last executing test programs: 15m46.97464169s ago: executing program 2 (id=3): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000480)={0x14, &(0x7f0000000180)={0x20, 0x11, 0x46, {0x46, 0x4, "d005bb4b4dc1642c1dfc1946bfb25fd5850b49ded02fa261d27147866588c2afc93fcd32220f700aa3f42f20821733f580d02070180bda85ed6896851396d4d617666563"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000340)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x0, "a432a184"}, @global=@item_4={0x3, 0x1, 0x4, "9fdefbfe"}, @local=@item_4={0x3, 0x2, 0x0, "4a8e693b"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xd, 0x1, {0x22, 0x669}}}}, &(0x7f0000000980)={0x18, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x7}}) r5 = gettid() r6 = socket(0x2, 0x3, 0x6) sendmmsg$unix(r6, &(0x7f0000000bc0)=[{{&(0x7f0000002140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x18, 0x1, 0x2, {r5}}}], 0x18}}], 0x1, 0x800) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4884) tkill(r5, 0xb) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 15m44.942124791s ago: executing program 2 (id=6): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 15m44.895520932s ago: executing program 2 (id=7): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) lstat(0x0, &(0x7f0000000040)) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000240)={0x0, 0x3ff, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = syz_open_procfs(0x0, 0x0) getdents64(r4, 0x0, 0x0) ioctl$I2C_TENBIT(r4, 0x704, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, 0x0, 0x4044010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000002030300000000000000000002000009"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4000001) ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) socket$kcm(0x10, 0x2, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04140600c900080500f13aa002f06ba224370a98"], 0x9) 15m26.704646035s ago: executing program 32 (id=7): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) lstat(0x0, &(0x7f0000000040)) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000240)={0x0, 0x3ff, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = syz_open_procfs(0x0, 0x0) getdents64(r4, 0x0, 0x0) ioctl$I2C_TENBIT(r4, 0x704, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, 0x0, 0x4044010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000002030300000000000000000002000009"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4000001) ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) socket$kcm(0x10, 0x2, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04140600c900080500f13aa002f06ba224370a98"], 0x9) 15m3.953069323s ago: executing program 3 (id=67): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 15m3.759697429s ago: executing program 3 (id=68): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r1 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) 15m3.172599609s ago: executing program 3 (id=69): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) close(0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) 15m2.996116295s ago: executing program 3 (id=71): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) 15m1.880021337s ago: executing program 3 (id=74): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 15m1.63505116s ago: executing program 3 (id=76): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x21, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0", 0x0, 0x100, 0x60000000, 0x0, 0x91, &(0x7f0000000000), &(0x7f00000001c0)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110", 0x0, 0x0, 0xaac}, 0x50) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x87, @loopback, 0x4e21, 0x3, 'wrr\x00', 0xa, 0xffff, 0x3b}, 0x2c) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) socket(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 14m53.025978414s ago: executing program 0 (id=78): syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') 14m52.625621754s ago: executing program 0 (id=80): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) close(0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) 14m52.411523724s ago: executing program 0 (id=81): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001e008d2a000000", @ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x10008000}, 0x14048010) 14m52.243386733s ago: executing program 0 (id=83): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) 14m50.392579921s ago: executing program 0 (id=85): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 14m50.17858756s ago: executing program 0 (id=86): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8840, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x8, 0xa, "ff00f70000e5020052c4f21c7f000000002000"}) r2 = syz_open_pts(r1, 0x141601) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x400008, 0x1ffffffe, 0x100000, 0x3, 0x19, "680c1acfa4a5000000070000faffffff000800"}) close_range(r0, 0xffffffffffffffff, 0x0) 14m46.470653851s ago: executing program 33 (id=76): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x21, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0", 0x0, 0x100, 0x60000000, 0x0, 0x91, &(0x7f0000000000), &(0x7f00000001c0)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110", 0x0, 0x0, 0xaac}, 0x50) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x87, @loopback, 0x4e21, 0x3, 'wrr\x00', 0xa, 0xffff, 0x3b}, 0x2c) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) socket(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 14m34.444955051s ago: executing program 34 (id=86): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8840, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x8, 0xa, "ff00f70000e5020052c4f21c7f000000002000"}) r2 = syz_open_pts(r1, 0x141601) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x400008, 0x1ffffffe, 0x100000, 0x3, 0x19, "680c1acfa4a5000000070000faffffff000800"}) close_range(r0, 0xffffffffffffffff, 0x0) 2m33.320519988s ago: executing program 7 (id=1549): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20a27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x271f, &(0x7f0000019440)=""/102400, &(0x7f00000000c0)=0x19000) 2m31.100990198s ago: executing program 7 (id=1552): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x7d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2m30.978774182s ago: executing program 7 (id=1553): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x140, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x110, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x4}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x8000101}, 0x0) 2m24.461943452s ago: executing program 7 (id=1560): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) socket$igmp6(0xa, 0x3, 0x2) r1 = socket(0x1e, 0x1, 0x0) listen(r1, 0x7f) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c3, 0x6, 0x801, 0x0, 0x8, 'syz1\x00'}) 2m16.304889606s ago: executing program 7 (id=1565): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) fsopen(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x783, &(0x7f0000001f80)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x2, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}], ['\x00', '\x00']}) 2m15.12615198s ago: executing program 7 (id=1567): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) fsopen(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x783, &(0x7f0000001f80)="$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") syz_clone3(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x2, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}], ['\x00', '\x00']}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) 1m59.280893574s ago: executing program 35 (id=1567): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) fsopen(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x783, &(0x7f0000001f80)="$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") syz_clone3(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x2, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}], ['\x00', '\x00']}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) 6.971777432s ago: executing program 1 (id=1736): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x320800d, 0x31) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x140, 0x1f, 0x9, 0x2, 0x10000007, 0x1, 0x7fff, 0x30000002, 0x7, 0xc72d, 0x0, 0x7, 0x3, 0x400008, 0x29, 0x72f0, 0x101, 0x6, 0x6, 0x401, 0x4, 0x484, 0xa2dc, 0x9, 0x1000, 0x80000001, 0xa, 0x0, 0x383, 0x8001, 0x4]}) writev(0xffffffffffffffff, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000180)="29e3e5864ceda68155960e4b20eb0403a71898733f0dcb64c38849be0185191621d8d87c521201593212da719d600d9262d4ac59dfb5ec2b503053b465b55ae5c7ca58b82c73ad9aa7872d1e4060a6112879a7afe128f10bf20cfd", 0x5b}, {0x0}, {&(0x7f0000000340)="79baf7c80af72c6d074d7aa55d18c2b3f92fb55d09041ffa4b66a0ed18f71e54cc0a5bc1461a6d07e6d4f31058721987ab90040f06c98df9afdd7c6614915beee9a0bea8187c6315a4be760ebc06c000bbe9a766f3752ff9ed8b304d3378bfd1a88dfc510d611a8c13259173a7c957bdd73f4bc320391f6d862cfdd58f6c09abefc7302f22bf6795474455a958f56a17d1551e", 0x93}, {0x0}, {0x0}], 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r4, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_io_uring_setup(0x149f, &(0x7f0000001600)={0x0, 0x3ddc, 0x8, 0x2, 0x33}, &(0x7f0000001680), &(0x7f00000016c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f00000001c0)=[r6], 0x1) close(r6) io_uring_register$IORING_UNREGISTER_FILES(r7, 0x3, 0x0, 0x0) 6.810637903s ago: executing program 4 (id=1737): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000e05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a3200000000140000001100"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) 5.129784601s ago: executing program 4 (id=1738): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 4.83500162s ago: executing program 1 (id=1739): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={0x0, 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 4.249650417s ago: executing program 4 (id=1740): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, 0x0, 0x8c0) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 3.921371817s ago: executing program 1 (id=1741): socket$inet6(0xa, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000480)={[{@noquota}, {@errors_remount}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@dax}, {@commit={'commit', 0x3d, 0x8}}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}], [{@subj_role={'subj_role', 0x3d, 'commit'}}]}, 0xfc, 0x56f, &(0x7f0000001880)="$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") chdir(0x0) r0 = landlock_create_ruleset(&(0x7f0000000100)={0x10101, 0x2, 0x1, 0x4240, 0x0, 0x2}, 0x30, 0x2) sync_file_range(r0, 0x80, 0xb93, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1008}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) 2.834753414s ago: executing program 4 (id=1742): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) readv(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES32=r2], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, r2}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYBLOB="0500000069de89a95a6ba164ed140ef9dfac0147533811b02ebdd5c8b2195720ba6681bcf079b033e2c23581b0698cb6c63ecb56e0e4b06c0c2d35d89c3d5ecf7b3d794d5a4f4c01b28bec251b4cfad0bcd830e34d921720c088bf728069d8466eb15f0d6ae62d617ca04f7a607e4af538918985549e88dff5ab4a92fc9a74b94bcda448e8c49b6e18", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, 0x0) ptrace(0x4208, 0x0) syz_ublk_setup_io_uring(0x319c, &(0x7f0000000040)={0x0, 0x94d5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) 2.778022164s ago: executing program 1 (id=1743): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd2", 0x59}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) 2.630852878s ago: executing program 1 (id=1744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2ce0000ffffffffffff86dd600907001164110000000000000000000000ffffe0000002ff020000000000000000000000000001"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2400c110, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) socket$unix(0x1, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, 0x0, 0x0) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) 1.713638588s ago: executing program 1 (id=1745): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) socket$igmp6(0xa, 0x3, 0x2) listen(0xffffffffffffffff, 0x7f) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c3, 0x6, 0x801, 0x0, 0x8, 'syz1\x00'}) 1.552323949s ago: executing program 4 (id=1746): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x320800d, 0x31) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x140, 0x1f, 0x9, 0x2, 0x10000007, 0x1, 0x7fff, 0x30000002, 0x7, 0xc72d, 0x0, 0x7, 0x3, 0x400008, 0x29, 0x72f0, 0x101, 0x6, 0x6, 0x401, 0x4, 0x484, 0xa2dc, 0x9, 0x1000, 0x80000001, 0xa, 0x0, 0x383, 0x8001, 0x4]}) writev(0xffffffffffffffff, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000180)="29e3e5864ceda68155960e4b20eb0403a71898733f0dcb64c38849be0185191621d8d87c521201593212da719d600d9262d4ac59dfb5ec2b503053b465b55ae5c7ca58b82c73ad9aa7872d1e4060a6112879a7afe128f10bf20cfd", 0x5b}, {0x0}, {&(0x7f0000000340)="79baf7c80af72c6d074d7aa55d18c2b3f92fb55d09041ffa4b66a0ed18f71e54cc0a5bc1461a6d07e6d4f31058721987ab90040f06c98df9afdd7c6614915beee9a0bea8187c6315a4be760ebc06c000bbe9a766f3752ff9ed8b304d3378bfd1a88dfc510d611a8c13259173a7c957bdd73f4bc320391f6d862cfdd58f6c09abefc7302f22bf6795474455a958f56a17d1551e", 0x93}, {0x0}, {0x0}, {0x0}], 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r4, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_io_uring_setup(0x149f, &(0x7f0000001600)={0x0, 0x3ddc, 0x8, 0x2, 0x33}, &(0x7f0000001680), &(0x7f00000016c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f00000001c0)=[r6], 0x1) close(r6) io_uring_register$IORING_UNREGISTER_FILES(r7, 0x3, 0x0, 0x0) 0s ago: executing program 4 (id=1747): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) kernel console output (not intermixed with test programs): r: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 772.362235][T12240] binder: 12236:12240 ioctl 4018620d 200000000100 returned -1 [ 773.479954][ T9] usb 5-1: config 0 descriptor?? [ 773.620251][T11640] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 773.664323][T11640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 774.070341][ T5606] Bluetooth: hci4: command tx timeout [ 774.471266][T11640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.538028][T11640] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.571906][T10875] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.572170][T10875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.602655][T11033] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.602929][T11033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 774.938598][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 775.104277][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 775.104309][ T9] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 775.106416][ T9] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 775.106448][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.106469][ T9] usb 2-1: Product: syz [ 775.106484][ T9] usb 2-1: Manufacturer: syz [ 775.106497][ T9] usb 2-1: SerialNumber: syz [ 775.777678][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 775.777737][ T9] usb 2-1: MIDIStreaming interface descriptor not found [ 776.254621][ T9] usb 2-1: USB disconnect, device number 50 [ 776.468542][ T5606] Bluetooth: hci4: command tx timeout [ 777.438341][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 777.438801][T12290] netlink: 'syz.7.1303': attribute type 2 has an invalid length. [ 777.438820][T12290] netlink: 200 bytes leftover after parsing attributes in process `syz.7.1303'. [ 777.441879][ T1244] usb 5-1: USB disconnect, device number 38 [ 777.610864][ T9] usb 2-1: config 128 has an invalid interface number: 148 but max is 0 [ 777.610896][ T9] usb 2-1: config 128 has no interface number 0 [ 777.610941][ T9] usb 2-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 777.610965][ T9] usb 2-1: config 128 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 777.610991][ T9] usb 2-1: config 128 interface 148 has no altsetting 0 [ 777.613283][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 777.613315][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.613334][ T9] usb 2-1: Product: syz [ 777.613348][ T9] usb 2-1: Manufacturer: syz [ 777.613361][ T9] usb 2-1: SerialNumber: syz [ 778.164563][ T9] usb 2-1: USB disconnect, device number 51 [ 778.528367][ T5606] Bluetooth: hci4: command tx timeout [ 779.018436][ T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 779.192567][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 779.200429][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 779.200457][ T9] usb 2-1: config 16 has an invalid interface number: 148 but max is 0 [ 779.200477][ T9] usb 2-1: config 16 has no interface number 0 [ 779.200523][ T9] usb 2-1: config 16 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 