last executing test programs: 12.600539003s ago: executing program 4 (id=594): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x32}, 0x2, @in=@dev, 0x0, 0x1}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) write$binfmt_script(r0, &(0x7f0000000a00)={'#! ', './file0'}, 0xb) 11.542952579s ago: executing program 2 (id=596): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) kcmp(r1, 0x0, 0x1, 0xffffffffffffffff, r0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000140)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) 11.28057309s ago: executing program 4 (id=597): write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) r0 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r0, 0x10d, 0xf8, 0x0, &(0x7f0000000000)) 10.678722049s ago: executing program 4 (id=599): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x70}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r5 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x42}}, 0xe8) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) mmap(&(0x7f0000941000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000019640)=ANY=[@ANYBLOB="1808000000000000000000000002000018000000301400ae8af11cdea828764bce6231", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000bf98000000000000c6080000000000008500000007000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x58}, 0x48) sendmsg$nl_netfilter(r2, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000019840)={0x1014, 0x3, 0x2, 0x301, 0x70bd25, 0x25dfdbfd, {0x8, 0x0, 0xa}, [@generic="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"]}, 0x1014}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0xc0145b0e, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 9.888645974s ago: executing program 2 (id=601): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x74, 0x93, 0x1d, 0x40, 0xc45, 0x614a, 0xe6af, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9c, 0x80, 0xf4}}]}}]}}, 0x0) 7.409796556s ago: executing program 1 (id=604): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 6.86067456s ago: executing program 4 (id=607): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x1000}, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r1 = dup(0xffffffffffffffff) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) 6.773401847s ago: executing program 1 (id=608): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 6.608417581s ago: executing program 2 (id=610): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x1, @empty, 'geneve0\x00'}}, 0x1e) connect$pppoe(r0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000340)='GPL\x00'}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0, 0xa3cf05dada2710e3}, 0x50) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x20) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f00000010c0)=ANY=[], 0x1a3) socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) 6.573725304s ago: executing program 1 (id=611): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x90) 6.484437661s ago: executing program 4 (id=613): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/654], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={[0x2a]}, 0x8) r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000000540)=0x6e, 0x101800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'netdevsim0\x00'}) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r7}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000001280)=ANY=[], 0x274}}, 0x48800) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sched_setscheduler(0x0, 0x0, &(0x7f0000000440)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)={0x1c, 0x0, 0x100, 0x0, 0x25dfdbfd, {}, ["", ""]}, 0x1c}}, 0x48010) 6.352600602s ago: executing program 1 (id=614): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000000)={0x0, 0x0}) 3.274485773s ago: executing program 4 (id=616): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000011c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.19170808s ago: executing program 3 (id=617): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x5}, 0x8) 3.19114378s ago: executing program 1 (id=618): syz_usb_connect(0x5, 0x152, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0) 3.079711969s ago: executing program 2 (id=620): add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0xf7, 0x2}, {0x2}}]}}, 0xf) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000002000000080006000000000008000b00", @ANYRES32=0x0, @ANYBLOB="670ae76e5e9af050974088c23332c2dae1423e18f6dd3ad1deb12747a126a1d018934339e8ad38393615c8d36812795d5f3965bb0a26a51634933d59d3f873fd377cb09ada835c8e0657833c"], 0x24}}, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) add_key(&(0x7f0000000540)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000002340), 0x80) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f00000005c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 3.017155994s ago: executing program 3 (id=621): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1000}, 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) symlink(&(0x7f0000000200)='.\x00', &(0x7f0000000040)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000001240)='./file1\x00', &(0x7f00000002c0), 0xe2882, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') timer_create(0x0, &(0x7f0000000680)={0x0, 0x2f}, &(0x7f0000000000)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='br_fdb_external_learn_add\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfecf}], 0x1, 0x0, 0x0, 0x5865}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000001280)=0x400005) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x5008, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x14}}, 0x0) syz_io_uring_setup(0x2c5d, &(0x7f0000000140)={0x0, 0x445, 0x8, 0x2}, &(0x7f00000001c0), &(0x7f0000000200)) r6 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000200)="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", 0x680}, {&(0x7f0000001200)='`', 0x1}], 0x2) 2.21013614s ago: executing program 0 (id=625): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000100)=""/155, 0x9b) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 2.040574973s ago: executing program 3 (id=626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/654], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={[0x2a]}, 0x8) r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000000540)=0x6e, 0x101800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'netdevsim0\x00'}) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r7}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000001280)=ANY=[], 0x274}}, 0x48800) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sched_setscheduler(0x0, 0x0, &(0x7f0000000440)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)={0x1c, 0x0, 0x100, 0x0, 0x25dfdbfd, {}, ["", ""]}, 0x1c}}, 0x48010) 1.061786563s ago: executing program 2 (id=627): r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.008903308s ago: executing program 3 (id=628): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x9157d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 912.522345ms ago: executing program 3 (id=629): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0xa0003b40, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 780.362476ms ago: executing program 0 (id=630): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0x8) 646.151967ms ago: executing program 0 (id=631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="58000000030101"], 0x58}}, 0x0) 468.640172ms ago: executing program 0 (id=632): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="14002380080009"], 0x30}}, 0x0) 381.306269ms ago: executing program 0 (id=633): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) r1 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r1, 0x10d, 0xf8, 0x0, &(0x7f0000000000)) 288.839106ms ago: executing program 3 (id=634): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4fc, 0x5d8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r1, 0x97a9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f00000001c0)=0x8d) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r1, r1}, 0xfffffffffffffca3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000900)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket(0x840000000002, 