last executing test programs: 7.116630105s ago: executing program 3 (id=1239): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) 5.752358591s ago: executing program 1 (id=1242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090080000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 5.710751002s ago: executing program 3 (id=1243): capset(0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000880)=ANY=[@ANYBLOB="400f9b0000"], &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x85, 0x4, 0x7fff}, 0x0, 0x0, 0x0}) 4.867430679s ago: executing program 4 (id=1245): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xcc, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000008085000000820000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) 4.696832827s ago: executing program 1 (id=1247): accept(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000001c0)=0x67e, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)="a7", 0xfffffffffffffd51, 0x0, 0x0, 0xfffffee2) recvmsg(r0, 0x0, 0x10122) 4.638815612s ago: executing program 0 (id=1248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r3}, 0x38) 4.583714469s ago: executing program 4 (id=1249): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000480)="da4c2d5a91a513f44a38ddfefd048083939d548d33d9053b617bd77fba17ace689e46398470473aa00ab632896bfac633be04aa017a3f3059e83a72845f8ba2607119660c634532c29a29c96ce486364f8c3b80be30dbf0b67d48b9d0a5213113028d5fc336afbfa68f2223bcd45c2e4f771f66ffbf440e8075bd507b7c778abe962dd5d7b4e8685d907ddb6c16e03067ca59283884c9b61b893afd64fd59c1ea22097c00b07b49546b96957c14541dad500b342555647ea65cd1131a619c9d6", 0xc0, 0x4004085, 0x0, 0x0) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000800)=""/176, 0xb0}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2}, 0x1}], 0x1, 0x41, 0x0) 4.535834877s ago: executing program 5 (id=1250): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000240)={0x0, 0x2}, 0x8) 4.45473594s ago: executing program 1 (id=1251): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000008c0)}, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvfrom$inet6(r0, &(0x7f0000000100)=""/19, 0x1ff4, 0x40, 0x0, 0x0) 4.306689903s ago: executing program 4 (id=1252): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000130001000000000000000000070000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a8018000580140006800800020000000000080001"], 0x3c}}, 0x0) 3.889873816s ago: executing program 5 (id=1253): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b70300000000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.366608722s ago: executing program 1 (id=1254): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000800200380012800b0001006272696467650000280002800c002300fbffffffffffffff05002400000000010500240001000000060027"], 0x58}}, 0x0) 3.200326226s ago: executing program 5 (id=1256): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x104, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xd4, 0x2, {{}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_DELAY_DIST={0xa, 0x2, "58d5c080bbdd"}, @TCA_NETEM_LOSS={0x34, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x8}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_LOSS={0x60, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_REORDER={0xc}]}}}]}, 0x104}}, 0x0) 3.139351626s ago: executing program 0 (id=1257): syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESOCT=r1]) 3.059481388s ago: executing program 4 (id=1258): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x4, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}]}]}, 0x2c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.93385777s ago: executing program 2 (id=1259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090080000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 2.932983225s ago: executing program 1 (id=1260): arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000040)) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/73, 0x49) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x84) r1 = fanotify_init(0x200, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@dax_never}, {@dioread_nolock}, {@barrier}, {@delalloc}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x47a, &(0x7f0000000b00)="$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") fanotify_mark(r1, 0x201, 0x4800003e, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r1, 0x61, 0x40001002, r2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f0000000240)={'U+', 0x2}, 0x16, 0x1) 2.371834473s ago: executing program 5 (id=1261): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'trans=fd,'}}, {@fscache}, {@version_u}, {@directio}], [], 0x6b}}) 1.387580287s ago: executing program 0 (id=1262): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r2) 1.354921394s ago: executing program 3 (id=1263): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1.341665161s ago: executing program 2 (id=1264): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000480)="da4c2d5a91a513f44a38ddfefd048083939d548d33d9053b617bd77fba17ace689e46398470473aa00ab632896bfac633be04aa017a3f3059e83a72845f8ba2607119660c634532c29a29c96ce486364f8c3b80be30dbf0b67d48b9d0a5213113028d5fc336afbfa68f2223bcd45c2e4f771f66ffbf440e8075bd507b7c778abe962dd5d7b4e8685d907ddb6c16e03067ca59283884c9b61b893afd64fd59c1ea22097c00b07b49546b96957c14541dad500b342555647ea65cd1131a619c9d6", 0xc0, 0x4004085, 0x0, 0x0) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000800)=""/176, 0xb0}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2}, 0x1}], 0x1, 0x41, 0x0) 918.884738ms ago: executing program 4 (id=1265): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000240)={0x0, 0x2}, 0x8) 879.831941ms ago: executing program 2 (id=1266): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000008c0)}, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvfrom$inet6(r0, &(0x7f0000000100)=""/19, 0x1ff4, 0x40, 0x0, 0x0) 779.568769ms ago: executing program 3 (id=1267): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000050000005300000084"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 609.917376ms ago: executing program 0 (id=1268): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b70300000000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 599.758629ms ago: executing program 2 (id=1269): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 519.730364ms ago: executing program 5 (id=1270): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000130001000000000000000000070000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a8018000580140006800800020000000000080001"], 0x3c}}, 0x0) 474.313963ms ago: executing program 4 (id=1271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 453.337462ms ago: executing program 3 (id=1272): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 339.225787ms ago: executing program 2 (id=1273): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x104, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xd4, 0x2, {{}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_DELAY_DIST={0xa, 0x2, "58d5c080bbdd"}, @TCA_NETEM_LOSS={0x34, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x8}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_LOSS={0x60, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_REORDER={0xc}]}}}]}, 0x104}}, 0x0) 302.263196ms ago: executing program 0 (id=1274): getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x20000000) r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, r1}) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 226.92398ms ago: executing program 1 (id=1275): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x74, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x7, 0x1a, '$.\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xfffffffffffffffd}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}]}]}, 0x74}}, 0x40800) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004"], 0x528}}, 0x4800) 85.110574ms ago: executing program 3 (id=1276): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c00"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0xffbffffc, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4ca40, 0x2a1}}}}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 84.453795ms ago: executing program 5 (id=1277): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote, r1}, 0x14) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'virt_wifi0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000110001000000", @ANYRES32=r3], 0x20}}, 0x0) close(0x3) 52.990605ms ago: executing program 2 (id=1278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) syz_emit_ethernet(0xac, &(0x7f00000028c0)={@local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x3, 0x9e, 0x65, 0x0, 0x8, 0x2f, 0x0, @broadcast, @broadcast}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x7, 0xd8ed], "7ebd9c687064579f39da1196594d7033566f6d491fcefdac47cfc56729f9208ccc3bd24b2bb6ef47b2f16ec8831163989991ace5532a5f40ba76d46904a76f44"}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0xc, 0x1, 0x0, 0x1, 0x2, 0x40}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0xfc, 0x0, 0x0, 0x3, 0x1, 0xcd}, 0x2, {0xa96, 0x351, 0x2, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) 0s ago: executing program 0 (id=1279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.116' (ED25519) to the list of known hosts. [ 85.874366][ T5816] cgroup: Unknown subsys name 'net' [ 86.025863][ T5816] cgroup: Unknown subsys name 'cpuset' [ 86.034240][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.582118][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.383078][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.395669][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.404003][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.410018][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.413037][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.419826][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.427202][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.434064][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.442555][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.447626][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.455165][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.461811][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.468823][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.476184][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.482382][ T5850] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.489025][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.495703][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.504005][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.509839][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.516548][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.532068][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.539803][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.547096][ T5847] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.555021][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.564866][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.573785][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.581670][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.590982][ T5847] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.598724][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.607634][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.613261][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.617221][ T5850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.631176][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.635958][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.651528][ T5850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.659858][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.132201][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 91.355184][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 91.376246][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 91.428042][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 91.556562][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.581542][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.589066][ T5830] bridge_slave_0: entered allmulticast mode [ 91.602118][ T5830] bridge_slave_0: entered