last executing test programs: 7.72588525s ago: executing program 3 (id=940): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000380)}) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) 7.075881279s ago: executing program 3 (id=943): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000006000000000000000000008500000041000000850000007d"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r4, &(0x7f0000000080)='./file1\x00') renameat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f00000002c0)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) 5.999078738s ago: executing program 3 (id=947): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x14) syz_usb_connect(0x0, 0x57, 0x0, 0x0) socket$inet(0x2, 0x6, 0x0) 4.197974154s ago: executing program 1 (id=960): syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000600)={0xed, 0x0, 0x5}) 4.191321004s ago: executing program 0 (id=961): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_CAPBSET_DROP(0x1c, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000740)=0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000080)=0x2004) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r3, &(0x7f0000003bc0)=[{{0x0, 0xfe3d, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4000000000002ca, 0x4040014) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$sequencer2(0xffffff9c, &(0x7f0000000540), 0x6562c0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r4, 0x4004510d, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x8040080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000180), 0x0) sendmsg$AUDIT_TRIM(r5, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x3f6, 0x1, 0x70bd2a, 0x25dfdbff, "", [""]}, 0x10}}, 0x2000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/image_size', 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) pwritev2(r5, &(0x7f0000000700)=[{&(0x7f0000000580)="1738acea1c464eeb08f0000fd9795355c7f15efeb27b8b01460d83bf4e5f10de171edb71233e3c885e7e5a9be94498c0b6bcc46d68f5e55ffa4e4af4013b9e4600495e7e5ee70dda5a0b7b4e184dbf4fe638c8fd4e04a23e566ea4b467dd647c9bf431b033d8cd661c1a942eba9b738905cbf01ca3c6fc0644f5c9e37ef12449afe45c12ab4ec8627e08c56ecab14916979ca949d181ee03e21af10ee20de73ee18011f1db06ab9cc07e11ff134a8713408e080ace74ed5010c3f2b68ca4233316795502c541be0cddfda8886e294f191d55477c69ae496b405c89a7940fd0c1a8ebc1039e9cd7e64c", 0xe9}, {&(0x7f0000000680)="3b1de15480a0845a55a2dec76cf6d239026d632b207e9a036e3510206d6c5a5b5cdb265601776e12b8f509647a370740e2e07aaed722b05fecf8e59729d3fea593d1c35134053e2041da2d8273fa0985e0a59dd515f9cd80b76a2b6fb50475", 0x5f}], 0x2, 0x4, 0xedc, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f00001b0000/0x4000)=nil, 0x4000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 3.973600774s ago: executing program 1 (id=962): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) fchdir(r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchmod(r3, 0x504) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) 3.489073219s ago: executing program 4 (id=966): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) gettid() r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x480, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {}, {0x1c, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @remote}]}}, @filter_kind_options=@f_fw={{0x7}, {0x3f0, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'gretap0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x9, 0x9}}, @TCA_FW_CLASSID={0x8, 0x1, {0xffe0, 0xffe9}}, @TCA_FW_CLASSID={0x8, 0x1, {0x9, 0xe}}, @TCA_FW_ACT={0x3bc, 0x4, [@m_skbedit={0x108, 0x10, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x200}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x3f12aabb, 0x20000000, 0xb4d, 0x1000002}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0xa}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}]}, {0xa9, 0x6, "f7a0554288139b6a616209de5122bc66928c3cbcd073aa6265f205a1debe43c125679df6fa198c284d4a4c66e5d44d56c4f3c0136e704db6ba4e4c4b98c481b6bfe43804c29fe3755591d754d5472c1b00d959e2025c8fef341267053db863c362215660ee3d3b34facf73b0133254af10168d7075997bf5230acdf46ec5808df6ff339e0f41930479a9bafb8bc3a2ca4a68cc0324abc50124191d3a02b1246e22d4f66b1b"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x8c, 0x6, 0x0, 0x0, {{0xd}, {0x4}, {0x59, 0x6, "d97511bad6a27403712abe149c2784074424881164142304d64b023312a089a0ed2d195daf3c73e100000000000004010c83be8614646bf580470a94183f025327941550a2091805685f84378563dbd452823dfcc6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x98, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x6c, 0x6, "52c2b8cc0106951e6b637d6a5830be2dafe10f23a298bc177284efe36e7dbefea45684635919e5039dfdde57236e08d0056160585baf75041deefa96f9561b0d9cb21cdcb66591c3bae07fde72356db69570ea479f09b3de7cfae118c0c79e097f0af558dc587326"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x30, 0x18, 0x0, 0x0, {{0x8}, {0x8, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x68, 0x1a, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x0, 0x3, 0x8, 0x100}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffeffff}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7fff}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ctinfo={0x80, 0xc, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1000}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x200, 0xf, 0x0, 0x4, 0x2}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x401}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}, @m_nat={0x74, 0x1c, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x6f05, 0x8, 0x1d7, 0x1000}, @empty, @loopback, 0xff000000, 0x1}}]}, {0x24, 0x6, "05dbd4ff2422ce3ed8ded230ca5d3f3bc9573d065346b0cc12676de409ddb402"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_FW_POLICE={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x3f, 0x1}}, @filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xcf5}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e21}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffff00}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x16}]}}]}, 0x480}}, 0x44050) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000000000000000180a02000000000000000000000000009500000000bb0000", @ANYRES64], 0x0, 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r3) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x851) 3.419397105s ago: executing program 2 (id=967): r0 = memfd_create(&(0x7f0000001800)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05YH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2{\xc5\xca\xf3,\x1f]S\xc0\x9fa\xbd\xfa3\x19\x85\xf15\xf4\x184\xa3{\xac\xfd\x9c0\xad\x1b\x88\xdf\x8eb\xb0\xec\xb2\x80\xf0=\x1aBk\x8fi/7\f\x98D\x9d\xca\x9d\xfaq\xefG`\xe2\x9d9w\xef\xe6\x00'/1976, 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x13, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) dup3(r0, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x2c011, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "dc"}]}], {0x14}}, 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000050000140600fc020000000000000000000000000000ff02"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x9) 3.330835364s ago: executing program 2 (id=968): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x40, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_CACHEINFO={0x14, 0x6, {0xe91, 0x78, 0x7ff, 0x10000000}}]}, 0x40}}, 0x0) 3.182429177s ago: executing program 2 (id=969): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', '', [{}]}, 0x5) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3, &(0x7f0000000000)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) fcntl$setpipe(r3, 0x407, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r6, 0xc080aebe, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) 2.688144533s ago: executing program 1 (id=970): unshare(0x2c020400) socket$l2tp(0x2, 0x2, 0x73) socket$tipc(0x1e, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141141) dup(r0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000200)) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000004580), &(0x7f0000004e00)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0) 2.632948658s ago: executing program 0 (id=971): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000006000000000000000000008500000041000000850000007d"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r5, &(0x7f0000000080)='./file1\x00') renameat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f00000002c0)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 2.60300267s ago: executing program 2 (id=972): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r2, @ANYBLOB="00000a00100000801c001a80080002802d03fa0408000200f47b0c0d"], 0x44}, 0x1, 0x10000000}, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) 2.361676342s ago: executing program 4 (id=973): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x1) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04800304fe"], 0x7) 2.247415913s ago: executing program 2 (id=974): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="7000000002060508000000000000000000070000120003006269746d61703a69702c6d616300000005000400000000000900020073797a30000000a8240007800c00028008000140000000020c0001800800010000020006080006400000001005000500020000000500010006"], 0x70}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x2, 0x0, &(0x7f0000000340)=""/185, 0x0, 0x105006}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/91}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x17c3, &(0x7f00000002c0)={0x0, 0x4000, 0x800, 0x3, 0x2e8, 0x0, r2}) socket$rxrpc(0x21, 0x2, 0xa) r3 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc4c85513, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 1.498809172s ago: executing program 0 (id=975): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c83040003c0001000440"], 0x45) 1.498639352s ago: executing program 3 (id=976): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/74, 0x4a}], 0x1) 1.497922662s ago: executing program 4 (id=977): io_uring_setup(0xb3e, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0xff13, 0x9, 0xffff8000, 0xfffffffb, 0x10f}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x80000000}]}}}]}, 0x58}}, 0x0) 1.473397594s ago: executing program 1 (id=978): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000006000000000000000000008500000041000000850000007d"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r4, &(0x7f0000000080)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) 1.395952811s ago: executing program 0 (id=979): r0 = syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.393215441s ago: executing program 0 (id=980): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000002480)=ANY=[@ANYBLOB="84dc9be0172971aa8f9cfacb75a7d1a1431647395e88f819f2dd9b94c9c259c1e6670e588b42f9f1c9acd254f67ecbd20313"], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x761c}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETA(r1, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 1.375018783s ago: executing program 4 (id=981): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28012, r1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000a006) unshare(0x20000400) socket(0x15, 0x5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 1.220233647s ago: executing program 2 (id=982): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', '', [{}]}, 0x5) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3, &(0x7f0000000000)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) fcntl$setpipe(r3, 0x407, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r6, 0xc080aebe, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) 1.172843022s ago: executing program 3 (id=983): r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) sendmmsg$inet(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="24be649f255eab1ea63917eb4b3c825dbb007404869cd13280cf44895e34e7f475336607729c5f114724c5e27c7643034d5812d0022d8f2fd7b64834a156", 0x3e}], 0x1}}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0xeffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x1000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 402.274933ms ago: executing program 1 (id=984): r0 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x2) ptrace(0x4208, r0) 351.910747ms ago: executing program 4 (id=985): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x200, 0xfe6526beb5a5cd72, 0xd}, 0x18) syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x80, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRES32=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000", 0xffffffffffffffff}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r2, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000080)={"000c00816800df00", r5, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 349.360098ms ago: executing program 4 (id=986): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) getpid() timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 305.836852ms ago: executing program 3 (id=987): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x4c0001, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240), 0x264e33, 0x14) renameat2(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000140)='./file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0xf38b03}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, r1, 0x0) 248.527766ms ago: executing program 0 (id=988): r0 = socket$unix(0x1, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x4000, 0x0, 0x0) 0s ago: executing program 1 (id=989): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4b5, &(0x7f0000001080)="$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") openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) kernel console output (not intermixed with test programs): 1): Releasing backup interface [ 246.360063][ T3622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.441647][ T3622] bond0 (unregistering): Released all slaves [ 246.517763][ T5782] loop1: detected capacity change from 0 to 164 [ 246.588308][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.598170][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 246.667323][ T5384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.827724][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 246.845836][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 247.132192][ T5802] xt_time: unknown flags 0xc [ 248.014204][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.098059][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.794396][ T5814] netlink: 36 bytes leftover after parsing attributes in process `syz.1.495'. [ 248.867051][ T5384] device veth0_vlan entered promiscuous mode [ 248.885339][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.897077][ T5819] loop2: detected capacity change from 0 to 128 [ 249.011110][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 249.040550][ T5384] device veth1_vlan entered promiscuous mode [ 249.668790][ T26] audit: type=1326 audit(1728407356.310:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5816 comm="syz.4.496" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3072d6fff9 code=0x0 [ 249.843834][ T5819] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 249.876845][ T5819] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038 (0x7fffffff) [ 249.967809][ T5834] loop1: detected capacity change from 0 to 256 [ 250.055183][ T5837] loop0: detected capacity change from 0 to 128 [ 250.662709][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 250.763172][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 250.993074][ T5384] device veth0_macvtap entered promiscuous mode [ 251.205991][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 251.292174][ T5384] device veth1_macvtap entered promiscuous mode [ 251.351308][ T5843] netlink: 'syz.1.502': attribute type 1 has an invalid length. [ 251.391032][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.404662][ T5844] loop1: detected capacity change from 0 to 16 [ 251.413592][ T5843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.502'. [ 251.449327][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.461542][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.473307][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.483629][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.494604][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.504964][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.516368][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.551287][ T5844] erofs: (device loop1): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 251.553523][ T5384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.605422][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.631578][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.657767][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.690540][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.706749][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.722255][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.741101][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.752218][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.810640][ T5384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.887753][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 251.906809][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 251.954160][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 252.708543][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 252.840841][ T5862] loop4: detected capacity change from 0 to 1024 [ 252.855135][ T5384] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.895968][ T5384] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.917294][ T5871] netlink: 36 bytes leftover after parsing attributes in process `syz.2.507'. [ 252.935924][ T5384] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.955576][ T5384] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.032486][ T5862] EXT4-fs (loop4): quotafile must be on filesystem root [ 255.056107][ T4153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.106560][ T4153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.172854][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 255.212237][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.268372][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.349877][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 255.388761][ T5884] loop2: detected capacity change from 0 to 128 [ 255.405186][ T5865] loop4: detected capacity change from 0 to 128 [ 255.612008][ T5884] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 255.632733][ T5884] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038 (0x7fffffff) [ 255.774315][ T1390] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.780814][ T1390] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.984583][ T5910] netlink: 52 bytes leftover after parsing attributes in process `syz.2.518'. [ 260.151506][ T5915] loop2: detected capacity change from 0 to 16 [ 260.267090][ T5915] erofs: (device loop2): mounted with root inode @ nid 36. [ 260.892750][ T5921] loop1: detected capacity change from 0 to 1024 [ 261.263099][ T5921] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 261.480422][ T5928] loop0: detected capacity change from 0 to 1024 [ 261.726241][ T5930] loop2: detected capacity change from 0 to 128 [ 261.884704][ T5936] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2745: inode #12: comm syz.1.522: corrupted in-inode xattr [ 262.422612][ T5930] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 262.578981][ T5930] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038 (0x7fffffff) [ 262.625567][ T5949] netlink: 52 bytes leftover after parsing attributes in process `syz.0.529'. [ 263.709830][ T5965] loop3: detected capacity change from 0 to 128 [ 263.716853][ T5964] loop0: detected capacity change from 0 to 16 [ 263.741482][ T5968] loop1: detected capacity change from 0 to 1024 [ 264.846183][ T5964] erofs: (device loop0): mounted with root inode @ nid 36. [ 265.865971][ T5984] loop4: detected capacity change from 0 to 1024 [ 266.153557][ T5990] netlink: 68 bytes leftover after parsing attributes in process `syz.1.540'. [ 266.176963][ T5993] usb usb8: usbfs: process 5993 (syz.0.539) did not claim interface 0 before use [ 266.177156][ T5984] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 266.264348][ T5992] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 266.432532][ T6001] loop0: detected capacity change from 0 to 128 [ 268.005255][ T5144] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /12/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 268.050119][ T6007] loop3: detected capacity change from 0 to 1024 [ 268.060214][ T5144] EXT4-fs error (device loop4): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 268.104523][ T6001] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 268.132851][ T6001] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038 (0x7fffffff) [ 268.196368][ T6007] hfsplus: failed to load root directory [ 268.276539][ T5144] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 268.299700][ T5144] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /12/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 268.361632][ T5144] EXT4-fs error (device loop4): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 268.781152][ T5144] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 269.014422][ T5144] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /12/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 269.068364][ T5144] EXT4-fs error (device loop4): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 269.096450][ T6018] loop1: detected capacity change from 0 to 1024 [ 269.111264][ T5144] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 269.132748][ T5144] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /12/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 269.197324][ T5144] EXT4-fs error (device loop4): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 269.278335][ T6022] loop3: detected capacity change from 0 to 16 [ 269.385323][ T6022] erofs: (device loop3): mounted with root inode @ nid 36. [ 269.397607][ T5144] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 269.462961][ T5144] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /12/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 269.655522][ T5144] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 270.124004][ T5144] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 270.170346][ T5144] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 270.235122][ T5144] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 270.332415][ T5144] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 270.430831][ T5144] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 270.843100][ T6042] loop3: detected capacity change from 0 to 1024 [ 271.453750][ T5144] EXT4-fs error: 81 callbacks suppressed [ 271.453776][ T5144] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /12/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 271.500068][ T6042] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 271.677585][ T5144] EXT4-fs error (device loop4): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 271.753732][ T6040] loop0: detected capacity change from 0 to 128 [ 271.891040][ T5144] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /12/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 271.919265][ T5144] EXT4-fs error (device loop4): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 272.154854][ T6042] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 272.179747][ T5144] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /12/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 272.216653][ T5144] EXT4-fs error (device loop4): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 272.240676][ T5144] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /12/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 272.409876][ T5144] EXT4-fs error (device loop4): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 273.354932][ T5144] EXT4-fs warning: 38 callbacks suppressed [ 273.354950][ T5144] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 273.469986][ T5144] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /12/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 273.548297][ T5144] EXT4-fs error (device loop4): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 273.672984][ T5144] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 273.706508][ T6057] loop3: detected capacity change from 0 to 512 [ 273.716030][ T5144] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 273.724946][ T6056] loop2: detected capacity change from 0 to 256 [ 273.744964][ T5144] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 273.778765][ T5144] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 273.813254][ T6056] exfat: Bad value for 'allow_utime' [ 273.829056][ T5144] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 273.866219][ T5144] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 273.892101][ T6057] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.557: casefold flag without casefold feature [ 273.925672][ T6057] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.557: couldn't read orphan inode 15 (err -117) [ 273.953001][ T6057] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 273.975294][ T6057] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.557: Directory hole found for htree leaf block 0 [ 273.993807][ T6057] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.557: Directory hole found for htree leaf block 0 [ 274.011144][ T6056] loop2: detected capacity change from 0 to 512 [ 274.082068][ T5144] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 274.120878][ T5144] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 274.143887][ T6056] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.560: inode #1: comm syz.2.560: iget: illegal inode # [ 274.149986][ T5144] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 274.169997][ T6056] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.560: error while reading EA inode 1 err=-117 [ 274.205094][ T6056] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.560: inode #1: comm syz.2.560: iget: illegal inode # [ 274.264780][ T26] audit: type=1326 audit(1728407381.460:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.3.557" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f7c49aff9 code=0x0 [ 274.319098][ T6056] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.560: error while reading EA inode 1 err=-117 [ 274.403586][ T6056] EXT4-fs (loop2): 1 orphan inode deleted [ 274.494613][ T6056] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,auto_da_alloc,resgid=0x0000000000000000,nobarrier,usrjquota=,,errors=continue. Quota mode: none. [ 274.793508][ T6071] loop3: detected capacity change from 0 to 16 [ 274.812150][ T6069] loop0: detected capacity change from 0 to 128 [ 274.835306][ T6071] erofs: (device loop3): mounted with root inode @ nid 36. [ 275.080761][ T6069] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 275.174082][ T6069] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038 (0x7fffffff) [ 276.128705][ T3727] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.288644][ T6084] device veth3 entered promiscuous mode [ 276.687165][ T3727] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.474641][ T6098] loop1: detected capacity change from 0 to 128 [ 281.484735][ T3727] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.620207][ T3727] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.633182][ T6098] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 281.739153][ T6098] ext4 filesystem being mounted at /154/mnt supports timestamps until 2038 (0x7fffffff) [ 281.857996][ T6111] loop0: detected capacity change from 0 to 1024 [ 281.998057][ T6111] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 282.757865][ T6122] loop3: detected capacity change from 0 to 16 [ 282.871043][ T6122] erofs: (device loop3): mounted with root inode @ nid 36. [ 283.682684][ T1075] Bluetooth: hci3: command 0x0409 tx timeout [ 284.752431][ T6099] chnl_net:caif_netlink_parms(): no params data found [ 285.412558][ T3625] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 285.945974][ T1075] Bluetooth: hci3: command 0x041b tx timeout [ 286.134378][ T6099] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.152583][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.170054][ T6099] device bridge_slave_0 entered promiscuous mode [ 286.262916][ T6174] loop1: detected capacity change from 0 to 16 [ 286.423870][ T6099] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.479023][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.016590][ T6099] device bridge_slave_1 entered promiscuous mode [ 287.035908][ T6174] erofs: (device loop1): mounted with root inode @ nid 36. [ 287.083458][ T3625] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 287.096311][ T3625] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 287.116432][ T3625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.128541][ T3625] usb 3-1: config 0 descriptor?? [ 287.255488][ T6099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.269580][ T6099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.656630][ T6179] udc-core: couldn't find an available UDC or it's busy [ 287.663754][ T6179] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 288.013928][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 288.046266][ T6178] loop1: detected capacity change from 0 to 512 [ 288.728930][ T23] usb 3-1: USB disconnect, device number 3 [ 288.789511][ T6099] team0: Port device team_slave_0 added [ 288.815154][ T6178] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.587: casefold flag without casefold feature [ 288.869219][ T6099] team0: Port device team_slave_1 added [ 288.881519][ T6178] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.587: couldn't read orphan inode 15 (err -117) [ 288.943025][ T6178] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 288.976472][ T6099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.993230][ T6099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.093569][ T6099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.197265][ T6099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.209297][ T6099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.346697][ T6099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.365585][ T6192] loop1: detected capacity change from 0 to 16 [ 289.426812][ T6192] erofs: (device loop1): mounted with root inode @ nid 36. [ 290.083002][ T3740] Bluetooth: hci3: command 0x0419 tx timeout [ 290.454843][ T6099] device hsr_slave_0 entered promiscuous mode [ 290.522786][ T6099] device hsr_slave_1 entered promiscuous mode [ 290.731199][ T6099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.502754][ T6099] Cannot create hsr debugfs directory [ 291.802799][ T3727] device hsr_slave_0 left promiscuous mode [ 291.904305][ T3727] device hsr_slave_1 left promiscuous mode [ 291.926059][ T3727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.959185][ T3727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.000286][ T3727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.039274][ T3727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.090545][ T3727] device bridge_slave_1 left promiscuous mode [ 292.101123][ T3727] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.145622][ T3727] device bridge_slave_0 left promiscuous mode [ 292.153188][ T3727] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.165188][ T3616] Bluetooth: hci3: command 0x0405 tx timeout [ 292.272717][ T3727] device veth1_macvtap left promiscuous mode [ 292.282950][ T3727] device veth0_macvtap left promiscuous mode [ 292.289068][ T3727] device veth1_vlan left promiscuous mode [ 292.339835][ T3727] device veth0_vlan left promiscuous mode [ 292.536150][ T6221] loop1: detected capacity change from 0 to 8 [ 294.125567][ T6231] loop1: detected capacity change from 0 to 16 [ 294.183636][ T6231] erofs: (device loop1): mounted with root inode @ nid 36. [ 294.377390][ T6236] erofs: (device loop1): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 294.387356][ T6236] attempt to access beyond end of device [ 294.387356][ T6236] loop1: rw=0, want=304, limit=16 [ 294.398184][ T6236] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 294.406490][ T6236] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 294.924327][ T3727] team0 (unregistering): Port device team_slave_1 removed [ 294.941429][ T3727] team0 (unregistering): Port device team_slave_0 removed [ 294.955384][ T3727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.023394][ T3727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.097240][ T3727] bond0 (unregistering): Released all slaves [ 296.533124][ T6249] loop1: detected capacity change from 0 to 1024 [ 296.622463][ T6251] loop2: detected capacity change from 0 to 128 [ 296.634390][ T6249] hfsplus: unable to parse mount options [ 297.043377][ T6253] loop1: detected capacity change from 0 to 1024 [ 298.269488][ T3625] Bluetooth: hci6: command 0x0409 tx timeout [ 298.271697][ T3740] Bluetooth: hci4: command 0x0409 tx timeout [ 298.797865][ T6253] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 298.855029][ T6251] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 