0x0, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000240)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a950fd28"}, 0x0, 0x1, {0x0}}) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000070000000700392cdaab4a70b1bafa269ff953b4b9625a18ad420c20c3e818c5f27d3ef0448e376f75590141e57fbf3457cca5d62ec95606f148eca08583943cff6a34158fd7d85a7602c6459c7db55726ccfae3c3084f14fa03d746db58256c8cb9826c11422c69767253e1a883358a87bc4b443802dbad8d0fbf0b5626d48337124ff3c8610bbe77a4e2aff43b80e17bde1f73e0867b153ef897d35e78ca83ccd27742fac472ba8d327e04d413c8eb04d438bdbe9d2fe7d68686744d6d4085c57ae8c2ba5ded0e84389393ecb02f0212510cf09c63aa2e8fa791d7f01cbe3689693c9be9b974634c87f04261eb"], 0x0, 0x0, 0x0, 0x0}, 0x0) 255.044039ms ago: executing program 0 (id=635): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x1000}, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r1 = dup(0xffffffffffffffff) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) 345.2µs ago: executing program 2 (id=636): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000007e4aaf7d000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000780900010073797a3000000000080003400000000514000000110001000000000000000000000000e99cf8869830bdad21047dd77e07e8596f7db11c6723a4c0f6e44a6d0e215ef36c816ca0d7773734fa954c5d25c61824bfbee1b6d9ca95b6cd7783817b133a3a5328cb78b82b7fd1e5760000"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x28) r5 = syz_io_uring_setup(0x26c6, &(0x7f0000000080)={0x0, 0x40000000, 0x10900}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x734d, &(0x7f00000001c0)={0x0, 0xb14d, 0x10, 0x3, 0x157}, &(0x7f0000000240), 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_UNLINKAT={0x24, 0x10, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)) read$dsp(r4, &(0x7f0000000440)=""/171, 0xab) 0s ago: executing program 1 (id=637): socket$inet6_sctp(0xa, 0xb259cc52f3f61538, 0x84) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000640), 0xaa80, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0404309, &(0x7f0000000040)={0x43, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r5, 0x541b) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r6, 0x1, 0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x10001, 0x90) syz_genetlink_get_family_id$nl80211(0x0, r9) setsockopt$packet_int(r9, 0x107, 0xb, &(0x7f00000000c0), 0x4) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0xc22b01) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) kernel console output (not intermixed with test programs): s unique to avoid problems! [ 69.246350][ T3647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.257086][ T3647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.268631][ T3647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.280954][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.282107][ T3645] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.288937][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.303038][ T3645] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.316217][ T3645] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.325338][ T3645] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.342144][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.351485][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.360198][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.388657][ T3647] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.397715][ T3647] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.407067][ T3647] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.416107][ T3647] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.429354][ T3646] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.440338][ T3646] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.451619][ T3646] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.460374][ T3646] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.512182][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.522149][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.540286][ T3644] device veth0_vlan entered promiscuous mode [ 69.586407][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.597034][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.627834][ T3644] device veth1_vlan entered promiscuous mode [ 69.659197][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.668795][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.677071][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.685867][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.823559][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.833713][ T3727] loop0: detected capacity change from 0 to 512 [ 69.841807][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.860110][ T3644] device veth0_macvtap entered promiscuous mode [ 69.864468][ T3727] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 69.892207][ T3644] device veth1_macvtap entered promiscuous mode [ 69.893191][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.913229][ T3727] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.921586][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.951932][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.962825][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.972332][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.980322][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.994913][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.998462][ T3727] EXT4-fs (loop0): 1 truncate cleaned up [ 70.005950][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.008791][ T3727] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 70.024376][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.035156][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.045689][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.056229][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.066517][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.077878][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.088810][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.099939][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.112177][ T3644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.124555][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.136135][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.163954][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.176239][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.187196][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.199161][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.209301][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.220279][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.230266][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.241664][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.253632][ T3644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.270273][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.281678][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.295529][ T3700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.301729][ T3644] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.313355][ T3644] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.322013][ T3700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.323486][ T3644] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.340095][ T3644] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.363593][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.384292][ T3700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.395576][ T3700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.404043][ T3703] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.418658][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.472879][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.516253][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.529179][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.573590][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.594625][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.609199][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.675540][ T3700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.713180][ T3700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.744795][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.794504][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.810861][ T3703] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x1F, skipping [ 70.819576][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.830440][ T3653] Bluetooth: hci4: command tx timeout [ 70.830462][ T3657] Bluetooth: hci2: command tx timeout [ 70.835887][ T3653] Bluetooth: hci3: command tx timeout [ 70.835934][ T3653] Bluetooth: hci0: command tx timeout [ 70.901589][ T3657] Bluetooth: hci1: command tx timeout [ 70.929270][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.041826][ T3703] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 71.060830][ T3703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.081154][ T3703] usb 1-1: Product: syz [ 71.085414][ T3703] usb 1-1: Manufacturer: syz [ 71.110400][ T3703] usb 1-1: SerialNumber: syz [ 71.132982][ T3703] usb 1-1: config 0 descriptor?? [ 71.158370][ T3750] Zero length message leads to an empty skb [ 71.305760][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.312822][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.457933][ T3703] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 71.498187][ T3703] usb 1-1: USB disconnect, device number 2 [ 71.540096][ T3637] udevd[3637]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 72.046542][ T3643] EXT4-fs (loop0): unmounting filesystem. [ 72.799821][ T3808] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 73.000002][ T3812] Bluetooth: MGMT ver 1.22 [ 73.278818][ T3823] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.368636][ T3825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.38'. [ 73.412657][ T3825] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.421749][ T3825] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.430486][ T3825] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.439635][ T3825] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.540704][ T3825] device vxlan0 entered promiscuous mode [ 73.568282][ T3823] kvm: emulating exchange as write [ 73.614262][ T3831] 9pnet_fd: Insufficient options for proto=fd [ 73.749775][ T3833] loop4: detected capacity change from 0 to 64 [ 74.270246][ T3843] loop4: detected capacity change from 0 to 512 [ 74.305748][ T3843] ======================================================= [ 74.305748][ T3843] WARNING: The mand mount option has been deprecated and [ 74.305748][ T3843] and is ignored by this kernel. Remove the mand [ 74.305748][ T3843] option from the mount to silence this warning. [ 74.305748][ T3843] ======================================================= [ 74.341352][ T27] audit: type=1326 audit(1723762662.025:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3829 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0125799b9 code=0x7fc00000 [ 74.389574][ T27] audit: type=1326 audit(1723762662.025:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3829 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fd0125799b9 code=0x7fc00000 [ 74.450933][ T3843] EXT4-fs: Ignoring removed oldalloc option [ 74.463446][ T27] audit: type=1326 audit(1723762662.025:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3829 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0125799b9 code=0x7fc00000 [ 74.503628][ T3843] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.536516][ T3843] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 74.548640][ T27] audit: type=1326 audit(1723762662.025:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3829 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0125799b9 code=0x7fc00000 [ 74.646611][ T27] audit: type=1326 audit(1723762662.025:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3829 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0125799b9 code=0x7fc00000 [ 74.710823][ T27] audit: type=1326 audit(1723762662.025:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3829 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0125799b9 code=0x7fc00000 [ 74.750119][ T27] audit: type=1326 audit(1723762662.025:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3829 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0125799b9 code=0x7fc00000 [ 74.778625][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 74.832877][ T27] audit: type=1326 audit(1723762662.025:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3829 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0125799b9 code=0x7fc00000 [ 74.887580][ T27] audit: type=1326 audit(1723762662.025:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3829 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0125799b9 code=0x7fc00000 [ 74.943343][ T27] audit: type=1326 audit(1723762662.025:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3829 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0125799b9 code=0x7fc00000 [ 76.306828][ T3881] 9pnet_fd: Insufficient options for proto=fd [ 76.413834][ T3883] loop1: detected capacity change from 0 to 256 [ 76.603999][ T3891] loop3: detected capacity change from 0 to 256 [ 77.627755][ T3900] device pim6reg1 entered promiscuous mode [ 78.175736][ T3925] loop3: detected capacity change from 0 to 256 [ 78.290828][ T3936] 9pnet_fd: Insufficient options for proto=fd [ 78.366791][ T3938] device bridge0 entered promiscuous mode [ 78.458988][ T3940] bridge0: port 1(bridge_slave_0) entered learning state [ 78.493090][ T3940] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.718043][ T3967] loop1: detected capacity change from 0 to 256 [ 79.815844][ T3960] loop4: detected capacity change from 0 to 4096 [ 79.836083][ T3970] loop0: detected capacity change from 0 to 128 [ 79.872822][ T3960] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 79.934073][ T3960] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 79.975081][ T3637] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 80.088935][ T3971] loop0: detected capacity change from 0 to 8 [ 80.264076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 80.272391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 80.280643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 80.290607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 80.298784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 80.306981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 80.318725][ T0] NOHZ tick-stop error: local softirq work is pending, handler #9a!!! [ 80.327331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #19a!!! [ 80.335751][ T0] NOHZ tick-stop error: local softirq work is pending, handler #19a!!! [ 80.539915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 81.085768][ T3637] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 81.100832][ T3644] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 81.103471][ T3971] process 'syz.0.95' launched './file0/file0' with NULL argv: empty string added [ 81.330722][ T3981] syz.2.102 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 81.492977][ T3988] loop1: detected capacity change from 0 to 16 [ 81.533562][ T3988] erofs: (device loop1): mounted with root inode @ nid 36. [ 81.545031][ T153] cfg80211: failed to load regulatory.db [ 81.607855][ T3991] 9pnet_fd: Insufficient options for proto=fd [ 81.615250][ T3988] syz.1.103: attempt to access beyond end of device [ 81.615250][ T3988] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 82.770868][ T27] kauditd_printk_skb: 61 callbacks suppressed [ 82.770885][ T27] audit: type=1326 audit(1723762670.465:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3987 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6b1799b9 code=0x7fc00000 [ 82.968924][ T27] audit: type=1326 audit(1723762670.465:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3987 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fbf6b1799b9 code=0x7fc00000 [ 83.077138][ T27] audit: type=1326 audit(1723762670.465:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3987 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6b1799b9 code=0x7fc00000 [ 83.103651][ T4003] loop2: detected capacity change from 0 to 256 [ 83.188358][ T27] audit: type=1326 audit(1723762670.465:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3987 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6b1799b9 