last executing test programs: 13.1024703s ago: executing program 2 (id=926): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "0000000000034000"}}}]}, 0x48}}, 0x0) 12.047120793s ago: executing program 0 (id=927): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) write(r0, &(0x7f0000001500)="2700000014000707030e0000120f080011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 12.006633517s ago: executing program 1 (id=928): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000007c850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 11.924053134s ago: executing program 2 (id=929): sched_setscheduler(0x0, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) inotify_init1(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, 0x0, 0x811) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$msr(r4, &(0x7f0000000180)=""/174, 0xae) 11.784430916s ago: executing program 0 (id=932): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00') 11.435724226s ago: executing program 0 (id=934): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000000700008877fbac0c1416e000030a89079f03b18000440c0511e0845013f2325f000708050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/251, 0x0, 0xfe, 0x60000000}, 0x50) 9.779930102s ago: executing program 2 (id=936): syz_usb_connect$cdc_ecm(0x0, 0x6f, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) 9.309330483s ago: executing program 1 (id=937): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x44, &(0x7f0000000040)=0x9) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000380)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000001400)}}], 0x1, 0x40002002, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f030e00260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2f, 0xffffff99, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00128800631177fbac14030a44079f03fe800000ff020000000000000000ffff3a050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77523c899b699eeaa0eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000380)="b101000000353b", &(0x7f0000000000), 0x0, 0x700}, 0x2c) 9.280686066s ago: executing program 0 (id=940): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0x10, 0x8}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000196c0)=ANY=[@ANYBLOB="4c00000002060108000000000000000000000000110003006d3b9cc3686173683a69702c6d61726b00000000050001000700000005000500020000000900020073797a300000"], 0x4c}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000004040)=[{{0x0, 0x45, &(0x7f0000003d00)=[{&(0x7f0000003c40)="a924499df30c135979a363743f2a92a45c92a76c9a4ee4", 0x17}], 0x1, &(0x7f0000003d40)=ANY=[], 0x2e0}}], 0x1, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000019840)=ANY=[@ANYBLOB="1c000000f251ef5c60ee4d52070601080000f2e7e8eef896232b000074c1aba8b1e578b35922a3501050cce29d499062a29eb9ea9c05eeea26d99fb824ae9296d3d4b2a40addc9e5e1efc1dc78d580acd575afa397bbdecdbbfa940ce6fe2895efe01fb2c2bce053162c4312929b077e7ac7abf35fb38a3f8aa5ebe1a7d1cecef83786a0e3aba96dd211a6afb64b0e05bdaef8a13d2ff5db66fe88f5140ba83c9df904499978304771de032ee2d1ac021622018bc9b09aad0350fef5182bcc11d2ba683be067473292c6b26cfbf389641217f0b4b4f25726010001000000000063e660e4d381d60f993afd8a0cd1fffe04c513f61049bbb88dfb7f8b9c795445323c4f3f56afc271ba057354012748567a2364fc3b9b5f473abb92b2f528ed552c387c4c3ad0a32eaf129330bd90de7b160a4146d591c335544b73bd7d8d5ec0a7"], 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x18, 0x4, 0x0, 0x0, 0x60, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@local}, {@remote}, {@multicast2}, {@private}, {}]}, @generic={0x7, 0x11, "2b68a780aff0ac19cf8c9de8d561a1"}, @noop, @noop]}}}}}) r6 = socket$inet(0x2, 0x3, 0x4) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000d00)={'geneve0\x00', 0x0}) 8.971658123s ago: executing program 1 (id=942): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000100)=[0x0], 0x1}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') read(r2, &(0x7f0000001a00)=""/177, 0xb1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000040)={0x0, @bt={0x5, 0xfffffff8, 0x1, 0x3, 0x400, 0x4, 0x7ff, 0xffffe83b, 0xb, 0xfffffff9, 0x0, 0x9, 0x400, 0x9, 0x1, 0x2, {0x2, 0x7}, 0x3, 0x5}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x3, 0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x22000, 0x0) ioctl$BLKREPORTZONE(r4, 0xc0101282, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) 8.964201944s ago: executing program 3 (id=943): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="0203000220000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000006000100006005000500000000000a00000000000000ff01000000000000000000000000000100000000000000001200080008"], 0x100}}, 0x0) 8.556095949s ago: executing program 3 (id=944): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000200)={[{@noblock_validity}, {@sysvgroups}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x20000008) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x86) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='.\x02\x00') 7.273302562s ago: executing program 3 (id=946): sched_setscheduler(0x0, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) inotify_init1(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, 0x0, 0x811) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$msr(r4, &(0x7f0000000180)=""/174, 0xae) 7.197885128s ago: executing program 1 (id=948): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x9) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)=0x8) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) 7.122819755s ago: executing program 4 (id=949): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x20002, 0x8000}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bind$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 6.990240407s ago: executing program 4 (id=950): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000000700008877fbac0c1416e000030a89079f03b18000440c0511e0845013f2325f000708050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/251, 0x0, 0xfe, 0x60000000}, 0x50) 2.307726447s ago: executing program 3 (id=951): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0xfc, 0xc41, &(0x7f0000001b80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket(0x1, 0x803, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x4000, 0x92, 0x2f}, 0x18) linkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000300)='./file0\x00', 0x800) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r3, &(0x7f0000000700), 0x0, 0x40040, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 2.183969619s ago: executing program 2 (id=952): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x44, &(0x7f0000000040)=0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000380)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000001400)}}], 0x1, 0x40002002, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f030e00260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2f, 0xffffff99, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00128800631177fbac14030a44079f03fe800000ff020000000000000000ffff3a050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77523c899b699eeaa0eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000380)="b101000000353b", &(0x7f0000000000), 0x0, 0x700}, 0x2c) 2.183621209s ago: executing program 0 (id=953): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 2.183295699s ago: executing program 1 (id=954): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x20, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xffff744f, 0x0, 0x0, 0x0, 0x80000001}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}]}, &(0x7f00000003c0)='syzkaller\x00', 0x8, 0xb8, &(0x7f00000006c0)=""/184, 0x41000, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x4, 0x6, 0x101}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000a80)=[{0x1, 0x3, 0x9, 0x2}, {0x1, 0x2, 0xe}, {0x1, 0x0, 0x5, 0x5}], 0x10, 0x5, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) fsopen(&(0x7f00000001c0)='erofs\x00', 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) 2.179884339s ago: executing program 4 (id=955): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000018c0)={&(0x7f0000000500)={0x24, @long}, 0x14, &(0x7f0000001880)={0x0, 0x64}}, 0x0) 2.057506039s ago: executing program 4 (id=956): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000300)=[@in={0x2, 0x4, @remote}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e22}, @in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, @in={0x2, 0x0, @local}], 0x5c) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xfe33) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000000406010100000000ffffffffffffff040500010007"], 0x44}}, 0x0) 1.931954771s ago: executing program 2 (id=957): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x86) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='.\x02\x00') 1.786904353s ago: executing program 0 (id=958): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000100)=[0x0], 0x1}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') read(r2, &(0x7f0000001a00)=""/177, 0xb1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000040)={0x0, @bt={0x5, 0xfffffff8, 0x1, 0x3, 0x400, 0x4, 0x7ff, 0xffffe83b, 0xb, 0xfffffff9, 0x0, 0x9, 0x400, 0x9, 0x1, 0x2, {0x2, 0x7}, 0x3, 0x5}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x3, 0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x22000, 0x0) ioctl$BLKREPORTZONE(r4, 0xc0101282, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) 1.234949772s ago: executing program 3 (id=959): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r0, 0x1, 0x1070bd2c, 0x4, {0x5}}, 0x14}}, 0x20) 237.011479ms ago: executing program 4 (id=960): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x20002, 0x8000}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bind$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 152.039087ms ago: executing program 3 (id=961): sched_setscheduler(0x0, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) inotify_init1(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, 0x0, 0x811) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$msr(r4, &(0x7f0000000180)=""/174, 0xae) 143.040188ms ago: executing program 2 (id=962): syz_usb_connect$cdc_ecm(0x0, 0x6f, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) 104.733741ms ago: executing program 1 (id=963): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000005400000008000300", @ANYRES32=r4, @ANYBLOB="0a0006"], 0x28}}, 0x0) 0s ago: executing program 4 (id=964): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x9) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)=0x8) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) kernel console output (not intermixed with test programs): is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.338056][ T5777] loop3: detected capacity change from 0 to 16 [ 247.469671][ T5777] erofs: (device loop3): mounted with root inode @ nid 36. [ 247.477664][ T5702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.708245][ T5702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.741771][ T5702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.770469][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.917052][ T5702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.789360][ T5702] device hsr_slave_0 entered promiscuous mode [ 248.835711][ T5702] device hsr_slave_1 entered promiscuous mode [ 248.981412][ T5806] xt_hashlimit: Unknown mode mask 312C7057, kernel too old? [ 249.151398][ T5328] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 249.401539][ T3930] device hsr_slave_0 left promiscuous mode [ 249.421343][ T5328] usb 1-1: Using ep0 maxpacket: 16 [ 249.440001][ T3930] device hsr_slave_1 left promiscuous mode [ 249.490367][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.530971][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.541598][ T5328] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 249.565140][ T5328] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 249.587888][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.610352][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.632754][ T5328] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.649149][ T3930] device bridge_slave_1 left promiscuous mode [ 249.658063][ T3930] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.694923][ T3930] device bridge_slave_0 left promiscuous mode [ 249.710057][ T5328] usb 1-1: config 0 descriptor?? [ 249.721032][ T3930] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.778798][ T5328] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 249.806031][ T3930] device veth1_macvtap left promiscuous mode [ 249.837259][ T3930] device veth0_macvtap left promiscuous mode [ 249.861764][ T3930] device veth1_vlan left promiscuous mode [ 249.890132][ T3930] device veth0_vlan left promiscuous mode [ 250.084667][ T4528] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 250.116747][ T5798] loop4: detected capacity change from 0 to 40427 [ 250.177341][ T5798] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 250.192738][ T5798] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 250.227799][ T5798] F2FS-fs (loop4): invalid crc value [ 250.258371][ T5798] F2FS-fs (loop4): Found nat_bits in checkpoint [ 250.325889][ T5801] udc-core: couldn't find an available UDC or it's busy [ 250.339055][ T5801] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 250.394681][ T5798] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 250.408437][ T5798] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 250.517106][ T3930] team0 (unregistering): Port device team_slave_1 removed [ 250.558816][ T3930] team0 (unregistering): Port device team_slave_0 removed [ 250.580257][ T3930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.254997][ T4023] usb 1-1: USB disconnect, device number 5 [ 255.289377][ T3930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.776927][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.783489][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.700015][ T3930] bond0 (unregistering): Released all slaves [ 260.845256][ T5839] device pim6reg1 entered promiscuous mode [ 261.633482][ T5859] loop1: detected capacity change from 0 to 16 [ 261.740200][ T5859] erofs: (device loop1): mounted with root inode @ nid 36. [ 261.983001][ T5863] xt_hashlimit: Unknown mode mask 312C7057, kernel too old? [ 262.604009][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 262.964878][ T5702] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 263.032487][ T4019] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 263.274424][ T5702] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 264.903271][ T4111] Bluetooth: hci1: command 0x0409 tx timeout [ 265.263547][ T4019] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 265.582248][ T4019] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 265.624208][ T4019] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.652007][ T4019] usb 2-1: string descriptor 0 read error: -71 [ 268.658347][ T4019] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 268.671625][ T4019] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.743676][ T5702] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 268.762149][ T4019] usb 2-1: can't set config #1, error -71 [ 268.787779][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.800000][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.856458][ T4019] usb 2-1: USB disconnect, device number 3 [ 268.880354][ T5854] device