298.865875][ T6253] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 298.882698][ T6251] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038 (0x7fffffff) [ 299.331787][ T6265] loop1: detected capacity change from 0 to 8 [ 300.322604][ T3648] Bluetooth: hci6: command 0x041b tx timeout [ 300.882516][ T3648] Bluetooth: hci4: command 0x041b tx timeout [ 301.342589][ T6233] chnl_net:caif_netlink_parms(): no params data found [ 301.404672][ T6286] loop2: detected capacity change from 0 to 16 [ 301.461283][ T6232] chnl_net:caif_netlink_parms(): no params data found [ 301.487596][ T6286] erofs: (device loop2): mounted with root inode @ nid 36. [ 301.648732][ T6293] erofs: (device loop2): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 301.659380][ T6293] attempt to access beyond end of device [ 301.659380][ T6293] loop2: rw=0, want=304, limit=16 [ 301.670151][ T6293] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 301.678426][ T6293] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 302.267829][ T6233] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.275818][ T6233] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.323935][ T6233] device bridge_slave_0 entered promiscuous mode [ 302.333224][ T6233] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.340390][ T6233] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.348731][ T6233] device bridge_slave_1 entered promiscuous mode [ 302.402725][ T1075] Bluetooth: hci6: command 0x040f tx timeout [ 302.440660][ T6232] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.452615][ T6232] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.477192][ T6232] device bridge_slave_0 entered promiscuous mode [ 302.501370][ T6099] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 302.540235][ T6233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.570009][ T6232] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.618650][ T6232] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.639041][ T6319] loop1: detected capacity change from 0 to 128 [ 302.653924][ T6232] device bridge_slave_1 entered promiscuous mode [ 302.814353][ T6319] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 302.825661][ T6099] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 302.839735][ T6319] ext4 filesystem being mounted at /180/mnt supports timestamps until 2038 (0x7fffffff) [ 302.867521][ T6099] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 302.894823][ T6233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.949237][ T6099] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 302.962537][ T3648] Bluetooth: hci4: command 0x040f tx timeout [ 303.021229][ T6232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.088601][ T6232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.757631][ T6233] team0: Port device team_slave_0 added [ 303.788040][ T6233] team0: Port device team_slave_1 added [ 303.895773][ T6232] team0: Port device team_slave_0 added [ 303.976250][ T6233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.012583][ T6233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.061901][ T6339] loop2: detected capacity change from 0 to 16 [ 304.078598][ T6233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.115364][ T6232] team0: Port device team_slave_1 added [ 304.123517][ T6233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.130482][ T6233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.197841][ T6233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.209505][ T6339] erofs: (device loop2): mounted with root inode @ nid 36. [ 304.312709][ T3615] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 304.423117][ T6347] erofs: (device loop2): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 304.433174][ T6347] attempt to access beyond end of device [ 304.433174][ T6347] loop2: rw=0, want=304, limit=16 [ 304.443987][ T6347] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 304.452478][ T6347] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 304.482623][ T1075] Bluetooth: hci6: command 0x0419 tx timeout [ 304.632618][ T3615] usb 2-1: Using ep0 maxpacket: 32 [ 304.700645][ T6232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.726889][ T6232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.817151][ T6232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.852889][ T3615] usb 2-1: unable to get BOS descriptor or descriptor too short [ 304.886264][ T6233] device hsr_slave_0 entered promiscuous mode [ 304.919954][ T6233] device hsr_slave_1 entered promiscuous mode [ 304.938298][ T6233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.946637][ T3615] usb 2-1: config 1 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 8 [ 304.962266][ T6233] Cannot create hsr debugfs directory [ 304.968340][ T3615] usb 2-1: config 1 interface 0 altsetting 249 bulk endpoint 0x82 has invalid maxpacket 1024 [ 304.999102][ T3615] usb 2-1: config 1 interface 0 has no altsetting 0 [ 305.008546][ T6232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.039746][ T6232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.042431][ T3648] Bluetooth: hci4: command 0x0419 tx timeout [ 305.069682][ T6232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.192694][ T3615] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 305.212374][ T3615] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.223165][ T3615] usb 2-1: Product: syz [ 305.232837][ T3615] usb 2-1: Manufacturer: syz [ 305.237557][ T3615] usb 2-1: SerialNumber: syz [ 305.270987][ T6232] device hsr_slave_0 entered promiscuous mode [ 305.286738][ T6232] device hsr_slave_1 entered promiscuous mode [ 305.299147][ T6337] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 305.311954][ T6232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.325022][ T6337] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 305.338179][ T6232] Cannot create hsr debugfs directory [ 305.533126][ T6099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.585762][ T6233] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.669995][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 305.683081][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.713939][ T6099] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.766463][ T6233] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.799535][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 305.818707][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 305.847054][ T3622] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.854322][ T3622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.877191][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 305.899364][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 305.913669][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 305.930281][ T3622] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.937469][ T3622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.013870][ T6233] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.141889][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.171781][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 306.189056][ T3615] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 249 proto 2 vid 0x0525 pid 0xA4A8 [ 306.216865][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 306.259067][ T3615] usb 2-1: USB disconnect, device number 9 [ 306.273881][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 306.315668][ T3615] usblp0: removed [ 306.326242][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 306.364260][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 306.386665][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.441017][ T6233] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.479736][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 306.498823][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.535372][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 306.546169][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.559493][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 306.595854][ T6401] loop2: detected capacity change from 0 to 128 [ 306.611242][ T3727] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.695068][ T3727] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.703726][ T6401] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 306.753733][ T6401] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038 (0x7fffffff) [ 306.823061][ T3727] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.370396][ T3727] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.591537][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 307.609210][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.657150][ T6099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.255147][ T6443] loop2: detected capacity change from 0 to 16 [ 308.286848][ T6443] erofs: (device loop2): mounted with root inode @ nid 36. [ 308.456634][ T6447] erofs: (device loop2): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 308.467602][ T6447] attempt to access beyond end of device [ 308.467602][ T6447] loop2: rw=0, want=304, limit=16 [ 308.478506][ T6447] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 308.488585][ T6447] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 308.604240][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 308.641525][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 308.904549][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 308.915328][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 308.954638][ T6099] device veth0_vlan entered promiscuous mode [ 308.974850][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 308.986910][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 309.067751][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 309.138319][ T6099] device veth1_vlan entered promiscuous mode [ 309.172348][ T6458] device vlan1 entered promiscuous mode [ 309.183190][ T6462] mmap: syz.2.634 (6462) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 309.242920][ T6458] device vlan1 left promiscuous mode [ 309.294907][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 309.310106][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 309.376568][ T6233] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 309.407552][ T6233] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 309.441047][ T6233] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 309.465719][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 309.479223][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 309.501706][ T6099] device veth0_macvtap entered promiscuous mode [ 309.560133][ T6480] loop1: detected capacity change from 0 to 16 [ 309.566706][ T6233] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 309.588016][ T6099] device veth1_macvtap entered promiscuous mode [ 309.650265][ T6099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.661614][ T6099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.672808][ T6099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.690794][ T6099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.701000][ T6099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.718195][ T6099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.728338][ T6099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.739825][ T6099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.751086][ T6099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.776262][ T6480] erofs: (device loop1): mounted with root inode @ nid 36. [ 309.784550][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 309.804094][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 309.913234][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 309.926906][ T6486] erofs: (device loop1): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 309.936882][ T6486] attempt to access beyond end of device [ 309.936882][ T6486] loop1: rw=0, want=304, limit=16 [ 309.949404][ T6486] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 309.957768][ T6486] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 309.978009][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 310.394923][ T6099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.452500][ T6099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.472561][ T6099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.485181][ T6099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.495526][ T6099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.506849][ T6099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.517926][ T6099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.528919][ T6099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.645050][ T6099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.670684][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 310.680002][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 310.720503][ T6099] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.060863][ T6099] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.106462][ T6099] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.206520][ T6099] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.615406][ T6232] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 311.715853][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 311.783976][ T6232] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 311.819318][ T6232] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 311.859475][ T6232] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 311.988693][ T6233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.004434][ T3701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.016917][ T3701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.070084][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 312.083212][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.095865][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 312.114496][ T6233] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.157446][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 312.175418][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.193356][ T3762] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.200510][ T3762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.228666][ T3622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.238601][ T3622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.275941][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 312.292153][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 312.314074][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 312.332682][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.341663][ T3762] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.348805][ T3762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.357558][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 312.366883][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 312.433536][ T4153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 312.447148][ T4153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 312.473519][ T4153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 312.483618][ T4153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 312.492959][ T4153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 312.501632][ T4153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 312.510523][ T4153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 312.524908][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 312.534515][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 312.570273][ T6233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 312.705190][ T6516] loop1: detected capacity change from 0 to 16 [ 312.747357][ T6232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.802933][ T4153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 312.826269][ T4153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.838741][ T6232] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.853015][ T6516] erofs: (device loop1): mounted with root inode @ nid 36. [ 312.918278][ T3727] device hsr_slave_0 left promiscuous mode [ 312.936311][ T3727] device hsr_slave_1 left promiscuous mode [ 312.987806][ T3727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.056872][ T3727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.192973][ T3727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.227686][ T3727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.545269][ T3727] device bridge_slave_1 left promiscuous mode [ 313.551538][ T3727] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.578964][ T3727] device bridge_slave_0 left promiscuous mode [ 313.597170][ T3727] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.619451][ T3727] device hsr_slave_0 left promiscuous mode [ 313.627744][ T3727] device hsr_slave_1 left promiscuous mode [ 313.664527][ T3727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.693094][ T3727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.714728][ T3727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.723611][ T3727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.732057][ T3727] device bridge_slave_1 left promiscuous mode [ 313.756551][ T3727] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.768107][ T3727] device bridge_slave_0 left promiscuous mode [ 313.776238][ T3727] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.800217][ T3727] device veth1_macvtap left promiscuous mode [ 313.807279][ T3727] device veth0_macvtap left promiscuous mode [ 313.815580][ T3727] device veth1_vlan left promiscuous mode [ 313.821612][ T3727] device veth0_vlan left promiscuous mode [ 313.839697][ T3727] device veth1_macvtap left promiscuous mode [ 313.848928][ T3727] device veth0_macvtap left promiscuous mode [ 313.866445][ T3727] device veth1_vlan left promiscuous mode [ 313.876035][ T3727] device veth0_vlan left promiscuous mode [ 314.224706][ T3727] team0 (unregistering): Port device team_slave_1 removed [ 314.242186][ T3727] team0 (unregistering): Port device team_slave_0 removed [ 314.257351][ T3727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.274516][ T3727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.350292][ T3727] bond0 (unregistering): Released all slaves [ 314.494563][ T3727] team0 (unregistering): Port device team_slave_1 removed [ 314.510433][ T3727] team0 (unregistering): Port device team_slave_0 removed [ 314.526869][ T3727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.542973][ T3727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.631270][ T3727] bond0 (unregistering): Released all slaves [ 314.685819][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 314.695012][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 314.703831][ T3762] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.710927][ T3762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.719256][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 314.728722][ T6529] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 314.743881][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 314.774969][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 314.797034][ T3734] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.804324][ T3734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.869212][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 314.889541][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 314.905259][ T6540] netlink: 104 bytes leftover after parsing attributes in process `syz.1.655'. [ 314.929449][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 314.970705][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 315.011051][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 315.053767][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 315.080773][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 315.112030][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 315.156435][ T6233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.194072][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 315.202152][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 315.220939][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 315.231188][ T6549] netlink: 60 bytes leftover after parsing attributes in process `syz.1.659'. [ 315.257483][ T6232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 315.286897][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 315.322595][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 315.334831][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 315.402803][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 315.413182][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 315.443750][ T4153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 315.462677][ T4153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 315.557028][ T4153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 315.574020][ T4153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 315.594883][ T6233] device veth0_vlan entered promiscuous mode [ 315.645282][ T6233] device veth1_vlan entered promiscuous mode [ 315.701015][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 315.713546][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 315.732645][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 315.741064][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 315.769769][ T6232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.811511][ T4153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 315.814421][ T3649] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 315.841406][ T6560] loop1: detected capacity change from 0 to 16 [ 315.857423][ T4153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 315.899213][ T6233] device veth0_macvtap entered promiscuous mode [ 315.935954][ T6233] device veth1_macvtap entered promiscuous mode [ 315.951738][ T6560] erofs: (device loop1): mounted with root inode @ nid 36. [ 316.042739][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 316.050945][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 316.092671][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 316.134704][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 316.174319][ T6562] erofs: (device loop1): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 316.184536][ T6562] attempt to access beyond end of device [ 316.184536][ T6562] loop1: rw=0, want=304, limit=16 [ 316.195315][ T6562] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 316.203717][ T6562] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 316.222684][ T3649] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.239454][ T3649] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 316.239839][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.263745][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.288131][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.318597][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.333467][ T3649] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 316.359001][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.377549][ T3649] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 316.399245][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.413273][ T3649] usb 5-1: SerialNumber: syz [ 316.464063][ T6233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.496799][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 316.556328][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 316.618377][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.631445][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.707380][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.737151][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.749573][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.761187][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.776966][ T6233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.786285][ T6232] device veth0_vlan entered promiscuous mode [ 316.812043][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 316.833718][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 316.873845][ T6564] udc-core: couldn't find an available UDC or it's busy [ 316.873949][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 316.886459][ T6564] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 316.933397][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 316.949246][ T6233] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.992612][ T6233] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.001360][ T6233] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.032417][ T6233] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.125386][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 317.136800][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 317.173754][ T6232] device veth1_vlan entered promiscuous mode [ 317.204100][ T1390] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.210835][ T1390] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.324185][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 317.341627][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 317.355353][ T6232] device veth0_macvtap entered promiscuous mode [ 317.408742][ T3734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.433012][ T6232] device veth1_macvtap entered promiscuous mode [ 317.434447][ T3734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.488868][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.509986][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.540411][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.571466][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.608388][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.639821][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.676406][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.708972][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.724979][ T3649] usb 5-1: 0:2 : does not exist [ 317.730282][ T3649] usb 5-1: unit 6 not found! [ 317.747963][ T6232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.773561][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 317.792164][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 317.818839][ T3649] usb 5-1: USB disconnect, device number 4 [ 317.862766][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 317.894842][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 317.935722][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 317.996359][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.017519][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.052391][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.082947][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.102371][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.133657][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.164369][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.192683][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.229374][ T6232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.252327][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 318.252587][ T3762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.281006][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 318.289330][ T3762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.396577][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 318.436306][ T6232] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.465196][ T6232] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.542727][ T6232] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.617865][ T6232] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.043861][ T6584] loop0: detected capacity change from 0 to 16 [ 319.283661][ T3649] Bluetooth: hci2: command 0x0406 tx timeout [ 319.686007][ T3762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.765775][ T6584] erofs: (device loop0): mounted with root inode @ nid 36. [ 319.775784][ T3762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.826330][ T4153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 319.950309][ T3734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.966810][ T3734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.060585][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 320.354224][ T6595] netlink: 60 bytes leftover after parsing attributes in process `syz.4.668'. [ 320.497869][ T6602] loop0: detected capacity change from 0 to 16 [ 320.588044][ T6602] erofs: (device loop0): mounted with root inode @ nid 36. [ 320.790514][ T6606] erofs: (device loop0): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 320.801678][ T6606] attempt to access beyond end of device [ 320.801678][ T6606] loop0: rw=0, want=304, limit=16 [ 320.812448][ T6606] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 320.820657][ T6606] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 321.365798][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.673'. [ 321.892565][ T21] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 321.985046][ T6629] netlink: 60 bytes leftover after parsing attributes in process `syz.3.682'. [ 322.272409][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 322.332359][ T1314] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 322.412712][ T21] usb 1-1: config 0 has no interfaces? [ 322.491803][ T6639] loop2: detected capacity change from 0 to 1024 [ 322.502671][ T21] usb 1-1: config 0 has no interfaces? [ 322.572427][ T1314] usb 2-1: Using ep0 maxpacket: 8 [ 322.597736][ T21] usb 1-1: config 0 has no interfaces? [ 322.604010][ T6639] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 322.604010][ T6639] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 322.604010][ T6639] [ 322.687251][ T6639] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 322.708596][ T6639] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 322.792855][ T21] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 322.806241][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.819340][ T21] usb 1-1: Product: syz [ 322.836542][ T21] usb 1-1: Manufacturer: syz [ 322.843018][ T21] usb 1-1: SerialNumber: syz [ 322.869068][ T21] usb 1-1: config 0 descriptor?? [ 322.878394][ T1314] usb 2-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 322.892088][ T1314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.912465][ T3615] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 322.939423][ T1314] usb 2-1: Product: syz [ 322.949239][ T3584] Bluetooth: min 6 > max 0 [ 322.954934][ T1314] usb 2-1: Manufacturer: syz [ 322.988464][ T1314] usb 2-1: SerialNumber: syz [ 323.025907][ T1314] usb 2-1: config 0 descriptor?? [ 323.084877][ T1314] gspca_main: spca500-2.14.0 probing 046d:0900 [ 323.178210][ T6613] udc-core: couldn't find an available UDC or it's busy [ 323.202357][ T6613] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 323.231280][ T6613] udc-core: couldn't find an available UDC or it's busy [ 323.278899][ T6613] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 323.302642][ T3615] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 323.322514][ T1314] gspca_spca500: reg write: error -71 [ 323.331635][ T2055] usb 1-1: USB disconnect, device number 4 [ 323.372860][ T1314] gspca_spca500: reg write: error -71 [ 323.392701][ T1314] gspca_spca500: reg write: error -71 [ 323.422510][ T1314] gspca_spca500: reg write: error -71 [ 323.442993][ T1314] gspca_spca500: reg write: error -71 [ 323.478305][ T1314] gspca_spca500: reg write: error -71 [ 323.502729][ T1314] gspca_spca500: reg write: error -71 [ 323.522873][ T3615] usb 5-1: New USB device found, idVendor=2013, idProduct=025d, bcdDevice=f5.0f [ 323.532359][ T3615] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.540450][ T3615] usb 5-1: Product: syz [ 323.545214][ T1314] gspca_spca500: reg write: error -71 [ 323.553523][ T3615] usb 5-1: Manufacturer: syz [ 323.558871][ T3615] usb 5-1: SerialNumber: syz [ 323.577743][ T3615] usb 5-1: config 0 descriptor?? [ 323.583118][ T1314] gspca_spca500: reg write: error -71 [ 323.614900][ T1314] gspca_spca500: reg write: error -71 [ 323.642398][ T1314] gspca_spca500: reg write: error -71 [ 323.672446][ T1314] gspca_spca500: reg write: error -71 [ 323.692614][ T1314] gspca_spca500: reg write: error -71 [ 323.722543][ T1314] gspca_spca500: reg write: error -71 [ 323.750501][ T1314] usb 2-1: USB disconnect, device number 10 [ 323.794845][ T6653] batman_adv: batadv0: Adding interface: dummy0 [ 323.801430][ T6653] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.834579][ T6653] batman_adv: batadv0: Interface activated: dummy0 [ 323.875916][ T6653] batadv0: mtu less than device minimum [ 323.906688][ T6653] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 323.920042][ T6653] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 323.932749][ T6653] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 323.945431][ T6653] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 323.958118][ T6653] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 323.970021][ T6653] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 323.982169][ T6653] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 323.994169][ T6653] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 324.006303][ T6653] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 324.210947][ T6657] kvm: emulating exchange as write [ 324.635513][ T6672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.695'. [ 