_block (loop0:6): bit already cleared [ 351.666130][ T9644] Trying to free block not in datazone [ 351.671887][ T9644] Trying to free block not in datazone [ 352.409398][ T9656] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 352.896518][ T4440] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 353.268338][ T4440] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.282607][ T9676] fuse: Bad value for 'fd' [ 353.283123][ T4440] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.366888][ T4346] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 353.386729][ T4440] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 353.415682][ T4440] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 353.434270][ T4440] usb 5-1: SerialNumber: syz [ 353.967127][ T4346] usb 3-1: unable to get BOS descriptor or descriptor too short [ 354.017050][ T4346] usb 3-1: not running at top speed; connect to a high speed hub [ 354.127290][ T4346] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.155093][ T4346] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 354.191444][ T4346] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 354.436789][ T4346] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 354.455944][ T4346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.512616][ T4346] usb 3-1: Product: syz [ 354.518240][ T4346] usb 3-1: Manufacturer: syz [ 354.524074][ T4346] usb 3-1: SerialNumber: syz [ 354.830676][ T4346] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 354.850102][ T4346] cdc_ncm 3-1:1.0: bind() failure [ 354.886859][ T4346] usb 3-1: USB disconnect, device number 7 [ 355.012410][ T9689] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 355.421333][ T9697] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 355.428434][ T4440] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 355.487326][ T4440] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 355.495809][ T4440] usb 5-1: USB disconnect, device number 9 [ 355.523438][ T9693] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 355.881352][ T26] audit: type=1804 audit(1718056116.637:49): pid=9713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3009866922/syzkaller.UTBjuH/21/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 355.953046][ T26] audit: type=1804 audit(1718056116.697:50): pid=9715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3009866922/syzkaller.UTBjuH/21/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 355.981024][ T26] audit: type=1800 audit(1718056116.707:51): pid=9713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.events" dev="sda1" ino=1966 res=0 errno=0 [ 356.104668][ T9718] fuse: Bad value for 'fd' [ 356.458334][ T9726] loop3: detected capacity change from 0 to 128 [ 356.635796][ T9726] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 356.694723][ T9726] ext4 filesystem being mounted at /root/syzkaller-testdir3032605866/syzkaller.IpbfoE/279/mnt supports timestamps until 2038 (0x7fffffff) [ 356.956764][ T3619] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 357.235403][ T9724] loop0: detected capacity change from 0 to 32768 [ 357.246309][ T9724] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (9724) [ 357.342491][ T9724] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 357.356789][ T3619] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.386633][ T9724] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 357.396100][ T9724] BTRFS info (device loop0): using free space tree [ 357.444273][ T3619] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.596774][ T3619] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 357.649735][ T3619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 357.672114][ T3619] usb 5-1: SerialNumber: syz [ 357.690461][ T9724] BTRFS info (device loop0): enabling ssd optimizations [ 358.092139][ T9766] netlink: 'syz-executor.2': attribute type 32 has an invalid length. [ 358.179452][ T9766] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.2'. [ 358.204451][ T5209] EXT4-fs (loop3): unmounting filesystem. [ 358.293643][ T3575] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 359.165133][ T9786] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 359.435310][ T9789] fuse: Bad value for 'fd' [ 359.551084][ T3619] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 359.596217][ T3619] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 359.623047][ T3619] usb 5-1: USB disconnect, device number 10 [ 360.571944][ T9811] netlink: 'syz-executor.0': attribute type 32 has an invalid length. [ 360.613873][ T9811] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.0'. [ 361.024810][ T9831] delete_channel: no stack [ 361.456556][ T4446] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 361.543161][ T3800] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.704205][ T3800] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.833126][ T3800] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.843822][ T4446] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.880697][ T3585] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.892428][ T3585] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.905052][ T3585] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.920315][ T3585] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 361.932170][ T3585] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 361.939380][ T4446] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 361.948531][ T3585] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.080061][ T3800] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.149679][ T4446] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 362.192542][ T4446] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 362.246777][ T4446] usb 4-1: SerialNumber: syz [ 362.651403][ T9836] chnl_net:caif_netlink_parms(): no params data found [ 363.878647][ T4446] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 363.895006][ T4446] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 363.906767][ T9836] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.908283][ T4446] usb 4-1: USB disconnect, device number 13 [ 363.913909][ T9836] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.932788][ T9836] device bridge_slave_0 entered promiscuous mode [ 363.950067][ T9836] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.957420][ T9836] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.966215][ T9836] device bridge_slave_1 entered promiscuous mode [ 364.006648][ T3579] Bluetooth: hci0: command tx timeout [ 364.040179][ T9836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.060874][ T9836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.135230][ T9836] team0: Port device team_slave_0 added [ 364.165827][ T9836] team0: Port device team_slave_1 added [ 364.238543][ T9836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.245529][ T9836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.271784][ C0] vkms_vblank_simulate: vblank timer overrun [ 364.284933][ T9836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.317659][ T9836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.324637][ T9836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.350535][ C0] vkms_vblank_simulate: vblank timer overrun [ 364.406468][ T9836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.543682][ T9836] device hsr_slave_0 entered promiscuous mode [ 364.555129][ T9836] device hsr_slave_1 entered promiscuous mode [ 364.567102][ T9836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.575101][ T9836] Cannot create hsr debugfs directory [ 364.678312][ T3800] device hsr_slave_0 left promiscuous mode [ 364.713474][ T3800] device hsr_slave_1 left promiscuous mode [ 364.742682][ T3800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.765318][ T3800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.783634][ T3800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.804706][ T3800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.829546][ T3800] device bridge_slave_1 left promiscuous mode [ 364.848601][ T3800] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.873813][ T3800] device bridge_slave_0 left promiscuous mode [ 364.889509][ T3800] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.908548][ T3800] device veth1_macvtap left promiscuous mode [ 364.914680][ T3800] device veth0_macvtap left promiscuous mode [ 364.924845][ T3800] device veth1_vlan left promiscuous mode [ 364.932005][ T3800] device veth0_vlan left promiscuous mode [ 365.201084][ T3800] team0 (unregistering): Port device team_slave_1 removed [ 365.221344][ T3800] team0 (unregistering): Port device team_slave_0 removed [ 365.235986][ T3800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.252671][ T3800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.339615][ T3800] bond0 (unregistering): Released all slaves [ 366.337064][ T3579] Bluetooth: hci0: command tx timeout [ 366.588350][ T9903] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 368.398392][ T3579] Bluetooth: hci0: command tx timeout [ 370.486456][ T3579] Bluetooth: hci0: command tx timeout [ 370.491268][ T9927] loop0: detected capacity change from 0 to 32768 [ 370.500145][ T9927] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (9927) [ 370.528450][ T9927] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 370.539125][ T9927] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 370.547929][ T9927] BTRFS info (device loop0): using free space tree [ 370.582466][ T9927] BTRFS info (device loop0): enabling ssd optimizations [ 370.843093][ T3575] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 378.640583][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.647168][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 395.162061][ T3579] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 395.172222][ T3579] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 395.181922][ T3579] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 395.193086][ T3579] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 395.201882][ T3579] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 395.209247][ T3579] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 396.660692][ T3574] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 396.677266][ T3574] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 396.686567][ T3574] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 396.694310][ T3574] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 396.701857][ T3574] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 396.710563][ T3574] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 397.277566][ T3574] Bluetooth: hci5: command tx timeout [ 397.553625][ T3585] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 397.565170][ T3585] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 397.574070][ T3585] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 397.583629][ T3585] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 397.591176][ T3585] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 397.602543][ T3585] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 398.796764][ T3574] Bluetooth: hci6: command tx timeout [ 399.356468][ T3574] Bluetooth: hci5: command tx timeout [ 399.676725][ T3574] Bluetooth: hci7: command tx timeout [ 400.876839][ T3574] Bluetooth: hci6: command tx timeout [ 401.085259][ T3585] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 401.095228][ T3585] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 401.103483][ T3585] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 401.112699][ T3585] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 401.120311][ T3585] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 401.129045][ T3585] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 401.436548][ T3585] Bluetooth: hci5: command tx timeout [ 401.766748][ T3585] Bluetooth: hci7: command tx timeout [ 402.956869][ T3585] Bluetooth: hci6: command tx timeout [ 403.196550][ T3585] Bluetooth: hci8: command tx timeout [ 403.516498][ T3585] Bluetooth: hci5: command tx timeout [ 403.836527][ T3585] Bluetooth: hci7: command tx timeout [ 405.036955][ T3585] Bluetooth: hci6: command tx timeout [ 405.276488][ T3585] Bluetooth: hci8: command tx timeout [ 405.916647][ T3585] Bluetooth: hci7: command tx timeout [ 407.356479][ T3585] Bluetooth: hci8: command tx timeout [ 409.446570][ T3585] Bluetooth: hci8: command tx timeout [ 426.260584][ T3585] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 426.271800][ T3585] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 426.280798][ T3585] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 426.289576][ T3585] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 426.300306][ T3585] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 426.308574][ T3585] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 428.396543][ T3585] Bluetooth: hci9: command tx timeout [ 430.476512][ T3585] Bluetooth: hci9: command tx timeout [ 432.556473][ T3585] Bluetooth: hci9: command tx timeout [ 434.636465][ T3585] Bluetooth: hci9: command tx timeout [ 440.078307][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.084624][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 460.298422][ T3585] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 460.308508][ T3585] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 460.317563][ T3585] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 460.329353][ T3585] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 460.337133][ T3585] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 460.344510][ T3585] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 461.655528][ T3585] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 461.671319][ T3585] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 461.679926][ T3585] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 461.689831][ T3585] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 461.699098][ T3585] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 461.706498][ T3585] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 462.396627][ T3574] Bluetooth: hci10: command tx timeout [ 462.568327][ T3579] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 462.578902][ T3579] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 462.588740][ T3579] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 462.603042][ T3579] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 462.611860][ T3579] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 462.619238][ T3579] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 463.756569][ T3579] Bluetooth: hci11: command tx timeout [ 464.486460][ T3579] Bluetooth: hci10: command tx timeout [ 464.726507][ T3579] Bluetooth: hci12: command tx timeout [ 465.836505][ T3579] Bluetooth: hci11: command tx timeout [ 466.128159][ T3574] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 466.139669][ T3574] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 466.148141][ T3574] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 466.156232][ T3574] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 466.171805][ T3574] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 466.179270][ T3574] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 466.556502][ T3574] Bluetooth: hci10: command tx timeout [ 466.796566][ T3574] Bluetooth: hci12: command tx timeout [ 467.916501][ T3574] Bluetooth: hci11: command tx timeout [ 468.236609][ T3574] Bluetooth: hci13: command tx timeout [ 468.636649][ T3574] Bluetooth: hci10: command tx timeout [ 468.876540][ T3574] Bluetooth: hci12: command tx timeout [ 469.996503][ T3574] Bluetooth: hci11: command tx timeout [ 470.316611][ T3574] Bluetooth: hci13: command tx timeout [ 470.956541][ T3574] Bluetooth: hci12: command tx timeout [ 472.396577][ T3574] Bluetooth: hci13: command tx timeout [ 474.476593][ T3574] Bluetooth: hci13: command tx timeout [ 488.246512][ T3574] Bluetooth: hci0: command 0x0406 tx timeout [ 491.273576][ T3579] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 491.286260][ T3579] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 491.295054][ T3579] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 491.303015][ T3579] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 491.311387][ T3579] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 491.318993][ T3579] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 493.356572][ T3579] Bluetooth: hci14: command tx timeout [ 495.436465][ T3579] Bluetooth: hci14: command tx timeout [ 497.516639][ T3579] Bluetooth: hci14: command tx timeout [ 499.596505][ T3579] Bluetooth: hci14: command tx timeout [ 501.519716][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.526034][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 518.966524][ T3579] Bluetooth: hci5: command 0x0406 tx timeout [ 518.972587][ T3579] Bluetooth: hci6: command 0x0406 tx timeout [ 521.996506][ T27] INFO: task kworker/1:6:3619 blocked for more than 143 seconds. [ 522.004278][ T27] Not tainted 6.1.92-syzkaller #0 [ 522.012055][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 522.020787][ T27] task:kworker/1:6 state:D stack:20408 pid:3619 ppid:2 flags:0x00004000 [ 522.030093][ T27] Workqueue: ipv6_addrconf addrconf_verify_work [ 522.036414][ T27] Call Trace: [ 522.039699][ T27] 2024/06/10 21:51:22 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 522.042649][ T27] __schedule+0x142d/0x4550 [ 522.047963][ T27] ? __sched_text_start+0x8/0x8 [ 522.092911][ T27] ? print_irqtrace_events+0x210/0x210 [ 522.098695][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 522.103952][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 522.109351][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 522.114632][ T27] schedule+0xbf/0x180 [ 522.118855][ T27] schedule_preempt_disabled+0xf/0x20 [ 522.124291][ T27] __mutex_lock+0x6b9/0xd80 [ 522.146398][ T27] ? __mutex_lock+0x53c/0xd80 [ 522.151323][ T27] ? addrconf_verify_work+0x15/0x30 [ 522.166370][ T27] ? mutex_lock_nested+0x10/0x10 [ 522.171815][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 522.190735][ T27] ? print_irqtrace_events+0x210/0x210 [ 522.196278][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 522.230623][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 522.236117][ T27] ? process_one_work+0x7a9/0x11d0 [ 522.250738][ T27] addrconf_verify_work+0x15/0x30 [ 522.255811][ T27] process_one_work+0x8a9/0x11d0 [ 522.276460][ T27] ? worker_detach_from_pool+0x260/0x260 [ 522.282160][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 522.296410][ T27] ? kthread_data+0x4e/0xc0 [ 522.300961][ T27] ? wq_worker_running+0x97/0x190 [ 522.306189][ T27] worker_thread+0xa47/0x1200 [ 522.336451][ T27] kthread+0x28d/0x320 [ 522.340572][ T27] ? worker_clr_flags+0x190/0x190 [ 522.345614][ T27] ? kthread_blkcg+0xd0/0xd0 [ 522.370602][ T27] ret_from_fork+0x1f/0x30 [ 522.375872][ T27] [ 522.390620][ T27] INFO: task kworker/u4:9:3800 blocked for more than 143 seconds. [ 522.411499][ T27] Not tainted 6.1.92-syzkaller #0 [ 522.417140][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 522.425859][ T27] task:kworker/u4:9 state:D stack:19872 pid:3800 ppid:2 flags:0x00004000