bridge_slave_0 entered promiscuous mode [ 268.923796][ T5702] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 268.964785][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.988679][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.010623][ T5854] device bridge_slave_1 entered promiscuous mode [ 269.136151][ T5918] loop3: detected capacity change from 0 to 16 [ 269.148895][ T5909] device pim6reg1 entered promiscuous mode [ 269.263144][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.294770][ T5918] erofs: (device loop3): mounted with root inode @ nid 36. [ 269.422774][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.651318][ T4308] Bluetooth: hci1: command 0x041b tx timeout [ 271.040228][ T5854] team0: Port device team_slave_0 added [ 271.062163][ T5929] xt_hashlimit: Unknown mode mask 312C7057, kernel too old? [ 271.070364][ T5916] usb usb8: usbfs: process 5916 (syz.0.490) did not claim interface 0 before use [ 271.130389][ T5854] team0: Port device team_slave_1 added [ 273.466780][ T3616] Bluetooth: hci1: command 0x040f tx timeout [ 274.211233][ T4348] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 277.380805][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.397871][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.424128][ C1] vkms_vblank_simulate: vblank timer overrun [ 277.453268][ T5949] loop1: detected capacity change from 0 to 8 [ 277.523451][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.643028][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.650020][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.677437][ C1] vkms_vblank_simulate: vblank timer overrun [ 277.794839][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.827144][ T5702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.101399][ T5965] capability: warning: `syz.3.498' uses 32-bit capabilities (legacy support in use) [ 279.131447][ T5328] Bluetooth: hci0: command 0x0406 tx timeout [ 279.185644][ T5854] device hsr_slave_0 entered promiscuous mode [ 279.258211][ T5854] device hsr_slave_1 entered promiscuous mode [ 279.288444][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.296479][ T4111] Bluetooth: hci1: command 0x0419 tx timeout [ 279.321414][ T5854] Cannot create hsr debugfs directory [ 279.361296][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 279.369384][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.615534][ T5702] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.670422][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 279.671355][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 279.671808][ T4348] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.671850][ T4348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.673177][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 280.192994][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 280.212478][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.331129][ T3876] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.338398][ T3876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.371456][ T5991] loop1: detected capacity change from 0 to 512 [ 280.434010][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 280.448597][ T5997] loop3: detected capacity change from 0 to 256 [ 280.611910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 280.722632][ T5991] loop1: detected capacity change from 0 to 512 [ 280.743831][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 280.822015][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 280.869137][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 280.882749][ T26] audit: type=1804 audit(1726066983.175:9): pid=5997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.506" name="/newroot/63/file0/file1" dev="loop3" ino=1048612 res=1 errno=0 [ 280.894321][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 280.912673][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.296949][ T5702] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 281.302393][ T6002] loop1: detected capacity change from 0 to 256 [ 281.445085][ T5702] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.474567][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 281.492144][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 281.512991][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 281.526501][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 282.434240][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 282.489116][ T5854] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.608018][ T26] audit: type=1804 audit(1726066984.905:10): pid=6011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.507" name="/newroot/117/file0/file1" dev="loop1" ino=1048613 res=1 errno=0 [ 282.739658][ T26] audit: type=1326 audit(1726066985.005:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.1.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b12adef9 code=0x7ffc0000 [ 282.788317][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 282.889325][ T5854] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.955890][ T26] audit: type=1326 audit(1726066985.005:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.1.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b12adef9 code=0x7ffc0000 [ 283.050863][ T26] audit: type=1326 audit(1726066985.005:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.1.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f15b12adef9 code=0x7ffc0000 [ 283.104338][ T5854] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.116047][ T26] audit: type=1326 audit(1726066985.015:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.1.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b12adef9 code=0x7ffc0000 [ 283.147894][ T26] audit: type=1326 audit(1726066985.035:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.1.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f15b12adef9 code=0x7ffc0000 [ 283.181787][ T26] audit: type=1326 audit(1726066985.035:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.1.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b12adef9 code=0x7ffc0000 [ 283.205623][ T3656] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 283.272254][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 283.280437][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 283.316523][ T6026] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 283.337027][ T5702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.349066][ T26] audit: type=1326 audit(1726066985.035:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.1.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f15b12adef9 code=0x7ffc0000 [ 283.387185][ T26] audit: type=1326 audit(1726066985.035:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.1.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b12adef9 code=0x7ffc0000 [ 283.417862][ T3656] usb 2-1: device descriptor read/64, error -71 [ 283.528359][ T5854] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.602841][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 283.622319][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 283.697358][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 283.729205][ T3656] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 283.931930][ T3656] usb 2-1: device descriptor read/64, error -71 [ 284.062316][ T3656] usb usb2-port1: attempt power cycle [ 284.211835][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 284.258151][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 284.288977][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 284.380225][ T5702] device veth0_vlan entered promiscuous mode [ 284.649880][ T5702] device veth1_vlan entered promiscuous mode [ 284.945570][ T5854] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 287.286320][ T5854] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 287.389219][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 287.422211][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 287.513745][ T5702] device veth0_macvtap entered promiscuous mode [ 287.547043][ T5854] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 287.575331][ T5702] device veth1_macvtap entered promiscuous mode [ 287.601991][ T5854] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 287.675632][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.698095][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.701382][ T6049] netlink: 'syz.0.521': attribute type 32 has an invalid length. [ 287.718303][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.750660][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.778394][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.804837][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.824456][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.871529][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.885872][ T5702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.902794][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 287.927539][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 287.981512][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 288.017350][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.030123][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.043686][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.064564][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.101838][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.161531][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.211529][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.267949][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.367193][ T5702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.493488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 288.569348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 288.663031][ T5702] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.701293][ T5702] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.711036][ T5702] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.798030][ T5702] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.230070][ T3876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.259459][ T3876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.943789][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.980716][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 290.060165][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 290.079012][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 290.117043][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.144359][ T4528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.175070][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 290.202066][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.208834][ T4528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.217990][ T3876] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.225166][ T3876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.285857][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 290.304784][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 290.330114][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 290.357441][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 290.387369][ T3876] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.394591][ T3876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.419881][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 290.622477][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 290.739747][ T6074] mac80211_hwsim hwsim12 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 290.767507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 290.820270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 290.861661][ T4308] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 290.982204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 291.000893][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 291.032143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 291.057495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 291.087178][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 292.971485][ T3918] wlan0: Trigger new scan to find an IBSS to join [ 295.056281][ T5328] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 295.080641][ T5328] Bluetooth: hci4: Injecting HCI hardware error event [ 295.103350][ T3579] Bluetooth: hci4: hardware error 0x00 [ 295.147241][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.181578][ T4308] usb 3-1: device descriptor read/all, error -71 [ 295.264054][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 295.299580][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 295.338948][ T3930] device hsr_slave_0 left promiscuous mode [ 295.362633][ T3930] device hsr_slave_1 left promiscuous mode [ 295.397126][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.411351][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.429673][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.447088][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.472087][ T3930] device bridge_slave_1 left promiscuous mode [ 295.482023][ T3930] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.503601][ T3930] device bridge_slave_0 left promiscuous mode [ 295.505268][ T6086] loop2: detected capacity change from 0 to 4096 [ 295.509981][ T3930] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.565500][ T3930] device veth1_macvtap left promiscuous mode [ 295.588458][ T3930] device veth0_macvtap left promiscuous mode [ 295.602006][ T3930] device veth1_vlan left promiscuous mode [ 295.635220][ T3930] device veth0_vlan left promiscuous mode [ 295.644134][ T6086] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 295.856401][ T6094] usb usb8: usbfs: process 6094 (syz.2.533) did not claim interface 0 before use [ 296.438020][ C1] eth0: bad gso: type: 1, size: 1408 [ 296.686746][ T3930] team0 (unregistering): Port device team_slave_1 removed [ 296.723894][ T3930] team0 (unregistering): Port device team_slave_0 removed [ 296.749203][ T3930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.779229][ T3930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.788770][ T6100] xt_hashlimit: Unknown mode mask 312C7057, kernel too old? [ 296.958771][ T3930] bond0 (unregistering): Released all slaves [ 297.032882][ T6089] device pim6reg1 entered promiscuous mode [ 297.329731][ T6107] mac80211_hwsim hwsim14 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 297.516602][ T6114] loop3: detected capacity change from 0 to 164 [ 297.555492][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 297.582988][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 297.605793][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.891309][ T1214] wlan0: Trigger new scan to find an IBSS to join [ 299.931377][ T5476] wlan0: Trigger new scan to find an IBSS to join [ 303.199099][ C1] eth0: bad gso: type: 1, size: 1408 [ 303.371331][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 303.451970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 303.565486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 303.619440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 303.793704][ T6143] fuse: Bad value for 'fd' [ 303.855936][ T6143] xt_CT: You must specify a L4 protocol and not use inversions on it [ 303.963167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 304.039647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 304.212644][ T4348] wlan0: Creating new IBSS network, BSSID 02:a7:2b:cf:26:9f [ 