324.650441][ T6674] loop2: detected capacity change from 0 to 8 [ 325.032593][ T3649] Bluetooth: hci2: command 0x2021 tx timeout [ 325.876583][ T6683] loop1: detected capacity change from 0 to 1024 [ 326.067209][ T3649] usb 5-1: USB disconnect, device number 5 [ 326.190971][ T6683] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 326.190971][ T6683] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 326.190971][ T6683] [ 326.364115][ T6683] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 326.406728][ T6683] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 326.849459][ T6709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.707'. [ 327.077131][ T6713] netlink: 'syz.4.709': attribute type 1 has an invalid length. [ 327.362114][ T6716] loop0: detected capacity change from 0 to 8 [ 327.420597][ T6719] netlink: 56 bytes leftover after parsing attributes in process `syz.4.712'. [ 327.629117][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 328.536577][ T6740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.719'. [ 328.864342][ T6749] sg_write: data in/out 588840944/23 bytes for SCSI command 0x94-- guessing data in; [ 328.864342][ T6749] program syz.0.722 not setting count and/or reply_len properly [ 328.893296][ T6749] program syz.0.722 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.105221][ T2055] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 329.522934][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 329.992738][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.024201][ T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 330.065633][ T21] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 330.282771][ T21] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=1d.40 [ 330.302117][ T21] usb 4-1: New USB device strings: Mfr=182, Product=151, SerialNumber=201 [ 330.359015][ T21] usb 4-1: Product: syz [ 330.371550][ T21] usb 4-1: Manufacturer: syz [ 330.389275][ T21] usb 4-1: SerialNumber: syz [ 330.402512][ T7] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 330.483803][ T21] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 330.490641][ T21] cdc_ncm 4-1:1.0: bind() failure [ 330.572568][ T2055] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 330.581614][ T2055] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.605587][ T2055] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 330.632616][ T2055] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.687581][ T6568] usb 4-1: USB disconnect, device number 3 [ 330.749632][ T6771] loop0: detected capacity change from 0 to 8 [ 330.762790][ T2055] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 330.771895][ T2055] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 330.781211][ T7] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 330.792961][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.807911][ T2055] usb 5-1: Product: syz [ 330.812114][ T2055] usb 5-1: Manufacturer: syz [ 330.816862][ T7] usb 2-1: config 0 has no interface number 0 [ 330.823173][ T7] usb 2-1: config 0 interface 106 altsetting 0 has an invalid endpoint with address 0xFE, skipping [ 330.837540][ T7] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 330.850736][ T7] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 330.860264][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.873437][ T2055] cdc_wdm 5-1:1.0: skipping garbage [ 330.878772][ T2055] cdc_wdm 5-1:1.0: skipping garbage [ 330.886471][ T7] usb 2-1: config 0 descriptor?? [ 330.899405][ T2055] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 330.906664][ T2055] cdc_wdm 5-1:1.0: Unknown control protocol [ 330.944874][ T7] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 331.140268][ T21] usb 2-1: USB disconnect, device number 11 [ 331.152646][ T9] usb 2-1: Failed to submit usb control message: -71 [ 331.159806][ T9] usb 2-1: unable to send the bmi data to the device: -71 [ 331.180428][ T9] usb 2-1: unable to get target info from device [ 331.186395][ T7] usb 5-1: USB disconnect, device number 6 [ 331.191886][ T9] usb 2-1: could not get target info (-71) [ 331.216733][ T9] usb 2-1: could not probe fw (-71) [ 331.307254][ T6778] net_ratelimit: 10 callbacks suppressed [ 331.307274][ T6778] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 331.791118][ T6792] loop4: detected capacity change from 0 to 16 [ 331.910976][ T6792] erofs: (device loop4): mounted with root inode @ nid 36. [ 331.981959][ T6794] erofs: (device loop4): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 331.991896][ T6794] attempt to access beyond end of device [ 331.991896][ T6794] loop4: rw=0, want=304, limit=16 [ 332.002956][ T6794] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 332.011141][ T6794] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 332.126108][ T6799] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 332.127534][ T6800] netlink: 52 bytes leftover after parsing attributes in process `syz.3.732'. [ 332.332042][ T6808] loop4: detected capacity change from 0 to 8 [ 334.772395][ T3615] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 334.782066][ T26] audit: type=1326 audit(1728407441.970:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.2.746" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c76a44ff9 code=0x0 [ 334.853982][ T6827] loop0: detected capacity change from 0 to 1024 [ 335.009786][ T6827] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 335.009786][ T6827] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 335.009786][ T6827] [ 335.045580][ T6838] loop1: detected capacity change from 0 to 16 [ 335.059580][ T6827] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 335.087500][ T6838] erofs: (device loop1): mounted with root inode @ nid 36. [ 335.104271][ T6827] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 335.174299][ T6839] erofs: (device loop1): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 335.184640][ T6839] attempt to access beyond end of device [ 335.184640][ T6839] loop1: rw=0, want=304, limit=16 [ 335.195271][ T6839] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 335.203460][ T6839] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 335.213182][ T3615] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.244006][ T3615] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 335.253044][ T3615] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 335.338545][ T3584] Bluetooth: min 6 > max 0 [ 335.432965][ T3615] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=1d.40 [ 335.466064][ T3615] usb 4-1: New USB device strings: Mfr=182, Product=151, SerialNumber=201 [ 335.501614][ T3615] usb 4-1: Product: syz [ 335.522528][ T3615] usb 4-1: Manufacturer: syz [ 335.527347][ T3615] usb 4-1: SerialNumber: syz [ 335.604196][ T3615] usb 4-1: can't set config #1, error -71 [ 335.611198][ T3615] usb 4-1: USB disconnect, device number 4 [ 335.727715][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.750'. [ 335.739290][ T6846] netlink: 52 bytes leftover after parsing attributes in process `syz.2.752'. [ 335.750357][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.750'. [ 335.787494][ T6845] device bond1 entered promiscuous mode [ 335.794426][ T6845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 336.332572][ T3740] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 337.011170][ T3740] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.022008][ T3740] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 337.031613][ T3740] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 337.051220][ T3740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.063761][ T6858] loop0: detected capacity change from 0 to 8 [ 337.097485][ T3740] usb 5-1: config 0 descriptor?? [ 337.174849][ T3740] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 337.181919][ T3740] dvb-usb: bulk message failed: -22 (3/0) [ 337.234483][ T3740] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 337.332895][ T3740] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 337.340463][ T3740] usb 5-1: media controller created [ 337.362483][ T7] Bluetooth: hci6: command 0x2021 tx timeout [ 337.370726][ T3740] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 337.414079][ T6866] loop2: detected capacity change from 0 to 16 [ 338.090330][ T3740] dvb-usb: bulk message failed: -22 (6/0) [ 338.097390][ T3740] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 338.154641][ T3740] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 338.216695][ T3740] dvb-usb: schedule remote query interval to 150 msecs. [ 338.235005][ T3740] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 338.243414][ T6866] erofs: (device loop2): mounted with root inode @ nid 36. [ 338.335919][ T6871] erofs: (device loop2): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 338.345992][ T6871] attempt to access beyond end of device [ 338.345992][ T6871] loop2: rw=0, want=304, limit=16 [ 338.356952][ T6871] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 338.365209][ T6871] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 338.403645][ T1314] dvb-usb: bulk message failed: -22 (1/0) [ 338.410210][ T1314] dvb-usb: error while querying for an remote control event. [ 338.500328][ T6568] usb 5-1: USB disconnect, device number 7 [ 338.543071][ T3569] syz-executor (3569) used greatest stack depth: 18360 bytes left [ 338.690026][ T6568] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 338.844904][ T6878] loop3: detected capacity change from 0 to 128 [ 339.077175][ T6878] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 339.105678][ T6878] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038 (0x7fffffff) [ 339.189002][ T3649] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 339.812740][ T3649] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 339.852508][ T3649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.932854][ T3649] usb 3-1: Product: syz [ 339.972665][ T3649] usb 3-1: Manufacturer: syz [ 339.977760][ T3649] usb 3-1: SerialNumber: syz [ 340.019367][ T3649] usb 3-1: config 0 descriptor?? [ 340.032627][ T3740] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 340.312635][ T3740] usb 1-1: Using ep0 maxpacket: 16 [ 340.346363][ T3649] ch341 3-1:0.0: ch341-uart converter detected [ 340.512777][ T3740] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.532496][ T3740] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 340.552705][ T3740] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 340.640168][ T3740] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.651592][ T3740] usb 1-1: config 0 descriptor?? [ 340.721854][ T6898] loop4: detected capacity change from 0 to 8 [ 340.810337][ T6889] chnl_net:caif_netlink_parms(): no params data found [ 341.265562][ T6907] loop3: detected capacity change from 0 to 16 [ 341.503625][ T3649] usb 3-1: failed to send control message: -71 [ 341.779159][ T3649] ch341-uart: probe of ttyUSB0 failed with error -71 [ 341.787944][ T6907] erofs: (device loop3): mounted with root inode @ nid 36. [ 341.865033][ T3649] usb 3-1: USB disconnect, device number 4 [ 341.872058][ T6912] erofs: (device loop3): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 341.882124][ T6912] attempt to access beyond end of device [ 341.882124][ T6912] loop3: rw=0, want=304, limit=16 [ 341.893401][ T6912] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 341.901585][ T6912] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 341.951782][ T3649] ch341 3-1:0.0: device disconnected [ 341.977998][ T6568] Bluetooth: hci0: command 0x0409 tx timeout [ 343.384183][ T6889] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.391391][ T6889] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.429431][ T6889] device bridge_slave_0 entered promiscuous mode [ 343.447561][ T6889] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.470609][ T6889] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.495800][ T6889] device bridge_slave_1 entered promiscuous mode [ 343.516504][ T2055] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 343.524257][ T3625] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 343.534194][ T3648] usb 1-1: USB disconnect, device number 5 [ 343.630035][ T6889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.661713][ T6889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.792481][ T2055] usb 4-1: Using ep0 maxpacket: 8 [ 344.838847][ T3648] Bluetooth: hci0: command 0x041b tx timeout [ 344.845182][ T2055] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 344.853357][ T3625] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.883938][ T2055] usb 4-1: config 0 has no interface number 0 [ 344.890080][ T2055] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 344.911723][ T3625] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 344.976950][ T6936] loop0: detected capacity change from 0 to 128 [ 344.990862][ T3625] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 345.017673][ T2055] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 345.035743][ T2055] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.061957][ T2055] usb 4-1: config 0 descriptor?? [ 345.075724][ T6889] team0: Port device team_slave_0 added [ 345.105076][ T6889] team0: Port device team_slave_1 added [ 345.105176][ T6936] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 345.122578][ T2055] usb 4-1: can't set config #0, error -71 [ 345.130856][ T2055] usb 4-1: USB disconnect, device number 5 [ 345.148067][ T6941] loop3: detected capacity change from 0 to 8 [ 345.186841][ T6936] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038 (0x7fffffff) [ 345.294959][ T6889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.301981][ T6889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.382797][ T3625] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=1d.40 [ 345.403140][ T3625] usb 5-1: New USB device strings: Mfr=182, Product=151, SerialNumber=201 [ 345.419249][ T6889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.552549][ T3625] usb 5-1: can't set config #1, error -71 [ 345.578923][ T6889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.586171][ T6889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.612585][ T6889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.459077][ T3625] usb 5-1: USB disconnect, device number 8 [ 346.907172][ T6889] device hsr_slave_0 entered promiscuous mode [ 346.927626][ T3625] Bluetooth: hci0: command 0x040f tx timeout [ 346.954184][ T6889] device hsr_slave_1 entered promiscuous mode [ 346.975322][ T6889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.991336][ T6889] Cannot create hsr debugfs directory [ 347.070626][ T6949] device geneve2 entered promiscuous mode [ 347.124383][ T146] Bluetooth: hci4: link tx timeout [ 347.131869][ T146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 347.145660][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.784'. [ 347.157530][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.784'. [ 347.486173][ T6889] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.520665][ T6958] netlink: 'syz.2.787': attribute type 10 has an invalid length. [ 347.537378][ T6958] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.544976][ T6958] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.594613][ T6958] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.601928][ T6958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.611581][ T6958] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.618693][ T6958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.667729][ T6958] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 347.681697][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.787'. [ 347.707072][ T6960] device bridge_slave_1 left promiscuous mode [ 347.724331][ T6960] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.749947][ T6960] device bridge_slave_0 left promiscuous mode [ 347.764952][ T6960] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.841370][ T6960] bond0: (slave bridge0): Releasing backup interface [ 347.919207][ T3740] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 348.192576][ T3740] usb 5-1: Using ep0 maxpacket: 32 [ 348.333263][ T3740] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 348.384540][ T3740] usb 5-1: config 0 has no interface number 0 [ 348.723388][ T6889] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.799950][ T3740] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 348.809232][ T3740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.822486][ T3740] usb 5-1: Product: syz [ 348.826785][ T3740] usb 5-1: Manufacturer: syz [ 348.831502][ T3740] usb 5-1: SerialNumber: syz [ 348.843872][ T3740] usb 5-1: config 0 