779.200548][ T9] usb 2-1: config 16 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 779.200575][ T9] usb 2-1: config 16 interface 148 has no altsetting 0 [ 779.200608][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 779.200631][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.181127][ T9] usb 2-1: string descriptor 0 read error: -71 [ 780.293785][ T9] usb 2-1: USB disconnect, device number 52 [ 780.608445][ T5606] Bluetooth: hci4: command tx timeout [ 780.777412][T12317] netlink: 'syz.1.1312': attribute type 2 has an invalid length. [ 780.777437][T12317] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1312'. [ 783.846368][ T5332] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 784.060990][ T5332] usb 5-1: config 128 has an invalid interface number: 148 but max is 0 [ 784.061022][ T5332] usb 5-1: config 128 has no interface number 0 [ 784.061068][ T5332] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 784.061093][ T5332] usb 5-1: config 128 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 784.061121][ T5332] usb 5-1: config 128 interface 148 has no altsetting 0 [ 784.070528][ T5332] usb 5-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 784.070560][ T5332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.070577][ T5332] usb 5-1: Product: syz [ 784.070588][ T5332] usb 5-1: Manufacturer: syz [ 784.070600][ T5332] usb 5-1: SerialNumber: syz [ 784.565758][ T5332] usb 5-1: USB disconnect, device number 39 [ 784.980136][ T5332] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 785.099464][T11640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.138320][ T5332] usb 5-1: Using ep0 maxpacket: 8 [ 785.140752][ T5332] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 785.140781][ T5332] usb 5-1: config 16 has an invalid interface number: 148 but max is 0 [ 785.140801][ T5332] usb 5-1: config 16 has no interface number 0 [ 785.140844][ T5332] usb 5-1: config 16 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 785.140869][ T5332] usb 5-1: config 16 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 785.140893][ T5332] usb 5-1: config 16 interface 148 has no altsetting 0 [ 785.140922][ T5332] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 785.140944][ T5332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.018409][ T5332] usb 5-1: string descriptor 0 read error: -71 [ 786.246943][ T5332] usb 5-1: USB disconnect, device number 40 [ 786.559687][ T1307] bridge_slave_1: left allmulticast mode [ 786.559729][ T1307] bridge_slave_1: left promiscuous mode [ 786.560041][ T1307] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.870613][ T1307] bridge_slave_0: left allmulticast mode [ 786.872815][ T1307] bridge_slave_0: left promiscuous mode [ 786.873140][ T1307] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.150838][T12397] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 787.150861][T12397] binder: 12394:12397 ioctl 4018620d 200000000100 returned -1 [ 788.318387][ T5831] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 788.489129][ T5831] usb 5-1: Using ep0 maxpacket: 8 [ 788.490723][ T5831] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 788.490740][ T5831] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 788.490753][ T5831] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 788.490766][ T5831] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 788.490788][ T5831] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 788.490800][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.863444][ T5831] usb 5-1: GET_CAPABILITIES returned 0 [ 788.863477][ T5831] usbtmc 5-1:16.0: can't read capabilities [ 789.196920][ T5831] usb 5-1: USB disconnect, device number 41 [ 789.740028][ T1307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.851043][ T1307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 789.891150][ T1307] bond0 (unregistering): Released all slaves [ 789.966819][ T5261] 8021q: adding VLAN 0 to HW filter on device eth13 [ 790.223460][T12233] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.223784][T12233] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.224012][T12233] bridge_slave_0: entered allmulticast mode [ 790.226747][T12233] bridge_slave_0: entered promiscuous mode [ 790.264660][T12233] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.264999][T12233] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.265262][T12233] bridge_slave_1: entered allmulticast mode [ 790.291175][T12233] bridge_slave_1: entered promiscuous mode [ 790.423852][ T5831] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 790.505930][T12233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.571208][ T5831] usb 5-1: config 128 has an invalid interface number: 148 but max is 0 [ 790.571242][ T5831] usb 5-1: config 128 has no interface number 0 [ 790.571284][ T5831] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 790.571308][ T5831] usb 5-1: config 128 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 790.571334][ T5831] usb 5-1: config 128 interface 148 has no altsetting 0 [ 790.576620][ T5831] usb 5-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 790.576651][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.576671][ T5831] usb 5-1: Product: syz [ 790.576685][ T5831] usb 5-1: Manufacturer: syz [ 790.576699][ T5831] usb 5-1: SerialNumber: syz [ 790.755666][T12233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.101467][ T5831] usb 5-1: USB disconnect, device number 42 [ 791.673136][T12233] team0: Port device team_slave_0 added [ 791.725868][ T5831] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 791.751824][T12233] team0: Port device team_slave_1 added [ 791.901950][ T5831] usb 5-1: Using ep0 maxpacket: 8 [ 791.906958][ T5831] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 791.906989][ T5831] usb 5-1: config 16 has an invalid interface number: 148 but max is 0 [ 791.907009][ T5831] usb 5-1: config 16 has no interface number 0 [ 791.907056][ T5831] usb 5-1: config 16 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 791.907080][ T5831] usb 5-1: config 16 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 791.907108][ T5831] usb 5-1: config 16 interface 148 has no altsetting 0 [ 791.907141][ T5831] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 791.907164][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.687949][ T5831] usb 5-1: string descriptor 0 read error: -71 [ 792.737799][ T5831] usb 5-1: USB disconnect, device number 43 [ 792.754610][T12233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 792.754625][T12233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.754646][T12233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.078504][ T1307] hsr_slave_0: left promiscuous mode [ 793.170455][ T1307] hsr_slave_1: left promiscuous mode [ 793.171519][ T1307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 793.257525][ T1307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.511472][ T5608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 793.557481][ T5608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 793.563493][ T5608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 793.565189][ T5608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 793.566709][ T5608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 795.657439][ T5608] Bluetooth: hci5: command tx timeout [ 796.546556][T12512] loop1: detected capacity change from 0 to 4096 [ 796.547912][T12512] ext4: Unknown parameter 'nouser_xattr' [ 796.548458][ T1307] team0 (unregistering): Port device team_slave_1 removed [ 796.548482][T12512] Flush: task=syz.1.1356[12512] dev=loop1 state=2 [ 796.707088][ T1307] team0 (unregistering): Port device team_slave_0 removed [ 796.831160][T12512] Teardown: task=syz.1.1356[12512] dev=loop1 state=2 [ 797.018460][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 797.212681][T12233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.212693][T12233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.212709][T12233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.214781][ T5261] 8021q: adding VLAN 0 to HW filter on device eth14 [ 797.244805][ T9] usb 5-1: config 128 has an invalid interface number: 148 but max is 0 [ 797.244835][ T9] usb 5-1: config 128 has no interface number 0 [ 797.244877][ T9] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 797.244899][ T9] usb 5-1: config 128 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 797.244925][ T9] usb 5-1: config 128 interface 148 has no altsetting 0 [ 798.671285][ T5608] Bluetooth: hci5: command tx timeout [ 798.693655][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 798.693689][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.693715][ T9] usb 5-1: Product: syz [ 798.693733][ T9] usb 5-1: Manufacturer: syz [ 798.693747][ T9] usb 5-1: SerialNumber: syz [ 799.441104][ T9] usb 5-1: USB disconnect, device number 44 [ 799.764200][T12233] hsr_slave_0: entered promiscuous mode [ 800.011384][T12525] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input20 [ 800.197583][T12233] hsr_slave_1: entered promiscuous mode [ 800.201214][T12233] debugfs: 'hsr0' already exists in 'hsr' [ 800.201242][T12233] Cannot create hsr debugfs directory [ 800.298576][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 800.530536][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 800.532791][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 800.532818][ T9] usb 5-1: config 16 has an invalid interface number: 148 but max is 0 [ 800.532840][ T9] usb 5-1: config 16 has no interface number 0 [ 800.532884][ T9] usb 5-1: config 16 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 800.532907][ T9] usb 5-1: config 16 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 800.532939][ T9] usb 5-1: config 16 interface 148 has no altsetting 0 [ 800.532980][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 800.533004][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.691843][ T5608] Bluetooth: hci5: command tx timeout [ 800.940893][ T9] usb 5-1: string descriptor 0 read error: -71 [ 801.117789][ T9] usb 5-1: USB disconnect, device number 45 [ 802.009698][T12562] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1364'. [ 802.122406][T12565] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1361'. [ 802.768411][ T5608] Bluetooth: hci5: command tx timeout [ 804.263768][ T5261] 8021q: adding VLAN 0 to HW filter on device eth15 [ 804.829623][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 805.126144][ T9] usb 5-1: config 128 has an invalid interface number: 148 but max is 0 [ 805.126178][ T9] usb 5-1: config 128 has no interface number 0 [ 805.126251][ T9] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 805.126276][ T9] usb 5-1: config 128 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 805.126305][ T9] usb 5-1: config 128 interface 148 has no altsetting 0 [ 805.136251][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 805.136270][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.136281][ T9] usb 5-1: Product: syz [ 805.136293][ T9] usb 5-1: Manufacturer: syz [ 805.136302][ T9] usb 5-1: SerialNumber: syz [ 805.538314][ T9] usb 5-1: USB disconnect, device number 46 [ 806.818496][ T5831] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 806.979682][ T5831] usb 5-1: Using ep0 maxpacket: 8 [ 806.982112][ T5831] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 806.982144][ T5831] usb 5-1: config 16 has an invalid interface number: 148 but max is 0 [ 806.982166][ T5831] usb 5-1: config 16 has no interface number 0 [ 806.982212][ T5831] usb 5-1: config 16 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 806.982235][ T5831] usb 5-1: config 16 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 806.982263][ T5831] usb 5-1: config 16 interface 148 has no altsetting 0 [ 806.982294][ T5831] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 806.982318][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.029108][ T5831] usb 5-1: string descriptor 0 read error: -71 [ 808.165272][ T5831] usb 5-1: USB disconnect, device number 47 [ 808.176627][T12616] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 808.176705][T12616] binder: 12610:12616 ioctl 4018620d 200000000100 returned -1 [ 808.949875][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.949965][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.998138][T12631] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1381'. [ 810.286961][T12653] loop1: detected capacity change from 0 to 4096 [ 810.288743][T12653] ext4: Unknown parameter 'nouser_xattr' [ 810.290046][T12653] Flush: task=syz.1.1387[12653] dev=loop1 state=2 [ 810.441533][T12653] Teardown: task=syz.1.1387[12653] dev=loop1 state=2 [ 813.762847][T12669] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 813.762939][T12669] binder: 12666:12669 ioctl 4018620d 200000000100 returned -1 [ 815.152349][ T5831] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 815.323680][ T5831] usb 5-1: config 128 has an invalid interface number: 148 but max is 0 [ 815.323713][ T5831] usb 5-1: config 128 has no interface number 0 [ 815.323749][ T5831] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 815.323761][ T5831] usb 5-1: config 128 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 815.323777][ T5831] usb 5-1: config 128 interface 148 has no altsetting 0 [ 815.325874][ T5831] usb 5-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 815.325903][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.325913][ T5831] usb 5-1: Product: syz [ 815.325921][ T5831] usb 5-1: Manufacturer: syz [ 815.325929][ T5831] usb 5-1: SerialNumber: syz [ 815.772084][ T5831] usb 5-1: USB disconnect, device number 48 [ 816.386367][ T5831] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 816.538494][ T5831] usb 5-1: Using ep0 maxpacket: 8 [ 816.549051][ T5831] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 816.549084][ T5831] usb 5-1: config 16 has an invalid interface number: 148 but max is 0 [ 816.549104][ T5831] usb 5-1: config 16 has no interface number 0 [ 816.549148][ T5831] usb 5-1: config 16 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 816.549172][ T5831] usb 5-1: config 16 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 816.549200][ T5831] usb 5-1: config 16 interface 148 has no altsetting 0 [ 816.549236][ T5831] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 816.549259][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.975953][ T5831] usb 5-1: string descriptor 0 read error: -71 [ 817.192407][ T5831] usb 5-1: USB disconnect, device number 49 [ 818.501463][ T1307] bridge_slave_1: left allmulticast mode [ 818.501502][ T1307] bridge_slave_1: left promiscuous mode [ 818.501806][ T1307] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.695039][ T1307] bridge_slave_0: left allmulticast mode [ 818.695081][ T1307] bridge_slave_0: left promiscuous mode [ 818.695381][ T1307] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.757573][T12748] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input21 [ 819.789299][ T1307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 819.849277][ T1307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 819.890328][ T1307] bond0 (unregistering): Released all slaves [ 819.944336][T12737] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!