304.598528][ T6149] mac80211_hwsim hwsim14 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 304.629551][ C1] eth0: bad gso: type: 1, size: 1408 [ 304.694608][ T5854] device veth0_vlan entered promiscuous mode [ 304.763698][ T5854] device veth1_vlan entered promiscuous mode [ 304.866722][ T5854] device veth0_macvtap entered promiscuous mode [ 304.886965][ T5854] device veth1_macvtap entered promiscuous mode [ 304.934519][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.947320][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.960252][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.972644][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.003477][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.043061][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.054691][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.066470][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.079018][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.088769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 305.099125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 305.343636][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 305.382932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 305.397449][ T6164] loop3: detected capacity change from 0 to 512 [ 305.425087][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 305.531325][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 305.611353][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 305.626668][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 305.727906][ T6164] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.554: Invalid inode bitmap blk 4 in block_group 0 [ 305.741939][ T6164] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,lazytime,,errors=continue. Quota mode: none. [ 306.073295][ T6169] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 306.625192][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.665209][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.709928][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.809536][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.837485][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.864601][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.893572][ T4348] wlan0: Trigger new scan to find an IBSS to join [ 306.911975][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.938571][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.002234][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.046865][ T5854] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.069710][ T5854] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.121325][ T5854] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.130089][ T5854] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.130471][ C1] eth0: bad gso: type: 1, size: 1408 [ 307.187966][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 307.225438][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 307.267251][ T6133] chnl_net:caif_netlink_parms(): no params data found [ 307.295735][ T6179] loop2: detected capacity change from 0 to 1024 [ 307.392178][ T6179] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 307.564860][ T6187] loop3: detected capacity change from 0 to 128 [ 307.578679][ T6179] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,sysvgroups,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 307.611354][ T4308] Bluetooth: hci2: command 0x041b tx timeout [ 307.617359][ T3917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.654365][ T3917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.713513][ T6133] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.720628][ T6133] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.765361][ T6133] device bridge_slave_0 entered promiscuous mode [ 307.904964][ T6133] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.933657][ T6133] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.403173][ T6133] device bridge_slave_1 entered promiscuous mode [ 308.430190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 308.481811][ T3917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.490580][ T3917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.563736][ T6133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.602259][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 308.645203][ T6133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.751757][ T6192] loop4: detected capacity change from 0 to 16 [ 308.775576][ T6133] team0: Port device team_slave_0 added [ 308.814949][ T6133] team0: Port device team_slave_1 added [ 308.836106][ T6192] erofs: (device loop4): mounted with root inode @ nid 36. [ 308.931206][ T6133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.938198][ T6133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.805149][ T4111] Bluetooth: hci2: command 0x040f tx timeout [ 310.891412][ T9] wlan0: Trigger new scan to find an IBSS to join [ 310.918293][ T6133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.937356][ T6195] mac80211_hwsim hwsim18 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 311.037992][ T6133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.072532][ T6133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.125836][ T6207] loop4: detected capacity change from 0 to 512 [ 311.214132][ T6133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.260935][ T6207] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.565: Invalid inode bitmap blk 4 in block_group 0 [ 311.286551][ T6208] loop2: detected capacity change from 0 to 2048 [ 311.302665][ T6207] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,lazytime,,errors=continue. Quota mode: none. [ 311.438383][ T6208] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 311.485968][ T3930] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.713664][ T6133] device hsr_slave_0 entered promiscuous mode [ 312.442400][ T6219] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 312.504936][ T6133] device hsr_slave_1 entered promiscuous mode [ 312.548042][ T6133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.561980][ T6133] Cannot create hsr debugfs directory [ 312.824328][ T5476] wlan0: Creating new IBSS network, BSSID 6a:52:49:de:15:d9 [ 312.850620][ T3930] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.891356][ T4308] Bluetooth: hci2: command 0x0419 tx timeout [ 312.907601][ C1] eth0: bad gso: type: 1, size: 1408 [ 312.971512][ T9] wlan0: Trigger new scan to find an IBSS to join [ 312.986222][ T6227] loop4: detected capacity change from 0 to 16 [ 313.040678][ T6227] erofs: (device loop4): mounted with root inode @ nid 36. [ 313.211775][ T6230] loop2: detected capacity change from 0 to 1024 [ 313.379529][ T6230] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 313.445847][ T3930] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.861246][ T6230] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,sysvgroups,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 314.308441][ T3930] bond0: (slave netdevsim0): Releasing backup interface [ 316.556977][ T3930] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.604754][ T6240] mac80211_hwsim hwsim20 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 316.988319][ T4528] wlan0: Trigger new scan to find an IBSS to join [ 317.373717][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.941404][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.638070][ T6256] loop4: detected capacity change from 0 to 512 [ 320.384622][ T4348] wlan0: Trigger new scan to find an IBSS to join [ 322.479281][ T3917] wlan0: Creating new IBSS network, BSSID 46:8c:72:b4:24:66 [ 324.135340][ T6275] loop3: detected capacity change from 0 to 1024 [ 324.246666][ T6275] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 324.508697][ T6275] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,sysvgroups,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 324.577742][ T6286] mac80211_hwsim hwsim20 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 324.601964][ C1] eth0: bad gso: type: 1, size: 1408 [ 324.677668][ T6290] overlayfs: failed to resolve './file1': -2 [ 324.718811][ T6133] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 324.787528][ T6133] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 324.808085][ T6133] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 324.892429][ T6301] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 324.909887][ T6296] loop2: detected capacity change from 0 to 2048 [ 324.993851][ T6133] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 325.050805][ T6296] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 326.190908][ T6325] loop4: detected capacity change from 0 to 512 [ 326.202924][ T6327] loop2: detected capacity change from 0 to 16 [ 326.250901][ T6133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.310537][ T3930] device hsr_slave_0 left promiscuous mode [ 326.317854][ T3930] device hsr_slave_1 left promiscuous mode [ 326.345881][ T6327] erofs: (device loop2): mounted with root inode @ nid 36. [ 326.368386][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.421842][ T6325] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.597: Invalid inode bitmap blk 4 in block_group 0 [ 326.533764][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.556264][ T6325] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,lazytime,,errors=continue. Quota mode: none. [ 326.577796][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.891637][ T3639] wlan0: Trigger new scan to find an IBSS to join [ 327.244990][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.338111][ T6342] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 327.515501][ T3930] device bridge_slave_1 left promiscuous mode [ 327.528093][ T3930] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.755174][ T3930] device bridge_slave_0 left promiscuous mode [ 327.766861][ T3930] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.946624][ T3930] device veth1_macvtap left promiscuous mode [ 327.956952][ T3930] device veth0_macvtap left promiscuous mode [ 327.966010][ T3930] device veth1_vlan left promiscuous mode [ 327.975340][ T6347] loop3: detected capacity change from 0 to 1024 [ 327.981845][ T3930] device veth0_vlan left promiscuous mode [ 328.048511][ T6347] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 328.128868][ T6347] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,sysvgroups,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 328.562252][ T6356] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 328.638433][ T3930] team0 (unregistering): Port device team_slave_1 removed [ 328.691085][ T3930] team0 (unregistering): Port device team_slave_0 removed [ 328.721086][ T3930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.755294][ T3930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.875181][ T3930] bond0 (unregistering): Released all slaves [ 328.956031][ T6345] mac80211_hwsim hwsim18 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 328.971769][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.606'. [ 329.018855][ T6133] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.065351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 329.065583][ T6368] netlink: 'syz.2.608': attribute type 29 has an invalid length. [ 329.094695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 329.137586][ T6374] loop3: detected capacity change from 0 to 1024 [ 329.156224][ T6372] device hsr_slave_0 left promiscuous mode [ 329.176557][ T6372] device hsr_slave_1 left promiscuous mode [ 329.257023][ T6374] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 329.280197][ T6374] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,sysvgroups,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 329.365813][ T6368] netlink: 'syz.2.608': attribute type 29 has an invalid length. [ 329.379545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 329.389638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 329.399131][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.408277][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.442556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 329.517676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 329.595582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 329.607555][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 329.607573][ T26] audit: type=1326 audit(1726067031.915:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.2.613" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f812655cef9 code=0x0 [ 329.646626][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.654265][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.674693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 329.696329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 329.714682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 329.739381][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 329.798620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.843541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 329.983992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.001694][ T6133] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 330.013281][ T6133] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.044994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.056728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.096393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.111071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 330.124471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.155179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 330.936439][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 330.961609][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 330.979269][ T6133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.989981][ T4348] wlan0: Trigger new scan to find an IBSS to join [ 331.023021][ T4348] wlan0: Trigger new scan to find an IBSS to join [ 331.088413][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 331.136950][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 331.222892][ T6409] mac80211_hwsim hwsim20 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 331.263174][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 331.282828][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 331.298042][ C1] eth0: bad gso: type: 1, size: 1408 [ 331.395730][ T6412] program syz.3.621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.442587][ T6133] device veth0_vlan entered promiscuous mode [ 331.469702][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 331.497226][ T6415] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 331.526798][ T6415] kvm: pic: non byte read [ 331.532346][ T6415] kvm: pic: level sensitive irq not supported [ 331.532527][ T6415] kvm: pic: non byte read [ 331.551070][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 331.596923][ T6133] device veth1_vlan entered promiscuous mode [ 331.776698][ T6423] loop2: detected capacity change from 0 to 2048 [ 331.787674][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 331.808115][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 331.848618][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 331.886052][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 331.928520][ T6133] device veth0_macvtap entered promiscuous mode [ 331.982170][ T6133] device veth1_macvtap entered promiscuous mode [ 