code=0x7fc00000 [ 83.292562][ T27] audit: type=1326 audit(1723762670.465:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3987 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6b1799b9 code=0x7fc00000 [ 83.348083][ T27] audit: type=1326 audit(1723762670.465:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3987 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6b1799b9 code=0x7fc00000 [ 83.426551][ T27] audit: type=1326 audit(1723762670.475:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3987 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6b1799b9 code=0x7fc00000 [ 83.499643][ T27] audit: type=1326 audit(1723762670.475:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3987 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6b1799b9 code=0x7fc00000 [ 83.620335][ T27] audit: type=1326 audit(1723762670.475:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3987 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6b1799b9 code=0x7fc00000 [ 83.712578][ T27] audit: type=1326 audit(1723762670.475:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3987 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6b1799b9 code=0x7fc00000 [ 83.725666][ T4005] loop2: detected capacity change from 0 to 4096 [ 83.847135][ T4005] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 83.940486][ T4005] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 84.658444][ T4001] loop4: detected capacity change from 0 to 40427 [ 84.703616][ T4001] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 84.766377][ T4001] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 84.933002][ T4001] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 84.975113][ T3646] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 85.275231][ T4001] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 85.293205][ T4001] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 85.524474][ T4024] loop0: detected capacity change from 0 to 1024 [ 85.594953][ T4026] tipc: Started in network mode [ 85.600004][ T4026] tipc: Node identity 1, cluster identity 4711 [ 85.624309][ T4026] tipc: Node number set to 1 [ 85.708071][ T4010] loop3: detected capacity change from 0 to 40427 [ 85.735266][ T4010] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 85.765710][ T4010] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 85.834843][ T4010] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.852919][ T4024] EXT4-fs (loop0): Test dummy encryption mode enabled [ 85.935828][ T4024] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 85.962721][ T4010] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 86.015676][ T4010] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 86.863257][ T4001] tty tty29: ldisc open failed (-12), clearing slot 28 [ 86.951673][ T4024] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 87.039806][ T4051] loop2: detected capacity change from 0 to 256 [ 87.138245][ T4024] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 87.243587][ T3643] EXT4-fs (loop0): unmounting filesystem. [ 87.515959][ T4062] loop2: detected capacity change from 0 to 128 [ 87.544447][ T4060] loop0: detected capacity change from 0 to 4096 [ 87.580938][ T4060] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 87.614563][ T4062] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 87.665949][ T4062] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038 (0x7fffffff) [ 87.707004][ T4060] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 88.128163][ T4074] 9pnet_fd: Insufficient options for proto=fd [ 89.553241][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 89.553257][ T27] audit: type=1326 audit(1723762677.255:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4068 comm="syz.4.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370ff799b9 code=0x7fc00000 [ 89.668482][ T27] audit: type=1326 audit(1723762677.255:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4068 comm="syz.4.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f370ff799b9 code=0x7fc00000 [ 89.740059][ T27] audit: type=1326 audit(1723762677.255:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4068 comm="syz.4.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370ff799b9 code=0x7fc00000 [ 89.788618][ T4083] fuse: Unknown parameter 'fd0x0000000000000007' [ 89.803316][ T27] audit: type=1326 audit(1723762677.255:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4068 comm="syz.4.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370ff799b9 code=0x7fc00000 [ 89.832084][ T27] audit: type=1326 audit(1723762677.255:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4068 comm="syz.4.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370ff799b9 code=0x7fc00000 [ 89.867045][ T27] audit: type=1326 audit(1723762677.255:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4068 comm="syz.4.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370ff799b9 code=0x7fc00000 [ 89.897764][ T27] audit: type=1326 audit(1723762677.255:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4068 comm="syz.4.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370ff799b9 code=0x7fc00000 [ 89.928473][ T27] audit: type=1326 audit(1723762677.255:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4068 comm="syz.4.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370ff799b9 code=0x7fc00000 [ 89.958822][ T27] audit: type=1326 audit(1723762677.255:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4068 comm="syz.4.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370ff799b9 code=0x7fc00000 [ 89.988015][ T27] audit: type=1326 audit(1723762677.255:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4068 comm="syz.4.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370ff799b9 code=0x7fc00000 [ 90.261661][ T3643] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 90.399418][ T3646] EXT4-fs (loop2): unmounting filesystem. [ 90.647674][ T4092] loop3: detected capacity change from 0 to 256 [ 91.149516][ T4109] loop3: detected capacity change from 0 to 4096 [ 91.158442][ T4110] 9pnet_fd: Insufficient options for proto=fd [ 91.181030][ T4109] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 91.249932][ T4109] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 91.312025][ T4088] loop0: detected capacity change from 0 to 40427 [ 91.479318][ T4088] F2FS-fs (loop0): invalid crc value [ 91.490712][ T4088] F2FS-fs (loop0): Found nat_bits in checkpoint [ 91.976087][ T4088] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 92.308231][ C0] eth0: bad gso: type: 1, size: 1408 [ 92.320045][ T3647] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 93.331746][ T3643] syz-executor: attempt to access beyond end of device [ 93.331746][ T3643] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 93.344092][ T4130] loop4: detected capacity change from 0 to 512 [ 93.392370][ T3657] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.412293][ T3657] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.420481][ T3657] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.431491][ T3657] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.439242][ T3657] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 93.447305][ T3657] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.501064][ T4130] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 93.510093][ T4130] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038 (0x7fffffff) [ 93.690501][ T4143] 9pnet_fd: Insufficient options for proto=fd [ 93.887987][ T4146] loop3: detected capacity change from 0 to 4096 [ 93.904930][ T4146] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 93.957351][ T3644] EXT4-fs (loop4): unmounting filesystem. [ 94.010042][ T4131] chnl_net:caif_netlink_parms(): no params data found [ 94.046700][ T4146] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 94.132603][ T4151] loop2: detected capacity change from 0 to 64 [ 94.187910][ T4153] loop4: detected capacity change from 0 to 64 [ 94.897359][ T4163] fuse: Unknown parameter '00000000000000000000' [ 95.037464][ T4163] netlink: 60 bytes leftover after parsing attributes in process `syz.4.156'. [ 95.076980][ T4163] unsupported nlmsg_type 40 [ 95.194525][ T3647] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 