`lü1&›b' [ 819.944350][T12737] CPU: 1 UID: 0 PID: 12737 Comm: syz.1.1403 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 819.944366][T12737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 819.944373][T12737] Call Trace: [ 819.944378][T12737] [ 819.944384][T12737] dump_stack_lvl+0xe8/0x150 [ 819.944407][T12737] sysfs_warn_dup+0x8e/0xa0 [ 819.944427][T12737] sysfs_do_create_link_sd+0xc0/0x110 [ 819.944440][T12737] device_add_class_symlinks+0x1d2/0x240 [ 819.944458][T12737] device_add+0x467/0xb80 [ 819.944482][T12737] wiphy_register+0x1fc8/0x2ff0 [ 819.944506][T12737] ? __pfx_wiphy_register+0x10/0x10 [ 819.944520][T12737] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 819.944540][T12737] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 819.944563][T12737] ieee80211_register_hw+0x3d3d/0x4a50 [ 819.944586][T12737] ? ieee80211_register_hw+0x1971/0x4a50 [ 819.944616][T12737] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 819.944632][T12737] ? __asan_memset+0x22/0x50 [ 819.944649][T12737] ? __hrtimer_setup+0x1d2/0x270 [ 819.944665][T12737] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 819.944681][T12737] mac80211_hwsim_new_radio+0x336e/0x57d0 [ 819.944701][T12737] ? mac80211_hwsim_new_radio+0xf6/0x57d0 [ 819.944722][T12737] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 819.944733][T12737] ? kstrndup+0xbd/0x160 [ 819.944752][T12737] ? kstrndup+0xbd/0x160 [ 819.944766][T12737] hwsim_new_radio_nl+0xd8b/0xf90 [ 819.944787][T12737] genl_family_rcv_msg_doit+0x233/0x340 [ 819.944803][T12737] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 819.944822][T12737] ? bpf_lsm_capable+0x9/0x20 [ 819.944834][T12737] ? security_capable+0x74/0x280 [ 819.944851][T12737] genl_rcv_msg+0x614/0x7a0 [ 819.944866][T12737] ? __pfx_genl_rcv_msg+0x10/0x10 [ 819.944875][T12737] ? ref_tracker_free+0x668/0x820 [ 819.944886][T12737] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 819.944898][T12737] ? ____sys_sendmsg+0x565/0x870 [ 819.944911][T12737] ? ___sys_sendmsg+0x2a5/0x360 [ 819.944923][T12737] ? __x64_sys_sendmsg+0x1b7/0x290 [ 819.944936][T12737] ? do_syscall_64+0x174/0x580 [ 819.944949][T12737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.944966][T12737] netlink_rcv_skb+0x226/0x4a0 [ 819.944980][T12737] ? __pfx_genl_rcv_msg+0x10/0x10 [ 819.944992][T12737] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 819.945013][T12737] ? netlink_deliver_tap+0x2e/0x1b0 [ 819.945027][T12737] ? netlink_deliver_tap+0x2e/0x1b0 [ 819.945043][T12737] genl_rcv+0x28/0x40 [ 819.945053][T12737] netlink_unicast+0x7f5/0x990 [ 819.945072][T12737] netlink_sendmsg+0x813/0xb40 [ 819.945091][T12737] ? __pfx_netlink_sendmsg+0x10/0x10 [ 819.945107][T12737] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 819.945127][T12737] ? __pfx_netlink_sendmsg+0x10/0x10 [ 819.945140][T12737] sock_sendmsg_nosec+0x13a/0x180 [ 819.945158][T12737] ____sys_sendmsg+0x565/0x870 [ 819.945172][T12737] ? __might_fault+0xaf/0x130 [ 819.945192][T12737] ? __pfx_____sys_sendmsg+0x10/0x10 [ 819.945212][T12737] ? import_iovec+0x73/0xa0 [ 819.945228][T12737] ___sys_sendmsg+0x2a5/0x360 [ 819.945240][T12737] ? __lock_acquire+0x683/0x2ce0 [ 819.945256][T12737] ? __pfx____sys_sendmsg+0x10/0x10 [ 819.945272][T12737] ? futex_wait+0x2a2/0x390 [ 819.945300][T12737] ? __fget_files+0x2a/0x420 [ 819.945311][T12737] ? __fget_files+0x3a8/0x420 [ 819.945327][T12737] __x64_sys_sendmsg+0x1b7/0x290 [ 819.945343][T12737] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 819.945367][T12737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.945379][T12737] do_syscall_64+0x174/0x580 [ 819.945393][T12737] ? clear_bhb_loop+0x40/0x90 [ 819.945406][T12737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.945417][T12737] RIP: 0033:0x7f66fb73de59 [ 819.945430][T12737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.945440][T12737] RSP: 002b:00007f66f9996028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 819.945453][T12737] RAX: ffffffffffffffda RBX: 00007f66fb9c5fa0 RCX: 00007f66fb73de59 [ 819.945467][T12737] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 819.945474][T12737] RBP: 00007f66fb7d3e6f R08: 0000000000000000 R09: 0000000000000000 [ 819.945482][T12737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.945488][T12737] R13: 00007f66fb9c6038 R14: 00007f66fb9c5fa0 R15: 00007ffe7c1e7248 [ 819.945506][T12737] [ 820.302160][T12481] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.302467][T12481] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.302757][T12481] bridge_slave_0: entered allmulticast mode [ 820.306094][T12481] bridge_slave_0: entered promiscuous mode [ 820.392184][T12481] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.392489][T12481] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.397677][T12481] bridge_slave_1: entered allmulticast mode [ 820.409167][T12481] bridge_slave_1: entered promiscuous mode [ 821.664668][T12759] loop4: detected capacity change from 0 to 2048 [ 822.421177][T12759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 823.069912][T12481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.124712][T12481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 823.707839][ T5603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.782403][ T1307] hsr_slave_0: left promiscuous mode [ 823.823563][ T5603] Flush: task=syz-executor[5603] dev=loop4 state=2 [ 823.888103][ T1307] hsr_slave_1: left promiscuous mode [ 823.897316][ T1307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.941203][ T1307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.988754][ T5603] Teardown: task=syz-executor[5603] dev=loop4 state=2 [ 824.195240][T12795] loop4: detected capacity change from 0 to 4096 [ 824.199658][T12795] ext4: Unknown parameter 'nouser_xattr' [ 824.200079][T12795] Flush: task=syz.4.1414[12795] dev=loop4 state=2 [ 824.279638][T12795] Teardown: task=syz.4.1414[12795] dev=loop4 state=2 [ 825.079096][T12763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.079726][T12763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.211979][ T1307] team0 (unregistering): Port device team_slave_1 removed [ 827.266076][ T1307] team0 (unregistering): Port device team_slave_0 removed [ 827.493320][T12804] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!`lü1&›b' [ 827.493335][T12804] CPU: 0 UID: 0 PID: 12804 Comm: syz.4.1417 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 827.493349][T12804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 827.493357][T12804] Call Trace: [ 827.493363][T12804] [ 827.493367][T12804] dump_stack_lvl+0xe8/0x150 [ 827.493391][T12804] sysfs_warn_dup+0x8e/0xa0 [ 827.493411][T12804] sysfs_do_create_link_sd+0xc0/0x110 [ 827.493424][T12804] device_add_class_symlinks+0x1d2/0x240 [ 827.493444][T12804] device_add+0x467/0xb80 [ 827.493460][T12804] wiphy_register+0x1fc8/0x2ff0 [ 827.493482][T12804] ? __pfx_wiphy_register+0x10/0x10 [ 827.493495][T12804] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 827.493516][T12804] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 827.493531][T12804] ieee80211_register_hw+0x3d3d/0x4a50 [ 827.493554][T12804] ? ieee80211_register_hw+0x1971/0x4a50 [ 827.493581][T12804] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 827.493597][T12804] ? __asan_memset+0x22/0x50 [ 827.493612][T12804] ? __hrtimer_setup+0x1d2/0x270 [ 827.493629][T12804] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 827.493644][T12804] mac80211_hwsim_new_radio+0x336e/0x57d0 [ 827.493664][T12804] ? mac80211_hwsim_new_radio+0xf6/0x57d0 [ 827.493685][T12804] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 827.493708][T12804] ? kstrndup+0xbd/0x160 [ 827.493725][T12804] ? kstrndup+0xbd/0x160 [ 827.493740][T12804] hwsim_new_radio_nl+0xd8b/0xf90 [ 827.493761][T12804] genl_family_rcv_msg_doit+0x233/0x340 [ 827.493784][T12804] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 827.493803][T12804] ? bpf_lsm_capable+0x9/0x20 [ 827.493818][T12804] ? security_capable+0x74/0x280 [ 827.493836][T12804] genl_rcv_msg+0x614/0x7a0 [ 827.493850][T12804] ? __pfx_genl_rcv_msg+0x10/0x10 [ 827.493861][T12804] ? ref_tracker_free+0x668/0x820 [ 827.493873][T12804] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 827.493891][T12804] ? ____sys_sendmsg+0x565/0x870 [ 827.493908][T12804] ? ___sys_sendmsg+0x2a5/0x360 [ 827.493925][T12804] ? __x64_sys_sendmsg+0x1b7/0x290 [ 827.493938][T12804] ? do_syscall_64+0x174/0x580 [ 827.493951][T12804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.493968][T12804] netlink_rcv_skb+0x226/0x4a0 [ 827.493984][T12804] ? __pfx_genl_rcv_msg+0x10/0x10 [ 827.493996][T12804] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 827.494017][T12804] ? netlink_deliver_tap+0x2e/0x1b0 [ 827.494031][T12804] ? netlink_deliver_tap+0x2e/0x1b0 [ 827.494047][T12804] genl_rcv+0x28/0x40 [ 827.494056][T12804] netlink_unicast+0x7f5/0x990 [ 827.494075][T12804] netlink_sendmsg+0x813/0xb40 [ 827.494095][T12804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 827.494110][T12804] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 827.494129][T12804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 827.494143][T12804] sock_sendmsg_nosec+0x13a/0x180 [ 827.494162][T12804] ____sys_sendmsg+0x565/0x870 [ 827.494175][T12804] ? __might_fault+0xaf/0x130 [ 827.494195][T12804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 827.494214][T12804] ? import_iovec+0x73/0xa0 [ 827.494229][T12804] ___sys_sendmsg+0x2a5/0x360 [ 827.494242][T12804] ? __lock_acquire+0x683/0x2ce0 [ 827.494258][T12804] ? __pfx____sys_sendmsg+0x10/0x10 [ 827.494274][T12804] ? futex_wait+0x2a2/0x390 [ 827.494307][T12804] ? __fget_files+0x2a/0x420 [ 827.494317][T12804] ? __fget_files+0x3a8/0x420 [ 827.494336][T12804] __x64_sys_sendmsg+0x1b7/0x290 [ 827.494351][T12804] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 827.494376][T12804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.494388][T12804] do_syscall_64+0x174/0x580 [ 827.494401][T12804] ? trace_irq_disable+0x3b/0x140 [ 827.494413][T12804] ? clear_bhb_loop+0x40/0x90 [ 827.494427][T12804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.494438][T12804] RIP: 0033:0x7f36ffa0de59 [ 827.494451][T12804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.494461][T12804] RSP: 002b:00007f36fdc45028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 827.494523][T12804] RAX: ffffffffffffffda RBX: 00007f36ffc96090 RCX: 00007f36ffa0de59 [ 827.494538][T12804] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 827.494545][T12804] RBP: 00007f36ffaa3e6f R08: 0000000000000000 R09: 0000000000000000 [ 827.494552][T12804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.494559][T12804] R13: 00007f36ffc96128 R14: 00007f36ffc96090 R15: 00007ffd166af3b8 [ 827.494580][T12804] [ 828.164207][T12481] team0: Port device team_slave_0 added [ 828.374857][T12481] team0: Port device team_slave_1 added [ 828.407296][T12233] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 829.386995][T12233] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 829.734021][T12233] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 829.845534][T12233] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 829.888697][T12481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 829.888715][T12481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.888739][T12481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.890663][T12233] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 830.035856][T12233] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 830.100779][T12824] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 830.100801][T12824] binder: 12823:12824 ioctl 4018620d 200000000100 returned -1 [ 830.102387][T12481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 830.102399][T12481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.102420][T12481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 830.185476][T12233] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 830.294169][T12233] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 830.815447][T12481] hsr_slave_0: entered promiscuous mode [ 830.820907][T12481] hsr_slave_1: entered promiscuous mode [ 830.826051][T12481] debugfs: 'hsr0' already exists in 'hsr' [ 830.826077][T12481] Cannot create hsr debugfs directory [ 831.378406][ T9] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 831.658334][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 831.686860][ T9] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 831.686902][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.686922][ T9] usb 2-1: Product: syz [ 831.686936][ T9] usb 2-1: Manufacturer: syz [ 831.686950][ T9] usb 2-1: SerialNumber: syz [ 831.723035][ T9] usb 2-1: config 0 descriptor?? [ 831.831951][T12861] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1429'. [ 831.856750][ T5261] 8021q: adding VLAN 0 to HW filter on device eth13 [ 832.134377][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 832.226728][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 832.243405][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 832.243468][ T9] usb 2-1: media controller created [ 832.283190][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 832.864061][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 832.864127][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 832.864140][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 833.274100][T12881] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!`lü1&›b' [ 833.274116][T12881] CPU: 1 UID: 0 PID: 12881 Comm: syz.7.1430 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 833.274130][T12881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 833.274138][T12881] Call Trace: [ 833.274143][T12881] [ 833.274147][T12881] dump_stack_lvl+0xe8/0x150 [ 833.274171][T12881] sysfs_warn_dup+0x8e/0xa0 [ 833.274198][T12881] sysfs_do_create_link_sd+0xc0/0x110 [ 833.274212][T12881] device_add_class_symlinks+0x1d2/0x240 [ 833.274232][T12881] device_add+0x467/0xb80 [ 833.274248][T12881] wiphy_register+0x1fc8/0x2ff0 [ 833.274276][T12881] ? __pfx_wiphy_register+0x10/0x10 [ 833.274289][T12881] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 833.274310][T12881] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 833.274327][T12881] ieee80211_register_hw+0x3d3d/0x4a50 [ 833.274350][T12881] ? ieee80211_register_hw+0x1971/0x4a50 [ 833.274377][T12881] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 833.274392][T12881] ? __asan_memset+0x22/0x50 [ 833.274408][T12881] ? __hrtimer_setup+0x1d2/0x270 [ 833.274424][T12881] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 833.274440][T12881] mac80211_hwsim_new_radio+0x336e/0x57d0 [ 833.274460][T12881] ? mac80211_hwsim_new_radio+0xf6/0x57d0 [ 833.274482][T12881] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 833.274494][T12881] ? kstrndup+0xbd/0x160 [ 833.274512][T12881] ? kstrndup+0xbd/0x160 [ 833.274526][T12881] hwsim_new_radio_nl+0xd8b/0xf90 [ 833.274546][T12881] genl_family_rcv_msg_doit+0x233/0x340 [ 833.274563][T12881] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 833.274581][T12881] ? bpf_lsm_capable+0x9/0x20 [ 833.274594][T12881] ? security_capable+0x74/0x280 [ 833.274611][T12881] genl_rcv_msg+0x614/0x7a0 [ 833.274627][T12881] ? __pfx_genl_rcv_msg+0x10/0x10 [ 833.274637][T12881] ? ref_tracker_free+0x668/0x820 [ 833.274648][T12881] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 833.274660][T12881] ? ____sys_sendmsg+0x565/0x870 [ 833.274674][T12881] ? ___sys_sendmsg+0x2a5/0x360 [ 833.274686][T12881] ? __x64_sys_sendmsg+0x1b7/0x290 [ 833.274701][T12881] ? do_syscall_64+0x174/0x580 [ 833.274714][T12881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.274731][T12881] netlink_rcv_skb+0x226/0x4a0 [ 833.274746][T12881] ? __pfx_genl_rcv_msg+0x10/0x10 [ 833.274758][T12881] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 833.274779][T12881] ? netlink_deliver_tap+0x2e/0x1b0 [ 833.274793][T12881] ? netlink_deliver_tap+0x2e/0x1b0 [ 833.274809][T12881] genl_rcv+0x28/0x40 [ 833.274818][T12881] netlink_unicast+0x7f5/0x990 [ 833.274837][T12881] netlink_sendmsg+0x813/0xb40 [ 833.274857][T12881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 833.274872][T12881] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 833.274892][T12881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 833.274905][T12881] sock_sendmsg_nosec+0x13a/0x180 [ 833.274923][T12881] ____sys_sendmsg+0x565/0x870 [ 833.274937][T12881] ? __might_fault+0xaf/0x130 [ 833.274957][T12881] ? __pfx_____sys_sendmsg+0x10/0x10 [ 833.274976][T12881] ? import_iovec+0x73/0xa0 [ 833.274992][T12881] ___sys_sendmsg+0x2a5/0x360 [ 833.275005][T12881] ? __lock_acquire+0x683/0x2ce0 [ 833.275021][T12881] ? __pfx____sys_sendmsg+0x10/0x10 [ 833.275037][T12881] ? futex_wait+0x2a2/0x390 [ 833.275065][T12881] ? __fget_files+0x2a/0x420 [ 833.275075][T12881] ? __fget_files+0x3a8/0x420 [ 833.275092][T12881] __x64_sys_sendmsg+0x1b7/0x290 [ 833.275108][T12881] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 833.275132][T12881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.275145][T12881] do_syscall_64+0x174/0x580 [ 833.275167][T12881] ? trace_irq_disable+0x3b/0x140 [ 833.275391][T12881] ? clear_bhb_loop+0x40/0x90 [ 833.275410][T12881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.275423][T12881] RIP: 0033:0x7fdba2a5de59 [ 833.275436][T12881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 833.275455][T12881] RSP: 002b:00007fdba0c95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 833.275468][T12881] RAX: ffffffffffffffda RBX: 00007fdba2ce6090 RCX: 00007fdba2a5de59 [ 833.275476][T12881] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 833.275484][T12881] RBP: 00007fdba2af3e6f R08: 0000000000000000 R09: 0000000000000000 [ 833.275491][T12881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 833.275498][T12881] R13: 00007fdba2ce6128 R14: 00007fdba2ce6090 R15: 00007ffcf9cec688 [ 833.275516][T12881] [ 833.546033][ T9] usb 2-1: USB disconnect, device number 53 [ 834.081889][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 834.374444][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 834.448862][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 834.469300][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 834.476140][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 834.477016][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 835.135103][ T5261] 8021q: adding VLAN 0 to HW filter on device eth14 [ 835.410557][T12904] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 835.410571][T12904] binder: 12901:12904 ioctl 4018620d 200000000100 returned -1 [ 835.631980][T12915] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1438'. [ 835.633902][T12915] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.634145][T12915] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.705666][ T5608] Bluetooth: hci0: command tx timeout [ 837.021715][T12929] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!