332.113153][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 332.344371][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 332.675317][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.686416][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.737340][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.778886][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.797060][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.808892][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.830396][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.858067][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.907642][ T6133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.005372][ T6434] loop3: detected capacity change from 0 to 16 [ 333.154572][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 333.191909][ T6434] erofs: (device loop3): mounted with root inode @ nid 36. [ 333.222235][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 333.333838][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.463845][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.771333][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.258039][ T3864] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 335.912839][ C1] eth0: bad gso: type: 1, size: 1408 [ 335.941250][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.941324][ T3864] wlan0: Trigger new scan to find an IBSS to join [ 335.952614][ T9] wlan0: Trigger new scan to find an IBSS to join [ 335.965995][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.976852][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.990717][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.014337][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.054207][ T6133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.108768][ T6133] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.177963][ T6133] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.221036][ T6133] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.247476][ T6133] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.353771][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 336.383002][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 336.669761][ T3917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.691556][ T3917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.775555][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 336.815224][ T3917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.851420][ T3917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.876582][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 336.894630][ T6452] loop3: detected capacity change from 0 to 1024 [ 336.951404][ T3618] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 336.990666][ T3639] wlan0: Creating new IBSS network, BSSID ca:08:2f:04:bf:57 [ 337.014409][ T6452] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 337.099756][ T6452] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,sysvgroups,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 337.241409][ T3618] usb 1-1: Using ep0 maxpacket: 8 [ 337.376759][ T6452] overlayfs: failed to resolve './file0': -2 [ 337.383530][ T3618] usb 1-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 337.399185][ T3618] usb 1-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 337.606395][ T3618] usb 1-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 337.648112][ T3618] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.683859][ T3618] usb 1-1: Product: syz [ 337.693452][ T3618] usb 1-1: Manufacturer: syz [ 337.714930][ T3618] usb 1-1: SerialNumber: syz [ 337.749636][ T6467] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.639' resets device [ 337.804157][ T3618] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 337.849917][ T3618] dvb-usb: bulk message failed: -22 (3/0) [ 337.907846][ T3618] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 337.961696][ T3618] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 337.993160][ T3618] usb 1-1: media controller created [ 338.043018][ T6473] loop1: detected capacity change from 0 to 512 [ 338.085518][ T3618] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 338.149853][ T6475] loop2: detected capacity change from 0 to 2048 [ 338.162997][ T3618] dvb-usb: bulk message failed: -22 (6/0) [ 338.172606][ T3618] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 338.208622][ T6473] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.641: Invalid inode bitmap blk 4 in block_group 0 [ 338.237421][ T6473] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,lazytime,,errors=continue. Quota mode: none. [ 338.254925][ T6475] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 338.267970][ T3618] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 338.287012][ T3618] dvb-usb: schedule remote query interval to 150 msecs. [ 338.297805][ T3618] dvb-usb: bulk message failed: -22 (3/0) [ 338.342011][ T3618] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 338.398308][ T3618] usb 1-1: USB disconnect, device number 6 [ 339.196103][ T6478] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 339.260761][ T520] wlan0: Trigger new scan to find an IBSS to join [ 339.385659][ T6482] loop2: detected capacity change from 0 to 16 [ 339.429673][ T6482] erofs: (device loop2): mounted with root inode @ nid 36. [ 339.473959][ T3618] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 340.776560][ T3917] wlan0: Creating new IBSS network, BSSID a2:7a:3d:74:c2:7f [ 341.125517][ T6504] loop2: detected capacity change from 0 to 1024 [ 341.226431][ T6504] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 341.267306][ T6504] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,sysvgroups,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 341.361259][ T5328] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 341.383048][ T4829] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 341.444487][ T6504] overlayfs: failed to resolve './file0': -2 [ 341.658245][ T6508] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 341.708545][ T6508] kvm: pic: level sensitive irq not supported [ 341.708691][ T6508] kvm: pic: non byte read [ 341.733513][ T5328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.746506][ T6508] kvm: pic: level sensitive irq not supported [ 341.746579][ T6508] kvm: pic: non byte read [ 341.769481][ T5328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.791504][ T6508] kvm: pic: level sensitive irq not supported [ 341.791578][ T6508] kvm: pic: non byte read [ 341.810705][ T5328] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 341.821697][ T6508] kvm: pic: level sensitive irq not supported [ 341.821938][ T6508] kvm: pic: non byte read [ 341.825437][ T4829] usb 2-1: config 0 has an invalid interface number: 220 but max is 0 [ 341.829260][ T5328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.836466][ T4829] usb 2-1: config 0 has no interface number 0 [ 341.861469][ T4829] usb 2-1: too many endpoints for config 0 interface 220 altsetting 148: 111, using maximum allowed: 30 [ 341.865451][ T5328] usb 4-1: config 0 descriptor?? [ 341.874512][ T4829] usb 2-1: config 0 interface 220 altsetting 148 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 341.909989][ T4829] usb 2-1: config 0 interface 220 has no altsetting 0 [ 341.918256][ T4829] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 341.931711][ C1] eth0: bad gso: type: 1, size: 1408 [ 341.955125][ T4829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.973878][ T4829] usb 2-1: config 0 descriptor?? [ 342.040221][ T6519] device pim6reg1 entered promiscuous mode [ 342.148373][ T3613] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 342.197491][ T26] audit: type=1326 audit(1726067044.495:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.2.656" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f812655cef9 code=0x0 [ 342.301510][ T4022] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 342.385045][ T5328] uclogic 0003:5543:0042.0004: unknown main item tag 0x0 [ 342.393620][ T5328] uclogic 0003:5543:0042.0004: unknown main item tag 0x0 [ 342.402352][ T5328] uclogic 0003:5543:0042.0004: unknown main item tag 0x0 [ 342.410269][ T5328] uclogic 0003:5543:0042.0004: unknown main item tag 0x0 [ 342.418504][ T5328] uclogic 0003:5543:0042.0004: No inputs registered, leaving [ 342.426369][ T3613] usb 5-1: Using ep0 maxpacket: 16 [ 342.437817][ T5328] uclogic 0003:5543:0042.0004: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.3-1/input0 [ 342.461579][ T4829] usb 2-1: Cannot read MAC address [ 342.467604][ T4829] MOSCHIP usb-ethernet driver: probe of 2-1:0.220 failed with error -71 [ 342.493006][ T4829] usb 2-1: USB disconnect, device number 7 [ 342.552366][ T3613] usb 5-1: config 183 has too many interfaces: 145, using maximum allowed: 32 [ 342.569918][ T3613] usb 5-1: config 183 has an invalid interface association descriptor of length 5, skipping [ 342.585776][ T3613] usb 5-1: config 183 has an invalid descriptor of length 0, skipping remainder of the config [ 342.601377][ T4022] usb 1-1: Using ep0 maxpacket: 8 [ 342.604536][ T3613] usb 5-1: config 183 has 0 interfaces, different from the descriptor's value: 145 [ 342.618790][ T5328] usb 4-1: USB disconnect, device number 7 [ 342.731403][ T4022] usb 1-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 342.741484][ T4022] usb 1-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 342.771505][ T3613] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= f.88 [ 342.784208][ T3613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.793818][ T3613] usb 5-1: Product: syz [ 342.798143][ T3613] usb 5-1: Manufacturer: syz [ 342.803381][ T3613] usb 5-1: SerialNumber: syz [ 342.859374][ T9] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 342.915485][ T6527] loop1: detected capacity change from 0 to 512 [ 342.931752][ T4022] usb 1-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 342.943053][ T4022] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.952378][ T4022] usb 1-1: Product: syz [ 342.957353][ T4022] usb 1-1: Manufacturer: syz [ 342.962904][ T4022] usb 1-1: SerialNumber: syz [ 343.023433][ T4022] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 343.055803][ T4022] dvb-usb: bulk message failed: -22 (3/0) [ 343.080529][ T3613] usb 5-1: USB disconnect, device number 4 [ 343.099429][ T6527] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2931: inode #16: comm syz.1.657: corrupted xattr block 8 [ 343.138094][ T6527] EXT4-fs (loop1): Remounting filesystem read-only [ 343.144991][ T6527] EXT4-fs warning (device loop1): ext4_evict_inode:302: xattr delete (err -117) [ 343.163646][ T6527] EXT4-fs (loop1): 1 orphan inode deleted [ 343.270301][ T6527] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 343.380619][ T6527] ext4 filesystem being mounted at /4/bus supports timestamps until 2038 (0x7fffffff) [ 343.486720][ T6527] EXT4-fs error (device loop1): ext4_remount:5854: comm syz.1.657: Abort forced by user [ 343.518331][ T6527] EXT4-fs (loop1): Remounting filesystem read-only [ 343.559638][ T6527] ext4 filesystem being remounted at /4/bus/file0 supports timestamps until 2038 (0x7fffffff) [ 343.613249][ T4022] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 343.651518][ T4022] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 343.681255][ T4022] usb 1-1: media controller created [ 343.699130][ T4022] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 343.781577][ T4022] dvb-usb: bulk message failed: -22 (6/0) [ 343.795950][ T4022] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 343.892766][ T4022] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 343.940418][ T4022] dvb-usb: schedule remote query interval to 150 msecs. [ 343.961356][ T6548] loop2: detected capacity change from 0 to 512 [ 343.965235][ T4022] dvb-usb: bulk message failed: -22 (3/0) [ 344.035600][ T4022] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 344.152958][ T4022] usb 1-1: USB disconnect, device number 7 [ 344.225567][ T6548] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.664: Invalid inode bitmap blk 4 in block_group 0 [ 344.251596][ T6548] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,lazytime,,errors=continue. Quota mode: none. [ 344.411479][ T6556] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 344.910978][ T6539] loop3: detected capacity change from 0 to 40427 [ 344.948403][ T4022] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 344.981338][ T6539] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 345.011835][ T6539] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 345.020665][ T6557] device pim6reg1 entered promiscuous mode [ 345.089764][ T6539] F2FS-fs (loop3): invalid crc value [ 345.132702][ T6539] F2FS-fs (loop3): Found nat_bits in checkpoint [ 345.206391][ T6539] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 345.236638][ T6539] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 345.460266][ T6577] loop2: detected capacity change from 0 to 736 [ 346.121339][ T3613] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 347.308619][ T6587] loop4: detected capacity change from 0 to 1024 [ 347.351560][ T3613] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.442795][ T3613] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 347.457300][ T3613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 347.467606][ T3613] usb 1-1: SerialNumber: syz [ 347.494378][ T26] audit: type=1800 audit(1726067049.795:57): pid=6587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.677" name="bus" dev="loop4" ino=25 res=0 errno=0 [ 347.547246][ T3613] usb 1-1: bad CDC descriptors [ 347.775452][ T3613] usb 1-1: USB disconnect, device number 8 [ 347.982694][ T6595] loop3: detected capacity change from 0 to 4096 [ 348.089056][ T6595] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 348.877561][ T6591] chnl_net:caif_netlink_parms(): no params data found [ 348.904381][ T6595] usb usb8: usbfs: process 6595 (syz.3.673) did not claim interface 0 before use [ 349.209112][ T6591] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.248503][ T6591] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.300691][ T6591] device bridge_slave_0 entered promiscuous mode [ 349.334062][ T6591] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.363327][ T6591] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.395777][ T6591] device bridge_slave_1 entered promiscuous mode [ 349.500030][ T6591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.561893][ T6591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.611234][ T3656] Bluetooth: hci2: command 0x0409 tx timeout [ 349.712738][ T6614] loop3: detected capacity change from 0 to 40427 [ 349.747356][ T6591] team0: Port device team_slave_0 added [ 349.753156][ T6619] loop2: detected capacity change from 0 to 1024 [ 349.796553][ T6614] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 349.809364][ T6591] team0: Port device team_slave_1 added [ 349.824236][ T6614] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 349.861837][ T6619] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 349.930109][ T6614] F2FS-fs (loop3): invalid crc value [ 349.947151][ T6619] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,sysvgroups,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 349.992801][ T6614] F2FS-fs (loop3): Found nat_bits in checkpoint [ 350.079360][ T6591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.089486][ T6591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.174602][ T6619] overlayfs: failed to resolve './file1': -2 [ 350.196340][ T6591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.227066][ T6614] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 350.239386][ T6614] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 350.319373][ T6591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.335571][ T6591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.376521][ T6591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.568825][ T6615] chnl_net:caif_netlink_parms(): no params data found [ 350.592504][ T6591] device hsr_slave_0 entered promiscuous mode [ 350.613845][ T6591] device hsr_slave_1 entered promiscuous mode [ 350.630520][ T6591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.658470][ T6591] Cannot create hsr debugfs directory [ 350.993662][ T6615] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.000869][ T6615] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.013090][ T6615] device bridge_slave_0 entered promiscuous mode [ 351.035495][ T6615] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.049971][ T6615] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.069537][ T6615] device bridge_slave_1 entered promiscuous mode [ 351.154378][ T6591] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.191758][ T6615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.239651][ T6591] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.269242][ T6615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.348043][ T6591] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.380406][ T6615] team0: Port device team_slave_0 added [ 351.398842][ T6615] team0: Port device team_slave_1 added [ 351.446115][ T6615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.461035][ T6615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.501703][ T6615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.542224][ T4829] Bluetooth: hci1: command 0x0409 tx timeout [ 351.549769][ T6591] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.612428][ T6615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.620185][ T6615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.649729][ T6615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.691333][ T5328] Bluetooth: hci2: command 0x041b tx timeout [ 351.722596][ T3930] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.840889][ T6649] loop2: detected capacity change from 0 to 4096 [ 351.857123][ T6615] device hsr_slave_0 entered promiscuous mode [ 351.878446][ T6615] device hsr_slave_1 entered promiscuous mode [ 351.888898][ T6615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.898223][ T6615] Cannot create hsr debugfs directory [ 351.932364][ T6649] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 351.956949][ T3930] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.975867][ T6655] loop3: detected capacity change from 0 to 2048 [ 352.051332][ T6657] usb usb8: usbfs: process 6657 (syz.2.692) did not claim interface 0 before use [ 352.377091][ T6655] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 352.621628][ T6659] program syz.0.694 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.636588][ T6655] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 352.729235][ T3930] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.952925][ T3930] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.076834][ T6664] loop3: detected capacity change from 0 to 1024 [ 353.160399][ T6664] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 353.193002][ T6664] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,sysvgroups,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 353.422568][ T6664] overlayfs: failed to resolve './file1': -2 [ 353.611587][ T3613] Bluetooth: hci1: command 0x041b tx timeout [ 353.746758][ T6681] device pim6reg1 entered promiscuous mode [ 353.774147][ T1075] Bluetooth: hci2: command 0x040f tx timeout [ 353.958079][ T6691] loop2: detected capacity change from 0 to 16 [ 354.056319][ T6691] erofs: (device loop2): mounted with root inode @ nid 36. [ 354.293040][ T6591] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 354.818482][ T6591] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 354.878433][ T6591] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 354.946083][ T6591] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 355.210729][ T6615] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 355.252354][ T6615] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 355.314551][ T6615] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 355.391081][ T6718] program syz.2.706 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 355.414494][ T6615] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 355.426269][ T6688] loop3: detected capacity change from 0 to 40427 [ 355.589019][ T6591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.606659][ T6688] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 355.641422][ T6688] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 355.679474][ T6688] F2FS-fs (loop3): invalid crc value [ 355.691519][ T1075] Bluetooth: hci1: command 0x040f tx timeout [ 355.745870][ T6688] F2FS-fs (loop3): Found nat_bits in checkpoint [ 355.773304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 355.793243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 355.807578][ T6688] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 355.824718][ T6688] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 355.830725][ T6591] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.861737][ T4019] Bluetooth: hci2: command 0x0419 tx timeout [ 355.864357][ T6615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.921644][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 355.938004][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 355.957908][ T3639] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.965430][ T3639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.987067][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 355.999325][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 356.017231][ T3639] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.024578][ T3639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.080603][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 356.097198][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 356.115210][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 356.451056][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 356.524754][ T6615] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.564342][ T6732] loop2: detected capacity change from 0 to 2048 [ 356.693428][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 356.706132][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 356.716765][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 356.726909][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 356.737245][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 356.748111][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 356.769928][ T6732] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 356.770450][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 356.789246][ T3639] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.796480][ T3639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.805729][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 356.808024][ T6732] UDF-fs: error (device loop2): udf_read_inode: (ino 1376) failed !bh [ 356.815241][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 356.834801][ T3639] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.835022][ T6732] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 356.842090][ T3639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.843255][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 356.887246][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 356.904338][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 356.913995][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 356.959462][ T6591] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 356.989837][ T6591] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 357.012962][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 357.049047][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 357.075148][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 357.101908][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 357.141638][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 357.171530][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 357.210556][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 357.219652][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 357.236952][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 357.247806][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 357.298380][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 357.314279][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 357.329757][ T6615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 357.352747][ T6615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 357.372128][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 357.391696][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 357.437147][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.451794][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.469306][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.477590][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.486417][ T3930] device bridge_slave_1 left promiscuous mode [ 357.493320][ T3930] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.508694][ T3930] device bridge_slave_0 left promiscuous mode [ 357.517106][ T3930] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.536938][ T3930] device hsr_slave_0 left promiscuous mode [ 357.544397][ T3930] device hsr_slave_1 left promiscuous mode [ 357.551850][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.559500][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.568214][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.576569][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.585240][ T3930] device bridge_slave_1 left promiscuous mode [ 357.591838][ T3930] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.601983][ T3930] device bridge_slave_0 left promiscuous mode [ 357.608909][ T3930] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.630486][ T3930] device veth1_macvtap left promiscuous mode [ 357.634861][ T6736] loop3: detected capacity change from 0 to 32768 [ 357.639077][ T3930] device veth0_macvtap left promiscuous mode [ 357.650085][ T3930] device veth1_vlan left promiscuous mode [ 357.656299][ T3930] device veth0_vlan left promiscuous mode [ 357.665021][ T3930] device veth1_macvtap left promiscuous mode [ 357.671063][ T3930] device veth0_macvtap left promiscuous mode [ 357.677820][ T3930] device veth1_vlan left promiscuous mode [ 357.683800][ T3930] device veth0_vlan left promiscuous mode [ 357.715134][ T6736] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.709 (6736) [ 357.762467][ T6736] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 357.771676][ T4022] Bluetooth: hci1: command 0x0419 tx timeout [ 357.792948][ T6736] BTRFS info (device loop3): setting nodatacow, compression disabled [ 357.801642][ T6736] BTRFS info (device loop3): metadata ratio 8 [ 357.807754][ T6736] BTRFS info (device loop3): doing ref verification [ 357.832326][ T6736] BTRFS info (device loop3): metadata ratio 32769 [ 357.838809][ T6736] BTRFS info (device loop3): turning off barriers [ 357.862424][ T6736] BTRFS info (device loop3): enabling ssd optimizations [ 357.869423][ T6736] BTRFS info (device loop3): using spread ssd allocation scheme [ 357.901710][ T6736] BTRFS info (device loop3): turning on barriers [ 357.908109][ T6736] BTRFS info (device loop3): using free space tree [ 357.929522][ T6736] BTRFS info (device loop3): has skinny extents [ 359.310559][ T5328] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 359.581371][ T5328] usb 3-1: Using ep0 maxpacket: 8 [ 359.711555][ T5328] usb 3-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 359.743378][ T5328] usb 3-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 359.746760][ T3930] team0 (unregistering): Port device team_slave_1 removed [ 359.759864][ T6774] program syz.0.715 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 359.863443][ T3930] team0 (unregistering): Port device team_slave_0 removed [ 359.933948][ T3930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.943783][ T5328] usb 3-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 359.975755][ T5328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.004358][ T3930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.011353][ T5328] usb 3-1: Product: syz [ 360.027845][ T5328] usb 3-1: Manufacturer: syz [ 360.057571][ T5328] usb 3-1: SerialNumber: syz [ 360.157220][ T5328] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 360.213904][ T5328] dvb-usb: bulk message failed: -22 (3/0) [ 360.251616][ T4829] Bluetooth: hci3: command 0x0406 tx timeout [ 360.272705][ T5328] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 360.311603][ T5328] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 360.347899][ T5328] usb 3-1: media controller created [ 360.396685][ T3930] bond0 (unregistering): Released all slaves [ 360.416656][ T5328] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 360.498868][ T5328] dvb-usb: bulk message failed: -22 (6/0) [ 360.517774][ T5328] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 360.554696][ T6771] loop3: detected capacity change from 0 to 32768 [ 360.602637][ T5328] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 360.624143][ T5328] dvb-usb: schedule remote query interval to 150 msecs. [ 360.637451][ T5328] dvb-usb: bulk message failed: -22 (3/0) [ 360.670620][ T6777] xt_recent: Unsupported userspace flags (00000064) [ 360.677972][ T5328] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 360.725161][ T6771] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.713 (6771) [ 360.782632][ T6771] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 360.814116][ T6771] BTRFS info (device loop3): using free space tree [ 360.814197][ T5328] dvb-usb: bulk message failed: -22 (1/0) [ 360.847906][ T6771] BTRFS info (device loop3): has skinny extents [ 360.865860][ T5328] dvb-usb: error while querying for an remote control event. [ 360.978196][ T3930] team0 (unregistering): Port device team_slave_1 removed [ 360.999697][ T3930] team0 (unregistering): Port device team_slave_0 removed [ 361.058487][ T5328] dvb-usb: bulk message failed: -22 (1/0) [ 361.064614][ T3930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.069577][ T5328] dvb-usb: error while querying for an remote control event. [ 361.101381][ T6771] BTRFS info (device loop3): enabling ssd optimizations [ 361.144667][ T26] audit: type=1800 audit(1726067063.445:58): pid=6771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.713" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 361.166186][ T3930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.241327][ T5328] dvb-usb: bulk message failed: -22 (1/0) [ 361.247665][ T5328] dvb-usb: error while querying for an remote control event. [ 361.432617][ T5328] dvb-usb: bulk message failed: -22 (1/0) [ 361.438849][ T5328] dvb-usb: error while querying for an remote control event. [ 361.611424][ T5328] dvb-usb: bulk message failed: -22 (1/0) [ 361.618464][ T5328] dvb-usb: error while querying for an remote control event. [ 361.766794][ T3930] bond0 (unregistering): Released all slaves [ 361.936779][ T3616] dvb-usb: bulk message failed: -22 (1/0) [ 361.950363][ T3616] dvb-usb: error while querying for an remote control event. [ 362.134084][ T5327] dvb-usb: bulk message failed: -22 (1/0) [ 362.139901][ T5327] dvb-usb: error while querying for an remote control event. [ 362.287151][ T6764] sch_tbf: peakrate 4294967292 is lower than or equals to rate 6100204546430424880 ! [ 362.366204][ T1075] dvb-usb: bulk message failed: -22 (1/0) [ 362.391365][ T1075] dvb-usb: error while querying for an remote control event. [ 362.413734][ T4022] usb 3-1: USB disconnect, device number 8 [ 362.547805][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 362.562795][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 362.603650][ T6591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.621510][ T4022] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 362.698105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 362.752493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 362.852007][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 362.864474][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 362.872882][ T6822] loop3: detected capacity change from 0 to 16 [ 362.882572][ T6591] device veth0_vlan entered promiscuous mode [ 362.893202][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 362.903626][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 362.925662][ T6591] device veth1_vlan entered promiscuous mode [ 362.937569][ T6822] erofs: (device loop3): mounted with root inode @ nid 36. [ 362.971812][ T6615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.989412][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 362.999318][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 363.008205][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 363.059210][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 363.073140][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 363.088919][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 363.121474][ T6591] device veth0_macvtap entered promiscuous mode [ 363.167047][ T6591] device veth1_macvtap entered promiscuous mode [ 363.302467][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 363.378045][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 363.754106][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.817878][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.869066][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.908657][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.949344][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.004962][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.022571][ T6591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.049184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 364.092326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 364.118019][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.163904][ T6841] loop2: detected capacity change from 0 to 736 [ 364.174200][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.215860][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.232089][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.243230][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.254583][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.267574][ T6591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.290759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 364.324044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 364.375760][ T6591] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.424785][ T6591] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.458355][ T6591] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.471607][ T6591] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.523157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 364.560724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 365.112479][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 365.392101][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 365.484555][ T6615] device veth0_vlan entered promiscuous mode [ 365.521322][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 365.541085][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 365.618469][ T6615] device veth1_vlan entered promiscuous mode [ 365.750940][ T6852] program syz.2.730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 365.784203][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.846688][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.867937][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 365.884683][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 365.920811][ T6615] device veth0_macvtap entered promiscuous mode [ 365.943042][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 365.948946][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.966441][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 365.974149][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.026896][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 366.028249][ T6840] loop3: detected capacity change from 0 to 40427 [ 366.048333][ T6615] device veth1_macvtap entered promiscuous mode [ 366.081022][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 366.150254][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.166785][ T6840] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 366.187828][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.205420][ T520] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 366.227884][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.230033][ T6840] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 366.271226][ T6840] F2FS-fs (loop3): invalid crc value [ 366.286260][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.297751][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.310113][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.321644][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.334800][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.352929][ T6615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.364355][ T6840] F2FS-fs (loop3): Found nat_bits in checkpoint [ 366.388245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 366.408241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 366.442838][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.461889][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.485199][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.515697][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.526552][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.544211][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.554928][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.567257][ T6840] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 366.585378][ T6840] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 366.594267][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.606107][ T6615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.614669][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 366.750225][ T4022] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 366.783983][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 367.041339][ T4022] usb 2-1: Using ep0 maxpacket: 8 [ 367.212453][ T4022] usb 2-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 367.313897][ T4022] usb 2-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 367.582100][ T4022] usb 2-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 367.589541][ T520] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 367.605356][ T6615] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.611207][ T4022] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.655186][ T6615] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.691323][ T6615] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.718003][ T4022] usb 2-1: Product: syz [ 367.722363][ T4022] usb 2-1: Manufacturer: syz [ 367.727171][ T4022] usb 2-1: SerialNumber: syz [ 367.751411][ T6615] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.767871][ T6866] loop2: detected capacity change from 0 to 1024 [ 367.783146][ T4022] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 367.803194][ T4022] dvb-usb: bulk message failed: -22 (3/0) [ 367.820403][ T6866] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 367.851454][ T4022] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 367.932119][ T4022] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 367.947619][ T6866] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,sysvgroups,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 368.045607][ T4022] usb 2-1: media controller created [ 368.125706][ T4022] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 368.184882][ T4022] dvb-usb: bulk message failed: -22 (6/0) [ 368.190812][ T4022] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 368.222651][ T3639] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.246756][ T3639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.267267][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 368.272729][ T4022] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 368.289512][ T4022] dvb-usb: schedule remote query interval to 150 msecs. [ 368.327136][ T4022] dvb-usb: bulk message failed: -22 (3/0) [ 368.350461][ T3917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.383466][ T4022] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 368.399593][ T3917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.471579][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 368.516187][ T3618] dvb-usb: bulk message failed: -22 (1/0) [ 368.531938][ T3618] dvb-usb: error while querying for an remote control event. [ 368.542693][ T4022] usb 2-1: USB disconnect, device number 8 [ 368.630791][ T4022] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 368.656076][ T6871] xt_hashlimit: Unknown mode mask 312C7057, kernel too old? [ 368.900463][ T6879] netlink: 'syz.2.738': attribute type 2 has an invalid length. [ 368.983181][ T6883] loop3: detected capacity change from 0 to 16 [ 369.125746][ T6883] erofs: (device loop3): mounted with root inode @ nid 36. [ 370.121522][ T6890] program syz.2.740 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.547092][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.743'. [ 371.641075][ T6908] loop4: detected capacity change from 0 to 8 [ 372.054682][ T6904] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.178827][ T3876] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 378.500345][ T6904] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.659745][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.666429][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.786340][ T6904] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.983040][ T6904] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.001325][ T3618] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 379.311245][ T3618] usb 2-1: Using ep0 maxpacket: 8 [ 379.323415][ T6919] xt_hashlimit: Unknown mode mask 312C7057, kernel too old? [ 379.471469][ T3618] usb 2-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 379.501335][ T3618] usb 2-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 379.505246][ T6904] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.588667][ T6904] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.664293][ T6904] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.727344][ T3618] usb 2-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 379.756628][ T3618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.774129][ T3618] usb 2-1: Product: syz [ 379.778460][ T3618] usb 2-1: Manufacturer: syz [ 379.789944][ T6904] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.791774][ T3618] usb 2-1: SerialNumber: syz [ 379.994943][ T3618] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 380.060829][ T3618] dvb-usb: bulk message failed: -22 (3/0) [ 380.989712][ T3618] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 381.059268][ T3618] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 381.074276][ T6936] loop3: detected capacity change from 0 to 16 [ 381.110895][ T3618] usb 2-1: media controller created [ 381.130630][ T6936] erofs: (device loop3): mounted with root inode @ nid 36. [ 381.228378][ T3618] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 381.290273][ T6915] chnl_net:caif_netlink_parms(): no params data found [ 381.322600][ T3618] dvb-usb: bulk message failed: -22 (6/0) [ 381.330052][ T3618] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 381.341989][ T4033] Bluetooth: hci4: command 0x0409 tx timeout [ 381.438046][ T3618] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 381.500886][ T3618] dvb-usb: schedule remote query interval to 150 msecs. [ 381.509245][ T3618] dvb-usb: bulk message failed: -22 (3/0) [ 381.621831][ T3618] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 382.031612][ T3618] usb 2-1: USB disconnect, device number 9 [ 383.085384][ T3618] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 383.312254][ T6915] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.357664][ T6915] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.371382][ T4022] Bluetooth: hci4: command 0x041b tx timeout [ 383.382957][ T6915] device bridge_slave_0 entered promiscuous mode [ 383.413606][ T6951] bridge0: port 3(erspan0) entered blocking state [ 383.427848][ T6951] bridge0: port 3(erspan0) entered disabled state [ 383.530410][ T6951] device erspan0 entered promiscuous mode [ 383.582444][ T6951] bridge0: port 3(erspan0) entered blocking state [ 383.592228][ T6951] bridge0: port 3(erspan0) entered forwarding state [ 383.659931][ T6915] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.671592][ T6915] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.694747][ T6915] device bridge_slave_1 entered promiscuous mode [ 383.829045][ T6970] 9p: Unknown uid 18446744073709551615 [ 383.962148][ T6974] loop2: detected capacity change from 0 to 16 [ 383.987695][ T6915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.077341][ T6915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.137224][ T6974] erofs: (device loop2): mounted with root inode @ nid 36. [ 384.148536][ T6976] loop1: detected capacity change from 0 to 16 [ 384.195788][ T3930] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.349206][ T6915] team0: Port device team_slave_0 added [ 384.375437][ T6915] team0: Port device team_slave_1 added [ 384.382967][ T6976] erofs: (device loop1): mounted with root inode @ nid 36. [ 384.585459][ T3930] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.161809][ T6915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.361444][ T6915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.461472][ T4023] Bluetooth: hci4: command 0x040f tx timeout [ 385.568893][ T6915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.658501][ T6991] netlink: 56 bytes leftover after parsing attributes in process `syz.1.768'. [ 385.671406][ T6991] tipc: Enabling of bearer rejected, failed to enable media [ 385.699890][ T6915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.711896][ T6915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.801450][ T6915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.841692][ T3930] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.922030][ T6993] device syzkaller0 entered promiscuous mode [ 386.013882][ T3930] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.054786][ T6915] device hsr_slave_0 entered promiscuous mode [ 386.070580][ T6915] device hsr_slave_1 entered promiscuous mode [ 386.109194][ T6915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.121665][ T6915] Cannot create hsr debugfs directory [ 386.433962][ T7001] 9p: Unknown uid 18446744073709551615 [ 388.273455][ T1075] Bluetooth: hci4: command 0x0419 tx timeout [ 389.267329][ T26] audit: type=1326 audit(1726067091.565:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.1.774" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30f9be2ef9 code=0x0 [ 389.733631][ T7026] loop2: detected capacity change from 0 to 16 [ 389.837496][ T7026] erofs: (device loop2): mounted with root inode @ nid 36. [ 389.870208][ T7015] xt_hashlimit: Unknown mode mask 312C7057, kernel too old? [ 390.175477][ T5327] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 390.867975][ T5327] Bluetooth: hci5: Injecting HCI hardware error event [ 390.981789][ T3582] Bluetooth: hci5: hardware error 0x00 [ 391.202554][ T7044] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 391.249964][ T7044] device bridge_slave_0 left promiscuous mode [ 391.337293][ T7044] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.384477][ T7044] device bridge_slave_1 left promiscuous mode [ 391.508635][ T7044] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.716006][ T7044] bond0: (slave bond_slave_0): Releasing backup interface [ 391.900647][ T7044] bond0: (slave bond_slave_1): Releasing backup interface [ 392.109230][ T7044] team0: Port device team_slave_0 removed [ 392.149672][ T7044] team0: Port device team_slave_1 removed [ 392.159364][ T7044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.222112][ T7044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.272033][ T7044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.287270][ T7044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.480032][ T7066] syz.1.783 uses obsolete (PF_INET,SOCK_PACKET) [ 392.547668][ T7050] team0: Port device wg2 added [ 393.149703][ T6915] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 393.286146][ T6915] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 393.347067][ T6915] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 393.521871][ T5328] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 393.779117][ T6915] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 394.052099][ T5328] usb 4-1: Using ep0 maxpacket: 16 [ 394.171626][ T5328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.233072][ T7094] xt_hashlimit: Unknown mode mask 312C7057, kernel too old? [ 394.255078][ T5328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.350224][ T5328] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 394.449472][ T5328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.520780][ T5328] usb 4-1: config 0 descriptor?? [ 394.728019][ T3930] device hsr_slave_0 left promiscuous mode [ 394.777261][ T3930] device hsr_slave_1 left promiscuous mode [ 394.840156][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.875851][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.044631][ T5328] hid-generic 0003:04D8:00DF.0005: item fetching failed at offset 0/2 [ 395.102072][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.118979][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.160707][ T5328] hid-generic: probe of 0003:04D8:00DF.0005 failed with error -22 [ 395.187530][ T3930] device bridge_slave_1 left promiscuous mode [ 395.226187][ T3930] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.256556][ T5328] usb 4-1: USB disconnect, device number 8 [ 396.416830][ T3930] device bridge_slave_0 left promiscuous mode [ 396.453029][ T3930] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.766145][ T3930] device veth1_macvtap left promiscuous mode [ 396.774969][ T3930] device veth0_macvtap left promiscuous mode [ 396.806370][ T3930] device veth1_vlan left promiscuous mode [ 396.855012][ T3930] device veth0_vlan left promiscuous mode [ 397.437970][ T144] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 397.905949][ T7127] loop1: detected capacity change from 0 to 512 [ 397.958557][ T7127] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.798: Invalid inode bitmap blk 4 in block_group 0 [ 398.121656][ T7127] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,lazytime,,errors=continue. Quota mode: none. [ 398.133371][ T7133] loop3: detected capacity change from 0 to 16 [ 398.377111][ T7134] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 398.770250][ T3639] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 398.795120][ T7133] erofs: (device loop3): mounted with root inode @ nid 36. [ 400.234042][ T7157] usb usb8: usbfs: process 7157 (syz.4.807) did not claim interface 0 before use [ 401.297824][ T3930] team0 (unregistering): Port device team_slave_1 removed [ 401.416255][ T3930] team0 (unregistering): Port device team_slave_0 removed [ 401.431276][ T4033] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 401.445192][ T7166] loop3: detected capacity change from 0 to 16 [ 401.490916][ T3930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.518682][ T7166] erofs: (device loop3): mounted with root inode @ nid 36. [ 401.579310][ T3930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.781711][ T4033] usb 2-1: Using ep0 maxpacket: 32 [ 402.695115][ T4033] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 402.706590][ T4033] usb 2-1: config 0 has no interface number 0 [ 402.721505][ T4033] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 402.741357][ T4033] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 402.799229][ T3930] bond0 (unregistering): Released all slaves [ 402.823867][ T4033] usb 2-1: config 0 interface 126 has no altsetting 0 [ 403.556334][ T7112] device pim6reg1 entered promiscuous mode [ 403.671494][ T4033] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 403.701249][ T4033] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.727415][ T4033] usb 2-1: Product: syz [ 403.747147][ T4033] usb 2-1: Manufacturer: syz [ 403.756954][ T4033] usb 2-1: SerialNumber: syz [ 403.775176][ T6915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.800532][ T4033] usb 2-1: config 0 descriptor?? [ 403.859751][ T7164] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 403.898432][ T7164] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 403.941578][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 403.971714][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 404.077070][ T6915] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.174209][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 404.206087][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 404.222332][ T4033] ir_usb 2-1:0.126: IR Dongle converter detected [ 404.286721][ T3864] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.291398][ T4033] usb 2-1: IRDA class descriptor not found, device not bound [ 404.294932][ T3864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.372237][ T4033] usb 2-1: USB disconnect, device number 10 [ 404.451547][ T7192] netlink: 'syz.2.819': attribute type 10 has an invalid length. [ 404.547846][ T7192] team0: Port device netdevsim0 added [ 404.554934][ T7194] netlink: 'syz.2.819': attribute type 10 has an invalid length. [ 404.600685][ T7199] input: syz0 as /devices/virtual/input/input11 [ 404.749276][ T7194] team0: Port device netdevsim0 removed [ 404.820918][ T7194] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 404.874204][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 404.925387][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 404.960482][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 404.989903][ T3864] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.997141][ T3864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.015931][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 405.050585][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 405.106337][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 405.196158][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 405.224636][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 405.281901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 405.348181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 405.416842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 405.450845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 405.517791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 405.566481][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 405.586231][ T6915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 405.607564][ T7216] device pim6reg1 entered promiscuous mode [ 407.287756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 407.392933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 407.507546][ T6915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.558459][ T7257] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 407.641312][ T4019] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 407.680470][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 407.726658][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 407.864507][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 407.895182][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 407.960786][ T6915] device veth0_vlan entered promiscuous mode [ 407.976904][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 408.011566][ T4019] usb 4-1: config index 0 descriptor too short (expected 62747, got 27) [ 408.022438][ T7270] program syz.1.838 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 408.036032][ T4019] usb 4-1: config 178 has too many interfaces: 198, using maximum allowed: 32 [ 408.039544][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 408.100543][ T6915] device veth1_vlan entered promiscuous mode [ 408.118710][ T4019] usb 4-1: config 178 has an invalid descriptor of length 1, skipping remainder of the config [ 408.183221][ T4019] usb 4-1: config 178 has 0 interfaces, different from the descriptor's value: 198 [ 408.212000][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 408.237530][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 408.400552][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 408.409375][ T4019] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 408.431065][ T4019] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.454720][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 408.467466][ T4019] usb 4-1: Product: syz [ 408.479621][ T4019] usb 4-1: Manufacturer: syz [ 408.495053][ T6915] device veth0_macvtap entered promiscuous mode [ 408.498809][ T4019] usb 4-1: SerialNumber: syz [ 408.556605][ T6915] device veth1_macvtap entered promiscuous mode [ 408.645285][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.798864][ T7278] loop2: detected capacity change from 0 to 16 [ 408.841145][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.906284][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.937963][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.958392][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.981391][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.003123][ T6915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.033524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 409.061513][ T7278] erofs: (device loop2): mounted with root inode @ nid 36. [ 409.082136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 409.290990][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.898454][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.947199][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.989620][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.018999][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.055770][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.090595][ T6915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.170287][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 410.205397][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 410.249679][ T6915] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.292600][ T6915] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.323232][ T6915] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.337729][ T6915] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.613352][ T3864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.640424][ T3864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.681864][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 410.744808][ T7310] 9p: Unknown uid 18446744073709551615 [ 410.775156][ T3864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.790173][ T3864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.824138][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 413.901654][ T5328] usb 4-1: USB disconnect, device number 9 [ 414.051356][ T4019] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 415.115071][ T7328] loop1: detected capacity change from 0 to 16 [ 415.120267][ T7327] loop2: detected capacity change from 0 to 16 [ 415.131775][ T4019] usb 1-1: device descriptor read/all, error -71 [ 415.210146][ T7326] loop4: detected capacity change from 0 to 4096 [ 415.230309][ T7328] erofs: (device loop1): mounted with root inode @ nid 36. [ 415.734471][ T7327] erofs: (device loop2): mounted with root inode @ nid 36. [ 416.355052][ T7326] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 416.739328][ T7349] usb usb8: usbfs: process 7349 (syz.4.849) did not claim interface 0 before use [ 416.831562][ T7347] netlink: 20 bytes leftover after parsing attributes in process `syz.0.856'. [ 416.834807][ T7348] loop1: detected capacity change from 0 to 1024 [ 417.010484][ T7348] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 417.436251][ T4019] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 421.206153][ T7348] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,sysvgroups,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 422.101377][ T4019] usb 1-1: device descriptor read/all, error -71 [ 422.504048][ T7380] loop1: detected capacity change from 0 to 16 [ 423.360819][ T7383] 9p: Unknown uid 18446744073709551615 [ 423.370943][ T7380] erofs: (device loop1): mounted with root inode @ nid 36. [ 424.141304][ T4019] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 424.771300][ T4108] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 424.854735][ T7402] netlink: 72 bytes leftover after parsing attributes in process `syz.1.871'. [ 425.033214][ T4108] usb 4-1: device descriptor read/64, error -71 [ 425.061442][ T4019] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 425.076912][ T4019] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 425.098160][ T4019] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 425.108325][ T4019] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 425.124450][ T4019] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 425.291819][ T4019] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 425.341528][ T4108] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 425.348540][ T4019] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 425.783916][ T4019] usb 1-1: Product: syz [ 425.825065][ T4019] usb 1-1: Manufacturer: syz [ 425.892623][ T4019] cdc_wdm 1-1:1.0: skipping garbage [ 425.898918][ T4019] cdc_wdm 1-1:1.0: skipping