95.202437][ C0] eth0: bad gso: type: 1, size: 1408 [ 95.274979][ T4131] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.340826][ T4131] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.384151][ T4131] device bridge_slave_0 entered promiscuous mode [ 95.462154][ T4131] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.552028][ T3657] Bluetooth: hci5: command tx timeout [ 96.352974][ T4131] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.369652][ T4131] device bridge_slave_1 entered promiscuous mode [ 96.560211][ T4188] loop4: detected capacity change from 0 to 64 [ 96.593004][ T4131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.622906][ T4190] 9pnet_fd: Insufficient options for proto=fd [ 96.642155][ T4131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.781714][ T4191] loop0: detected capacity change from 0 to 4096 [ 96.823774][ T4131] team0: Port device team_slave_0 added [ 96.846731][ T4191] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 96.870126][ T4195] loop2: detected capacity change from 0 to 512 [ 96.879050][ T4131] team0: Port device team_slave_1 added [ 96.920152][ T4195] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.949643][ T4131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.970049][ T4131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.971285][ T4191] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 97.094000][ T4131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.249866][ T4195] EXT4-fs (loop2): 1 truncate cleaned up [ 97.260727][ T4195] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 97.306958][ T4131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.568658][ T4131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.660159][ T4131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.768945][ T3646] EXT4-fs (loop2): unmounting filesystem. [ 97.914582][ T4131] device hsr_slave_0 entered promiscuous mode [ 97.951428][ T4131] device hsr_slave_1 entered promiscuous mode [ 97.980737][ T4131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.009544][ T4131] Cannot create hsr debugfs directory [ 98.043753][ T3657] Bluetooth: hci5: command tx timeout [ 98.054538][ T3643] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 98.642268][ T4131] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.687303][ T4131] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.817010][ T4223] loop2: detected capacity change from 0 to 128 [ 98.917756][ T4131] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.945044][ T4131] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.105819][ T4131] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.137834][ T4131] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.297742][ T4131] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.328642][ T4131] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.566481][ T4131] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.634494][ T4131] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.693610][ T4131] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.731746][ T4131] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.920146][ T4236] loop0: detected capacity change from 0 to 4096 [ 99.986435][ T4236] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 100.034791][ T4131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.082156][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.098785][ T4236] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 100.106872][ T4229] loop2: detected capacity change from 0 to 40427 [ 100.113699][ T3657] Bluetooth: hci5: command tx timeout [ 100.141122][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.146481][ T4229] F2FS-fs (loop2): invalid crc value [ 100.184008][ T4131] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.204317][ T4229] F2FS-fs (loop2): Found nat_bits in checkpoint [ 100.235474][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.399685][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.408569][ T3868] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.415810][ T3868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.771426][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.100366][ T4229] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 101.118660][ T4131] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 101.206584][ T4131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.329048][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 101.329066][ T27] audit: type=1804 audit(1723762689.025:163): pid=4229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.179" name="/newroot/39/file0/file0" dev="loop2" ino=10 res=1 errno=0 [ 101.368933][ T3643] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 101.369918][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.074766][ T4255] syz.2.179: attempt to access beyond end of device [ 102.074766][ T4255] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 102.099444][ T4255] syz.2.179: attempt to access beyond end of device [ 102.099444][ T4255] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 102.181607][ T3657] Bluetooth: hci5: command tx timeout [ 102.851313][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.929683][ T4045] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.936923][ T4045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.955059][ T27] audit: type=1804 audit(1723762689.825:164): pid=4255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.179" name="/newroot/39/file0/file0" dev="loop2" ino=10 res=1 errno=0 [ 102.994226][ T3646] syz-executor: attempt to access beyond end of device [ 102.994226][ T3646] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 103.055853][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.106493][ T4264] loop0: detected capacity change from 0 to 512 [ 103.114351][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.142899][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.174351][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.194207][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.203485][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.209596][ T4264] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz.0.186: bad orphan inode 4 [ 103.212690][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.230233][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.239407][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.248380][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.257984][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.266143][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.278938][ T4264] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 103.287943][ T4268] loop4: detected capacity change from 0 to 128 [ 103.347174][ T4268] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.245146][ T4275] loop4: detected capacity change from 0 to 1024 [ 104.301592][ T3643] EXT4-fs (loop0): unmounting filesystem. [ 104.308342][ T4275] EXT4-fs: Ignoring removed orlov option [ 104.356164][ T4131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.363409][ T4275] ext4: Unknown parameter 'noacl' [ 104.404582][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.423035][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.503638][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.522564][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.615608][ T4131] device veth0_vlan entered promiscuous mode [ 104.640459][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.671858][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.705236][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.722583][ T27] audit: type=1326 audit(1723762692.425:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4283 comm="syz.4.194" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f370ff799b9 code=0x0 [ 104.753853][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.767718][ T4131] device veth1_vlan entered promiscuous mode [ 104.857328][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.873187][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 104.873744][ T4287] mmap: syz.4.194 (4287) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 