`lü1&›b' [ 837.021729][T12929] CPU: 0 UID: 0 PID: 12929 Comm: syz.7.1443 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 837.021743][T12929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 837.021750][T12929] Call Trace: [ 837.021755][T12929] [ 837.021760][T12929] dump_stack_lvl+0xe8/0x150 [ 837.021785][T12929] sysfs_warn_dup+0x8e/0xa0 [ 837.021805][T12929] sysfs_do_create_link_sd+0xc0/0x110 [ 837.021818][T12929] device_add_class_symlinks+0x1d2/0x240 [ 837.021837][T12929] device_add+0x467/0xb80 [ 837.021853][T12929] wiphy_register+0x1fc8/0x2ff0 [ 837.021875][T12929] ? __pfx_wiphy_register+0x10/0x10 [ 837.021889][T12929] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 837.021913][T12929] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 837.021929][T12929] ieee80211_register_hw+0x3d3d/0x4a50 [ 837.021951][T12929] ? ieee80211_register_hw+0x1971/0x4a50 [ 837.021978][T12929] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 837.021993][T12929] ? __asan_memset+0x22/0x50 [ 837.022008][T12929] ? __hrtimer_setup+0x1d2/0x270 [ 837.022024][T12929] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 837.022039][T12929] mac80211_hwsim_new_radio+0x336e/0x57d0 [ 837.022059][T12929] ? mac80211_hwsim_new_radio+0xf6/0x57d0 [ 837.022080][T12929] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 837.022091][T12929] ? kstrndup+0xbd/0x160 [ 837.022108][T12929] ? kstrndup+0xbd/0x160 [ 837.022123][T12929] hwsim_new_radio_nl+0xd8b/0xf90 [ 837.022143][T12929] genl_family_rcv_msg_doit+0x233/0x340 [ 837.022159][T12929] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 837.022178][T12929] ? bpf_lsm_capable+0x9/0x20 [ 837.022190][T12929] ? security_capable+0x74/0x280 [ 837.022207][T12929] genl_rcv_msg+0x614/0x7a0 [ 837.022222][T12929] ? __pfx_genl_rcv_msg+0x10/0x10 [ 837.022231][T12929] ? ref_tracker_free+0x668/0x820 [ 837.022242][T12929] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 837.022254][T12929] ? ____sys_sendmsg+0x565/0x870 [ 837.022268][T12929] ? ___sys_sendmsg+0x2a5/0x360 [ 837.022280][T12929] ? __x64_sys_sendmsg+0x1b7/0x290 [ 837.022293][T12929] ? do_syscall_64+0x174/0x580 [ 837.022306][T12929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.022323][T12929] netlink_rcv_skb+0x226/0x4a0 [ 837.022338][T12929] ? __pfx_genl_rcv_msg+0x10/0x10 [ 837.022350][T12929] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 837.022371][T12929] ? netlink_deliver_tap+0x2e/0x1b0 [ 837.022385][T12929] ? netlink_deliver_tap+0x2e/0x1b0 [ 837.022408][T12929] genl_rcv+0x28/0x40 [ 837.022417][T12929] netlink_unicast+0x7f5/0x990 [ 837.022439][T12929] netlink_sendmsg+0x813/0xb40 [ 837.022459][T12929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 837.022474][T12929] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 837.022495][T12929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 837.022510][T12929] sock_sendmsg_nosec+0x13a/0x180 [ 837.022529][T12929] ____sys_sendmsg+0x565/0x870 [ 837.022543][T12929] ? __might_fault+0xaf/0x130 [ 837.022564][T12929] ? __pfx_____sys_sendmsg+0x10/0x10 [ 837.022583][T12929] ? import_iovec+0x73/0xa0 [ 837.022599][T12929] ___sys_sendmsg+0x2a5/0x360 [ 837.022612][T12929] ? __lock_acquire+0x683/0x2ce0 [ 837.022628][T12929] ? __pfx____sys_sendmsg+0x10/0x10 [ 837.022644][T12929] ? futex_wait+0x2a2/0x390 [ 837.022672][T12929] ? __fget_files+0x2a/0x420 [ 837.022683][T12929] ? __fget_files+0x3a8/0x420 [ 837.022700][T12929] __x64_sys_sendmsg+0x1b7/0x290 [ 837.022715][T12929] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 837.022740][T12929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.022752][T12929] do_syscall_64+0x174/0x580 [ 837.022764][T12929] ? trace_irq_disable+0x3b/0x140 [ 837.022777][T12929] ? clear_bhb_loop+0x40/0x90 [ 837.022790][T12929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.022801][T12929] RIP: 0033:0x7fdba2a5de59 [ 837.022815][T12929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.022824][T12929] RSP: 002b:00007fdba0cb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 837.022837][T12929] RAX: ffffffffffffffda RBX: 00007fdba2ce5fa0 RCX: 00007fdba2a5de59 [ 837.022845][T12929] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 837.022852][T12929] RBP: 00007fdba2af3e6f R08: 0000000000000000 R09: 0000000000000000 [ 837.022859][T12929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.022865][T12929] R13: 00007fdba2ce6038 R14: 00007fdba2ce5fa0 R15: 00007ffcf9cec688 [ 837.022884][T12929] [ 838.778961][ T5608] Bluetooth: hci0: command tx timeout [ 840.210080][T12964] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1450'. [ 840.639625][T12967] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1451'. [ 840.848397][ T5608] Bluetooth: hci0: command tx timeout [ 841.389230][T12983] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!`lü1&›b' [ 841.389248][T12983] CPU: 1 UID: 0 PID: 12983 Comm: syz.7.1454 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 841.389265][T12983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 841.389274][T12983] Call Trace: [ 841.389279][T12983] [ 841.389283][T12983] dump_stack_lvl+0xe8/0x150 [ 841.389306][T12983] sysfs_warn_dup+0x8e/0xa0 [ 841.389325][T12983] sysfs_do_create_link_sd+0xc0/0x110 [ 841.389338][T12983] device_add_class_symlinks+0x1d2/0x240 [ 841.389358][T12983] device_add+0x467/0xb80 [ 841.389374][T12983] wiphy_register+0x1fc8/0x2ff0 [ 841.389400][T12983] ? __pfx_wiphy_register+0x10/0x10 [ 841.389414][T12983] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 841.389437][T12983] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 841.389454][T12983] ieee80211_register_hw+0x3d3d/0x4a50 [ 841.389477][T12983] ? ieee80211_register_hw+0x1971/0x4a50 [ 841.389505][T12983] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 841.389522][T12983] ? __asan_memset+0x22/0x50 [ 841.389537][T12983] ? __hrtimer_setup+0x1d2/0x270 [ 841.389553][T12983] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 841.389569][T12983] mac80211_hwsim_new_radio+0x336e/0x57d0 [ 841.389588][T12983] ? mac80211_hwsim_new_radio+0xf6/0x57d0 [ 841.389609][T12983] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 841.389620][T12983] ? kstrndup+0xbd/0x160 [ 841.389637][T12983] ? kstrndup+0xbd/0x160 [ 841.389651][T12983] hwsim_new_radio_nl+0xd8b/0xf90 [ 841.389671][T12983] genl_family_rcv_msg_doit+0x233/0x340 [ 841.389687][T12983] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 841.389706][T12983] ? bpf_lsm_capable+0x9/0x20 [ 841.389719][T12983] ? security_capable+0x74/0x280 [ 841.389736][T12983] genl_rcv_msg+0x614/0x7a0 [ 841.389750][T12983] ? __pfx_genl_rcv_msg+0x10/0x10 [ 841.389767][T12983] ? ref_tracker_free+0x668/0x820 [ 841.389779][T12983] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 841.389790][T12983] ? ____sys_sendmsg+0x565/0x870 [ 841.389805][T12983] ? ___sys_sendmsg+0x2a5/0x360 [ 841.389818][T12983] ? __x64_sys_sendmsg+0x1b7/0x290 [ 841.389831][T12983] ? do_syscall_64+0x174/0x580 [ 841.389846][T12983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.389863][T12983] netlink_rcv_skb+0x226/0x4a0 [ 841.389878][T12983] ? __pfx_genl_rcv_msg+0x10/0x10 [ 841.389890][T12983] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 841.389911][T12983] ? netlink_deliver_tap+0x2e/0x1b0 [ 841.389925][T12983] ? netlink_deliver_tap+0x2e/0x1b0 [ 841.389941][T12983] genl_rcv+0x28/0x40 [ 841.389950][T12983] netlink_unicast+0x7f5/0x990 [ 841.389969][T12983] netlink_sendmsg+0x813/0xb40 [ 841.389989][T12983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 841.390004][T12983] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 841.390024][T12983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 841.390038][T12983] sock_sendmsg_nosec+0x13a/0x180 [ 841.390062][T12983] ____sys_sendmsg+0x565/0x870 [ 841.390076][T12983] ? __might_fault+0xaf/0x130 [ 841.390096][T12983] ? __pfx_____sys_sendmsg+0x10/0x10 [ 841.390116][T12983] ? import_iovec+0x73/0xa0 [ 841.390134][T12983] ___sys_sendmsg+0x2a5/0x360 [ 841.390146][T12983] ? __lock_acquire+0x683/0x2ce0 [ 841.390164][T12983] ? __pfx____sys_sendmsg+0x10/0x10 [ 841.390181][T12983] ? futex_wait+0x2a2/0x390 [ 841.390209][T12983] ? __fget_files+0x2a/0x420 [ 841.390220][T12983] ? __fget_files+0x3a8/0x420 [ 841.390236][T12983] __x64_sys_sendmsg+0x1b7/0x290 [ 841.390251][T12983] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 841.390278][T12983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.390291][T12983] do_syscall_64+0x174/0x580 [ 841.390304][T12983] ? trace_irq_disable+0x3b/0x140 [ 841.390316][T12983] ? clear_bhb_loop+0x40/0x90 [ 841.390329][T12983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.390340][T12983] RIP: 0033:0x7fdba2a5de59 [ 841.390354][T12983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.390363][T12983] RSP: 002b:00007fdba0cb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 841.390376][T12983] RAX: ffffffffffffffda RBX: 00007fdba2ce5fa0 RCX: 00007fdba2a5de59 [ 841.390384][T12983] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 841.390391][T12983] RBP: 00007fdba2af3e6f R08: 0000000000000000 R09: 0000000000000000 [ 841.390397][T12983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.390404][T12983] R13: 00007fdba2ce6038 R14: 00007fdba2ce5fa0 R15: 00007ffcf9cec688 [ 841.390422][T12983] [ 843.096546][ T5608] Bluetooth: hci0: command tx timeout [ 847.280727][T13028] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1463'. [ 847.970010][T13054] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1467'. [ 847.980948][T13055] loop1: detected capacity change from 0 to 128 [ 848.137858][T13055] EXT4-fs (loop1): Test dummy encryption mode enabled [ 848.416574][T13055] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 848.605941][T13055] ext4 filesystem being mounted at /595/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 848.773021][T13055] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 849.000841][T13065] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 849.000864][T13065] binder: 13052:13065 ioctl 4018620d 200000000100 returned -1 [ 850.447991][T12481] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 850.688986][T12481] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 850.691945][T12890] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.692239][T12890] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.692544][T12890] bridge_slave_0: entered allmulticast mode [ 850.705618][T12890] bridge_slave_0: entered promiscuous mode [ 850.803366][T13081] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input22 [ 850.874946][ T5602] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 850.889705][T12481] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 851.026016][T12481] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 851.088089][T12890] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.089346][T12890] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.089648][T12890] bridge_slave_1: entered allmulticast mode [ 851.093214][T12890] bridge_slave_1: entered promiscuous mode [ 851.235942][ T5602] Flush: task=syz-executor[5602] dev=loop1 state=2 [ 851.356494][ T5602] Teardown: task=syz-executor[5602] dev=loop1 state=2 [ 851.742891][T12481] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 851.774815][T12481] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 851.814230][T12481] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 853.165852][T12481] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 853.572853][T12481] kthread_run failed with err -4 [ 853.585877][T12890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 853.625313][T12890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.864275][T12890] team0: Port device team_slave_0 added [ 853.871330][T12890] team0: Port device team_slave_1 added [ 853.979648][T12890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 853.979661][T12890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.979676][T12890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 853.982734][T12890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 853.982746][T12890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.982761][T12890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 854.108656][ T6090] bridge_slave_1: left allmulticast mode [ 854.108685][ T6090] bridge_slave_1: left promiscuous mode [ 854.108888][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.309876][ T6090] bridge_slave_0: left allmulticast mode [ 854.309915][ T6090] bridge_slave_0: left promiscuous mode [ 854.365537][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.856997][ T5606] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 854.905350][ T5606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 854.921576][ T5606] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 854.944448][ T5606] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 854.945819][ T5606] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 856.162598][T13115] loop7: detected capacity change from 0 to 128 [ 856.273292][T13115] EXT4-fs (loop7): Test dummy encryption mode enabled [ 856.525858][T13115] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 856.526492][T13115] ext4 filesystem being mounted at /286/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 856.782097][ T6090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 857.187350][ T5608] Bluetooth: hci4: command tx timeout [ 857.553407][ T6090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 858.332617][ T6090] bond0 (unregistering): Released all slaves [ 858.514734][ T9015] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 858.559409][ T9015] Flush: task=syz-executor[9015] dev=loop7 state=2 [ 858.848680][ T9015] Teardown: task=syz-executor[9015] dev=loop7 state=2 [ 859.158618][T13133] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1485'. [ 859.248424][ T5608] Bluetooth: hci4: command tx timeout [ 859.704334][T13140] ubi0: attaching mtd0 [ 859.711534][T13140] ubi0: scanning is finished [ 859.711552][T13140] ubi0: empty MTD device detected [ 860.141014][T12890] hsr_slave_0: entered promiscuous mode [ 860.177721][T12890] hsr_slave_1: entered promiscuous mode [ 860.204226][T12890] debugfs: 'hsr0' already exists in 'hsr' [ 860.205718][T12890] Cannot create hsr debugfs directory [ 861.330344][ T5608] Bluetooth: hci4: command tx timeout [ 861.346583][T13140] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 862.928412][ T6090] hsr_slave_0: left promiscuous mode [ 862.968920][ T6090] hsr_slave_1: left promiscuous mode [ 862.969568][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 863.061382][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 863.419856][ T5608] Bluetooth: hci4: command tx timeout [ 864.206453][T13166] loop1: detected capacity change from 0 to 128 [ 864.437195][T13166] FAT-fs (loop1): data area starts beyond volume (36 > 6) [ 864.437225][T13166] FAT-fs (loop1): Can't find a valid FAT filesystem [ 864.437919][T13166] Flush: task=syz.1.1493[13166] dev=loop1 state=2 [ 864.498596][T13171] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1495'. [ 864.530731][T13166] Teardown: task=syz.1.1493[13166] dev=loop1 state=2 [ 870.959870][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.959968][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.994899][T13182] loop4: detected capacity change from 0 to 128 [ 871.003293][ T6090] team0 (unregistering): Port device team_slave_1 removed [ 871.164853][ T6090] team0 (unregistering): Port device team_slave_0 removed [ 871.177884][T13182] FAT-fs (loop4): data area starts beyond volume (36 > 6) [ 871.177912][T13182] FAT-fs (loop4): Can't find a valid FAT filesystem [ 871.230932][ T9707] Flush: task=udevd[9707] dev=loop4 state=2 [ 874.831248][ T9707] Teardown: task=udevd[9707] dev=loop4 state=2 [ 876.622113][T13205] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1504'. [ 880.129542][ T5261] 8021q: adding VLAN 0 to HW filter on device eth13 [ 880.895012][T13245] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1513'. [ 880.895043][T13245] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1513'. [ 886.194746][T13308] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1527'. [ 888.964545][T13104] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.966755][T13104] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.967069][T13104] bridge_slave_0: entered allmulticast mode [ 888.994192][T13104] bridge_slave_0: entered promiscuous mode [ 890.417057][T13354] netlink: 264 bytes leftover after parsing attributes in process `syz.7.1536'. [ 891.847612][T13104] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.847900][T13104] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.848379][T13104] bridge_slave_1: entered allmulticast mode [ 