garbage [ 425.952007][ T4108] usb 4-1: device descriptor read/64, error -71 [ 426.025413][ T4019] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 426.050112][ T4019] cdc_wdm 1-1:1.0: Unknown control protocol [ 426.056247][ T7414] device syzkaller0 entered promiscuous mode [ 426.071436][ T4108] usb usb4-port1: attempt power cycle [ 426.117533][ T4019] usb 1-1: USB disconnect, device number 12 [ 426.217101][ T7417] loop1: detected capacity change from 0 to 16 [ 426.302266][ T7417] erofs: (device loop1): mounted with root inode @ nid 36. [ 426.531276][ T4108] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 426.791431][ T4108] usb 4-1: device not accepting address 12, error -71 [ 427.443133][ T7425] netlink: 'syz.0.879': attribute type 10 has an invalid length. [ 427.512635][ T7425] batman_adv: batadv0: Adding interface: hsr_slave_0 [ 427.570349][ T7425] batman_adv: batadv0: The MTU of interface hsr_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.753672][ T7425] batman_adv: batadv0: Not using interface hsr_slave_0 (retrying later): interface not active [ 428.000346][ T7434] netlink: 116 bytes leftover after parsing attributes in process `syz.3.882'. [ 428.191195][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 428.293653][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 428.345553][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 428.522196][ T7439] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 428.568611][ T7439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 428.627481][ T7439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 428.712162][ T7456] program syz.3.888 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 432.971917][ T144] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 432.975616][ T3639] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 436.021720][ T5328] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 436.079037][ T7510] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 436.311880][ T5328] usb 1-1: Using ep0 maxpacket: 32 [ 436.416238][ T7515] program syz.4.905 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 436.451598][ T5328] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.498271][ T7517] loop3: detected capacity change from 0 to 16 [ 436.507090][ T5328] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.561949][ T5328] usb 1-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 436.589462][ T5328] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.618463][ T5328] usb 1-1: config 0 descriptor?? [ 436.636098][ T7517] erofs: (device loop3): mounted with root inode @ nid 36. [ 437.794414][ T5328] glorious 0003:258A:0033.0006: item fetching failed at offset 2/3 [ 437.827982][ T5328] glorious: probe of 0003:258A:0033.0006 failed with error -22 [ 438.045525][ T4033] usb 1-1: USB disconnect, device number 13 [ 438.897995][ T7532] loop1: detected capacity change from 0 to 2048 [ 438.985131][ T7532] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 439.061888][ T7544] netlink: 20 bytes leftover after parsing attributes in process `syz.3.916'. [ 439.678529][ T7541] overlayfs: failed to resolve './file0': -2 [ 439.983542][ T7554] loop1: detected capacity change from 0 to 4096 [ 440.092609][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.098967][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.896988][ T7563] device team_slave_0 entered promiscuous mode [ 440.904010][ T7563] device team_slave_1 entered promiscuous mode [ 441.000127][ T7554] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 443.702029][ T7586] loop4: detected capacity change from 0 to 1024 [ 443.798975][ T7586] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 443.903120][ T7595] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 443.917348][ T7586] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,sysvgroups,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 443.947823][ T7600] device pim6reg1 entered promiscuous mode [ 446.481226][ T4022] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 446.691486][ T4022] usb 3-1: device descriptor read/64, error -71 [ 446.971300][ T4022] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 447.083142][ T7640] loop3: detected capacity change from 0 to 1024 [ 447.181210][ T4022] usb 3-1: device descriptor read/64, error -71 [ 447.215555][ T7640] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 447.280382][ T7640] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,sysvgroups,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 447.303503][ T4022] usb usb3-port1: attempt power cycle [ 448.331398][ T4022] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 448.441392][ T4022] usb 3-1: device descriptor read/8, error -71 [ 448.711260][ T4022] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 453.319847][ T7661] loop3: detected capacity change from 0 to 2048 [ 453.441425][ T4022] usb 3-1: device not accepting address 12, error -71 [ 453.466498][ T4022] usb usb3-port1: unable to enumerate USB device [ 453.508441][ T7661] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 454.495569][ T7681] netlink: 40 bytes leftover after parsing attributes in process `syz.4.956'. [ 455.736819][ T7700] ------------[ cut here ]------------ [ 455.755831][ T7700] WARNING: CPU: 1 PID: 7700 at net/mac80211/cfg.c:3686 ieee80211_probe_client+0x5b1/0x730 [ 455.781340][ T4108] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 455.801508][ T7700] Modules linked in: [ 455.807361][ T7700] CPU: 1 PID: 7700 Comm: syz.1.963 Not tainted 5.15.166-syzkaller #0 [ 455.837842][ T7700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 455.867511][ T7700] RIP: 0010:ieee80211_probe_client+0x5b1/0x730 [ 455.889168][ T7700] Code: f7 c6 05 80 b0 0f 04 01 48 c7 c7 20 8a 97 8b be 65 0e 00 00 48 c7 c2 00 8f 97 8b e8 a9 fa 9c f7 e9 98 fb ff ff e8 1f 4b ba f7 <0f> 0b bb ea ff ff ff e9 1f ff ff ff 89 e9 80 e1 07 80 c1 03 38 c1 [ 455.920143][ T7700] RSP: 0018:ffffc90002f87290 EFLAGS: 00010287 [ 455.927485][ T7700] RAX: ffffffff89c60ee1 RBX: 0000000000000001 RCX: 0000000000040000 [ 455.959408][ T7700] RDX: ffffc90006649000 RSI: 0000000000000840 RDI: 0000000000000841 [ 455.977400][ T7700] RBP: 0000000000000000 R08: ffffffff89c60a60 R09: fffffbfff20e2219 [ 456.001350][ T4108] usb 3-1: device descriptor read/64, error -71 [ 456.014188][ T7700] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90002f873a0 [ 456.067068][ T7700] R13: dffffc0000000000 R14: ffff88807917b820 R15: ffff88807c30a960 [ 456.085892][ T7700] FS: 00007f30f803a6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 456.105321][ T7700] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 456.121046][ T7700] CR2: 00007f47da751ab8 CR3: 0000000067f34000 CR4: 00000000003506e0 [ 456.139753][ T7700] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 456.155359][ T7700] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 456.175530][ T7700] Call Trace: [ 456.180424][ T7700] [ 456.189992][ T7700] ? __warn+0x15b/0x300 [ 456.201016][ T7700] ? ieee80211_probe_client+0x5b1/0x730 [ 456.207128][ T7700] ? report_bug+0x1b7/0x2e0 [ 456.226265][ T7700] ? handle_bug+0x3d/0x70 [ 456.243088][ T7700] ? exc_invalid_op+0x16/0x40 [ 456.269842][ T7700] ? asm_exc_invalid_op+0x16/0x20 [ 456.284153][ T7700] ? ieee80211_probe_client+0x130/0x730 [ 456.290544][ T7700] ? ieee80211_probe_client+0x5b1/0x730 [ 456.300844][ T7700] ? ieee80211_probe_client+0x5b1/0x730 [ 456.310524][ T7700] ? genlmsg_put+0x13b/0x2d0 [ 456.322395][ T4108] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 456.330907][ T7700] nl80211_probe_client+0x3e6/0x820 [ 456.347188][ T7700] ? nl80211_register_unexpected_frame+0x180/0x180 [ 456.357573][ T7700] genl_rcv_msg+0xfbd/0x14a0 [ 456.391232][ T7700] ? genl_bind+0x420/0x420 [ 456.399180][ T7700] ? local_bh_enable+0x5/0x20 [ 456.410739][ T7700] ? mark_lock+0x98/0x340 [ 456.422157][ T7700] ? __lock_acquire+0x1295/0x1ff0 [ 456.439261][ T7700] ? nl80211_register_unexpected_frame+0x180/0x180 [ 456.457367][ T7700] netlink_rcv_skb+0x1cf/0x410 [ 456.471237][ T7700] ? genl_bind+0x420/0x420 [ 456.487052][ T7700] ? netlink_ack+0xb10/0xb10 [ 456.512481][ T7700] ? down_read+0x1b3/0x2e0 [ 456.517154][ T7700] ? genl_rcv+0x9/0x40 [ 456.528585][ T7700] genl_rcv+0x24/0x40 [ 456.532725][ T4108] usb 3-1: device descriptor read/64, error -71 [ 456.539082][ T7700] netlink_unicast+0x7b6/0x980 [ 456.549962][ T7700] ? netlink_detachskb+0x90/0x90 [ 456.555115][ T7700] ? __virt_addr_valid+0x3bb/0x460 [ 456.560392][ T7700] ? 0xffffffff81000000 [ 456.570778][ T7700] ? __check_object_size+0x300/0x410 [ 456.576352][ T7700] ? bpf_lsm_netlink_send+0x5/0x10 [ 456.587327][ T7700] netlink_sendmsg+0xa30/0xd60 [ 456.592299][ T7700] ? netlink_getsockopt+0x5b0/0x5b0 [ 456.597528][ T7700] ? plist_check_list+0x20d/0x220 [ 456.611256][ T7700] ? aa_sock_msg_perm+0x91/0x150 [ 456.616359][ T7700] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 456.627459][ T7700] ? security_socket_sendmsg+0x7d/0xa0 [ 456.634270][ T7700] ? netlink_getsockopt+0x5b0/0x5b0 [ 456.639608][ T7700] ____sys_sendmsg+0x59e/0x8f0 [ 456.649138][ T7700] ? iovec_from_user+0x300/0x390 [ 456.655553][ T7700] ? __sys_sendmsg_sock+0x30/0x30 [ 456.664779][ T4108] usb usb3-port1: attempt power cycle [ 456.674037][ T7700] ___sys_sendmsg+0x252/0x2e0 [ 456.679285][ T7700] ? __sys_sendmsg+0x260/0x260 [ 456.685063][ T7700] ? __fdget+0x191/0x220 [ 456.689495][ T7700] __se_sys_sendmsg+0x19a/0x260 [ 456.695589][ T7700] ? __x64_sys_sendmsg+0x80/0x80 [ 456.700703][ T7700] ? syscall_enter_from_user_mode+0x2e/0x240 [ 456.707293][ T7700] ? lockdep_hardirqs_on+0x94/0x130 [ 456.712892][ T7700] ? syscall_enter_from_user_mode+0x2e/0x240 [ 456.718918][ T7700] do_syscall_64+0x3b/0xb0 [ 456.723537][ T7700] ? clear_bhb_loop+0x15/0x70 [ 456.729159][ T7700] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 456.735646][ T7700] RIP: 0033:0x7f30f9be2ef9 [ 456.740095][ T7700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.760442][ T7700] RSP: 002b:00007f30f803a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.768984][ T7700] RAX: ffffffffffffffda RBX: 00007f30f9d9b058 RCX: 00007f30f9be2ef9 [ 456.778950][ T7700] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000004 [ 456.787472][ T7700] RBP: 00007f30f9c559f6 R08: 0000000000000000 R09: 0000000000000000 [ 456.795682][ T7700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.803767][ T7700] R13: 0000000000000000 R14: 00007f30f9d9b058 R15: 00007ffde8051738 [ 456.811967][ T7700] [ 456.815048][ T7700] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 456.822342][ T7700] CPU: 0 PID: 7700 Comm: syz.1.963 Not tainted 5.15.166-syzkaller #0 [ 456.830521][ T7700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 456.840594][ T7700] Call Trace: [ 456.843896][ T7700] [ 456.847020][ T7700] dump_stack_lvl+0x1e3/0x2d0 [ 456.851701][ T7700] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 456.857364][ T7700] ? panic+0x860/0x860 [ 456.861440][ T7700] ? ieee80211_probe_client+0x4d0/0x730 [ 456.866989][ T7700] ? ieee80211_probe_client+0x4d0/0x730 [ 456.872543][ T7700] panic+0x318/0x860 [ 456.876474][ T7700] ? __warn+0x16a/0x300 [ 456.880657][ T7700] ? fb_is_primary_device+0xd0/0xd0 [ 456.885961][ T7700] ? ieee80211_probe_client+0x5b1/0x730 [ 456.894052][ T7700] __warn+0x2b2/0x300 [ 456.898100][ T7700] ? ieee80211_probe_client+0x5b1/0x730 [ 456.903760][ T7700] report_bug+0x1b7/0x2e0 [ 456.908101][ T7700] handle_bug+0x3d/0x70 [ 456.912267][ T7700] exc_invalid_op+0x16/0x40 [ 456.916883][ T7700] asm_exc_invalid_op+0x16/0x20 [ 456.921832][ T7700] RIP: 0010:ieee80211_probe_client+0x5b1/0x730 [ 456.928011][ T7700] Code: f7 c6 05 80 b0 0f 04 01 48 c7 c7 20 8a 97 8b be 65 0e 00 00 48 c7 c2 00 8f 97 8b e8 a9 fa 9c f7 e9 98 fb ff ff e8 1f 4b ba f7 <0f> 0b bb ea ff ff ff e9 1f ff ff ff 89 e9 80 e1 07 80 c1 03 38 c1 [ 456.947776][ T7700] RSP: 0018:ffffc90002f87290 EFLAGS: 00010287 [ 456.953895][ T7700] RAX: ffffffff89c60ee1 RBX: 0000000000000001 RCX: 0000000000040000 [ 456.961868][ T7700] RDX: ffffc90006649000 RSI: 0000000000000840 RDI: 0000000000000841 [ 456.969842][ T7700] RBP: 0000000000000000 R08: ffffffff89c60a60 R09: fffffbfff20e2219 [ 456.977913][ T7700] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90002f873a0 [ 456.986014][ T7700] R13: dffffc0000000000 R14: ffff88807917b820 R15: ffff88807c30a960 [ 456.994116][ T7700] ? ieee80211_probe_client+0x130/0x730 [ 456.999769][ T7700] ? ieee80211_probe_client+0x5b1/0x730 [ 457.005341][ T7700] ? genlmsg_put+0x13b/0x2d0 [ 457.009949][ T7700] nl80211_probe_client+0x3e6/0x820 [ 457.015185][ T7700] ? nl80211_register_unexpected_frame+0x180/0x180 [ 457.021721][ T7700] genl_rcv_msg+0xfbd/0x14a0 [ 457.026354][ T7700] ? genl_bind+0x420/0x420 [ 457.030796][ T7700] ? local_bh_enable+0x5/0x20 [ 457.036026][ T7700] ? mark_lock+0x98/0x340 [ 457.040377][ T7700] ? __lock_acquire+0x1295/0x1ff0 [ 457.045440][ T7700] ? nl80211_register_unexpected_frame+0x180/0x180 [ 457.052054][ T7700] netlink_rcv_skb+0x1cf/0x410 [ 457.056961][ T7700] ? genl_bind+0x420/0x420 [ 457.061412][ T7700] ? netlink_ack+0xb10/0xb10 [ 457.066117][ T7700] ? down_read+0x1b3/0x2e0 [ 457.070555][ T7700] ? genl_rcv+0x9/0x40 [ 457.074634][ T7700] genl_rcv+0x24/0x40 [ 457.078647][ T7700] netlink_unicast+0x7b6/0x980 [ 457.083541][ T7700] ? netlink_detachskb+0x90/0x90 [ 457.088479][ T7700] ? __virt_addr_valid+0x3bb/0x460 [ 457.093592][ T7700] ? 0xffffffff81000000 [ 457.097764][ T7700] ? __check_object_size+0x300/0x410 [ 457.103079][ T7700] ? bpf_lsm_netlink_send+0x5/0x10 [ 457.108231][ T7700] netlink_sendmsg+0xa30/0xd60 [ 457.113182][ T7700] ? netlink_getsockopt+0x5b0/0x5b0 [ 457.118382][ T7700] ? plist_check_list+0x20d/0x220 [ 457.121435][ T4108] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 457.123412][ T7700] ? aa_sock_msg_perm+0x91/0x150 [ 457.136046][ T7700] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 457.141455][ T7700] ? security_socket_sendmsg+0x7d/0xa0 [ 457.147026][ T7700] ? netlink_getsockopt+0x5b0/0x5b0 [ 457.152270][ T7700] ____sys_sendmsg+0x59e/0x8f0 [ 457.157095][ T7700] ? iovec_from_user+0x300/0x390 [ 457.162606][ T7700] ? __sys_sendmsg_sock+0x30/0x30 [ 457.167644][ T7700] ___sys_sendmsg+0x252/0x2e0 [ 457.172463][ T7700] ? __sys_sendmsg+0x260/0x260 [ 457.177656][ T7700] ? __fdget+0x191/0x220 [ 457.181934][ T7700] __se_sys_sendmsg+0x19a/0x260 [ 457.187156][ T7700] ? __x64_sys_sendmsg+0x80/0x80 [ 457.192407][ T7700] ? syscall_enter_from_user_mode+0x2e/0x240 [ 457.198399][ T7700] ? lockdep_hardirqs_on+0x94/0x130 [ 457.203606][ T7700] ? syscall_enter_from_user_mode+0x2e/0x240 [ 457.209617][ T7700] do_syscall_64+0x3b/0xb0 [ 457.214037][ T7700] ? clear_bhb_loop+0x15/0x70 [ 457.218894][ T7700] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 457.224803][ T7700] RIP: 0033:0x7f30f9be2ef9 [ 457.229251][ T7700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.248955][ T7700] RSP: 002b:00007f30f803a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.257398][ T7700] RAX: ffffffffffffffda RBX: 00007f30f9d9b058 RCX: 00007f30f9be2ef9 [ 457.265376][ T7700] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000004 [ 457.273368][ T7700] RBP: 00007f30f9c559f6 R08: 0000000000000000 R09: 0000000000000000 [ 457.281357][ T7700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.289330][ T7700] R13: 0000000000000000 R14: 00007f30f9d9b058 R15: 00007ffde8051738 [ 457.297316][ T7700] [ 457.300577][ T7700] Kernel Offset: disabled [ 457.305273][ T7700] Rebooting in 86400 seconds..