104.890311][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.922632][ T4286] loop2: detected capacity change from 0 to 4096 [ 104.930058][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.961855][ T4286] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 104.978352][ T4131] device veth0_macvtap entered promiscuous mode [ 105.011598][ T4131] device veth1_macvtap entered promiscuous mode [ 105.047549][ T4286] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 105.084568][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.116537][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.130024][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.148872][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.221852][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.268435][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.303284][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.324943][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.370708][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.382233][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.402709][ T4131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.405370][ T4302] loop0: detected capacity change from 0 to 1024 [ 106.418490][ T3646] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 106.466857][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.499797][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 106.542698][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.833082][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.368842][ T4304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.200'. [ 107.405187][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.426227][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.438496][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.457347][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.481732][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.498187][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.509444][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.520213][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.530527][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.541500][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.552944][ T4131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.562919][ T9] hfsplus: b-tree write err: -5, ino 4 [ 107.583270][ T4309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.200'. [ 107.668023][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.689896][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.703435][ T4131] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.718328][ T4131] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.750801][ T4131] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.772948][ T4131] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.817238][ T4320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.202'. [ 107.964704][ T4327] loop3: detected capacity change from 0 to 512 [ 107.982842][ T4327] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 108.000376][ T4328] loop0: detected capacity change from 0 to 128 [ 108.044895][ T4327] EXT4-fs (loop3): 1 truncate cleaned up [ 108.052290][ T4327] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 108.053207][ T3867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.081827][ T3867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.129593][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.341164][ T27] audit: type=1326 audit(1723762696.045:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.2.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f799b9 code=0x7fc00000 [ 108.577001][ T4328] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 108.871931][ T4327] overlayfs: './file0' not a directory [ 108.888022][ T4328] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 108.936295][ T27] audit: type=1326 audit(1723762696.075:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.2.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fbb59f799b9 code=0x7fc00000 [ 109.014496][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.045362][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.070187][ T27] audit: type=1326 audit(1723762696.075:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.2.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f799b9 code=0x7fc00000 [ 109.082303][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 109.113216][ T3647] EXT4-fs (loop3): unmounting filesystem. [ 109.217649][ T27] audit: type=1326 audit(1723762696.075:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.2.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f799b9 code=0x7fc00000 [ 109.329924][ T27] audit: type=1326 audit(1723762696.075:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.2.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f799b9 code=0x7fc00000 [ 109.373502][ T3643] EXT4-fs (loop0): unmounting filesystem. [ 109.451174][ T27] audit: type=1326 audit(1723762696.075:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.2.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f799b9 code=0x7fc00000 [ 109.567147][ T27] audit: type=1326 audit(1723762696.075:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.2.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f799b9 code=0x7fc00000 [ 109.595430][ T27] audit: type=1326 audit(1723762696.075:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.2.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f799b9 code=0x7fc00000 [ 109.620013][ T27] audit: type=1326 audit(1723762696.075:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.2.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f799b9 code=0x7fc00000 [ 109.643283][ T27] audit: type=1326 audit(1723762696.075:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.2.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f799b9 code=0x7fc00000 [ 109.659248][ T4352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.214'. [ 109.820373][ T4358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.214'. [ 110.754794][ T4367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.216'. [ 111.377059][ T4373] netlink: 224 bytes leftover after parsing attributes in process `syz.3.217'. [ 112.802711][ T4392] loop3: detected capacity change from 0 to 128 [ 112.897453][ T4392] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 112.923659][ T4396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.227'. [ 113.032793][ T4401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 114.168487][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 114.168503][ T27] audit: type=1326 audit(1723762701.865:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21b5799b9 code=0x7ffc0000 [ 115.191785][ T27] audit: type=1326 audit(1723762702.785:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa21b5799b9 code=0x7ffc0000 [ 115.214189][ T27] audit: type=1326 audit(1723762702.785:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21b5799b9 code=0x7ffc0000 [ 115.272611][ T3637] udevd[3637]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 115.446991][ T27] audit: type=1326 audit(1723762702.785:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21b5799b9 code=0x7ffc0000 [ 115.537870][ T4431] loop2: detected capacity change from 0 to 512 [ 115.583139][ T27] audit: type=1326 audit(1723762702.805:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa21b5799b9 code=0x7ffc0000 [ 115.626037][ T4431] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 115.666795][ T27] audit: type=1326 audit(1723762702.805:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21b5799b9 code=0x7ffc0000 [ 115.712118][ T4431] EXT4-fs (loop2): 1 truncate cleaned up [ 115.717834][ T4431] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 115.733196][ T4427] loop3: detected capacity change from 0 to 4096 [ 115.742856][ T27] audit: type=1326 audit(1723762702.805:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21b5799b9 code=0x7ffc0000 [ 115.779442][ T4427] ntfs: (device loop3): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 115.800876][ T4427] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 115.826703][ T4427] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 115.949865][ T4427] ntfs: volume