891.863701][T13104] bridge_slave_1: entered promiscuous mode [ 892.708330][ T5836] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 892.875549][T13104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.889047][ T5836] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 892.889084][ T5836] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 892.892919][ T5836] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 892.892948][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.892969][ T5836] usb 5-1: Product: syz [ 892.892983][ T5836] usb 5-1: Manufacturer: syz [ 892.892998][ T5836] usb 5-1: SerialNumber: syz [ 893.035620][T13104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.164926][T13383] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 893.164941][T13383] binder: 13382:13383 ioctl 4018620d 200000000100 returned -1 [ 893.424758][ T5836] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 893.424811][ T5836] usb 5-1: MIDIStreaming interface descriptor not found [ 893.589902][T13104] team0: Port device team_slave_0 added [ 893.612395][T13104] team0: Port device team_slave_1 added [ 893.727690][ T5836] usb 5-1: USB disconnect, device number 50 [ 894.053878][T13104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.053892][T13104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.053907][T13104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.133249][ T9944] udevd[9944]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 894.181499][T13104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.181512][T13104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.181528][T13104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.299715][ T6090] bridge_slave_1: left allmulticast mode [ 894.299754][ T6090] bridge_slave_1: left promiscuous mode [ 894.300040][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.474937][T13388] netlink: 264 bytes leftover after parsing attributes in process `syz.7.1545'. [ 894.576725][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 894.629936][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 894.675435][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 894.676576][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 894.677428][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 894.991636][ T6090] bridge_slave_0: left allmulticast mode [ 894.991687][ T6090] bridge_slave_0: left promiscuous mode [ 894.991971][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.848423][ T5606] Bluetooth: hci0: command tx timeout [ 897.131711][T13408] loop1: detected capacity change from 0 to 1024 [ 897.133149][T13408] EXT4-fs: Invalid want_extra_isize 7 [ 897.133627][T13408] Flush: task=syz.1.1551[13408] dev=loop1 state=2 [ 897.829865][T13408] Teardown: task=syz.1.1551[13408] dev=loop1 state=2 [ 898.657046][T13417] loop4: detected capacity change from 0 to 2048 [ 898.929783][ T5606] Bluetooth: hci0: command tx timeout [ 898.958423][T13417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 898.962058][T13417] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 898.995176][ T6090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.102368][T13423] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 899.102381][T13423] binder: 13420:13423 ioctl 4018620d 200000000100 returned -1 [ 899.119328][ T6090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.180464][ T6090] bond0 (unregistering): Released all slaves [ 899.427416][T13425] loop1: detected capacity change from 0 to 128 [ 899.501995][ T5603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.517522][T13425] FAT-fs (loop1): data area starts beyond volume (36 > 6) [ 899.517548][T13425] FAT-fs (loop1): Can't find a valid FAT filesystem [ 899.666163][ T9707] Flush: task=udevd[9707] dev=loop1 state=2 [ 899.676835][ T5603] Flush: task=syz-executor[5603] dev=loop4 state=2 [ 901.020808][ T5606] Bluetooth: hci0: command tx timeout [ 901.106346][ T9707] Teardown: task=udevd[9707] dev=loop1 state=2 [ 901.867476][ T5603] Teardown: task=syz-executor[5603] dev=loop4 state=2 [ 903.088469][ T5606] Bluetooth: hci0: command tx timeout [ 903.489895][T13432] loop4: detected capacity change from 0 to 2048 [ 903.606888][T13432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 903.609582][T13432] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 904.355106][ T5603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.514500][ T5603] Flush: task=syz-executor[5603] dev=loop4 state=2 [ 904.560696][T13449] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input23 [ 904.598523][ T5603] Teardown: task=syz-executor[5603] dev=loop4 state=2 [ 904.801054][T13104] hsr_slave_0: entered promiscuous mode [ 904.820435][T13104] hsr_slave_1: entered promiscuous mode [ 904.838439][T13104] debugfs: 'hsr0' already exists in 'hsr' [ 904.838472][T13104] Cannot create hsr debugfs directory [ 905.289110][T13457] loop1: detected capacity change from 0 to 512 [ 905.290366][T13457] EXT4-fs: Ignoring removed bh option [ 906.098581][T13457] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #11: comm syz.1.1562: corrupted in-inode xattr: bad e_name length [ 906.098963][T13457] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 906.111986][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 906.112035][ C1] EXT4-fs (loop1): initial error at time 1783063077: ext4_iget_extra_inode:5180: inode 11 [ 906.112107][ C1] EXT4-fs (loop1): last error at time 1783063077: ext4_iget_extra_inode:5180: inode 11 [ 906.248108][T13457] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1562: couldn't read orphan inode 11 (err -117) [ 906.248513][T13457] loop1: lost filesystem error report for type 5 error -117 [ 906.721754][T13457] EXT4-fs (loop1): 1 truncate cleaned up [ 906.759386][T13457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 908.210677][T13459] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 908.390607][ T6090] hsr_slave_0: left promiscuous mode [ 908.431381][ T6090] hsr_slave_1: left promiscuous mode [ 908.432454][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 908.516021][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 908.568913][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.679357][ T5602] Flush: task=syz-executor[5602] dev=loop1 state=2 [ 908.788822][ T5602] Teardown: task=syz-executor[5602] dev=loop1 state=2 [ 908.913415][T13475] loop1: detected capacity change from 0 to 128 [ 908.959674][T13475] FAT-fs (loop1): data area starts beyond volume (36 > 6) [ 908.959700][T13475] FAT-fs (loop1): Can't find a valid FAT filesystem [ 909.200286][ T9707] Flush: task=udevd[9707] dev=loop1 state=2 [ 912.468610][ T9707] Teardown: task=udevd[9707] dev=loop1 state=2 [ 912.674194][T13488] loop7: detected capacity change from 0 to 2048 [ 912.717855][T13488] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 912.720457][T13488] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 912.859164][T13492] netlink: 'syz.1.1566': attribute type 1 has an invalid length. [ 912.859199][T13492] netlink: 756 bytes leftover after parsing attributes in process `syz.1.1566'. [ 913.010376][ T6090] team0 (unregistering): Port device team_slave_1 removed [ 913.069416][ T6090] team0 (unregistering): Port device team_slave_0 removed [ 913.369888][ T5261] 8021q: adding VLAN 0 to HW filter on device eth13 [ 913.509024][ T9015] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.780337][ T9015] Flush: task=syz-executor[9015] dev=loop7 state=2 [ 913.935735][ T9015] Teardown: task=syz-executor[9015] dev=loop7 state=2 [ 914.495146][T13507] loop7: detected capacity change from 0 to 2048 [ 915.563231][T13507] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 915.701571][T13507] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 917.264986][ T5608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 917.305897][ T5608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 917.347946][ T5608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 917.388556][ T5608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 917.504260][ T5608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 917.968755][T13542] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input24 [ 918.196605][ T5261] 8021q: adding VLAN 0 to HW filter on device eth14 [ 918.294936][T13548] loop1: detected capacity change from 0 to 2048 [ 918.439839][T13548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 918.445184][T13548] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 919.106564][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.239085][ T5602] Flush: task=syz-executor[5602] dev=loop1 state=2 [ 919.318772][ T5602] Teardown: task=syz-executor[5602] dev=loop1 state=2 [ 919.649464][T13563] netlink: 'syz.4.1577': attribute type 1 has an invalid length. [ 919.649481][T13563] netlink: 756 bytes leftover after parsing attributes in process `syz.4.1577'. [ 919.822000][ T5608] Bluetooth: hci5: command tx timeout [ 919.882249][T13393] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.883330][T13393] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.883629][T13393] bridge_slave_0: entered allmulticast mode [ 919.893195][T13393] bridge_slave_0: entered promiscuous mode [ 920.019874][T13393] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.020171][T13393] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.020477][T13393] bridge_slave_1: entered allmulticast mode [ 920.024166][T13393] bridge_slave_1: entered promiscuous mode [ 921.654206][T13393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 921.693343][T13393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 921.894629][ T5608] Bluetooth: hci5: command tx timeout [ 921.964180][T13393] team0: Port device team_slave_0 added [ 922.002200][T13393] team0: Port device team_slave_1 added [ 922.137308][ T5261] 8021q: adding VLAN 0 to HW filter on device eth15 [ 922.462502][T13393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 922.462522][T13393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 922.462549][T13393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 922.478133][T13393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 922.478151][T13393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 922.478669][T13393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 922.944868][T13602] loop4: detected capacity change from 0 to 2048 [ 922.978815][T13602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 922.987881][T13602] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 923.237125][T13393] hsr_slave_0: entered promiscuous mode [ 923.259791][T13393] hsr_slave_1: entered promiscuous mode [ 923.274040][T13393] debugfs: 'hsr0' already exists in 'hsr' [ 923.274069][T13393] Cannot create hsr debugfs directory [ 923.832376][ T5603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.056079][ T5608] Bluetooth: hci5: command tx timeout [ 924.654928][ T5603] Flush: task=syz-executor[5603] dev=loop4 state=2 [ 924.741351][ T5603] Teardown: task=syz-executor[5603] dev=loop4 state=2 [ 924.897506][T13628] loop4: detected capacity change from 0 to 128 [ 924.955517][T13628] FAT-fs (loop4): data area starts beyond volume (36 > 6) [ 924.955546][T13628] FAT-fs (loop4): Can't find a valid FAT filesystem [ 924.956793][T13628] Flush: task=syz.4.1586[13628] dev=loop4 state=2 [ 925.019377][T13628] Teardown: task=syz.4.1586[13628] dev=loop4 state=2 [ 925.276711][ T5261] 8021q: adding VLAN 0 to HW filter on device eth16 [ 926.363280][ T5608] Bluetooth: hci5: command tx timeout [ 929.352445][ T9015] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.874455][ T5606] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 930.953297][ T5606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 930.972110][ T5606] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 931.025162][ T5606] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 931.040266][ T5606] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 931.822070][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.822175][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.108405][ T5947] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 932.392993][ T5947] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 932.393034][ T5947] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 932.425184][ T5947] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 932.425220][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.425240][ T5947] usb 5-1: Product: syz [ 932.425255][ T5947] usb 5-1: Manufacturer: syz [ 932.425269][ T5947] usb 5-1: SerialNumber: syz [ 933.455799][ T5608] Bluetooth: hci4: command tx timeout [ 933.567775][ T5947] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 933.567874][ T5947] usb 5-1: MIDIStreaming interface descriptor not found [ 933.695562][ T5947] usb 5-1: USB disconnect, device number 51 [ 934.064682][ T9944] udevd[9944]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 934.377759][ T6090] bridge_slave_1: left allmulticast mode [ 934.377789][ T6090] bridge_slave_1: left promiscuous mode [ 934.378000][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.611223][ T6090] bridge_slave_0: left allmulticast mode [ 934.611263][ T6090] bridge_slave_0: left promiscuous mode [ 934.611554][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.694055][T13697] loop1: detected capacity change from 0 to 1024 [ 934.720083][T13697] EXT4-fs: Invalid want_extra_isize 7 [ 934.720521][T13697] Flush: task=syz.1.1599[13697] dev=loop1 state=2 [ 934.918621][T13697] Teardown: task=syz.1.1599[13697] dev=loop1 state=2 [ 935.792508][ T5608] Bluetooth: hci4: command tx timeout [ 936.131637][ T6090] bridge_slave_1: left allmulticast mode [ 936.131675][ T6090] bridge_slave_1: left promiscuous mode [ 936.131961][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.050003][ T6090] bridge_slave_0: left allmulticast mode [ 937.050042][ T6090] bridge_slave_0: left promiscuous mode [ 937.050324][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.384615][T13718] loop1: detected capacity change from 0 to 2048 [ 937.550622][T13718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 937.556171][T13718] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 937.699218][ T6090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.779135][ T6090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.808361][ T5608] Bluetooth: hci4: command tx timeout [ 937.849021][ T6090] bond0 (unregistering): Released all slaves [ 938.056986][T13725] loop4: detected capacity change from 0 to 1024 [ 938.067689][T13725] EXT4-fs: Invalid want_extra_isize 7 [ 938.931712][ T9707] Flush: task=udevd[9707] dev=loop4 state=2 [ 939.148347][ T9707] Teardown: task=udevd[9707] dev=loop4 state=2 [ 939.329470][ T6090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 939.411358][ T6090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 939.473547][ T6090] bond0 (unregistering): Released all slaves [ 939.903290][ T5608] Bluetooth: hci4: command tx timeout [ 942.574665][ T5261] 8021q: adding VLAN 0 to HW filter on device eth17 [ 942.593472][T13534] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.593763][T13534] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.594043][T13534] bridge_slave_0: entered allmulticast mode [ 942.597363][T13534] bridge_slave_0: entered promiscuous mode [ 942.609671][T13534] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.609905][T13534] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.610150][T13534] bridge_slave_1: entered allmulticast mode [ 942.614621][T13534] bridge_slave_1: entered promiscuous mode [ 943.767239][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.079752][T13534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.102010][T13534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.201399][ T5602] Flush: task=syz-executor[5602] dev=loop1 state=2 [ 944.270203][ T5602] Teardown: task=syz-executor[5602] dev=loop1 state=2 [ 945.933027][T13758] loop4: detected capacity change from 0 to 1024 [ 945.951501][T13758] EXT4-fs: Invalid want_extra_isize 7 [ 945.951976][T13758] Flush: task=syz.4.1615[13758] dev=loop4 state=2 [ 946.146934][T13534] team0: Port device team_slave_0 added [ 946.981023][T13758] Teardown: task=syz.4.1615[13758] dev=loop4 state=2 [ 946.997854][T13534] team0: Port device team_slave_1 added [ 948.249228][ T6090] hsr_slave_0: left promiscuous mode [ 948.288288][ T6090] hsr_slave_1: left promiscuous mode [ 948.289272][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 948.909851][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 949.438343][ T6090] hsr_slave_0: left promiscuous mode [ 950.218352][ T6090] hsr_slave_1: left promiscuous mode [ 950.220188][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 950.262064][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 950.477579][T13785] loop4: detected capacity change from 0 to 2048 [ 950.534620][T13785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 950.537467][T13785] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 950.758947][ T6090] team0 (unregistering): Port device team_slave_1 removed [ 950.815544][ T6090] team0 (unregistering): Port device team_slave_0 removed [ 951.179123][ T6090] team0 (unregistering): Port device team_slave_1 removed [ 951.219609][ T6090] team0 (unregistering): Port device team_slave_0 removed [ 951.374176][ T5603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.474022][ T5603] Flush: task=syz-executor[5603] dev=loop4 state=2 [ 951.727072][ T5603] Teardown: task=syz-executor[5603] dev=loop4 state=2 [ 952.299277][ T1244] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 952.513168][ T1244] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 952.513209][ T1244] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 952.517508][ T1244] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 952.517545][ T1244] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.517569][ T1244] usb 5-1: Product: syz [ 952.517584][ T1244] usb 5-1: Manufacturer: syz [ 952.517609][ T1244] usb 5-1: SerialNumber: syz [ 953.148878][ T1244] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 953.148939][ T1244] usb 5-1: MIDIStreaming interface descriptor not found [ 953.296055][ T1244] usb 5-1: USB disconnect, device number 52 [ 953.767087][ T9944] udevd[9944]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 954.146852][T13534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 954.146871][T13534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.146899][T13534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 954.365452][T13534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 954.365471][T13534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.365497][T13534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.717616][T13534] hsr_slave_0: entered promiscuous mode [ 954.719915][T13534] hsr_slave_1: entered promiscuous mode [ 954.721829][T13534] debugfs: 'hsr0' already exists in 'hsr' [ 954.721858][T13534] Cannot create hsr debugfs directory [ 956.709936][T13642] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.711928][T13642] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.712250][T13642] bridge_slave_0: entered allmulticast mode [ 956.745844][T13642] bridge_slave_0: entered promiscuous mode [ 956.764023][T13642] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.764482][T13642] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.767023][T13642] bridge_slave_1: entered allmulticast mode [ 956.805375][T13642] bridge_slave_1: entered promiscuous mode [ 957.129081][T13642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.188368][T13642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.267599][ T5606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 957.281529][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 957.286170][ T5606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 957.289147][ T5606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 957.295121][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 958.037915][T13837] loop1: detected capacity change from 0 to 2048 [ 958.192814][T13837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 958.195920][T13837] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 958.305398][T13642] team0: Port device team_slave_0 added [ 959.373181][ T5608] Bluetooth: hci2: command tx timeout [ 959.450936][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.708580][ T5602] Flush: task=syz-executor[5602] dev=loop1 state=2 [ 959.766259][T13642] team0: Port device team_slave_1 added [ 959.816576][T13856] loop4: detected capacity change from 0 to 512 [ 959.831891][T13856] EXT4-fs (loop4): Test dummy encryption mode enabled [ 959.831917][T13856] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 959.957356][ T5602] Teardown: task=syz-executor[5602] dev=loop1 state=2 [ 959.963735][T13856] EXT4-fs (loop4): 1 truncate cleaned up [ 959.980104][T13856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 961.124208][ T5836] IPVS: starting estimator thread 0... [ 961.378480][T13866] IPVS: using max 7 ests per chain, 16800 per kthread [ 961.488351][ T5608] Bluetooth: hci2: command tx timeout [ 961.940358][T13875] loop1: detected capacity change from 0 to 128 [ 961.953496][T13875] FAT-fs (loop1): data area starts beyond volume (36 > 6) [ 961.953521][T13875] FAT-fs (loop1): Can't find a valid FAT filesystem [ 961.991259][ T9707] Flush: task=udevd[9707] dev=loop1 state=2 [ 963.641760][ T5608] Bluetooth: hci2: command tx timeout [ 965.011707][ T9707] Teardown: task=udevd[9707] dev=loop1 state=2 [ 965.158999][ T5603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 965.281132][ T5603] Flush: task=syz-executor[5603] dev=loop4 state=2 [ 965.380726][T13642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.380745][T13642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.380770][T13642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.426257][T13642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 965.426276][T13642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.426305][T13642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.478036][ T5603] Teardown: task=syz-executor[5603] dev=loop4 state=2 [ 965.648340][ T5608] Bluetooth: hci2: command tx timeout [ 965.853822][T13642] hsr_slave_0: entered promiscuous mode [ 965.901303][T13642] hsr_slave_1: entered promiscuous mode [ 966.525637][T13642] debugfs: 'hsr0' already exists in 'hsr' [ 966.525673][T13642] Cannot create hsr debugfs directory [ 969.396957][T13957] loop4: detected capacity change from 0 to 128 [ 969.501232][T13957] FAT-fs (loop4): data area starts beyond volume (36 > 6) [ 969.501261][T13957] FAT-fs (loop4): Can't find a valid FAT filesystem [ 969.504412][ T9707] Flush: task=udevd[9707] dev=loop4 state=2 [ 969.737210][T13430] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 970.433207][T13430] usb 2-1: Using ep0 maxpacket: 8 [ 970.868795][T13430] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 970.868834][T13430] usb 2-1: can't read configurations, error -61 [ 971.179854][T13430] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 971.736706][T13430] usb 2-1: Using ep0 maxpacket: 8 [ 972.152013][T13430] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 972.152144][T13430] usb 2-1: can't read configurations, error -61 [ 972.361911][T13430] usb usb2-port1: attempt power cycle [ 972.476605][ T9707] Teardown: task=udevd[9707] dev=loop4 state=2 [ 973.248398][T13430] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 973.269562][T13430] usb 2-1: Using ep0 maxpacket: 8 [ 973.272519][T13430] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 973.272557][T13430] usb 2-1: can't read configurations, error -61 [ 973.343860][ T6090] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.398423][T13430] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 973.419109][T13430] usb 2-1: Using ep0 maxpacket: 8 [ 973.421741][T13430] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 973.421777][T13430] usb 2-1: can't read configurations, error -61 [ 973.422520][T13430] usb usb2-port1: unable to enumerate USB device [ 973.810267][ T6090] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.807596][T14019] loop1: detected capacity change from 0 to 1024 [ 975.815640][T14019] EXT4-fs: Invalid want_extra_isize 7 [ 975.816074][T14019] Flush: task=syz.1.1647[14019] dev=loop1 state=2 [ 976.122086][ T6090] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.191650][T14019] Teardown: task=syz.1.1647[14019] dev=loop1 state=2 [ 977.163823][T13534] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 977.285519][T13534] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 977.726426][ T6090] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.555153][T13819] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.555440][T13819] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.555717][T13819] bridge_slave_0: entered allmulticast mode [ 978.561513][T13819] bridge_slave_0: entered promiscuous mode [ 978.576565][T13819] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.576860][T13819] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.577119][T13819] bridge_slave_1: entered allmulticast mode [ 978.590052][T13819] bridge_slave_1: entered promiscuous mode [ 978.816946][T14071] loop1: detected capacity change from 0 to 2048 [ 978.895848][T14071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 978.899557][T14071] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 978.990629][T13430] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 979.150087][T13430] usb 5-1: Using ep0 maxpacket: 8 [ 979.170817][T13430] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 979.170866][T13430] usb 5-1: can't read configurations, error -61 [ 979.279597][T13819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.298905][T13430] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 979.327939][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 979.384427][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 979.386970][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 979.410406][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 979.411073][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 979.436823][T13819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 979.490185][T13430] usb 5-1: Using ep0 maxpacket: 8 [ 979.553010][T13430] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 979.553050][T13430] usb 5-1: can't read configurations, error -61 [ 979.553415][T13430] usb usb5-port1: attempt power cycle [ 979.667850][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 979.890030][T13430] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 979.908984][T13430] usb 5-1: Using ep0 maxpacket: 8 [ 979.911745][T13430] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 979.911784][T13430] usb 5-1: can't read configurations, error -61 [ 979.919696][ T5602] Flush: task=syz-executor[5602] dev=loop1 state=2 [ 980.038470][T13430] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 980.051748][ T5602] Teardown: task=syz-executor[5602] dev=loop1 state=2 [ 980.060166][T13430] usb 5-1: Using ep0 maxpacket: 8 [ 980.063861][T13430] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 980.063901][T13430] usb 5-1: can't read configurations, error -61 [ 980.064273][T13430] usb usb5-port1: unable to enumerate USB device [ 980.207636][T13819] team0: Port device team_slave_0 added [ 980.236209][T13819] team0: Port device team_slave_1 added [ 980.433202][T13642] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 980.612165][T13642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 981.386118][T13642] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 981.427000][T13642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 981.491318][ T5606] Bluetooth: hci0: command tx timeout [ 981.600453][T14109] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1655'. [ 982.388463][T13819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 982.388484][T13819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 982.388511][T13819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 982.506931][T13642] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 982.728022][T13642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 982.758325][T13819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 982.758366][T13819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 982.758398][T13819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 982.761493][T13642] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 982.843684][T13642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 983.264114][T13430] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 983.861990][ T5606] Bluetooth: hci0: command tx timeout [ 983.862217][ T6090] bridge_slave_1: left allmulticast mode [ 983.862249][ T6090] bridge_slave_1: left promiscuous mode [ 983.862538][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.011086][T13430] usb 2-1: config 128 has an invalid interface number: 148 but max is 0 [ 984.011120][T13430] usb 2-1: config 128 has no interface number 0 [ 984.011167][T13430] usb 2-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 984.011191][T13430] usb 2-1: config 128 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 984.011220][T13430] usb 2-1: config 128 interface 148 has no altsetting 0 [ 984.015798][T13430] usb 2-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 984.015832][T13430] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.015853][T13430] usb 2-1: Product: syz [ 984.015877][T13430] usb 2-1: Manufacturer: syz [ 984.015894][T13430] usb 2-1: SerialNumber: syz [ 984.139742][ T6090] bridge_slave_0: left allmulticast mode [ 984.139770][ T6090] bridge_slave_0: left promiscuous mode [ 984.140102][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.174460][T14129] loop4: detected capacity change from 0 to 2048 [ 984.214702][T14129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 984.243041][T14129] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 984.347333][T13430] usb 2-1: USB disconnect, device number 58 [ 984.429882][ T6090] bridge_slave_1: left allmulticast mode [ 984.429911][ T6090] bridge_slave_1: left promiscuous mode [ 984.430170][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.530174][ T6090] bridge_slave_0: left allmulticast mode [ 984.530204][ T6090] bridge_slave_0: left promiscuous mode [ 984.530433][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.798563][ T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 984.958519][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 984.960743][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 984.960821][ T10] usb 2-1: config 16 has an invalid interface number: 148 but max is 0 [ 984.960834][ T10] usb 2-1: config 16 has no interface number 0 [ 984.960861][ T10] usb 2-1: config 16 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 984.960875][ T10] usb 2-1: config 16 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 984.960891][ T10] usb 2-1: config 16 interface 148 has no altsetting 0 [ 984.960912][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 984.960925][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.067314][ T5603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.163443][ T5603] Flush: task=syz-executor[5603] dev=loop4 state=2 [ 985.180802][ T6090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 985.226525][ T10] usb 2-1: string descriptor 0 read error: -71 [ 985.241029][ T10] usb 2-1: USB disconnect, device number 59 [ 985.302036][ T5603] Teardown: task=syz-executor[5603] dev=loop4 state=2 [ 985.339710][ T6090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 985.432365][ T6090] bond0 (unregistering): Released all slaves [ 985.888995][ T5606] Bluetooth: hci0: command tx timeout [ 986.440825][ T6090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 986.482329][ T6090] bond_slave_0: left allmulticast mode [ 986.520131][ T6090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 986.559289][ T6090] bond_slave_1: left allmulticast mode [ 986.561751][ T6090] bond0 (unregistering): Released all slaves [ 986.790287][T13430] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 987.007855][T13819] hsr_slave_0: entered promiscuous mode [ 987.019168][T13430] usb 2-1: Using ep0 maxpacket: 8 [ 987.021077][T13430] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 987.021103][T13430] usb 2-1: config 0 has no interfaces? [ 987.021132][T13430] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 987.021156][T13430] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.035959][T13819] hsr_slave_1: entered promiscuous mode [ 987.229445][T13819] debugfs: 'hsr0' already exists in 'hsr' [ 987.229477][T13819] Cannot create hsr debugfs directory [ 987.248642][T13430] usb 2-1: config 0 descriptor?? [ 987.635471][T14145] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1665'. [ 987.968953][ T5606] Bluetooth: hci0: command tx timeout [ 988.137829][T13430] usb 2-1: USB disconnect, device number 60 [ 988.808437][T14155] loop4: detected capacity change from 0 to 2048 [ 988.840448][T14155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 988.842983][T14155] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 988.881300][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 989.026162][ T5603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.127140][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 989.168761][ T9] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 989.168797][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.168865][ T9] usb 2-1: Product: syz [ 989.168881][ T9] usb 2-1: Manufacturer: syz [ 989.168897][ T9] usb 2-1: SerialNumber: syz [ 989.225140][ T5603] Flush: task=syz-executor[5603] dev=loop4 state=2 [ 989.279897][ T9] usb 2-1: config 0 descriptor?? [ 989.371056][ T5603] Teardown: task=syz-executor[5603] dev=loop4 state=2 [ 989.721277][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 989.726290][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 