descriptor?? [ 348.894943][ T3740] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 348.906661][ T3740] radio-si470x: probe of 5-1:0.35 failed with error -5 [ 349.492932][ T3740] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 349.505053][ T3740] usbhid 5-1:0.35: couldn't find an input interrupt endpoint [ 350.255508][ T3625] Bluetooth: hci0: command 0x0419 tx timeout [ 350.262357][ T3648] Bluetooth: hci4: command 0x0406 tx timeout [ 350.277150][ T6889] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.318856][ T6981] loop2: detected capacity change from 0 to 8 [ 350.532419][ T2055] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 350.589192][ T6889] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.369571][ T3648] usb 5-1: USB disconnect, device number 9 [ 351.547133][ T6992] loop2: detected capacity change from 0 to 128 [ 351.664050][ T2055] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.679291][ T2055] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 351.688917][ T2055] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 351.703549][ T6992] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 351.732887][ T6992] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038 (0x7fffffff) [ 351.793697][ T6889] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 351.860857][ T6889] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 351.867904][ T2055] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=1d.40 [ 351.897346][ T2055] usb 1-1: New USB device strings: Mfr=182, Product=151, SerialNumber=201 [ 351.920863][ T2055] usb 1-1: Product: syz [ 351.932449][ T2055] usb 1-1: Manufacturer: syz [ 352.458860][ T2055] usb 1-1: SerialNumber: syz [ 352.484601][ T6889] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 352.503192][ T6889] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 352.591321][ T2055] usb 1-1: can't set config #1, error -71 [ 352.614198][ T2055] usb 1-1: USB disconnect, device number 6 [ 352.808315][ T6889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.876599][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 352.893913][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 352.920783][ T6889] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.959267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 352.977253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 353.026546][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.033717][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.078732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 353.110569][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 353.131872][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 353.168856][ T3622] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.176081][ T3622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.247284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 353.268317][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 353.290032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 353.316198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 353.354208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 353.373744][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 353.383279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 353.417902][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 353.437638][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 353.454459][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 353.473649][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 353.489869][ T6889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 353.672432][ T3615] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 353.785363][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 353.820902][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 353.844463][ T6889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.933113][ T7020] loop0: detected capacity change from 0 to 8 [ 353.958289][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 353.979993][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 354.152607][ T3615] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.175805][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 354.190533][ T3615] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 354.930459][ T3615] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 354.940378][ T3615] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.951806][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 354.970816][ T3615] usb 5-1: config 0 descriptor?? [ 354.983419][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 354.991542][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 355.015044][ T3615] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 355.031546][ T3615] dvb-usb: bulk message failed: -22 (3/0) [ 355.041339][ T6889] device veth0_vlan entered promiscuous mode [ 355.080516][ T3615] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 355.091074][ T6889] device veth1_vlan entered promiscuous mode [ 355.144237][ T3615] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 355.159637][ T3615] usb 5-1: media controller created [ 355.169851][ T3615] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 355.179972][ T7027] loop3: detected capacity change from 0 to 16 [ 355.191563][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 355.209628][ T3615] dvb-usb: bulk message failed: -22 (6/0) [ 355.219785][ T7012] No such timeout policy "syz1" [ 355.227222][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 355.235200][ T3615] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 355.272227][ T6889] device veth0_macvtap entered promiscuous mode [ 355.285176][ T3615] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 355.302948][ T7027] erofs: (device loop3): mounted with root inode @ nid 36. [ 355.501162][ T3615] dvb-usb: schedule remote query interval to 150 msecs. [ 355.510524][ T3615] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 355.562477][ T3615] usb 5-1: USB disconnect, device number 10 [ 355.761654][ T6889] device veth1_macvtap entered promiscuous mode [ 355.818195][ T3615] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 356.030115][ T3727] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 356.093893][ T3727] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 356.152929][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.192491][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.239998][ T7038] loop4: detected capacity change from 0 to 128 [ 356.246584][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.267616][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.278152][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.289524][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.299861][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.310915][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.321406][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.332550][ T5477] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 356.333824][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.354759][ T6889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.369872][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 356.388893][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 356.409587][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.452236][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.509146][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.526481][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.718543][ T7038] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 357.749578][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.759600][ T7038] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038 (0x7fffffff) [ 357.790698][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.802379][ T5477] usb 1-1: Using ep0 maxpacket: 8 [ 357.832492][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.860907][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.873194][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.884053][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.905928][ T6889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.926655][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 357.942518][ T5477] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 357.954301][ T5477] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 357.967261][ T3931] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 357.974218][ T5477] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 357.997310][ T5477] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 358.013964][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 358.177364][ T5477] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 358.182104][ T6889] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.192450][ T5477] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 358.215384][ T6889] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.233508][ T5477] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 358.252533][ T5477] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 358.280167][ T6889] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.625574][ T6889] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.668543][ T5477] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 358.682928][ T3931] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.690473][ T5477] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 358.713473][ T3931] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 358.739347][ T5477] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 358.752514][ T3931] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 358.753551][ T5477] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 358.858773][ T7054] loop2: detected capacity change from 0 to 8 [ 359.046705][ T3931] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=1d.40 [ 359.057584][ T3931] usb 4-1: New USB device strings: Mfr=182, Product=151, SerialNumber=201 [ 359.066219][ T3931] usb 4-1: Product: syz [ 359.070416][ T3931] usb 4-1: Manufacturer: syz [ 359.075144][ T3931] usb 4-1: SerialNumber: syz [ 359.098516][ T3701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.200009][ T3931] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 360.210360][ T7055] netlink: 'syz.4.811': attribute type 10 has an invalid length. [ 360.222856][ T3931] cdc_ncm 4-1:1.0: bind() failure [ 360.247800][ T3701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.252764][ T5477] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 360.308791][ T5477] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.334385][ T7055] team0: Port device netdevsim0 added [ 360.343620][ T7064] loop2: detected capacity change from 0 to 16 [ 360.344514][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 360.358430][ T5477] usb 1-1: Product: syz [ 360.382410][ T5477] usb 1-1: Manufacturer: syz [ 360.396045][ T3931] usb 4-1: USB disconnect, device number 6 [ 360.406749][ T3701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.419931][ T3701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.435439][ T4153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 360.460289][ T7064] erofs: (device loop2): mounted with root inode @ nid 36. [ 360.469901][ T5477] usb 1-1: can't set config #168, error -71 [ 360.493498][ T5477] usb 1-1: USB disconnect, device number 7 [ 361.078403][ T7064] erofs: (device loop2): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 361.078665][ C0] sd 0:0:1:0: tag#6123 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 361.088694][ T7064] attempt to access beyond end of device [ 361.088694][ T7064] loop2: rw=0, want=304, limit=16 [ 361.098126][ C0] sd 0:0:1:0: tag#6123 CDB: Start/Stop Unit [ 361.108746][ T7064] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 361.114576][ C0] sd 0:0:1:0: tag#6123 CDB[00]: 1b b6 64 1d 10 44 53 ff d5 16 91 e6 01 6c 98 15 [ 361.122733][ T7064] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 361.141318][ C0] sd 0:0:1:0: tag#6123 CDB[10]: 79 95 26 e1 01 38 46 fc fe e4 0c 22 d9 3b a9 c2 [ 361.150451][ C0] sd 0:0:1:0: tag#6123 CDB[20]: a4 [ 361.358554][ T7081] loop0: detected capacity change from 0 to 128 [ 361.395621][ T7083] netlink: 'syz.4.821': attribute type 1 has an invalid length. [ 361.544257][ T7081] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 361.592891][ T7081] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038 (0x7fffffff) [ 361.622516][ T3931] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 361.769043][ T7084] loop1: detected capacity change from 0 to 1024 [ 361.872671][ T3931] usb 3-1: Using ep0 maxpacket: 8 [ 361.883384][ T7084] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 361.883384][ T7084] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 361.883384][ T7084] [ 361.948676][ T7084] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 361.978874][ T7084] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 361.992617][ T3931] usb 3-1: config 0 has no interfaces? [ 361.998149][ T3931] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 362.582033][ T3931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.633798][ T3931] usb 3-1: config 0 descriptor?? [ 362.888470][ T146] Bluetooth: min 6 > max 0 [ 362.918729][ T6568] usb 3-1: USB disconnect, device number 5 [ 363.113777][ T7101] binder: 7098:7101 ioctl c0046209 0 returned -22 [ 363.143943][ T7102] device wlan1 entered promiscuous mode [ 363.338076][ T7111] loop4: detected capacity change from 0 to 16 [ 363.440398][ T7111] erofs: (device loop4): mounted with root inode @ nid 36. [ 365.357978][ T3931] Bluetooth: hci0: command 0x2021 tx timeout [ 365.435868][ T7122] erofs: (device loop4): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 365.506480][ T7122] attempt to access beyond end of device [ 365.506480][ T7122] loop4: rw=0, want=304, limit=16 [ 365.552931][ T7122] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 365.716037][ T6568] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 365.723424][ T7122] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 367.598425][ T7141] loop3: detected capacity change from 0 to 1024 [ 367.739106][ T7141] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 367.739106][ T7141] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 367.739106][ T7141] [ 367.756790][ C0] vkms_vblank_simulate: vblank timer overrun [ 367.932476][ T7141] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 367.975550][ T7159] netlink: 'syz.1.841': attribute type 4 has an invalid length. [ 368.001291][ T7141] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 371.913423][ T7] Bluetooth: hci4: command 0x2021 tx timeout [ 372.862374][ T2055] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 373.352392][ T2055] usb 2-1: device not accepting address 12, error -71 [ 373.863803][ T7193] binder: 7192:7193 ioctl c0306201 0 returned -14 [ 374.384228][ T7200] chnl_net:caif_netlink_parms(): no params data found [ 374.786214][ T146] Bluetooth: min 6 > max 0 [ 374.907214][ T7200] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.918970][ T7200] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.932025][ T7200] device bridge_slave_0 entered promiscuous mode [ 374.982877][ T7200] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.990192][ T7200] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.015813][ T7200] device bridge_slave_1 entered promiscuous mode [ 376.222488][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 376.369011][ T4044] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.471704][ T7200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.502505][ T2055] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 376.531729][ T7200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.667126][ T7200] team0: Port device team_slave_0 added [ 376.689829][ T4044] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.826548][ T3931] Bluetooth: hci3: command 0x2021 tx timeout [ 376.914358][ T7200] team0: Port device team_slave_1 added [ 376.992741][ T2055] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.028428][ T2055] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 377.071918][ T2055] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 377.505699][ T4044] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.523163][ T7200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.530249][ T7200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.556176][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.642598][ T2055] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=1d.40 [ 377.651674][ T2055] usb 4-1: New USB device strings: Mfr=182, Product=151, SerialNumber=201 [ 377.852706][ T7200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.873556][ T2055] usb 4-1: Product: syz [ 377.877764][ T2055] usb 4-1: Manufacturer: syz [ 377.882441][ T2055] usb 4-1: SerialNumber: syz [ 377.895247][ T7200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.902215][ T7200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.928175][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.936109][ T7200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.947945][ T2055] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 377.955838][ T2055] cdc_ncm 4-1:1.0: bind() failure [ 378.048782][ T4044] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.132438][ T3931] usb 4-1: USB disconnect, device number 7 [ 378.255610][ T7175] Bluetooth: hci1: command 0x041b tx timeout [ 378.290419][ T7200] device hsr_slave_0 entered promiscuous mode [ 378.323590][ T7200] device hsr_slave_1 entered promiscuous mode [ 378.349127][ T7200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.369304][ T7200] Cannot create hsr debugfs directory [ 378.643781][ T1390] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.650990][ T1390] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.746975][ T146] Bluetooth: min 6 > max 0 [ 379.771126][ T7200] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 379.862499][ T7175] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 379.890050][ T7200] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 380.002107][ T7200] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 380.087776][ T4044] device hsr_slave_0 left promiscuous mode [ 380.098817][ T4044] device hsr_slave_1 left promiscuous mode [ 380.106018][ T4044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.135949][ T4044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.143643][ T7175] usb 4-1: Using ep0 maxpacket: 32 [ 380.153634][ T4044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.161076][ T4044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.220456][ T4044] device bridge_slave_1 left promiscuous mode [ 380.231149][ T4044] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.270055][ T4044] device bridge_slave_0 left promiscuous mode [ 380.276390][ T4044] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.292766][ T7175] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.303998][ T4044] device veth1_macvtap left promiscuous mode [ 380.310130][ T7175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.318953][ T4044] device veth0_macvtap left promiscuous mode [ 380.323758][ T7175] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 380.328470][ T4044] device veth1_vlan left promiscuous mode [ 380.343964][ T7175] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 380.355094][ T7175] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.359375][ T4044] device veth0_vlan left promiscuous mode [ 380.375662][ T5477] Bluetooth: hci1: command 0x040f tx timeout [ 380.383964][ T7175] usb 4-1: config 0 descriptor?? [ 380.482971][ T7340] loop4: detected capacity change from 0 to 128 [ 380.586754][ T7340] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 380.612578][ T7340] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038 (0x7fffffff) [ 380.814936][ T2055] Bluetooth: hci3: command 0x2021 tx timeout [ 380.912671][ T7175] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 380.925974][ T7175] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 380.942617][ T7175] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 380.953182][ T7175] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 380.961655][ T7175] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 380.992246][ T4044] team0 (unregistering): Port device team_slave_1 removed [ 381.018060][ T7175] ntrig 0003:1B96:000A.0002: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 381.415581][ T4044] team0 (unregistering): Port device team_slave_0 removed [ 381.444555][ T4044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.460331][ T4044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.465881][ T7175] usb 4-1: USB disconnect, device number 8 [ 381.664971][ T4044] bond0 (unregistering): Released all slaves [ 381.730972][ T7200] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 381.740897][ T7334] device veth1_macvtap left promiscuous mode [ 381.836665][ T7341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.888'. [ 381.953779][ T3612] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 382.147123][ T3612] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 382.218272][ T7200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.229149][ T3740] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 382.286392][ T5477] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 382.311269][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 382.327310][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 382.336012][ T5477] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 382.354997][ T146] Bluetooth: min 6 > max 0 [ 382.377247][ T7200] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.403024][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 382.443075][ T5477] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 382.469064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 382.502846][ T3612] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 382.512201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 382.561398][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.568591][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.613062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 382.682805][ T3612] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 382.705412][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 382.742864][ T3612] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 382.760039][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 382.807566][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.814718][ T5630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.822770][ T3612] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 382.858131][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 382.893297][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 382.908322][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 382.942502][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 382.984659][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 383.005974][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 383.026002][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 383.049528][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 383.077930][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 383.110148][ T7200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 383.137754][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 383.160130][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 383.175481][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 383.427222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 383.471822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 383.477956][ T7390] loop1: detected capacity change from 0 to 128 [ 383.491510][ T7200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.560118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 383.600942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 383.630850][ T7390] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 383.676051][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 383.692823][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 383.706257][ T7200] device veth0_vlan entered promiscuous mode [ 383.711295][ T7390] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038 (0x7fffffff) [ 383.735403][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 383.793447][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 383.806370][ T7200] device veth1_vlan entered promiscuous mode [ 383.867394][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 383.906802][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 383.968487][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 384.023624][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 384.305654][ T7200] device veth0_macvtap entered promiscuous mode [ 384.413109][ T7] Bluetooth: hci0: command 0x2021 tx timeout [ 384.647159][ T7200] device veth1_macvtap entered promiscuous mode [ 384.715299][ T7200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.762380][ T7200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.772234][ T7200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.812330][ T7200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.832323][ T7200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.852353][ T7200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.862246][ T7200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.873611][ T7200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.873637][ T7200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.873656][ T7200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.893966][ T7200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.894081][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 384.895570][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 385.043533][ T7200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.067965][ T7200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.106917][ T7200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.139180][ T7200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.169412][ T7200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.200810][ T7200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.223708][ T7200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.246988][ T7200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.269814][ T7200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.291940][ T7200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.321938][ T7200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.346113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 385.374468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 385.401753][ T7200] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.428267][ T7200] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.451044][ T7200] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.479419][ T7200] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.608593][ T7414] loop4: detected capacity change from 0 to 1024 [ 385.646190][ T3727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.684679][ T3727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.712172][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 385.759049][ T7414] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 385.787699][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.852467][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.945975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 385.971943][ T7425] pit: kvm: requested 8380 ns i8254 timer period limited to 200000 ns [ 386.148860][ T7432] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 386.197597][ T7432] pit: kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 386.257027][ T7431] loop1: detected capacity change from 0 to 1024 [ 386.274020][ T7436] loop7: detected capacity change from 0 to 16384 [ 386.397720][ T7431] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 386.397720][ T7431] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 386.397720][ T7431] [ 386.517331][ T7431] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 386.549765][ T7431] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 386.773668][ T146] Bluetooth: min 6 > max 0 [ 386.934944][ T7452] loop2: detected capacity change from 0 to 8 [ 387.909944][ T7476] loop4: detected capacity change from 0 to 1024 [ 388.040254][ T7476] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 388.661725][ T7499] loop1: detected capacity change from 0 to 1024 [ 388.772409][ T2055] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 388.782829][ T7499] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 388.782829][ T7499] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 388.782829][ T7499] [ 388.809956][ T3931] Bluetooth: hci0: command 0x2021 tx timeout [ 388.836559][ T7499] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 388.872611][ T7499] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 389.052461][ T2055] usb 1-1: Using ep0 maxpacket: 32 [ 389.182085][ T146] Bluetooth: min 6 > max 0 [ 389.332592][ T2055] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 389.346137][ T2055] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.386189][ T2055] usb 1-1: Product: syz [ 389.390410][ T2055] usb 1-1: Manufacturer: syz [ 389.438992][ T2055] usb 1-1: SerialNumber: syz [ 389.469762][ T2055] usb 1-1: config 0 descriptor?? [ 389.514550][ T2055] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 389.551188][ T7] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 389.583357][ T7] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 389.635303][ T7] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 389.672616][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.939'. [ 389.701257][ T4044] bond0: (slave bond_slave_0): interface is now down [ 389.701188][ T7527] bond0: option ad_select: unable to set because the bond device is up [ 389.727510][ T4044] bond0: (slave bond_slave_1): interface is now down [ 389.763666][ T5630] bond0: (slave bond_slave_0): interface is now down [ 389.770780][ T5630] bond0: (slave bond_slave_1): interface is now down [ 389.788840][ T5630] bond0: now running without any active interface! [ 389.799417][ T7532] loop1: detected capacity change from 0 to 1024 [ 389.961563][ T7532] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 391.125867][ T2055] gspca_ov534_9: reg_w failed -71 [ 391.169022][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.946'. [ 391.202354][ T7] Bluetooth: hci0: command 0x2021 tx timeout [ 391.490263][ T7570] dccp_invalid_packet: P.Data Offset(172) too large [ 391.493283][ T7565] loop4: detected capacity change from 0 to 1024 [ 391.512486][ T2055] gspca_ov534_9: Unknown sensor 0000 [ 391.512562][ T2055] ov534_9: probe of 1-1:0.0 failed with error -22 [ 391.539863][ T2055] usb 1-1: USB disconnect, device number 8 [ 391.607041][ T7568] loop2: detected capacity change from 0 to 1024 [ 391.667700][ T7565] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 391.695779][ T7568] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 391.695779][ T7568] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 391.695779][ T7568] [ 391.742457][ T7568] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 391.760140][ T7568] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 392.150437][ T146] Bluetooth: min 6 > max 0 [ 393.209372][ T7591] pit: kvm: requested 8380 ns i8254 timer period limited to 200000 ns [ 393.269241][ T7591] pit: kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 393.306221][ T7591] pit: kvm: requested 113981 ns i8254 timer period limited to 200000 ns [ 393.363565][ T7591] pit: kvm: requested 181028 ns i8254 timer period limited to 200000 ns [ 393.397857][ T7591] pit: kvm: requested 194438 ns i8254 timer period limited to 200000 ns [ 393.469976][ T7591] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 394.077727][ T7614] loop2: detected capacity change from 0 to 1024 [ 394.162603][ T3931] Bluetooth: hci2: command 0x2021 tx timeout [ 394.210118][ T7614] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 395.650536][ T146] Bluetooth: Wrong link type (-71) [ 396.638729][ T7657] loop2: detected capacity change from 0 to 1024 [ 397.073287][ T7657] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 502.232233][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 502.238885][ C0] rcu: 0-...!: (10500 ticks this GP) idle=3f3/1/0x4000000000000000 softirq=26226/26226 fqs=0 [ 502.250426][ C0] (t=10500 jiffies g=36581 q=152) [ 502.255529][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g36581 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 502.267839][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=17637 [ 502.275708][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g36581 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 502.287142][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 502.297091][ C0] rcu: RCU grace-period kthread stack dump: [ 502.302988][ C0] task:rcu_preempt state:I stack:26712 pid: 15 ppid: 2 flags:0x00004000 [ 502.312184][ C0] Call Trace: [ 502.315454][ C0] [ 502.318376][ C0] __schedule+0x12c4/0x45b0 [ 502.322880][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 502.328763][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 