promiscuous mode [ 91.640559][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 91.690648][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 91.707144][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.720017][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.729435][ T5830] bridge_slave_1: entered allmulticast mode [ 91.743905][ T5830] bridge_slave_1: entered promiscuous mode [ 91.870149][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.020331][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.041246][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.057346][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.072164][ T5829] bridge_slave_0: entered allmulticast mode [ 92.081119][ T5829] bridge_slave_0: entered promiscuous mode [ 92.109716][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.116941][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.124752][ T5842] bridge_slave_0: entered allmulticast mode [ 92.132049][ T5842] bridge_slave_0: entered promiscuous mode [ 92.161104][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.168712][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.176193][ T5829] bridge_slave_1: entered allmulticast mode [ 92.183327][ T5829] bridge_slave_1: entered promiscuous mode [ 92.203346][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.210500][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.218453][ T5842] bridge_slave_1: entered allmulticast mode [ 92.226392][ T5842] bridge_slave_1: entered promiscuous mode [ 92.259128][ T5830] team0: Port device team_slave_0 added [ 92.268648][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.275924][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.289345][ T5827] bridge_slave_0: entered allmulticast mode [ 92.296456][ T5827] bridge_slave_0: entered promiscuous mode [ 92.334836][ T5830] team0: Port device team_slave_1 added [ 92.343338][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.354448][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.365900][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.373688][ T5827] bridge_slave_1: entered allmulticast mode [ 92.380809][ T5827] bridge_slave_1: entered promiscuous mode [ 92.441505][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.452294][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.459367][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.485831][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.508738][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.564990][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.572496][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.598763][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.622289][ T54] Bluetooth: hci4: command tx timeout [ 92.623527][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.649859][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.657415][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.665977][ T5828] bridge_slave_0: entered allmulticast mode [ 92.673797][ T5828] bridge_slave_0: entered promiscuous mode [ 92.683400][ T5842] team0: Port device team_slave_0 added [ 92.689403][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.697884][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.705113][ T54] Bluetooth: hci0: command tx timeout [ 92.705718][ T5828] bridge_slave_1: entered allmulticast mode [ 92.711514][ T5844] Bluetooth: hci2: command tx timeout [ 92.717941][ T5828] bridge_slave_1: entered promiscuous mode [ 92.722427][ T5850] Bluetooth: hci5: command tx timeout [ 92.727850][ T5837] Bluetooth: hci3: command tx timeout [ 92.733800][ T54] Bluetooth: hci1: command tx timeout [ 92.749476][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.770673][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.777960][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.786000][ T5831] bridge_slave_0: entered allmulticast mode [ 92.793292][ T5831] bridge_slave_0: entered promiscuous mode [ 92.801043][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.808784][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.816335][ T5831] bridge_slave_1: entered allmulticast mode [ 92.823864][ T5831] bridge_slave_1: entered promiscuous mode [ 92.833466][ T5842] team0: Port device team_slave_1 added [ 92.860581][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.921663][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.948269][ T5829] team0: Port device team_slave_0 added [ 92.992263][ T5830] hsr_slave_0: entered promiscuous mode [ 92.998655][ T5830] hsr_slave_1: entered promiscuous mode [ 93.007687][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.029836][ T5827] team0: Port device team_slave_0 added [ 93.040102][ T5829] team0: Port device team_slave_1 added [ 93.048463][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.060442][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.067506][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.093844][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.106841][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.114154][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.140477][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.165322][ T5827] team0: Port device team_slave_1 added [ 93.195491][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.227336][ T5828] team0: Port device team_slave_0 added [ 93.268109][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.275415][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.301747][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.314554][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.321642][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.347712][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.404365][ T5828] team0: Port device team_slave_1 added [ 93.413808][ T5831] team0: Port device team_slave_0 added [ 93.466785][ T5831] team0: Port device team_slave_1 added [ 93.477795][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.485113][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.511425][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.525719][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.533026][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.559245][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.604931][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.611998][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.638533][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.701068][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.708183][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.740428][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.757478][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.764790][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.790989][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.834227][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.842945][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.869981][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.912692][ T5842] hsr_slave_0: entered promiscuous mode [ 93.919189][ T5842] hsr_slave_1: entered promiscuous mode [ 93.925828][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.933688][ T5842] Cannot create hsr debugfs directory [ 93.958667][ T5829] hsr_slave_0: entered promiscuous mode [ 93.965091][ T5829] hsr_slave_1: entered promiscuous mode [ 93.971079][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.978839][ T5829] Cannot create hsr debugfs directory [ 93.988020][ T5827] hsr_slave_0: entered promiscuous mode [ 93.994899][ T5827] hsr_slave_1: entered promiscuous mode [ 94.002788][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.010366][ T5827] Cannot create hsr debugfs directory [ 94.132737][ T5828] hsr_slave_0: entered promiscuous mode [ 94.139118][ T5828] hsr_slave_1: entered promiscuous mode [ 94.145908][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.153800][ T5828] Cannot create hsr debugfs directory [ 94.256751][ T5831] hsr_slave_0: entered promiscuous mode [ 94.263456][ T5831] hsr_slave_1: entered promiscuous mode [ 94.269524][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.278112][ T5831] Cannot create hsr debugfs directory [ 94.478497][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.527225][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.584689][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.618524][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.684153][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.699225][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.701671][ T54] Bluetooth: hci4: command tx timeout [ 94.736848][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.747804][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.781619][ T5850] Bluetooth: hci5: command tx timeout [ 94.782106][ T5837] Bluetooth: hci2: command tx timeout [ 94.787063][ T5850] Bluetooth: hci0: command tx timeout [ 94.792714][ T5837] Bluetooth: hci3: command tx timeout [ 94.798692][ T54] Bluetooth: hci1: command tx timeout [ 94.831552][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.848958][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.865501][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.909061][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.974508][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.985776][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.025067][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.061083][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.137913][ T5829] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.179799][ T5829] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.213822][ T5829] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.230708][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.249981][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.272179][ T5829] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.312190][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.357355][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.370376][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.377897][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.410514][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.427800][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.442687][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.460581][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.475043][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.482268][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.519378][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.538511][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.545699][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.557820][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.612819][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.619988][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.633441][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.640703][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.679795][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.686975][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.723087][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.764678][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.809951][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.817150][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.855122][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.862308][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.980451][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.135763][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.213280][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.247689][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.326027][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.333253][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.373741][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.380917][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.470678][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.477895][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.488962][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.496116][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.526747][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.600968][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.628553][ T25] cfg80211: failed to load regulatory.db [ 96.674299][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.791620][ T54] Bluetooth: hci4: command tx timeout [ 96.848497][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.862014][ T54] Bluetooth: hci1: command tx timeout [ 96.867501][ T54] Bluetooth: hci0: command tx timeout [ 96.873092][ T5850] Bluetooth: hci2: command tx timeout [ 96.873681][ T5837] Bluetooth: hci5: command tx timeout [ 96.878566][ T5850] Bluetooth: hci3: command tx timeout [ 96.886715][ T5842] veth0_vlan: entered promiscuous mode [ 97.018231][ T5842] veth1_vlan: entered promiscuous mode [ 97.108254][ T5830] veth0_vlan: entered promiscuous mode [ 97.158074][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.187832][ T5830] veth1_vlan: entered promiscuous mode [ 97.197108][ T5828] veth0_vlan: entered promiscuous mode [ 97.218130][ T5828] veth1_vlan: entered promiscuous mode [ 97.309278][ T5842] veth0_macvtap: entered promiscuous mode [ 97.362393][ T5842] veth1_macvtap: entered promiscuous mode [ 97.383744][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.394484][ T5830] veth0_macvtap: entered promiscuous mode [ 97.406136][ T5828] veth0_macvtap: entered promiscuous mode [ 97.428597][ T5830] veth1_macvtap: entered promiscuous mode [ 97.456574][ T5828] veth1_macvtap: entered promiscuous mode [ 97.478182][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.497892][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.511241][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.524603][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.544400][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.557980][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.567430][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.576903][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.597684][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.620933][ T5827] veth0_vlan: entered promiscuous mode [ 97.640393][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.653309][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.664414][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.675866][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.688219][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.726712][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.738781][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.750776][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.759912][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.771745][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.782153][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.792703][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.804434][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.843728][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.852743][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.862790][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.871809][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.887477][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.896473][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.907571][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.917304][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.956415][ T5827] veth1_vlan: entered promiscuous mode [ 98.015004][ T5831] veth0_vlan: entered promiscuous mode [ 98.053115][ T5827] veth0_macvtap: entered promiscuous mode [ 98.092353][ T5831] veth1_vlan: entered promiscuous mode [ 98.148268][ T5827] veth1_macvtap: entered promiscuous mode [ 98.220681][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.229030][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.262108][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.270006][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.312952][ T5829] veth0_vlan: entered promiscuous mode [ 98.321868][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.342017][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.369947][ T5831] veth0_macvtap: entered promiscuous mode [ 98.388071][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.399167][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.410971][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.422477][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.432416][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.443216][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.454829][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.465430][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.489814][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.493243][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.509837][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.519871][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.530449][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.540370][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.551027][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.562656][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.605373][ T5831] veth1_macvtap: entered promiscuous mode [ 98.633411][ T5829] veth1_vlan: entered promiscuous mode [ 98.663710][ T5827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.674311][ T5827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.685683][ T5827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.697158][ T5827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.708644][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.721688][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.749760][ T5829] veth0_macvtap: entered promiscuous mode [ 98.762865][ T5829] veth1_macvtap: entered promiscuous mode [ 98.789053][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.821083][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.850635][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.868570][ T5850] Bluetooth: hci4: command tx timeout [ 98.896945][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.917013][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.928004][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.938521][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.948660][ T5850] Bluetooth: hci3: command tx timeout [ 98.954144][ T54] Bluetooth: hci0: command tx timeout [ 98.954193][ T5841] Bluetooth: hci5: command tx timeout [ 98.959537][ T54] Bluetooth: hci2: command tx timeout [ 98.965792][ T5837] Bluetooth: hci1: command tx timeout [ 98.970444][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.986480][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.996856][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.007850][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.020357][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.043999][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.073592][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.083603][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.094714][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.105627][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.117419][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.127902][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.138811][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.149227][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.162992][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.174902][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.223839][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.241670][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.259976][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.273951][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.293484][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.326610][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.343797][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.356581][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.368451][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.380576][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.401109][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.411619][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.419103][ T5943] loop1: detected capacity change from 0 to 1024 [ 99.423397][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.439560][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.450774][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.465681][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.477062][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.489572][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.503836][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.516407][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.532500][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.540411][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.549008][ T5943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.583001][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.592632][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.601734][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.610594][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.627597][ T5829] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.637666][ T5829] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.647209][ T5829] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.656494][ T5829] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.764020][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.801682][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.977308][ T5901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.000967][ T5901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.065510][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.121790][ T5895] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.164906][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.201465][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.209642][ T5901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.234846][ T5901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.304280][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 100.348281][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.350681][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.405098][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.429743][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.462863][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 100.523461][ T5895] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 100.576073][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.630356][ T5895] usb 3-1: config 0 descriptor?? [ 100.969270][ T5967] loop4: detected capacity change from 0 to 2048 [ 101.031173][ T5970] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 101.075621][ T5967] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 101.104762][ T5967] UDF-fs: Scanning with blocksize 512 failed [ 101.115036][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 101.132364][ T5974] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 101.142471][ T5967] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.158398][ T5895] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 101.177539][ T5968] loop5: detected capacity change from 0 to 4096 [ 101.204084][ T5895] microsoft 0003:045E:07DA.0001: item 0 4 0 8 parsing failed [ 101.209919][ T29] audit: type=1326 audit(1739800747.758:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.3.4" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb19558cde9 code=0x0 [ 101.219551][ T5895] microsoft 0003:045E:07DA.0001: parse failed [ 101.240768][ T5895] microsoft 0003:045E:07DA.0001: probe with driver microsoft failed with error -22 [ 101.543872][ T5895] usb 3-1: USB disconnect, device number 2 [ 101.557864][ T29] audit: type=1800 audit(1739800748.108:3): pid=5968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6" name="file1" dev="loop5" ino=33 res=0 errno=0 [ 101.727434][ T5965] UDF-fs: warning (device loop4): udf_truncate_tail_extent: Too long extent after EOF in inode 818: i_size: 134220898 lbcount: 134222848 extent 0+124987392 [ 101.751389][ T5965] UDF-fs: error (device loop4): udf_truncate_tail_extent: Extent after EOF in inode 818 [ 101.997165][ T62] kworker/u8:4: attempt to access beyond end of device [ 101.997165][ T62] loop4: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 102.031936][ T62] Buffer I/O error on dev loop4, logical block 1024, lost async page write [ 102.041163][ T62] kworker/u8:4: attempt to access beyond end of device [ 102.041163][ T62] loop4: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 102.057901][ T62] Buffer I/O error on dev loop4, logical block 1024, lost async page write [ 102.074597][ T62] kworker/u8:4: attempt to access beyond end of device [ 102.074597][ T62] loop4: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 102.115545][ T5895] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.157227][ T62] Buffer I/O error on dev loop4, logical block 1024, lost async page write [ 102.190934][ T62] kworker/u8:4: attempt to access beyond end of device [ 102.190934][ T62] loop4: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 102.210706][ T62] Buffer I/O error on dev loop4, logical block 1024, lost async page write [ 102.289799][ T62] kworker/u8:4: attempt to access beyond end of device [ 102.289799][ T62] loop4: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 102.313685][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 102.328529][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.333603][ T62] Buffer I/O error on dev loop4, logical block 1025, lost async page write [ 102.357853][ T62] kworker/u8:4: attempt to access beyond end of device [ 102.357853][ T62] loop4: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 102.380490][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.399744][ T62] Buffer I/O error on dev loop4, logical block 1025, lost async page write [ 102.417516][ T5895] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 102.423192][ T62] kworker/u8:4: attempt to access beyond end of device [ 102.423192][ T62] loop4: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 102.451443][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.475085][ T62] Buffer I/O error on dev loop4, logical block 1025, lost async page write [ 102.507402][ T62] kworker/u8:4: attempt to access beyond end of device [ 102.507402][ T62] loop4: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 102.507758][ T5895] usb 2-1: config 0 descriptor?? [ 102.548710][ T62] Buffer I/O error on dev loop4, logical block 1025, lost async page write [ 102.571733][ T62] kworker/u8:4: attempt to access beyond end of device [ 102.571733][ T62] loop4: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 102.644996][ T5827] UDF-fs: warning (device loop4): udf_evict_inode: Inode 818 (mode 100755) has inode size 134220898 different from extent length 134223872. Filesystem need not be standards compliant. [ 102.977695][ T5895] usbhid 2-1:0.0: can't add hid device: -71 [ 102.985438][ T5895] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 103.041916][ T5895] usb 2-1: USB disconnect, device number 2 [ 103.056637][ T6006] loop4: detected capacity change from 0 to 512 [ 103.252457][ T6006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 103.314447][ T6006] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.686311][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 103.892894][ T6023] loop0: detected capacity change from 0 to 2048 [ 103.996226][ T6023] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 104.037311][ T6023] UDF-fs: Scanning with blocksize 512 failed [ 104.077978][ T6023] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.948717][ T6040] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.835534][ T6064] syz.2.44 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 107.191043][ T6080] block nbd3: NBD_DISCONNECT [ 107.196603][ T6080] block nbd3: Disconnected due to user request. [ 107.208812][ T6080] block nbd3: shutting down sockets [ 107.741642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.158687][ T6101] loop5: detected capacity change from 0 to 4096 [ 109.310172][ T6101] NILFS (loop5): invalid segment: Checksum error in segment payload [ 109.361566][ T5835] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 109.371513][ T5893] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 109.391470][ T6101] NILFS (loop5): trying rollback from an earlier position [ 109.506296][ T6101] NILFS (loop5): recovery complete [ 109.611630][ T6118] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.761808][ T5895] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.803312][ T5893] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.813603][ T5893] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 109.831401][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.861486][ T5835] usb 4-1: Using ep0 maxpacket: 16 [ 109.888174][ T5835] usb 4-1: unable to get BOS descriptor or descriptor too short [ 109.951128][ T5835] usb 4-1: config 1 has an invalid interface number: 241 but max is 0 [ 110.418910][ T5835] usb 4-1: config 1 has no interface number 0 [ 110.431593][ T5835] usb 4-1: config 1 interface 241 has no altsetting 0 [ 110.482746][ T5835] usb 4-1: New USB device found, idVendor=041e, idProduct=4041, bcdDevice=40.25 [ 110.521405][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.559370][ T5835] usb 4-1: Product: syz [ 110.572710][ T5835] usb 4-1: Manufacturer: syz [ 110.577366][ T5835] usb 4-1: SerialNumber: syz [ 110.725550][ T5893] usb 3-1: config 0 descriptor?? [ 110.768487][ T5893] pwc: Askey VC010 type 2 USB webcam detected. [ 110.823076][ T5895] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 110.849354][ T5895] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 110.867607][ T5895] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 110.878551][ T5895] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 110.893235][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 110.915674][ T5895] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 110.938298][ T5895] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 110.951620][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 110.959828][ T5895] usb 2-1: Product: syz [ 110.967424][ T5895] usb 2-1: Manufacturer: syz [ 110.981081][ T5895] cdc_wdm 2-1:1.0: skipping garbage [ 110.982782][ T5835] gspca_main: sq930x-2.14.0 probing 041e:4041 [ 110.987454][ T5895] cdc_wdm 2-1:1.0: skipping garbage [ 111.013058][ T5894] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 111.026358][ T5895] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 111.032025][ T5835] gspca_sq930x: reg_r 001f failed -71 [ 111.037868][ T5835] sq930x 4-1:1.241: probe with driver sq930x failed with error -71 [ 111.041345][ T5895] cdc_wdm 2-1:1.0: Unknown control protocol [ 111.065227][ T5835] usb 4-1: USB disconnect, device number 2 [ 111.086443][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 111.102397][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.141187][ T9] usb 5-1: Product: syz [ 111.147183][ T9] usb 5-1: Manufacturer: syz [ 111.155179][ T9] usb 5-1: SerialNumber: syz [ 111.168629][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 111.201564][ T5894] usb 6-1: Using ep0 maxpacket: 16 [ 111.217390][ T5918] usb 2-1: USB disconnect, device number 3 [ 111.223557][ T5894] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 111.227074][ T5895] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 111.238901][ T5893] pwc: recv_control_msg error -32 req 02 val 2b00 [ 111.259128][ T5894] usb 6-1: config 0 has no interface number 0 [ 111.293841][ T5894] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 111.320915][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.339815][ T5894] usb 6-1: Product: syz [ 111.347963][ T5894] usb 6-1: Manufacturer: syz [ 111.364542][ T5894] usb 6-1: SerialNumber: syz [ 111.383086][ T5894] usb 6-1: config 0 descriptor?? [ 111.404672][ T5894] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 111.470623][ T5835] usb 5-1: USB disconnect, device number 2 [ 111.480601][ T5893] pwc: recv_control_msg error -71 req 02 val 2c00 [ 111.507459][ T5893] pwc: recv_control_msg error -71 req 04 val 1000 [ 111.524931][ T5893] pwc: recv_control_msg error -71 req 04 val 1300 [ 111.535499][ T5893] pwc: recv_control_msg error -71 req 04 val 1400 [ 111.553503][ T5893] pwc: recv_control_msg error -71 req 02 val 2000 [ 111.570757][ T5893] pwc: recv_control_msg error -71 req 02 val 2100 [ 111.580543][ T5893] pwc: recv_control_msg error -71 req 04 val 1500 [ 111.591878][ T5893] pwc: recv_control_msg error -71 req 02 val 2500 [ 111.608979][ T5893] pwc: recv_control_msg error -71 req 02 val 2400 [ 111.631980][ T5893] pwc: recv_control_msg error -71 req 02 val 2600 [ 111.649191][ T5893] pwc: recv_control_msg error -71 req 02 val 2900 [ 111.656460][ T5893] pwc: recv_control_msg error -71 req 02 val 2800 [ 111.672084][ T5893] pwc: recv_control_msg error -71 req 04 val 1100 [ 111.688170][ T5893] pwc: recv_control_msg error -71 req 04 val 1200 [ 111.726729][ T5893] pwc: Registered as video103. [ 111.744890][ T5893] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 111.782048][ T5918] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.794538][ T5893] usb 3-1: USB disconnect, device number 3 [ 112.003573][ T5918] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 112.024457][ T5918] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 112.066029][ T5918] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 112.101580][ T5918] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 112.172265][ T5918] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 112.213282][ T5918] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 112.243756][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 112.270006][ T5918] usb 2-1: Product: syz [ 112.287349][ T5918] usb 2-1: Manufacturer: syz [ 112.290341][ T6145] warning: `syz.2.76' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 112.320113][ T5895] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 112.335003][ T5895] ath9k_htc: Failed to initialize the device [ 112.351996][ T5918] cdc_wdm 2-1:1.0: skipping garbage [ 112.357261][ T5918] cdc_wdm 2-1:1.0: skipping garbage [ 112.370094][ T5835] usb 5-1: ath9k_htc: USB layer deinitialized [ 112.391060][ T5918] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 112.414829][ T5918] cdc_wdm 2-1:1.0: Unknown control protocol [ 112.612865][ T9] usb 2-1: USB disconnect, device number 4 [ 113.445198][ T5894] gspca_spca1528: reg_r err -71 [ 113.471441][ T5894] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 113.558487][ T5894] usb 6-1: USB disconnect, device number 2 [ 117.232929][ T6216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.105'. [ 117.561360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.571369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.582479][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.112424][ T6263] Zero length message leads to an empty skb [ 120.862163][ T5841] Bluetooth: hci5: command 0x0405 tx timeout [ 121.338395][ T6277] loop2: detected capacity change from 0 to 2048 [ 121.451947][ T6277] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.404171][ T6284] infiniband syz0: set active [ 122.411149][ T6284] infiniband syz0: added bond_slave_1 [ 123.234719][ T6284] syz0: rxe_create_cq: returned err = -12 [ 123.267913][ T6284] infiniband syz0: Couldn't create ib_mad CQ [ 123.292582][ T6284] infiniband syz0: Couldn't open port 1 [ 123.427097][ T6284] RDS/IB: syz0: added [ 123.444105][ T6284] smc: adding ib device syz0 with port count 1 [ 123.481166][ T6284] smc: ib device syz0 port 1 has pnetid [ 123.768942][ T6319] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.986544][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'. [ 125.122016][ T6340] erspan0: entered promiscuous mode [ 125.185471][ T6340] macvtap1: entered promiscuous mode [ 125.198568][ T6340] macvtap1: entered allmulticast mode [ 125.242495][ T6340] erspan0: entered allmulticast mode [ 125.588235][ T6349] bridge_slave_0: left allmulticast mode [ 125.629461][ T6349] bridge_slave_0: left promiscuous mode [ 125.677885][ T6349] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.784998][ T6349] bridge_slave_1: left allmulticast mode [ 125.813535][ T6349] bridge_slave_1: left promiscuous mode [ 125.830897][ T6349] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.891225][ T6349] bond0: (slave bond_slave_0): Releasing backup interface [ 125.927643][ T6349] bond0: (slave bond_slave_1): Releasing backup interface [ 126.016401][ T6349] team0: Port device team_slave_0 removed [ 126.073859][ T6349] team0: Port device team_slave_1 removed [ 126.096755][ T6349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.124398][ T6349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.156732][ T6349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.190650][ T6349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.697129][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.160'. [ 126.890751][ T6368] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 128.152998][ T6386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.164'. [ 128.733515][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.169'. [ 129.641176][ T6419] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.913419][ T6429] syz.3.179 uses obsolete (PF_INET,SOCK_PACKET) [ 131.195932][ T6471] netlink: 18 bytes leftover after parsing attributes in process `syz.5.197'. [ 131.303708][ T6471] netlink: 18 bytes leftover after parsing attributes in process `syz.5.197'. [ 131.452142][ T6473] xt_CT: No such helper "pptp" [ 131.607002][ T6483] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.629449][ T6481] netlink: 32 bytes leftover after parsing attributes in process `syz.4.200'. [ 131.663034][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.5.201'. [ 131.693734][ T6481] netlink: 32 bytes leftover after parsing attributes in process `syz.4.200'. [ 131.807435][ T6481] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 131.902351][ T6481] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 132.078138][ T6496] ipvlan1: entered promiscuous mode [ 132.166524][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.207'. [ 132.543956][ T6510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.211'. [ 132.588092][ T6510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.211'. [ 132.709352][ T6510] netlink: 'syz.1.211': attribute type 1 has an invalid length. [ 132.931670][ T6522] netlink: 20 bytes leftover after parsing attributes in process `syz.0.215'. [ 133.563348][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.222'. [ 133.900394][ T6550] loop3: detected capacity change from 0 to 2048 [ 133.964872][ T6550] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.338674][ T6565] loop3: detected capacity change from 0 to 4096 [ 135.472103][ T6565] NILFS (loop3): invalid segment: Checksum error in segment payload [ 135.480192][ T6565] NILFS (loop3): trying rollback from an earlier position [ 135.589712][ T6565] NILFS (loop3): recovery complete [ 135.617327][ T6579] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.471071][ T6609] __nla_validate_parse: 1 callbacks suppressed [ 136.471098][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.249'. [ 136.540798][ T6609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.249'. [ 137.585059][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.617342][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.272393][ T6637] loop3: detected capacity change from 0 to 2048 [ 138.335841][ T6637] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 138.364356][ T6637] UDF-fs: Scanning with blocksize 512 failed [ 138.454550][ T6637] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.703887][ T6600] syzkaller1: entered promiscuous mode [ 138.709457][ T6600] syzkaller1: entered allmulticast mode [ 138.879277][ T6636] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 818: i_size: 134220898 lbcount: 134222848 extent 0+124987392 [ 138.948624][ T6636] UDF-fs: error (device loop3): udf_truncate_tail_extent: Extent after EOF in inode 818 [ 139.237459][ T52] kworker/u8:3: attempt to access beyond end of device [ 139.237459][ T52] loop3: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 139.292217][ T52] Buffer I/O error on dev loop3, logical block 1024, lost async page write [ 139.308359][ T52] kworker/u8:3: attempt to access beyond end of device [ 139.308359][ T52] loop3: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 139.329341][ T52] Buffer I/O error on dev loop3, logical block 1024, lost async page write [ 139.340209][ T52] kworker/u8:3: attempt to access beyond end of device [ 139.340209][ T52] loop3: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 139.379143][ T52] Buffer I/O error on dev loop3, logical block 1024, lost async page write [ 139.399077][ T52] kworker/u8:3: attempt to access beyond end of device [ 139.399077][ T52] loop3: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 139.420952][ T52] Buffer I/O error on dev loop3, logical block 1024, lost async page write [ 139.430242][ T52] kworker/u8:3: attempt to access beyond end of device [ 139.430242][ T52] loop3: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 139.501527][ T52] Buffer I/O error on dev loop3, logical block 1025, lost async page write [ 139.512585][ T6670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.271'. [ 139.546687][ T52] kworker/u8:3: attempt to access beyond end of device [ 139.546687][ T52] loop3: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 139.610020][ T6670] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.640749][ T52] Buffer I/O error on dev loop3, logical block 1025, lost async page write [ 139.692769][ T52] kworker/u8:3: attempt to access beyond end of device [ 139.692769][ T52] loop3: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 139.706296][ T6674] vxcan2: entered allmulticast mode [ 139.743187][ T52] Buffer I/O error on dev loop3, logical block 1025, lost async page write [ 139.779290][ T52] kworker/u8:3: attempt to access beyond end of device [ 139.779290][ T52] loop3: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 139.859403][ T52] Buffer I/O error on dev loop3, logical block 1025, lost async page write [ 139.912325][ T52] kworker/u8:3: attempt to access beyond end of device [ 139.912325][ T52] loop3: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 140.022938][ T5831] UDF-fs: warning (device loop3): udf_evict_inode: Inode 818 (mode 100755) has inode size 134220898 different from extent length 134223872. Filesystem need not be standards compliant. [ 140.144910][ T6674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.235596][ T6674] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 140.510019][ T6674] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 141.167097][ T6697] wg2: entered promiscuous mode [ 141.180648][ T6697] wg2: entered allmulticast mode [ 141.764258][ T6713] netlink: 232 bytes leftover after parsing attributes in process `syz.1.287'. [ 143.683267][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.307'. [ 143.704481][ T6758] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 143.722256][ T6756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.729737][ T6756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.749595][ T6753] loop3: detected capacity change from 0 to 4096 [ 143.765414][ T6756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.779333][ T6756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.848969][ T6753] NILFS (loop3): invalid segment: Checksum error in segment payload [ 143.869865][ T6753] NILFS (loop3): trying rollback from an earlier position [ 143.987999][ T6753] NILFS (loop3): recovery complete [ 144.048784][ T6761] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.953848][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 144.963605][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 144.974604][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 144.984926][ T6767] team0: No ports can be present during mode change [ 144.998094][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 145.007603][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 145.017123][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 145.026566][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 145.036113][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 145.053334][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 145.063085][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 145.600294][ T6784] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.318'. [ 146.318813][ T6801] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.363046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 147.425516][ T6809] block nbd4: NBD_DISCONNECT [ 147.802165][ T6819] loop5: detected capacity change from 0 to 2048 [ 147.821633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 147.895364][ T6819] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.912494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 147.921375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 147.941553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 147.950515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 149.999148][ T6874] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.357'. [ 150.041458][ T6874] net_ratelimit: 251 callbacks suppressed [ 150.041484][ T6874] openvswitch: netlink: Flow actions attr not present in new flow. [ 150.542979][ T6898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.713717][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.361'. [ 151.420542][ T6928] netlink: 232 bytes leftover after parsing attributes in process `syz.2.376'. [ 151.584894][ T6932] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.378'. [ 151.613425][ T6932] openvswitch: netlink: Flow actions attr not present in new flow. [ 152.002771][ T6949] netlink: 100 bytes leftover after parsing attributes in process `syz.5.383'. [ 152.300881][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 152.431629][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.391'. [ 152.611804][ T6973] netlink: 232 bytes leftover after parsing attributes in process `syz.4.393'. [ 153.076037][ T6989] netlink: 188 bytes leftover after parsing attributes in process `syz.4.397'. [ 153.116894][ T6989] netlink: 'syz.4.397': attribute type 1 has an invalid length. [ 153.580521][ T6999] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 153.611502][ T5918] IPVS: starting estimator thread 0... [ 153.951711][ T7005] IPVS: using max 16 ests per chain, 38400 per kthread [ 154.210198][ T7012] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 155.422518][ T7033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.412'. [ 155.482541][ T7033] vxcan2: entered allmulticast mode [ 155.759373][ T7050] netlink: 'syz.2.417': attribute type 4 has an invalid length. [ 157.673951][ T7082] netlink: 72 bytes leftover after parsing attributes in process `syz.1.428'. [ 157.684803][ T7080] netlink: 108 bytes leftover after parsing attributes in process `syz.4.430'. [ 157.736452][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 158.502885][ T7100] loop2: detected capacity change from 0 to 4096 [ 158.585903][ T7100] NILFS (loop2): invalid segment: Checksum error in segment payload [ 158.622737][ T7100] NILFS (loop2): trying rollback from an earlier position [ 158.667714][ T7100] NILFS (loop2): recovery complete [ 158.737429][ T7111] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.757093][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.446'. [ 159.861440][ T7123] vxcan4: entered allmulticast mode [ 160.347539][ T7134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'. [ 160.884608][ T7093] syzkaller1: entered promiscuous mode [ 160.919355][ T7093] syzkaller1: entered allmulticast mode [ 161.610716][ T7150] bond0 (unregistering): Released all slaves [ 162.445639][ T7183] ax25_connect(): syz.1.470 uses autobind, please contact jreuter@yaina.de [ 164.463588][ T7200] netlink: 232 bytes leftover after parsing attributes in process `syz.3.477'. [ 164.616698][ T7202] loop5: detected capacity change from 0 to 4096 [ 164.688753][ T7202] NILFS (loop5): invalid segment: Checksum error in segment payload [ 164.728419][ T7202] NILFS (loop5): trying rollback from an earlier position [ 164.865584][ T7202] NILFS (loop5): recovery complete [ 164.904857][ T7212] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.967578][ T7207] xt_CT: No such helper "snmp" [ 166.249218][ T7242] netlink: 232 bytes leftover after parsing attributes in process `syz.3.495'. [ 166.414681][ T5841] Bluetooth: hci5: link tx timeout [ 166.420094][ T5841] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.648609][ T7245] loop1: detected capacity change from 0 to 4096 [ 166.717480][ T7245] NILFS (loop1): invalid segment: Checksum error in segment payload [ 166.761310][ T7245] NILFS (loop1): trying rollback from an earlier position [ 166.843631][ T7245] NILFS (loop1): recovery complete [ 166.895192][ T7261] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.100810][ T7292] netlink: 232 bytes leftover after parsing attributes in process `syz.4.516'. [ 168.462467][ T5841] Bluetooth: hci5: command 0x0405 tx timeout [ 168.675585][ T7301] netlink: 104 bytes leftover after parsing attributes in process `syz.4.522'. [ 169.889399][ T7337] netlink: 232 bytes leftover after parsing attributes in process `syz.0.535'. [ 169.976444][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 169.987273][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 170.008559][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 170.019100][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 170.039876][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 170.049696][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 170.059714][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 170.094898][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 170.104339][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 170.212454][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 170.422240][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 171.351219][ T7376] netlink: 232 bytes leftover after parsing attributes in process `syz.2.553'. [ 171.802054][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.558'. [ 172.366203][ T7405] netlink: 12 bytes leftover after parsing attributes in process `syz.5.563'. [ 172.449143][ T7405] vxcan2: entered allmulticast mode [ 173.252280][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.5.574'. [ 173.506373][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.577'. [ 173.671963][ T7440] netlink: 187320 bytes leftover after parsing attributes in process `syz.5.579'. [ 173.863765][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.582'. [ 173.921572][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.582'. [ 175.573915][ C0] net_ratelimit: 696 callbacks suppressed [ 175.573944][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 175.589530][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 175.598974][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 175.608412][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 175.618457][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 175.651583][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 175.698673][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 175.707877][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 175.717497][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 175.727360][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 175.785522][ T7484] netlink: 104 bytes leftover after parsing attributes in process `syz.0.596'. [ 176.174849][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.5.600'. [ 176.223040][ T7490] netlink: 12 bytes leftover after parsing attributes in process `syz.5.600'. [ 176.596041][ T7501] vxcan6: entered allmulticast mode [ 177.892642][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'. [ 177.950401][ T7519] netlink: 16 bytes leftover after parsing attributes in process `syz.5.611'. [ 177.959996][ T7515] bridge_slave_1: left allmulticast mode [ 177.991104][ T7515] bridge_slave_1: left promiscuous mode [ 177.999640][ T7515] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.018281][ T7515] bridge_slave_0: left allmulticast mode [ 178.024375][ T7515] bridge_slave_0: left promiscuous mode [ 178.054865][ T7515] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.163450][ T7526] netlink: 104 bytes leftover after parsing attributes in process `syz.0.615'. [ 178.975163][ T7549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.625'. [ 179.251698][ T7555] netlink: 104 bytes leftover after parsing attributes in process `syz.0.628'. [ 179.324919][ T7561] netlink: 104 bytes leftover after parsing attributes in process `syz.3.630'. [ 179.839628][ T7563] "syz.0.633" (7563) uses obsolete ecb(arc4) skcipher [ 179.988305][ T7576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.636'. [ 180.086927][ T7576] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.446827][ T7626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.653'. [ 181.643039][ T7626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.678519][ T7629] netlink: 232 bytes leftover after parsing attributes in process `syz.5.654'. [ 182.830925][ T7672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.672'. [ 182.917973][ T7672] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.185090][ T7683] netlink: 1280 bytes leftover after parsing attributes in process `syz.5.677'. [ 183.237496][ T7683] net_ratelimit: 250 callbacks suppressed [ 183.237522][ T7683] openvswitch: netlink: Flow actions attr not present in new flow. [ 185.534154][ T7729] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.696'. [ 185.581457][ T7729] openvswitch: netlink: Flow actions attr not present in new flow. [ 186.064845][ T7731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.697'. [ 187.047379][ T7740] loop4: detected capacity change from 0 to 4096 [ 187.156217][ T7740] NILFS (loop4): invalid segment: Checksum error in segment payload [ 187.225418][ T7740] NILFS (loop4): trying rollback from an earlier position [ 187.331437][ T7740] NILFS (loop4): recovery complete [ 187.401654][ T7756] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.790935][ T7765] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.712'. [ 187.854717][ T7770] netlink: 4 bytes leftover after parsing attributes in process `syz.5.714'. [ 187.857088][ T7765] openvswitch: netlink: Flow actions attr not present in new flow. [ 187.884685][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.715'. [ 188.600411][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 188.609997][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 188.631455][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 188.643593][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 188.761073][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 188.773597][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 188.789500][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 188.801992][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 188.814199][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 188.828654][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 189.154333][ T7787] netlink: 232 bytes leftover after parsing attributes in process `syz.2.722'. [ 189.533978][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.5.728'. [ 189.658215][ T7803] netlink: 108 bytes leftover after parsing attributes in process `syz.3.729'. [ 190.436572][ T7811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.732'. [ 191.428865][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.738'. [ 191.955164][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.745'. [ 191.983693][ T7843] netlink: 108 bytes leftover after parsing attributes in process `syz.0.746'. [ 194.115935][ T7902] __nla_validate_parse: 1 callbacks suppressed [ 194.115961][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.772'. [ 194.195152][ T7905] netlink: 104 bytes leftover after parsing attributes in process `syz.1.773'. [ 195.526759][ T7932] netlink: 108 bytes leftover after parsing attributes in process `syz.0.784'. [ 196.572219][ T7969] netlink: 104 bytes leftover after parsing attributes in process `syz.3.801'. [ 197.003598][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'. [ 197.044724][ T7984] bridge_slave_1: left allmulticast mode [ 197.074238][ T7984] bridge_slave_1: left promiscuous mode [ 197.121885][ T7984] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.179486][ T7984] bridge_slave_0: left allmulticast mode [ 197.217262][ T7984] bridge_slave_0: left promiscuous mode [ 197.241608][ T7984] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.587813][ T8009] netlink: 104 bytes leftover after parsing attributes in process `syz.2.819'. [ 198.993403][ T8023] netlink: 232 bytes leftover after parsing attributes in process `syz.5.826'. [ 199.027323][ T8028] netlink: 60 bytes leftover after parsing attributes in process `syz.3.825'. [ 199.039230][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.039329][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.071631][ T8025] netlink: 60 bytes leftover after parsing attributes in process `syz.3.825'. [ 199.753764][ T8049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.835'. [ 200.989780][ T8057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.839'. [ 202.971602][ T8055] vxcan2: entered allmulticast mode [ 202.991083][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.844'. [ 203.000400][ T8074] netlink: 232 bytes leftover after parsing attributes in process `syz.0.846'. [ 203.330564][ T8090] netlink: 108 bytes leftover after parsing attributes in process `syz.0.852'. [ 204.437951][ T8099] netlink: 'syz.2.853': attribute type 29 has an invalid length. [ 204.793448][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.859'. [ 208.213625][ T8167] netlink: 104 bytes leftover after parsing attributes in process `syz.4.883'. [ 209.037276][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.878'. [ 210.736966][ C1] net_ratelimit: 250 callbacks suppressed [ 210.736994][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 210.759548][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 210.768930][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 210.786958][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 210.796425][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 210.816151][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 210.830619][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 210.848976][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 210.858479][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 210.876174][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 213.284009][ T8187] netlink: 60 bytes leftover after parsing attributes in process `syz.2.890'. [ 215.356586][ T8185] netlink: 60 bytes leftover after parsing attributes in process `syz.2.890'. [ 215.762883][ T8241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.913'. [ 216.312073][ T8256] loop5: detected capacity change from 0 to 512 [ 216.377737][ T8256] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.919: corrupted in-inode xattr: invalid ea_ino [ 216.470004][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 216.470035][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 216.470085][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 216.476149][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 216.482567][ T8256] EXT4-fs error (device loop5): ext4_orphan_get:1392: comm syz.5.919: couldn't read orphan inode 15 (err -117) [ 216.488202][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 216.571003][ T8256] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.686685][ T8265] loop2: detected capacity change from 0 to 512 [ 216.741105][ T5829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.804180][ T8307] netlink: 20 bytes leftover after parsing attributes in process `syz.2.942'. [ 219.217977][ T8317] netlink: 72 bytes leftover after parsing attributes in process `syz.2.947'. [ 219.279977][ T8317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.947'. [ 220.095398][ T8342] netlink: 32 bytes leftover after parsing attributes in process `syz.1.959'. [ 220.363843][ T8344] netlink: 20 bytes leftover after parsing attributes in process `syz.0.960'. [ 220.471461][ T6567] wlan1: Trigger new scan to find an IBSS to join [ 220.504110][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.5.963'. [ 220.575715][ T8352] bridge_slave_1: left allmulticast mode [ 220.588800][ T8352] bridge_slave_1: left promiscuous mode [ 220.615766][ T8352] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.651337][ T5895] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 220.659797][ T8352] bridge_slave_0: left allmulticast mode [ 220.681602][ T8352] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.698574][ T8358] netlink: 72 bytes leftover after parsing attributes in process `syz.2.967'. [ 220.714737][ T8358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.967'. [ 220.811411][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 220.822602][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.858887][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.897258][ T5895] usb 4-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 220.931333][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.963849][ T5895] usb 4-1: config 0 descriptor?? [ 221.941383][ T5895] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 221.948697][ T5895] microsoft 0003:045E:00F9.0002: unbalanced collection at end of report description [ 222.037588][ T5895] microsoft 0003:045E:00F9.0002: parse failed [ 222.111387][ T5895] microsoft 0003:045E:00F9.0002: probe with driver microsoft failed with error -22 [ 222.221713][ T5895] usb 4-1: USB disconnect, device number 3 [ 222.364288][ T8380] Illegal XDP return value 4294967274 on prog (id 111) dev syz_tun, expect packet loss! [ 222.565341][ T8387] netlink: 1272 bytes leftover after parsing attributes in process `syz.4.977'. [ 222.631431][ T8387] net_ratelimit: 250 callbacks suppressed [ 222.631459][ T8387] openvswitch: netlink: Flow actions attr not present in new flow. [ 222.727504][ T8389] netlink: 20 bytes leftover after parsing attributes in process `syz.1.978'. [ 224.475729][ T5901] wlan1: Trigger new scan to find an IBSS to join [ 224.857542][ T8427] __nla_validate_parse: 2 callbacks suppressed [ 224.857568][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.994'. [ 225.271739][ T8437] netlink: 72 bytes leftover after parsing attributes in process `syz.4.999'. [ 225.321730][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.999'. [ 226.016999][ T8440] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.1000'. [ 226.065932][ T8440] openvswitch: netlink: Flow actions attr not present in new flow. [ 226.336278][ T12] wlan1: Creating new IBSS network, BSSID 7e:fa:26:c8:01:4e [ 226.980628][ T8472] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1015'. [ 228.402442][ T8489] loop5: detected capacity change from 0 to 128 [ 229.262081][ T8489] ======================================================= [ 229.262081][ T8489] WARNING: The mand mount option has been deprecated and [ 229.262081][ T8489] and is ignored by this kernel. Remove the mand [ 229.262081][ T8489] option from the mount to silence this warning. [ 229.262081][ T8489] ======================================================= [ 230.216203][ T8514] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1032'. [ 230.280418][ T8506] loop1: detected capacity change from 0 to 8192 [ 230.310937][ T8516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1033'. [ 230.487585][ T8520] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1035'. [ 230.642596][ T8522] loop2: detected capacity change from 0 to 512 [ 230.667433][ T8522] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 230.736956][ T8522] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.1036: invalid block [ 230.760944][ T8522] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #11: comm syz.2.1036: invalid indirect mapped block 4294967295 (level 1) [ 230.788186][ T8522] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #11: comm syz.2.1036: invalid indirect mapped block 4294967295 (level 1) [ 230.807486][ T8522] EXT4-fs (loop2): 2 truncates cleaned up [ 230.814492][ T8522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.818755][ T8528] vxcan6: entered allmulticast mode [ 232.143033][ T8537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1041'. [ 232.486847][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.839422][ T8552] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1048'. [ 233.077312][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1045'. [ 233.196081][ T8557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1049'. [ 233.500561][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1052'. [ 233.638865][ T8564] fuse: Bad value for 'fd' [ 233.657543][ T8572] loop4: detected capacity change from 0 to 128 [ 233.682394][ T8572] vfat: Bad value for 'gid' [ 233.687245][ T8572] vfat: Bad value for 'gid' [ 233.746696][ T8572] loop4: detected capacity change from 0 to 512 [ 233.780370][ T8572] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 233.834506][ T8576] loop5: detected capacity change from 0 to 512 [ 233.858575][ T8572] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 233.940121][ T8576] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.959046][ T8579] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1059'. [ 233.961613][ T8572] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 234.023511][ T8576] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.078847][ T8572] EXT4-fs (loop4): 1 truncate cleaned up [ 234.096445][ T8572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.342872][ T5829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.896574][ T8597] netlink: 'syz.4.1056': attribute type 2 has an invalid length. [ 235.384965][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1067'. [ 235.603879][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 235.660808][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 235.670085][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 235.675449][ T5850] Bluetooth: hci5: command 0x0405 tx timeout [ 235.684947][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 235.685099][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 235.685245][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 235.754382][ T8610] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 235.771598][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 235.780647][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 235.789753][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 235.798880][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 235.871171][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.582273][ T8622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1074'. [ 236.749501][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1076'. [ 236.758808][ T8629] bridge_slave_1: left allmulticast mode [ 236.821377][ T8629] bridge_slave_1: left promiscuous mode [ 236.842063][ T8629] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.967869][ T8629] bridge_slave_0: left allmulticast mode [ 237.001522][ T8629] bridge_slave_0: left promiscuous mode [ 237.068906][ T8629] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.222135][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1079'. [ 238.601026][ T8655] loop4: detected capacity change from 0 to 512 [ 238.671092][ T8655] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 238.825711][ T8664] netlink: 1272 bytes leftover after parsing attributes in process `syz.5.1092'. [ 239.131534][ T8668] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1094'. [ 239.441616][ T8674] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1097'. [ 239.699540][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1100'. [ 240.572940][ T8688] loop5: detected capacity change from 0 to 8 [ 241.032095][ T8704] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1107'. [ 241.162775][ T8708] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1109'. [ 241.236004][ T8708] vxcan2: entered allmulticast mode [ 241.485408][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1113'. [ 241.519616][ C0] Unknown status report in ack skb [ 241.692093][ T8720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1115'. [ 241.746508][ T8723] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1116'. [ 242.298549][ T8739] loop3: detected capacity change from 0 to 256 [ 242.503806][ T8739] exFAT-fs (loop3): start_clu is invalid cluster(0x400) [ 242.743682][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1125'. [ 243.303084][ T8763] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1132'. [ 243.337828][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1133'. [ 243.351366][ T5893] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 243.501673][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 243.506750][ T8771] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1136'. [ 243.536780][ T5893] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.569580][ T5893] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.570405][ T5918] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 243.604887][ T5893] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 243.620948][ T5893] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 243.644937][ T5893] usb 2-1: Product: syz [ 243.649354][ T5893] usb 2-1: Manufacturer: syz [ 243.726810][ T5893] hub 2-1:4.0: USB hub found [ 243.792654][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 243.851608][ T5918] usb 5-1: config 1 interface 0 altsetting 135 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.872211][ T5918] usb 5-1: config 1 interface 0 has no altsetting 0 [ 243.909311][ T5918] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.40 [ 243.921087][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.941443][ T5918] usb 5-1: Product: syz [ 243.941674][ T5893] hub 2-1:4.0: 2 ports detected [ 243.945860][ T5918] usb 5-1: Manufacturer: syz [ 243.965781][ T5918] usb 5-1: SerialNumber: syz [ 244.238244][ T5918] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input6 [ 244.291644][ T5918] usb 5-1: USB disconnect, device number 3 [ 244.291778][ C1] appletouch 5-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 244.347692][ T5893] hub 2-1:4.0: set hub depth failed [ 244.382358][ T5893] usb 2-1: USB disconnect, device number 5 [ 244.433927][ T5918] appletouch 5-1:1.0: input: appletouch disconnected [ 244.538409][ T8790] loop2: detected capacity change from 0 to 512 [ 244.564380][ T8790] EXT4-fs: inline encryption not supported [ 244.599400][ T8790] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 244.926339][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1147'. [ 246.798725][ T8828] loop4: detected capacity change from 0 to 256 [ 246.806745][ T8828] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 246.829450][ T8828] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 247.066525][ T8836] __nla_validate_parse: 3 callbacks suppressed [ 247.066551][ T8836] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1164'. [ 248.487863][ T8845] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1167'. [ 249.018799][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1173'. [ 250.556760][ T8878] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.1177'. [ 250.651506][ T8878] net_ratelimit: 251 callbacks suppressed [ 250.651534][ T8878] openvswitch: netlink: Flow actions attr not present in new flow. [ 250.908108][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 250.917356][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 250.941657][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 250.950781][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 250.960221][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 250.969518][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 250.980284][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 250.989647][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 250.998946][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 251.043509][ T8887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1182'. [ 251.561871][ T8901] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1188'. [ 251.851952][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1190'. [ 251.885129][ T8908] loop2: detected capacity change from 0 to 1764 [ 252.002337][ T8912] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1193'. [ 252.339012][ T8921] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.1198'. [ 252.458317][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1196'. [ 252.564364][ T8928] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 252.640905][ T8928] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 254.265697][ T8953] loop3: detected capacity change from 0 to 2048 [ 254.587054][ T8953] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 255.570162][ T8965] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1212'. [ 256.074520][ C1] net_ratelimit: 512 callbacks suppressed [ 256.074547][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 256.090062][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 256.099988][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 256.109228][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 256.118505][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 256.127693][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 256.136958][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 256.146321][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 256.156889][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 256.166357][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 256.401023][ T52] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 257.200803][ T8989] loop1: detected capacity change from 0 to 2048 [ 257.232636][ T8989] EXT4-fs: Ignoring removed nobh option [ 257.345077][ T8989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.393485][ T8989] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.820031][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.409620][ T9029] loop1: detected capacity change from 0 to 128 [ 260.466960][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.476738][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.225859][ T5918] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 262.685828][ T9048] netlink: 'syz.0.1244': attribute type 4 has an invalid length. [ 262.811374][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 262.830727][ T5918] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 262.901328][ T5894] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 262.927583][ T5918] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 262.936795][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.968911][ T5918] usb 3-1: Product: syz [ 262.982604][ T5918] usb 3-1: Manufacturer: syz [ 262.987266][ T5918] usb 3-1: SerialNumber: syz [ 263.017561][ T5918] usb 3-1: config 0 descriptor?? [ 263.028370][ T9040] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 263.077604][ T5918] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 263.326538][ T9] usb 3-1: USB disconnect, device number 4 [ 263.336401][ T5894] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 263.351308][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.382926][ T5894] usb 4-1: config 0 descriptor?? [ 264.361360][ T5894] cp210x 4-1:0.0: cp210x converter detected [ 264.581332][ T5894] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 264.611565][ T9079] 9pnet_fd: Insufficient options for proto=fd [ 264.619279][ T5894] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 264.667991][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 265.757554][ T5894] usb 4-1: cp210x converter now attached to ttyUSB0 [ 265.947933][ T5894] usb 4-1: USB disconnect, device number 4 [ 266.011976][ T9090] loop1: detected capacity change from 0 to 512 [ 266.023040][ T5894] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 266.048241][ T5894] cp210x 4-1:0.0: device disconnected [ 266.085478][ T9090] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 266.221579][ T9090] EXT4-fs error (device loop1): ext4_clear_blocks:874: inode #13: comm syz.1.1260: attempt to clear invalid blocks 2 len 1 [ 266.242549][ T9095] loop5: detected capacity change from 0 to 512 [ 266.387957][ T9095] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.418353][ T9090] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 266.438442][ T9095] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.572798][ T9090] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #13: comm syz.1.1260: invalid indirect mapped block 1819239214 (level 0) [ 266.672217][ T9090] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #13: comm syz.1.1260: invalid indirect mapped block 1819239214 (level 1) [ 266.803766][ T9090] EXT4-fs (loop1): 1 truncate cleaned up [ 266.828284][ T9090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.985694][ T5829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.263168][ T5842] EXT4-fs error (device loop1): htree_dirblock_to_tree:1109: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 267.460330][ T5842] ------------[ cut here ]------------ [ 267.466122][ T5842] bad length passed for symlink [/tmp/syz-imagegen2884317625/] (got 39, expected 29) [ 267.473048][ T5842] WARNING: CPU: 0 PID: 5842 at ./include/linux/fs.h:802 __ext4_iget+0x3aa2/0x4310 [ 267.492338][ T5842] Modules linked in: [ 267.496512][ T5842] CPU: 0 UID: 0 PID: 5842 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller #0 [ 267.506071][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 267.516449][ T5842] RIP: 0010:__ext4_iget+0x3aa2/0x4310 [ 267.522279][ T5842] Code: e8 63 16 49 ff c6 05 1b 32 da 0d 01 90 8b 95 10 ff ff ff 44 89 e1 48 c7 c7 00 4b 85 8b 48 8b b5 f8 fe ff ff e8 2f 50 09 ff 90 <0f> 0b 90 90 e9 2d fd ff ff e8 30 57 ab ff e9 f6 e6 ff ff e8 06 56 [ 267.542121][ T5842] RSP: 0018:ffffc9000389f810 EFLAGS: 00010286 [ 267.548243][ T5842] RAX: 0000000000000000 RBX: ffff88807a0ce5cc RCX: ffffffff817a1229 [ 267.556296][ T5842] RDX: ffff88807e20da00 RSI: ffffffff817a1236 RDI: 0000000000000001 [ 267.565184][ T5842] RBP: ffffc9000389f960 R08: 0000000000000001 R09: 0000000000000000 [ 267.574086][ T5842] R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000001d [ 267.582250][ T5842] R13: 0000000000000000 R14: 0000000000002000 R15: ffff88807a0ce5c0 [ 267.590272][ T5842] FS: 000055558ce57500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 267.599330][ T5842] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 267.605988][ T5842] CR2: 00007f3452cd56c0 CR3: 0000000034db0000 CR4: 0000000000350ef0 [ 267.614036][ T5842] Call Trace: [ 267.617349][ T5842] [ 267.620320][ T5842] ? __warn+0xea/0x3c0 [ 267.624689][ T5842] ? __ext4_iget+0x3aa2/0x4310 [ 267.629515][ T5842] ? report_bug+0x3c0/0x580 [ 267.634361][ T5842] ? handle_bug+0x54/0xa0 [ 267.638748][ T5842] ? exc_invalid_op+0x17/0x50 [ 267.643690][ T5842] ? asm_exc_invalid_op+0x1a/0x20 [ 267.648787][ T5842] ? __warn_printk+0x199/0x350 [ 267.653783][ T5842] ? __warn_printk+0x1a6/0x350 [ 267.658600][ T5842] ? __ext4_iget+0x3aa2/0x4310 [ 267.664205][ T5842] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 267.669640][ T5842] ? __pfx___ext4_iget+0x10/0x10 [ 267.675494][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.681366][ T5842] ? kfree+0x260/0x4d0 [ 267.685507][ T5842] ext4_lookup+0x37e/0x730 [ 267.689989][ T5842] ? __pfx_ext4_lookup+0x10/0x10 [ 267.695070][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.700787][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.706542][ T5842] __lookup_slow+0x252/0x470 [ 267.711245][ T5842] ? __pfx___lookup_slow+0x10/0x10 [ 267.716424][ T5842] ? walk_component+0x342/0x5b0 [ 267.721452][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.727156][ T5842] ? lookup_fast+0x153/0x5f0 [ 267.731874][ T5842] walk_component+0x350/0x5b0 [ 267.736616][ T5842] path_lookupat+0x17f/0x770 [ 267.741536][ T5842] filename_lookup+0x221/0x5f0 [ 267.746408][ T5842] ? __pfx_filename_lookup+0x10/0x10 [ 267.751850][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.757608][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.763387][ T5842] ? getname_flags.part.0+0x1c5/0x550 [ 267.769681][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.776287][ T5842] user_path_at+0x3a/0x60 [ 267.780729][ T5842] __x64_sys_umount+0x10b/0x1a0 [ 267.785832][ T5842] ? __pfx___x64_sys_umount+0x10/0x10 [ 267.791360][ T5842] do_syscall_64+0xcd/0x250 [ 267.795935][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.801954][ T5842] RIP: 0033:0x7fd794d8e117 [ 267.806423][ T5842] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 267.826205][ T5842] RSP: 002b:00007ffc41287148 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 267.834770][ T5842] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd794d8e117 [ 267.842865][ T5842] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc41287200 [ 267.850881][ T5842] RBP: 00007ffc41287200 R08: 0000000000000000 R09: 0000000000000000 [ 267.858992][ T5842] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc412882f0 [ 267.867060][ T5842] R13: 00007fd794e0e08c R14: 000000000004136f R15: 00007ffc4128a4b0 [ 267.876037][ T5842] [ 267.879103][ T5842] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 267.886414][ T5842] CPU: 0 UID: 0 PID: 5842 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller #0 [ 267.895745][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 267.905840][ T5842] Call Trace: [ 267.909237][ T5842] [ 267.912199][ T5842] dump_stack_lvl+0x3d/0x1f0 [ 267.916857][ T5842] panic+0x71d/0x800 [ 267.920875][ T5842] ? __pfx_panic+0x10/0x10 [ 267.925332][ T5842] ? show_trace_log_lvl+0x29d/0x3d0 [ 267.930588][ T5842] ? check_panic_on_warn+0x1f/0xb0 [ 267.935737][ T5842] ? __ext4_iget+0x3aa2/0x4310 [ 267.940537][ T5842] check_panic_on_warn+0xab/0xb0 [ 267.945509][ T5842] __warn+0xf6/0x3c0 [ 267.949433][ T5842] ? __ext4_iget+0x3aa2/0x4310 [ 267.954232][ T5842] report_bug+0x3c0/0x580 [ 267.958595][ T5842] handle_bug+0x54/0xa0 [ 267.962784][ T5842] exc_invalid_op+0x17/0x50 [ 267.967329][ T5842] asm_exc_invalid_op+0x1a/0x20 [ 267.972220][ T5842] RIP: 0010:__ext4_iget+0x3aa2/0x4310 [ 267.977625][ T5842] Code: e8 63 16 49 ff c6 05 1b 32 da 0d 01 90 8b 95 10 ff ff ff 44 89 e1 48 c7 c7 00 4b 85 8b 48 8b b5 f8 fe ff ff e8 2f 50 09 ff 90 <0f> 0b 90 90 e9 2d fd ff ff e8 30 57 ab ff e9 f6 e6 ff ff e8 06 56 [ 267.997269][ T5842] RSP: 0018:ffffc9000389f810 EFLAGS: 00010286 [ 268.003376][ T5842] RAX: 0000000000000000 RBX: ffff88807a0ce5cc RCX: ffffffff817a1229 [ 268.011368][ T5842] RDX: ffff88807e20da00 RSI: ffffffff817a1236 RDI: 0000000000000001 [ 268.019364][ T5842] RBP: ffffc9000389f960 R08: 0000000000000001 R09: 0000000000000000 [ 268.027384][ T5842] R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000001d [ 268.035372][ T5842] R13: 0000000000000000 R14: 0000000000002000 R15: ffff88807a0ce5c0 [ 268.043372][ T5842] ? __warn_printk+0x199/0x350 [ 268.048165][ T5842] ? __warn_printk+0x1a6/0x350 [ 268.052961][ T5842] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 268.058368][ T5842] ? __pfx___ext4_iget+0x10/0x10 [ 268.063341][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.069030][ T5842] ? kfree+0x260/0x4d0 [ 268.073147][ T5842] ext4_lookup+0x37e/0x730 [ 268.077603][ T5842] ? __pfx_ext4_lookup+0x10/0x10 [ 268.082594][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.088272][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.093957][ T5842] __lookup_slow+0x252/0x470 [ 268.098573][ T5842] ? __pfx___lookup_slow+0x10/0x10 [ 268.103716][ T5842] ? walk_component+0x342/0x5b0 [ 268.108609][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.114282][ T5842] ? lookup_fast+0x153/0x5f0 [ 268.118911][ T5842] walk_component+0x350/0x5b0 [ 268.123625][ T5842] path_lookupat+0x17f/0x770 [ 268.128256][ T5842] filename_lookup+0x221/0x5f0 [ 268.133069][ T5842] ? __pfx_filename_lookup+0x10/0x10 [ 268.138389][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.144107][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.149789][ T5842] ? getname_flags.part.0+0x1c5/0x550 [ 268.155192][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.160881][ T5842] user_path_at+0x3a/0x60 [ 268.165256][ T5842] __x64_sys_umount+0x10b/0x1a0 [ 268.170155][ T5842] ? __pfx___x64_sys_umount+0x10/0x10 [ 268.175585][ T5842] do_syscall_64+0xcd/0x250 [ 268.180123][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.186066][ T5842] RIP: 0033:0x7fd794d8e117 [ 268.190511][ T5842] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 268.210151][ T5842] RSP: 002b:00007ffc41287148 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 268.218605][ T5842] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd794d8e117 [ 268.226602][ T5842] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc41287200 [ 268.234597][ T5842] RBP: 00007ffc41287200 R08: 0000000000000000 R09: 0000000000000000 [ 268.242587][ T5842] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc412882f0 [ 268.250573][ T5842] R13: 00007fd794e0e08c R14: 000000000004136f R15: 00007ffc4128a4b0 [ 268.258595][ T5842] [ 268.261832][ T5842] Kernel Offset: disabled [ 268.266238][ T5842] Rebooting in 86400 seconds..