989.728777][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 989.728833][ T9] usb 2-1: media controller created [ 989.768751][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 989.808412][ T5831] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 989.970548][ T5831] usb 5-1: config 128 has an invalid interface number: 148 but max is 0 [ 989.970580][ T5831] usb 5-1: config 128 has no interface number 0 [ 989.970626][ T5831] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 989.970650][ T5831] usb 5-1: config 128 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 989.970679][ T5831] usb 5-1: config 128 interface 148 has no altsetting 0 [ 990.030403][ T5831] usb 5-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 990.030437][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.030458][ T5831] usb 5-1: Product: syz [ 990.030474][ T5831] usb 5-1: Manufacturer: syz [ 990.030490][ T5831] usb 5-1: SerialNumber: syz [ 990.176579][ T5261] 8021q: adding VLAN 0 to HW filter on device eth13 [ 990.344290][ T5831] usb 5-1: USB disconnect, device number 57 [ 990.344765][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 990.344827][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 990.344855][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 990.413516][ T5608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 990.492862][ T5608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 990.502928][ T5608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 990.508835][ T5608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 990.511097][ T5608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 990.880604][ T5831] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 990.976130][ T5947] usb 2-1: USB disconnect, device number 61 [ 991.028392][ T5831] usb 5-1: Using ep0 maxpacket: 8 [ 991.030956][ T5831] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 991.030985][ T5831] usb 5-1: config 16 has an invalid interface number: 148 but max is 0 [ 991.031009][ T5831] usb 5-1: config 16 has no interface number 0 [ 991.031059][ T5831] usb 5-1: config 16 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 991.031084][ T5831] usb 5-1: config 16 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 991.031117][ T5831] usb 5-1: config 16 interface 148 has no altsetting 0 [ 991.031150][ T5831] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 991.031175][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.212360][ T5947] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 991.370282][ T5831] usb 5-1: string descriptor 0 read error: -71 [ 991.402131][ T5831] usb 5-1: USB disconnect, device number 58 [ 992.626864][T14192] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1671'. [ 992.626893][T14192] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1671'. [ 992.705301][ T5606] Bluetooth: hci5: command tx timeout [ 993.527027][T14201] loop4: detected capacity change from 0 to 512 [ 993.532332][T14201] EXT4-fs: Ignoring removed bh option [ 993.903612][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.904095][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.266739][ T5606] Bluetooth: hci5: command tx timeout [ 995.922539][T14201] EXT4-fs: error -4 creating inode table initialization thread [ 995.924189][T14201] EXT4-fs (loop4): mount failed [ 996.700031][T14209] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1674'. [ 997.102654][ T9707] Flush: task=udevd[9707] dev=loop4 state=2 [ 997.330838][ T5606] Bluetooth: hci5: command tx timeout [ 997.448032][T14217] loop1: detected capacity change from 0 to 2048 [ 997.568652][ T9707] Teardown: task=udevd[9707] dev=loop4 state=2 [ 997.571077][T14217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 997.573853][T14217] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 997.700121][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 997.898618][T14226] loop4: detected capacity change from 0 to 1024 [ 997.911735][T14226] EXT4-fs: Invalid want_extra_isize 7 [ 997.912223][T14226] Flush: task=syz.4.1679[14226] dev=loop4 state=2 [ 997.934960][ T5602] Flush: task=syz-executor[5602] dev=loop1 state=2 [ 997.990743][T14226] Teardown: task=syz.4.1679[14226] dev=loop4 state=2 [ 998.010979][ T5602] Teardown: task=syz-executor[5602] dev=loop1 state=2 [ 999.123323][T14244] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1680'. [ 999.123353][T14244] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1680'. [ 999.175652][ T5261] 8021q: adding VLAN 0 to HW filter on device eth14 [ 999.412962][ T5606] Bluetooth: hci5: command tx timeout [ 999.947418][ T5947] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1000.252677][ T5947] usb 2-1: config 128 has an invalid interface number: 148 but max is 0 [ 1000.252718][ T5947] usb 2-1: config 128 has no interface number 0 [ 1000.252761][ T5947] usb 2-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1000.252783][ T5947] usb 2-1: config 128 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1000.252811][ T5947] usb 2-1: config 128 interface 148 has no altsetting 0 [ 1000.261570][ T5947] usb 2-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 1000.261605][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.261627][ T5947] usb 2-1: Product: syz [ 1000.261642][ T5947] usb 2-1: Manufacturer: syz [ 1000.261658][ T5947] usb 2-1: SerialNumber: syz [ 1000.671729][ T5947] usb 2-1: USB disconnect, device number 62 [ 1001.190120][ T5947] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1001.214899][ T5261] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1001.297316][T13819] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1001.406102][T13819] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1001.415803][ T5947] usb 2-1: Using ep0 maxpacket: 8 [ 1001.421435][ T5947] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1001.421467][ T5947] usb 2-1: config 16 has an invalid interface number: 148 but max is 0 [ 1001.421487][ T5947] usb 2-1: config 16 has no interface number 0 [ 1001.421533][ T5947] usb 2-1: config 16 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1001.421572][ T5947] usb 2-1: config 16 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1001.421601][ T5947] usb 2-1: config 16 interface 148 has no altsetting 0 [ 1001.421636][ T5947] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1001.421661][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.469694][T14273] loop4: detected capacity change from 0 to 2048 [ 1001.569142][T14273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1001.571814][T14273] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1001.718955][ T5603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1001.732696][ T5947] usb 2-1: string descriptor 0 read error: -71 [ 1001.875278][ T5603] Flush: task=syz-executor[5603] dev=loop4 state=2 [ 1001.878140][ T5947] usb 2-1: USB disconnect, device number 63 [ 1001.938688][ T6090] hsr_slave_0: left promiscuous mode [ 1001.969849][ T5603] Teardown: task=syz-executor[5603] dev=loop4 state=2 [ 1001.978458][ T6090] hsr_slave_1: left promiscuous mode [ 1001.980307][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.019316][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.138405][ T6090] hsr_slave_0: left promiscuous mode [ 1002.178432][ T6090] hsr_slave_1: left promiscuous mode [ 1002.179311][ T6090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1002.179330][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.199815][ T6090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1002.199846][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.291590][ T6090] veth0_macvtap: left promiscuous mode [ 1002.291801][ T6090] veth1_vlan: left promiscuous mode [ 1002.293714][ T6090] veth0_vlan: left promiscuous mode [ 1002.599073][T14282] loop1: detected capacity change from 0 to 1024 [ 1002.603046][T14282] EXT4-fs: Invalid want_extra_isize 7 [ 1002.712683][ T9707] Flush: task=udevd[9707] dev=loop1 state=2 [ 1003.098508][ T9707] Teardown: task=udevd[9707] dev=loop1 state=2 [ 1003.522602][T14286] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1688'. [ 1003.522633][T14286] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1688'. [ 1004.309579][ T6090] team0 (unregistering): Port device team_slave_1 removed [ 1004.371125][ T6090] team0 (unregistering): Port device team_slave_0 removed [ 1004.963845][T14299] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input25 [ 1005.216354][ T6090] team0 (unregistering): Port device team_slave_1 removed [ 1005.249173][ T6090] team0 (unregistering): Port device team_slave_0 removed [ 1005.351050][ T9] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1005.501163][T14302] bridge0: port 3(netdevsim1) entered blocking state [ 1005.501415][T14302] bridge0: port 3(netdevsim1) entered disabled state [ 1005.501656][T14302] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 1005.506414][T14302] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 1005.524830][ T9] usb 2-1: config 128 has an invalid interface number: 148 but max is 0 [ 1005.524862][ T9] usb 2-1: config 128 has no interface number 0 [ 1005.524922][ T9] usb 2-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1005.524946][ T9] usb 2-1: config 128 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1005.524975][ T9] usb 2-1: config 128 interface 148 has no altsetting 0 [ 1005.527660][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 1005.527693][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.527714][ T9] usb 2-1: Product: syz [ 1005.527729][ T9] usb 2-1: Manufacturer: syz [ 1005.527743][ T9] usb 2-1: SerialNumber: syz [ 1005.549752][T13819] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1005.747544][T13819] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1005.952845][ T9] usb 2-1: USB disconnect, device number 64 [ 1007.433108][T13819] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1007.642738][ T9] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1007.656394][T13819] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1007.766781][T13819] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1007.819436][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1007.828409][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1007.828452][ T9] usb 2-1: config 16 has an invalid interface number: 148 but max is 0 [ 1007.828474][ T9] usb 2-1: config 16 has no interface number 0 [ 1007.828673][ T9] usb 2-1: config 16 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1007.828700][ T9] usb 2-1: config 16 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1007.828762][ T9] usb 2-1: config 16 interface 148 has no altsetting 0 [ 1007.828829][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1007.828909][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.864840][T13819] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1008.904791][ T9] usb 2-1: string descriptor 0 read error: -71 [ 1009.003572][ T9] usb 2-1: USB disconnect, device number 65 [ 1009.230603][T14319] loop4: detected capacity change from 0 to 1024 [ 1009.234479][T14319] EXT4-fs: Invalid want_extra_isize 7 [ 1009.427277][T14081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.427672][T14081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.427986][T14081] bridge_slave_0: entered allmulticast mode [ 1009.440981][T14081] bridge_slave_0: entered promiscuous mode [ 1009.463437][ T9707] Flush: task=udevd[9707] dev=loop4 state=2 [ 1009.529636][T14323] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1697'. [ 1009.529663][T14323] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1697'. [ 1009.847671][T14081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.979595][T14081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.192512][T14081] bridge_slave_1: entered allmulticast mode [ 1010.196351][T14081] bridge_slave_1: entered promiscuous mode [ 1010.383725][ T9707] Teardown: task=udevd[9707] dev=loop4 state=2 [ 1010.538762][T14081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1010.661343][T14081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1011.062046][T14340] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1699'. [ 1011.684710][T14081] team0: Port device team_slave_0 added [ 1011.747531][T14081] team0: Port device team_slave_1 added [ 1011.997769][T14081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1011.997787][T14081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1011.997815][T14081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.021906][T14081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1012.021926][T14081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1012.021953][T14081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1012.224326][ T5261] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1012.490809][T14081] hsr_slave_0: entered promiscuous mode [ 1012.494555][T14081] hsr_slave_1: entered promiscuous mode [ 1012.909267][T14370] loop4: detected capacity change from 0 to 1024 [ 1012.912657][T14370] EXT4-fs: Invalid want_extra_isize 7 [ 1012.975855][ T9707] Flush: task=udevd[9707] dev=loop4 state=2 [ 1013.183871][T14178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.213200][T14178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.215973][T14178] bridge_slave_0: entered allmulticast mode [ 1013.941116][T14178] bridge_slave_0: entered promiscuous mode [ 1013.962633][ T9707] Teardown: task=udevd[9707] dev=loop4 state=2 [ 1015.455868][T14178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.456668][T14178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.517228][T14178] bridge_slave_1: entered allmulticast mode [ 1015.613709][T14178] bridge_slave_1: entered promiscuous mode [ 1017.269496][T14382] loop4: detected capacity change from 0 to 512 [ 1017.270962][T14382] EXT4-fs: Ignoring removed bh option [ 1019.701266][T14382] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #11: comm syz.4.1705: corrupted in-inode xattr: bad e_name length [ 1019.701291][T14382] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1019.766246][T14382] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1705: couldn't read orphan inode 11 (err -117) [ 1019.766284][T14382] loop4: lost filesystem error report for type 5 error -117 [ 1019.777104][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 1019.777126][ C1] EXT4-fs (loop4): initial error at time 1783063190: ext4_iget_extra_inode:5180: inode 11 [ 1019.777147][ C1] EXT4-fs (loop4): last error at time 1783063190: ext4_orphan_get:1404 [ 1019.802579][T14382] EXT4-fs (loop4): 1 truncate cleaned up [ 1019.806323][T14382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1020.147145][T14387] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1706'. [ 1020.147172][T14387] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1706'. [ 1020.213596][ T5603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1020.255602][T14178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.276142][T14178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1020.567829][ T9707] Flush: task=udevd[9707] dev=loop4 state=2 [ 1020.699240][ T9707] Teardown: task=udevd[9707] dev=loop4 state=2 [ 1020.785657][ T5608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1020.848778][ T5608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1020.871002][ T5608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1020.873719][ T5608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1020.874449][ T5608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1020.925090][T14178] team0: Port device team_slave_0 added [ 1021.009685][T14178] team0: Port device team_slave_1 added [ 1021.525201][T14411] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1709'. [ 1022.270548][T14417] loop4: detected capacity change from 0 to 1024 [ 1022.276922][T14417] EXT4-fs: Invalid want_extra_isize 7 [ 1023.234896][ T5608] Bluetooth: hci4: command tx timeout [ 1023.254033][ T9707] Flush: task=udevd[9707] dev=loop4 state=2 [ 1023.339423][ T9707] Teardown: task=udevd[9707] dev=loop4 state=2 [ 1023.687234][T14178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1023.687253][T14178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1023.687278][T14178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1023.763957][T14178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1023.763977][T14178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1023.764005][T14178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1025.338679][ T5608] Bluetooth: hci4: command tx timeout [ 1027.203720][T14439] loop4: detected capacity change from 0 to 128 [ 1027.418546][ T5608] Bluetooth: hci4: command tx timeout [ 1027.525390][T14443] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1715'. [ 1027.525422][T14443] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1715'. [ 1027.835444][T14439] FAT-fs (loop4): data area starts beyond volume (36 > 6) [ 1027.835476][T14439] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1028.173669][ T9707] Flush: task=udevd[9707] dev=loop4 state=2 [ 1030.068027][ T9707] Teardown: task=udevd[9707] dev=loop4 state=2 [ 1030.421830][ T5608] Bluetooth: hci4: command tx timeout [ 1030.766718][T14474] loop4: detected capacity change from 0 to 1024 [ 1030.822431][T14474] EXT4-fs: Invalid want_extra_isize 7 [ 1030.822855][T14474] Flush: task=syz.4.1720[14474] dev=loop4 state=2 [ 1030.963967][T14474] Teardown: task=syz.4.1720[14474] dev=loop4 state=2 [ 1031.742024][T14178] hsr_slave_0: entered promiscuous mode [ 1031.754179][T14178] hsr_slave_1: entered promiscuous mode [ 1031.765915][T14178] debugfs: 'hsr0' already exists in 'hsr' [ 1031.765952][T14178] Cannot create hsr debugfs directory [ 1033.524561][T14491] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1723'. [ 1033.524592][T14491] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1723'. [ 1034.246985][T14501] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1724'. [ 1036.176303][T14515] loop4: detected capacity change from 0 to 1024 [ 1036.226595][T14515] EXT4-fs: Invalid want_extra_isize 7 [ 1036.324326][ T9707] Flush: task=udevd[9707] dev=loop4 state=2 [ 1037.217382][ T9707] Teardown: task=udevd[9707] dev=loop4 state=2 [ 1038.278960][T14530] ubi0: attaching mtd0 [ 1038.281032][T14530] ubi0: scanning is finished [ 1038.541865][T14535] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1732'. [ 1038.541886][T14535] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1732'. [ 1038.603561][T14530] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1038.603592][T14530] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1038.603608][T14530] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1038.603623][T14530] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1038.603658][T14530] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1038.603674][T14530] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1038.603689][T14530] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2080682385 [ 1038.603708][T14530] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1038.736502][T14537] ubi0: background thread "ubi_bgt0d" started, PID 14537 [ 1039.004745][ T38] audit: type=1326 audit(1783063209.908:27): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14538 comm="syz.1.1733" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66fb73de59 code=0x0 [ 1039.902626][T14399] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.903033][T14399] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.903317][T14399] bridge_slave_0: entered allmulticast mode [ 1039.906232][T14399] bridge_slave_0: entered promiscuous mode [ 1039.929498][T14399] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.929864][T14399] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.930162][T14399] bridge_slave_1: entered allmulticast mode [ 1039.933572][T14399] bridge_slave_1: entered promiscuous mode [ 1040.015477][T14399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1040.051883][T14399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.165108][T14399] team0: Port device team_slave_0 added [ 1040.184494][T14399] team0: Port device team_slave_1 added [ 1041.846780][ T5606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1041.859548][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1041.864376][ T5606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1041.871023][ T5606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1041.871910][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1042.708078][T14567] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1736'. [ 1043.580327][T14399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1043.580348][T14399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1043.580371][T14399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1044.419766][T14399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1044.419787][T14399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1044.419814][T14399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1044.655467][T14589] loop1: detected capacity change from 0 to 1024 [ 1044.656740][T14589] EXT4-fs: Invalid want_extra_isize 7 [ 1044.892893][ T9707] Flush: task=udevd[9707] dev=loop1 state=2 [ 1045.335678][ T5608] Bluetooth: hci2: command tx timeout [ 1045.938363][ T9707] Teardown: task=udevd[9707] dev=loop1 state=2 [ 1046.122923][ T38] audit: type=1326 audit(1783063217.008:28): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14593 comm="syz.4.1742" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f36ffa0de59 code=0x0 [ 1047.656433][T14612] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input26 [ 1047.928657][ T5608] Bluetooth: hci2: command tx timeout [ 1048.119990][T14609] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1746'. [ 1048.610002][ C0] [ 1048.610020][ C0] ====================================================== [ 1048.610029][ C0] WARNING: possible circular locking dependency detected [ 1048.610044][ C0] syzkaller #0 Not tainted [ 1048.610055][ C0] ------------------------------------------------------ [ 1048.610064][ C0] syz.1.1745/14612 is trying to acquire lock: [ 1048.610077][ C0] ffff8880b86241a8 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: tasklet_action_common+0xc5/0x600 [ 1048.610132][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1048.610132][ C0] but task is already holding lock: [ 1048.610139][ C0] ffff888035e9e270 (&dev->event_lock#2){+.+.}-{3:3}, at: input_inject_event+0xab/0x310 [ 1048.610197][ C0] [ 1048.610197][ C0] which lock already depends on the new lock. [ 1048.610197][ C0] [ 1048.610205][ C0] [ 1048.610205][ C0] the existing dependency chain (in reverse order) is: [ 1048.610213][ C0] [ 1048.610213][ C0] -> #1 (&dev->event_lock#2){+.+.}-{3:3}: [ 1048.610245][ C0] rt_spin_lock+0x83/0x400 [ 1048.610343][ C0] input_inject_event+0xab/0x310 [ 1048.610361][ C0] led_trigger_event+0x13b/0x220 [ 1048.610504][ C0] kbd_bh+0x1b4/0x2c0 [ 1048.610552][ C0] tasklet_action_common+0x31c/0x600 [ 1048.610576][ C0] handle_softirqs+0x1d9/0x6c0 [ 1048.610598][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 1048.610616][ C0] rcu_cpu_kthread+0xf96/0x1480 [ 1048.610696][ C0] smpboot_thread_fn+0x57c/0xa80 [ 1048.610759][ C0] kthread+0x388/0x470 [ 1048.610775][ C0] ret_from_fork+0x514/0xb70 [ 1048.610792][ C0] ret_from_fork_asm+0x1a/0x30 [ 1048.610819][ C0] [ 1048.610819][ C0] -> #0 (tasklet_sync_callback.cb_lock){+...}-{3:3}: [ 1048.610843][ C0] __lock_acquire+0x1520/0x2ce0 [ 1048.610863][ C0] lock_acquire+0x106/0x350 [ 1048.610877][ C0] rt_spin_lock+0x83/0x400 [ 1048.610890][ C0] tasklet_action_common+0xc5/0x600 [ 1048.610912][ C0] handle_softirqs+0x1d9/0x6c0 [ 1048.610932][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 1048.610953][ C0] __alloc_skb+0x1ad/0x7a0 [ 1048.610970][ C0] hidp_send_message+0xb5/0x230 [ 1048.611000][ C0] hidp_input_event+0x2a4/0x380 [ 1048.611021][ C0] input_event_dispose+0x80/0x6b0 [ 1048.611041][ C0] input_inject_event+0x1fa/0x310 [ 1048.611059][ C0] led_trigger_set+0x39e/0x940 [ 1048.611080][ C0] led_classdev_unregister+0xa8/0x270 [ 1048.611097][ C0] input_leds_disconnect+0x96/0x140 [ 1048.611121][ C0] __input_unregister_device+0x356/0x650 [ 1048.611145][ C0] input_unregister_device+0x9b/0x100 [ 1048.611168][ C0] hidp_session_probe+0x775/0x8b0 [ 1048.611189][ C0] l2cap_register_user+0xbd/0x1d0 [ 1048.611210][ C0] hidp_connection_add+0x1582/0x1a10 [ 1048.611228][ C0] hidp_sock_ioctl+0x403/0x650 [ 1048.611249][ C0] sock_do_ioctl+0x101/0x320 [ 1048.611271][ C0] sock_ioctl+0x57d/0x7f0 [ 1048.611292][ C0] __se_sys_ioctl+0xff/0x170 [ 1048.611313][ C0] do_syscall_64+0x174/0x580 [ 1048.611333][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.611352][ C0] [ 1048.611352][ C0] other info that might help us debug this: [ 1048.611352][ C0] [ 1048.611359][ C0] Possible unsafe locking scenario: [ 1048.611359][ C0] [ 1048.611366][ C0] CPU0 CPU1 [ 1048.611374][ C0] ---- ---- [ 1048.611380][ C0] lock(&dev->event_lock#2); [ 1048.611399][ C0] lock(tasklet_sync_callback.cb_lock); [ 1048.611414][ C0] lock(&dev->event_lock#2); [ 1048.611434][ C0] lock(tasklet_sync_callback.cb_lock); [ 1048.611448][ C0] [ 1048.611448][ C0] *** DEADLOCK *** [ 1048.611448][ C0] [ 1048.611454][ C0] 8 locks held by syz.1.1745/14612: [ 1048.611466][ C0] #0: ffff88803784fb70 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_register_user+0x34/0x1d0 [ 1048.611521][ C0] #1: ffffffff8f75a7e0 (hidp_session_sem){++++}-{4:4}, at: hidp_session_probe+0x98/0x8b0 [ 1048.611572][ C0] #2: ffffffff8f01e3f8 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x2d8/0x650 [ 1048.611625][ C0] #3: ffff8880352b4788 (&led_cdev->trigger_lock){+.+.}-{4:4}, at: led_classdev_unregister+0x75/0x270 [ 1048.611673][ C0] #4: ffff888035e9e270 (&dev->event_lock#2){+.+.}-{3:3}, at: input_inject_event+0xab/0x310 [ 1048.611726][ C0] #5: ffffffff8e1c3780 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1048.611770][ C0] #6: ffffffff8e1c3780 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb7/0x310 [ 1048.611828][ C0] #7: ffffffff8e1c3780 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1048.611877][ C0] [ 1048.611877][ C0] stack backtrace: [ 1048.611892][ C0] CPU: 0 UID: 0 PID: 14612 Comm: syz.1.1745 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1048.611914][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1048.611928][ C0] Call Trace: [ 1048.611935][ C0] [ 1048.611944][ C0] dump_stack_lvl+0xe8/0x150 [ 1048.611972][ C0] print_circular_bug+0x2e1/0x300 [ 1048.612001][ C0] check_noncircular+0x12e/0x150 [ 1048.612028][ C0] __lock_acquire+0x1520/0x2ce0 [ 1048.612055][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1048.612146][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1048.612202][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1048.612225][ C0] ? stack_depot_save_flags+0x3ec/0x800 [ 1048.612256][ C0] ? tasklet_action_common+0xc5/0x600 [ 1048.612281][ C0] lock_acquire+0x106/0x350 [ 1048.612302][ C0] ? tasklet_action_common+0xc5/0x600 [ 1048.612330][ C0] ? led_classdev_unregister+0xa8/0x270 [ 1048.612354][ C0] rt_spin_lock+0x83/0x400 [ 1048.612372][ C0] ? tasklet_action_common+0xc5/0x600 [ 1048.612398][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 1048.612420][ C0] tasklet_action_common+0xc5/0x600 [ 1048.612447][ C0] ? workqueue_softirq_action+0xd1/0x150 [ 1048.612531][ C0] handle_softirqs+0x1d9/0x6c0 [ 1048.612559][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 1048.612583][ C0] ? __alloc_skb+0x189/0x7a0 [ 1048.612606][ C0] __alloc_skb+0x1ad/0x7a0 [ 1048.612629][ C0] hidp_send_message+0xb5/0x230 [ 1048.612657][ C0] hidp_input_event+0x2a4/0x380 [ 1048.612683][ C0] ? __pfx_hidp_input_event+0x10/0x10 [ 1048.612712][ C0] ? input_handle_event+0xc26/0xf10 [ 1048.612731][ C0] ? __pfx_hidp_input_event+0x10/0x10 [ 1048.612753][ C0] input_event_dispose+0x80/0x6b0 [ 1048.612773][ C0] input_inject_event+0x1fa/0x310 [ 1048.612791][ C0] ? input_inject_event+0xb7/0x310 [ 1048.612819][ C0] led_trigger_set+0x39e/0x940 [ 1048.612839][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1048.612860][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1048.612881][ C0] ? __pfx_led_trigger_set+0x10/0x10 [ 1048.612900][ C0] ? rwbase_write_lock+0x550/0x720 [ 1048.612926][ C0] led_classdev_unregister+0xa8/0x270 [ 1048.612945][ C0] input_leds_disconnect+0x96/0x140 [ 1048.612971][ C0] __input_unregister_device+0x356/0x650 [ 1048.612992][ C0] ? input_register_device+0xec1/0x1150 [ 1048.613015][ C0] input_unregister_device+0x9b/0x100 [ 1048.613038][ C0] hidp_session_probe+0x775/0x8b0 [ 1048.613059][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1048.613124][ C0] ? __pfx_hidp_session_probe+0x10/0x10 [ 1048.613153][ C0] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 1048.613174][ C0] ? l2cap_register_user+0x34/0x1d0 [ 1048.613200][ C0] l2cap_register_user+0xbd/0x1d0 [ 1048.613224][ C0] hidp_connection_add+0x1582/0x1a10 [ 1048.613251][ C0] hidp_sock_ioctl+0x403/0x650 [ 1048.613275][ C0] ? finish_task_switch+0x412/0xc60 [ 1048.613328][ C0] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 1048.613374][ C0] ? do_vfs_ioctl+0x1184/0x1550 [ 1048.613399][ C0] sock_do_ioctl+0x101/0x320 [ 1048.613427][ C0] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1048.613455][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 1048.613480][ C0] sock_ioctl+0x57d/0x7f0 [ 1048.613505][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 1048.613529][ C0] ? __fget_files+0x2a/0x420 [ 1048.613548][ C0] ? __fget_files+0x3a8/0x420 [ 1048.613566][ C0] ? __fget_files+0x2a/0x420 [ 1048.613586][ C0] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1048.613608][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 1048.613633][ C0] __se_sys_ioctl+0xff/0x170 [ 1048.613657][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.613678][ C0] do_syscall_64+0x174/0x580 [ 1048.613702][ C0] ? clear_bhb_loop+0x40/0x90 [ 1048.613725][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.613745][ C0] RIP: 0033:0x7f66fb73de59 [ 1048.613771][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1048.613789][ C0] RSP: 002b:00007f66f9531028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1048.613820][ C0] RAX: ffffffffffffffda RBX: 00007f66fb9c6270 RCX: 00007f66fb73de59 [ 1048.613835][ C0] RDX: 0000200000000340 RSI: 00000000400448c8 RDI: 0000000000000009 [ 1048.613849][ C0] RBP: 00007f66fb7d3e6f R08: 0000000000000000 R09: 0000000000000000 [ 1048.613863][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1048.613876][ C0] R13: 00007f66fb9c6308 R14: 00007f66fb9c6270 R15: 00007ffe7c1e7248 [ 1048.613898][ C0] [ 1051.480015][ T5261] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1051.898519][ T6090] bridge_slave_1: left allmulticast mode [ 1051.898541][ T6090] bridge_slave_1: left promiscuous mode [ 1051.898710][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.059400][ T6090] bridge_slave_0: left allmulticast mode [ 1052.059421][ T6090] bridge_slave_0: left promiscuous mode [ 1052.059565][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.428599][ T6090] bridge_slave_1: left allmulticast mode [ 1052.428625][ T6090] bridge_slave_1: left promiscuous mode [ 1052.428758][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.528939][ T6090] bridge_slave_0: left allmulticast mode [ 1052.528965][ T6090] bridge_slave_0: left promiscuous mode [ 1052.529113][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.728639][ T6090] bridge_slave_1: left allmulticast mode [ 1052.728672][ T6090] bridge_slave_1: left promiscuous mode [ 1052.728850][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.849037][ T6090] bridge_slave_0: left allmulticast mode [ 1052.849087][ T6090] bridge_slave_0: left promiscuous mode [ 1052.849277][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.278937][ T6090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1053.358746][ T6090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1053.419329][ T6090] bond0 (unregistering): Released all slaves [ 1053.660954][ T6090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1053.739049][ T6090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1053.799340][ T6090] bond0 (unregistering): Released all slaves [ 1053.989037][ T6090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1054.069047][ T6090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1054.130208][ T6090] bond0 (unregistering): Released all slaves [ 1054.170261][ T5261] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1054.690981][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.691056][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.870930][ T5261] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1055.129563][ T5261] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1055.578535][ T6090] hsr_slave_0: left promiscuous mode [ 1055.618518][ T6090] hsr_slave_1: left promiscuous mode [ 1055.619173][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1055.639468][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1055.798404][ T6090] hsr_slave_0: left promiscuous mode [ 1055.818614][ T6090] hsr_slave_1: left promiscuous mode [ 1055.819382][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1055.859344][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1055.998493][ T6090] hsr_slave_0: left promiscuous mode [ 1056.018383][ T6090] hsr_slave_1: left promiscuous mode [ 1056.018916][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1056.059009][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1056.348781][ T6090] team0 (unregistering): Port device team_slave_1 removed [ 1056.370413][ T6090] team0 (unregistering): Port device team_slave_0 removed [ 1056.659413][ T6090] team0 (unregistering): Port device team_slave_1 removed [ 1056.678779][ T6090] team0 (unregistering): Port device team_slave_0 removed [ 1056.940255][ T6090] team0 (unregistering): Port device team_slave_1 removed [ 1056.978830][ T6090] team0 (unregistering): Port device team_slave_0 removed