502.334652][ C0] ? __mod_timer+0xa8e/0xeb0 [ 502.339232][ C0] ? release_firmware_map_entry+0x190/0x190 [ 502.345111][ C0] ? mod_timer_pending+0x20/0x20 [ 502.350035][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 502.355418][ C0] schedule+0x11b/0x1f0 [ 502.359581][ C0] schedule_timeout+0x1b9/0x300 [ 502.364420][ C0] ? console_conditional_schedule+0x40/0x40 [ 502.370321][ C0] ? update_process_times+0x200/0x200 [ 502.375708][ C0] ? prepare_to_swait_event+0x321/0x340 [ 502.381241][ C0] rcu_gp_fqs_loop+0x2bf/0x1080 [ 502.386080][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 502.391263][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 502.396451][ C0] ? rcu_gp_init+0xdae/0x1140 [ 502.401114][ C0] ? rcu_gp_init+0x1140/0x1140 [ 502.405865][ C0] ? finish_swait+0xc5/0x1d0 [ 502.410444][ C0] rcu_gp_kthread+0xa4/0x360 [ 502.415023][ C0] ? _raw_spin_unlock+0x40/0x40 [ 502.419863][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 502.424964][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 502.430864][ C0] ? __kthread_parkme+0x15c/0x1c0 [ 502.436138][ C0] kthread+0x3f6/0x4f0 [ 502.440191][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 502.445313][ C0] ? kthread_blkcg+0xd0/0xd0 [ 502.449904][ C0] ret_from_fork+0x1f/0x30 [ 502.454333][ C0] [ 502.457345][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 502.463654][ C0] NMI backtrace for cpu 0 [ 502.467971][ C0] CPU: 0 PID: 7666 Comm: syz.4.986 Not tainted 5.15.167-syzkaller #0 [ 502.476023][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 502.486065][ C0] Call Trace: [ 502.489438][ C0] [ 502.492276][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 502.496946][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 502.502567][ C0] ? panic+0x860/0x860 [ 502.506648][ C0] nmi_cpu_backtrace+0x46a/0x4a0 [ 502.511598][ C0] ? __wake_up_klogd+0xd5/0x100 [ 502.516467][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 502.522697][ C0] ? _printk+0xd1/0x120 [ 502.526865][ C0] ? cpu_online+0x1f/0x40 [ 502.531213][ C0] ? panic+0x860/0x860 [ 502.535273][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 502.541328][ C0] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 502.547300][ C0] rcu_check_gp_kthread_starvation+0x1d2/0x240 [ 502.553450][ C0] print_cpu_stall+0x31b/0x600 [ 502.558204][ C0] rcu_sched_clock_irq+0x8d9/0x1150 [ 502.563397][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 502.568235][ C0] ? hrtimer_run_queues+0x163/0x450 [ 502.573438][ C0] ? account_process_tick+0x232/0x3a0 [ 502.578802][ C0] update_process_times+0x196/0x200 [ 502.584000][ C0] tick_sched_timer+0x386/0x550 [ 502.588842][ C0] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 502.594510][ C0] __hrtimer_run_queues+0x55b/0xcf0 [ 502.599711][ C0] ? hrtimer_interrupt+0x980/0x980 [ 502.604829][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 502.610886][ C0] hrtimer_interrupt+0x392/0x980 [ 502.615833][ C0] __sysvec_apic_timer_interrupt+0x139/0x470 [ 502.621805][ C0] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 502.627430][ C0] [ 502.630349][ C0] [ 502.633270][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 502.639241][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 502.645134][ C0] Code: 51 67 f6 ff 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 4e ed 24 f7 48 89 df e8 26 41 26 f7 e8 f1 f4 48 f7 fb bf 01 00 00 00 06 87 19 f7 65 8b 05 87 89 c4 75 85 c0 74 02 5b c3 e8 54 a6 c2 [ 502.664726][ C0] RSP: 0018:ffffc90002ec7bc0 EFLAGS: 00000282 [ 502.670780][ C0] RAX: fb093bcb2925d500 RBX: ffff888077a31bc0 RCX: ffffffff96868f03 [ 502.678767][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b2b00 RDI: 0000000000000001 [ 502.686822][ C0] RBP: 0000000000000000 R08: ffffffff8186db50 R09: ffffed100ef46379 [ 502.694784][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000021 [ 502.702828][ C0] R13: dffffc0000000000 R14: ffff888077a32058 R15: ffff888077a31bc0 [ 502.710946][ C0] ? trace_hardirqs_on+0x30/0x80 [ 502.715936][ C0] get_signal+0x13ee/0x14e0 [ 502.720453][ C0] arch_do_signal_or_restart+0xc3/0x1890 [ 502.726088][ C0] ? __do_compat_sys_x32_rt_sigreturn+0x250/0x250 [ 502.732500][ C0] ? __might_fault+0xb4/0x110 [ 502.737255][ C0] ? _copy_from_user+0x10f/0x170 [ 502.742183][ C0] ? restore_altstack+0x274/0x400 [ 502.747223][ C0] ? get_sigframe_size+0x10/0x10 [ 502.752148][ C0] ? __ia32_sys_sigaltstack+0x60/0x60 [ 502.757512][ C0] ? __do_sys_rt_sigreturn+0x19d/0x250 [ 502.762960][ C0] ? exit_to_user_mode_loop+0x39/0x130 [ 502.768404][ C0] exit_to_user_mode_loop+0x97/0x130 [ 502.773674][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 502.779222][ C0] syscall_exit_to_user_mode+0x5d/0x240 [ 502.784762][ C0] do_syscall_64+0x47/0xb0 [ 502.789254][ C0] ? clear_bhb_loop+0x15/0x70 [ 502.793916][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 502.799797][ C0] RIP: 0033:0x7fb990ce3ff7 [ 502.804203][ C0] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 502.823933][ C0] RSP: 002b:00007fb98f15c038 EFLAGS: 00000246 [ 502.829987][ C0] RAX: 000000000000012b RBX: 00007fb990e9bf80 RCX: 00007fb990ce3ff9 [ 502.837945][ C0] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 502.845920][ C0] RBP: 00007fb990d56296 R08: 0000000000000000 R09: 0000000000000000 [ 502.853876][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 502.861832][ C0] R13: 0000000000000000 R14: 00007fb990e9bf80 R15: 00007ffd7fdd2d98 [ 502.869804][ C0] [ 502.872836][ C0] NMI backtrace for cpu 0 [ 502.877217][ C0] CPU: 0 PID: 7666 Comm: syz.4.986 Not tainted 5.15.167-syzkaller #0 [ 502.885267][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 502.895307][ C0] Call Trace: [ 502.898578][ C0] [ 502.901409][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 502.906080][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 502.911699][ C0] ? panic+0x860/0x860 [ 502.915782][ C0] ? read_lock_is_recursive+0x10/0x10 [ 502.921142][ C0] nmi_cpu_backtrace+0x46a/0x4a0 [ 502.926071][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 502.932222][ C0] ? try_to_wake_up+0x844/0x1300 [ 502.937193][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 502.942647][ C0] ? _raw_spin_lock+0x40/0x40 [ 502.947317][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 502.953370][ C0] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 502.959340][ C0] rcu_dump_cpu_stacks+0x223/0x390 [ 502.964446][ C0] print_cpu_stall+0x320/0x600 [ 502.969210][ C0] rcu_sched_clock_irq+0x8d9/0x1150 [ 502.974404][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 502.979333][ C0] ? hrtimer_run_queues+0x163/0x450 [ 502.984518][ C0] ? account_process_tick+0x232/0x3a0 [ 502.989880][ C0] update_process_times+0x196/0x200 [ 502.995068][ C0] tick_sched_timer+0x386/0x550 [ 502.999929][ C0] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 503.005463][ C0] __hrtimer_run_queues+0x55b/0xcf0 [ 503.010659][ C0] ? hrtimer_interrupt+0x980/0x980 [ 503.015757][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 503.021814][ C0] hrtimer_interrupt+0x392/0x980 [ 503.026752][ C0] __sysvec_apic_timer_interrupt+0x139/0x470 [ 503.032725][ C0] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 503.038347][ C0] [ 503.041271][ C0] [ 503.044206][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 503.050194][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 503.055989][ C0] Code: 51 67 f6 ff 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 4e ed 24 f7 48 89 df e8 26 41 26 f7 e8 f1 f4 48 f7 fb bf 01 00 00 00 06 87 19 f7 65 8b 05 87 89 c4 75 85 c0 74 02 5b c3 e8 54 a6 c2 [ 503.075582][ C0] RSP: 0018:ffffc90002ec7bc0 EFLAGS: 00000282 [ 503.081652][ C0] RAX: fb093bcb2925d500 RBX: ffff888077a31bc0 RCX: ffffffff96868f03 [ 503.089707][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b2b00 RDI: 0000000000000001 [ 503.097668][ C0] RBP: 0000000000000000 R08: ffffffff8186db50 R09: ffffed100ef46379 [ 503.105647][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000021 [ 503.113720][ C0] R13: dffffc0000000000 R14: ffff888077a32058 R15: ffff888077a31bc0 [ 503.121862][ C0] ? trace_hardirqs_on+0x30/0x80 [ 503.126797][ C0] get_signal+0x13ee/0x14e0 [ 503.131320][ C0] arch_do_signal_or_restart+0xc3/0x1890 [ 503.136941][ C0] ? __do_compat_sys_x32_rt_sigreturn+0x250/0x250 [ 503.143348][ C0] ? __might_fault+0xb4/0x110 [ 503.148015][ C0] ? _copy_from_user+0x10f/0x170 [ 503.152939][ C0] ? restore_altstack+0x274/0x400 [ 503.158039][ C0] ? get_sigframe_size+0x10/0x10 [ 503.162965][ C0] ? __ia32_sys_sigaltstack+0x60/0x60 [ 503.168331][ C0] ? __do_sys_rt_sigreturn+0x19d/0x250 [ 503.173781][ C0] ? exit_to_user_mode_loop+0x39/0x130 [ 503.179227][ C0] exit_to_user_mode_loop+0x97/0x130 [ 503.184497][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 503.190029][ C0] syscall_exit_to_user_mode+0x5d/0x240 [ 503.195562][ C0] do_syscall_64+0x47/0xb0 [ 503.199962][ C0] ? clear_bhb_loop+0x15/0x70 [ 503.204624][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 503.210503][ C0] RIP: 0033:0x7fb990ce3ff7 [ 503.214904][ C0] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 503.234512][ C0] RSP: 002b:00007fb98f15c038 EFLAGS: 00000246 [ 503.240562][ C0] RAX: 000000000000012b RBX: 00007fb990e9bf80 RCX: 00007fb990ce3ff9 [ 503.248520][ C0] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 503.256478][ C0] RBP: 00007fb990d56296 R08: 0000000000000000 R09: 0000000000000000 [ 503.264444][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 503.272415][ C0] R13: 0000000000000000 R14: 00007fb990e9bf80 R15: 00007ffd7fdd2d98 [ 503.280391][ C0] [ 503.342510][ T1390] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.348841][ T1390] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=168 sent=0 n=-1 (errno 32: Broken pipe) [ 503.630356][ T7679] loop1: detected capacity change from 0 to 512 [ 504.578367][ T3734] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.642147][ T3734] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.727160][ T3734] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.806968][ T3734] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.737057][ T3734] device hsr_slave_0 left promiscuous mode [ 505.743712][ T3734] device hsr_slave_1 left promiscuous mode [ 505.750200][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.758063][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.766127][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.773872][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.784889][ T3734] device bridge_slave_1 left promiscuous mode [ 505.791146][ T3734] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.799937][ T3734] device bridge_slave_0 left promiscuous mode [ 505.807758][ T3734] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.820911][ T3734] device veth1_macvtap left promiscuous mode [ 505.827215][ T3734] device veth0_macvtap left promiscuous mode [ 505.834404][ T3734] device veth1_vlan left promiscuous mode [ 505.840216][ T3734] device veth0_vlan left promiscuous mode [ 506.010857][ T3734] team0 (unregistering): Port device team_slave_1 removed [ 506.026747][ T3734] team0 (unregistering): Port device team_slave_0 removed [ 506.039867][ T3734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.058895][ T3734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.129232][ T3734] bond0 (unregistering): Released all slaves [ 508.098616][ T3734] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.157137][ T3734] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.199721][ T3734] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.246409][ T3734] team0: Port device netdevsim0 removed [ 508.255834][ T3734] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.382890][ T3734] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.428857][ T3734] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.486740][ T3734] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.556978][ T3734] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.690975][ T3734] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.750850][ T3734] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.805424][ T3734] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.860079][ T3734] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.001790][ T3734] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.049690][ T3734] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.109668][ T3734] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.200772][ T3734] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.366320][ T3734] device wlan1 left promiscuous mode [ 510.944681][ T3734] device hsr_slave_0 left promiscuous mode [ 510.951491][ T3734] device hsr_slave_1 left promiscuous mode [ 510.965615][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.982367][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.991610][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.004759][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.016278][ T3734] device bridge_slave_1 left promiscuous mode [ 511.026152][ T3734] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.037531][ T3734] device bridge_slave_0 left promiscuous mode [ 511.044289][ T3734] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.056665][ T3734] device hsr_slave_0 left promiscuous mode [ 511.063654][ T3734] device hsr_slave_1 left promiscuous mode [ 511.070071][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.078169][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.086393][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.093853][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.101492][ T3734] device bridge_slave_1 left promiscuous mode [ 511.107829][ T3734] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.116255][ T3734] device bridge_slave_0 left promiscuous mode [ 511.123118][ T3734] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.134610][ T3734] device hsr_slave_0 left promiscuous mode [ 511.140932][ T3734] device hsr_slave_1 left promiscuous mode [ 511.147720][ T3734] batman_adv: batadv0: Interface deactivated: dummy0 [ 511.154668][ T3734] batman_adv: batadv0: Removing interface: dummy0 [ 511.161568][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.169118][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.176942][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.184592][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.195167][ T3734] device hsr_slave_0 left promiscuous mode [ 511.201834][ T3734] device hsr_slave_1 left promiscuous mode [ 511.208305][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.216135][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.224474][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.231926][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.240134][ T3734] device bridge_slave_1 left promiscuous mode [ 511.246462][ T3734] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.256171][ T3734] device bridge_slave_0 left promiscuous mode [ 511.262732][ T3734] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.280143][ T3734] device veth1_macvtap left promiscuous mode [ 511.286774][ T3734] device veth0_macvtap left promiscuous mode [ 511.293172][ T3734] device veth1_vlan left promiscuous mode [ 511.298954][ T3734] device veth0_vlan left promiscuous mode [ 511.307274][ T3734] device veth0_macvtap left promiscuous mode [ 511.313560][ T3734] device veth1_vlan left promiscuous mode [ 511.319460][ T3734] device veth0_vlan left promiscuous mode [ 511.327009][ T3734] device veth1_macvtap left promiscuous mode [ 511.333111][ T3734] device veth0_macvtap left promiscuous mode [ 511.339154][ T3734] device veth1_vlan left promiscuous mode [ 511.345021][ T3734] device veth0_vlan left promiscuous mode [ 511.351670][ T3734] device veth1_macvtap left promiscuous mode [ 511.358031][ T3734] device veth0_macvtap left promiscuous mode [ 511.364472][ T3734] device veth1_vlan left promiscuous mode [ 511.371641][ T3734] device veth0_vlan left promiscuous mode [ 511.712521][ T3734] bond1 (unregistering): Released all slaves [ 511.799059][ T3734] team0 (unregistering): Port device team_slave_1 removed [ 511.815165][ T3734] team0 (unregistering): Port device team_slave_0 removed [ 511.827050][ T3734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.841626][ T3734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.905691][ T3734] bond0 (unregistering): Released all slaves [ 512.029392][ T3734] team0 (unregistering): Port device team_slave_1 removed [ 512.045965][ T3734] team0 (unregistering): Port device team_slave_0 removed [ 512.060112][ T3734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.074703][ T3734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.140615][ T3734] bond0 (unregistering): Released all slaves