version 3.1. [ 116.020373][ T4431] overlayfs: failed to resolve './file2': -2 [ 116.871536][ T3646] EXT4-fs (loop2): unmounting filesystem. [ 120.111993][ T4481] loop3: detected capacity change from 0 to 2048 [ 120.476181][ T4485] loop4: detected capacity change from 0 to 2048 [ 120.549599][ T4485] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 120.633013][ T4485] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 120.822890][ T3644] EXT4-fs (loop4): unmounting filesystem. [ 121.899083][ T4511] loop4: detected capacity change from 0 to 512 [ 122.030165][ T4511] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.262: casefold flag without casefold feature [ 122.121388][ T4511] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz.4.262: missing EA_INODE flag [ 122.647280][ T4511] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.262: error while reading EA inode 2 err=-117 [ 122.839180][ T4511] EXT4-fs (loop4): 1 orphan inode deleted [ 122.940924][ T4511] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 123.025857][ T4528] netlink: 'syz.3.269': attribute type 1 has an invalid length. [ 123.027354][ T3637] udevd[3637]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 123.034344][ T4528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.269'. [ 123.141698][ T4511] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.262: Directory hole found for htree leaf block 0 [ 123.346073][ T3644] EXT4-fs (loop4): unmounting filesystem. [ 124.731126][ T4565] netlink: 'syz.2.282': attribute type 1 has an invalid length. [ 124.738868][ T4565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'. [ 125.023923][ T4571] loop2: detected capacity change from 0 to 1024 [ 125.186622][ T4045] hfsplus: b-tree write err: -5, ino 4 [ 126.714142][ T4597] netlink: 'syz.2.295': attribute type 1 has an invalid length. [ 126.721952][ T4597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.295'. [ 127.270040][ T4620] 9pnet_fd: Insufficient options for proto=fd [ 128.834523][ T4642] netlink: 'syz.2.312': attribute type 10 has an invalid length. [ 129.033921][ T4642] team0: Port device wlan1 added [ 129.407887][ T4656] 9pnet_fd: Insufficient options for proto=fd [ 130.409115][ T4664] loop3: detected capacity change from 0 to 512 [ 130.501501][ T4664] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 130.510701][ T4664] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038 (0x7fffffff) [ 130.754408][ T4677] loop4: detected capacity change from 0 to 1024 [ 130.809145][ T3647] EXT4-fs (loop3): unmounting filesystem. [ 130.961756][ T56] hfsplus: b-tree write err: -5, ino 4 [ 131.169341][ T4690] 9pnet_fd: Insufficient options for proto=fd [ 131.329202][ T4695] netlink: 'syz.1.329': attribute type 10 has an invalid length. [ 131.359870][ T4666] loop2: detected capacity change from 0 to 32768 [ 131.457234][ T4695] team0: Port device wlan1 added [ 131.607512][ T4666] XFS (loop2): Mounting V5 Filesystem [ 132.596694][ T4716] netlink: 'syz.3.332': attribute type 29 has an invalid length. [ 132.646720][ T4666] XFS (loop2): Starting recovery (logdev: internal) [ 132.657586][ T4716] netlink: 'syz.3.332': attribute type 29 has an invalid length. [ 132.674577][ T4721] netlink: 'syz.3.332': attribute type 29 has an invalid length. [ 132.728928][ T4666] XFS (loop2): Ending recovery (logdev: internal) [ 132.745874][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.757734][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.781230][ T4723] netlink: 232 bytes leftover after parsing attributes in process `syz.1.335'. [ 132.880693][ T4723] netlink: 72 bytes leftover after parsing attributes in process `syz.1.335'. [ 132.989623][ T4728] syz.3.337 uses obsolete (PF_INET,SOCK_PACKET) [ 133.131774][ T3646] XFS (loop2): Unmounting Filesystem [ 134.616048][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 134.632391][ T27] audit: type=1326 audit(1723762722.305:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370ff799b9 code=0x7fc00000 [ 135.031956][ T4755] netlink: 'syz.0.345': attribute type 10 has an invalid length. [ 135.114213][ T27] audit: type=1326 audit(1723762722.815:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f370ff799b9 code=0x7fc00000 [ 135.203669][ T4755] team0: Port device wlan1 added [ 135.314032][ T27] audit: type=1326 audit(1723762723.015:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370ff799b9 code=0x7fc00000 [ 135.569622][ T4768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.348'. [ 135.580722][ T27] audit: type=1326 audit(1723762723.285:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4767 comm="syz.2.348" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f799b9 code=0x0 [ 138.182178][ T4792] sched: RT throttling activated [ 139.332269][ T3758] udevd[3758]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 139.769386][ T4809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.360'. [ 139.862200][ C0] eth0: bad gso: type: 1, size: 1408 [ 140.163155][ T4813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.363'. [ 140.214341][ T27] audit: type=1326 audit(1723762727.915:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.1.363" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa21b5799b9 code=0x0 [ 141.901861][ T3637] udevd[3637]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 142.430753][ T3692] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 142.433870][ T4844] loop3: detected capacity change from 0 to 512 [ 142.529204][ T4844] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 142.540832][ T4844] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038 (0x7fffffff) [ 142.765735][ T3647] EXT4-fs (loop3): unmounting filesystem. [ 142.815161][ T3692] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 142.843388][ T3692] usb 1-1: config 0 has no interface number 0 [ 143.098663][ T3692] usb 1-1: New USB device found, idVendor=20f4, idProduct=624d, bcdDevice=dd.be [ 143.130348][ T3692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.148824][ T3692] usb 1-1: Product: syz [ 143.171765][ T3692] usb 1-1: Manufacturer: syz [ 143.196866][ T3692] usb 1-1: SerialNumber: syz [ 143.230774][ T3692] usb 1-1: config 0 descriptor?? [ 143.543430][ T3692] usb 1-1: USB disconnect, device number 3 [ 145.149644][ T48] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 145.160287][ T48] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 145.169823][ T48] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 145.192737][ T48] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 145.201959][ T48] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 145.209307][ T48] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 146.119166][ T3758] udevd[3758]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 146.585563][ T4882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.381'. [ 146.989104][ T3637] udevd[3637]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 147.072834][ T27] audit: type=1326 audit(1723762734.765:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4879 comm="syz.3.381" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf6b1799b9 code=0x0 [ 147.305144][ T4870] chnl_net:caif_netlink_parms(): no params data found [ 147.314276][ T48] Bluetooth: hci6: command tx timeout [ 147.829498][ T4870] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.839163][ T4870] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.856251][ T4870] device bridge_slave_0 entered promiscuous mode [ 147.874218][ T4870] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.904479][ T4870] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.946072][ T4870] device bridge_slave_1 entered promiscuous mode [ 149.380757][ T3657] Bluetooth: hci6: command tx timeout [ 150.974008][ T4870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.024225][ T4870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.202517][ T4927] netlink: 'syz.0.390': attribute type 10 has an invalid length. [ 151.282527][ T4933] netlink: 'syz.0.390': attribute type 10 has an invalid length. [ 151.490597][ T3657] Bluetooth: hci6: command tx timeout [ 152.382077][ T4933] batman_adv: batadv0: Adding interface: team0 [ 152.388651][ T4933] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.415537][ T4933] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 153.426277][ T4870] team0: Port device team_slave_0 added [ 153.453978][ T4870] team0: Port device team_slave_1 added [ 153.658192][ T3657] Bluetooth: hci6: command tx timeout [ 154.563098][ T4870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.570112][ T4870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.598185][ T4955] loop2: detected capacity change from 0 to 512 [ 154.674132][ T4870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.708574][ T4955] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.751164][ T4870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.767932][ T4870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.801461][ T4955] EXT4-fs (loop2): Test dummy encryption mode enabled [ 154.818098][ T4870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.901990][ T4960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.398'. [ 154.962419][ T27] audit: type=1326 audit(1723762742.665:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4958 comm="syz.0.398" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0125799b9 code=0x0 [ 155.009638][ T4955] EXT4-fs error (device loop2): __ext4_iget:5055: inode #11: block 1: comm syz.2.396: invalid block [ 155.049938][ T4870] device hsr_slave_0 entered promiscuous mode [ 155.083375][ T4870] device hsr_slave_1 entered promiscuous mode [ 155.090393][ T4955] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.396: couldn't read orphan inode 11 (err -117) [ 155.102781][ T4870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.110375][ T4870] Cannot create hsr debugfs directory [ 155.177050][ T4955] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 155.589151][ T4870] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.621598][ T4955] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 155.629120][ T4955] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.396: Directory hole found for htree leaf block 0 [ 155.888864][ T4968] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.396: Directory hole found for htree leaf block 0 [ 155.937962][ T4870] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.166840][ T4870] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.240952][ T4977] device bond0 entered promiscuous mode [ 156.254845][ T4977] device bond_slave_0 entered promiscuous mode [ 158.415632][ T4977] device bond_slave_1 entered promiscuous mode [ 158.522619][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x1 [ 158.546370][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 158.565161][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 158.584906][ T4870] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.598393][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 158.625132][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 158.658368][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 158.697311][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 158.730654][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 158.759284][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 158.789458][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 158.790233][ T3646] EXT4-fs (loop2): unmounting filesystem. [ 158.829992][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 158.838126][ T4973] device bond0 left promiscuous mode [ 158.844081][ T4973] device bond_slave_0 left promiscuous mode [ 158.861517][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x4 [ 158.869400][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 158.888516][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 158.917120][ T4973] device bond_slave_1 left promiscuous mode [ 158.917272][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x2 [ 158.982799][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 159.020676][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 159.059341][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 159.089774][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 159.122395][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 159.149058][ T4870] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 159.157476][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 159.187288][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 159.218528][ T4870] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 159.230956][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 159.260090][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 159.263604][ T4870] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 159.313645][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 159.333799][ T4870] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 159.360653][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 159.401855][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 159.440805][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 159.448713][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 159.467071][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 159.504423][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 159.550828][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 159.579699][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 159.620009][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: unknown main item tag 0x0 [ 159.679924][ T3691] hid-generic 0000:FFFFFFF8:1000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 159.853076][ T4870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.953707][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.981438][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.018852][ T4870] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.080375][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.106143][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.142416][ T3898] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.149558][ T3898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.231049][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.249788][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.251106][ T4986] loop2: detected capacity change from 0 to 128 [ 160.287306][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.321372][ T3898] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.328525][ T3898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.434150][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.457419][ T4986] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 160.490168][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.522637][ T4986] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038 (0x7fffffff) [ 160.604259][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.638560][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.778789][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.818643][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.203233][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.282053][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.351692][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.402741][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.693734][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.755440][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.915969][ T3646] EXT4-fs (loop2): unmounting filesystem. [ 162.973191][ T5008] xt_CT: You must specify a L4 protocol and not use inversions on it [ 163.562241][ T48] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 163.594157][ T48] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 163.603727][ T48] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 163.613811][ T48] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 163.623407][ T48] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 163.631053][ T48] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 163.839226][ T27] audit: type=1326 audit(1723762751.535:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.2.408" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f799b9 code=0x0 [ 164.117518][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.138139][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.156799][ T4870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.622782][ T5018] chnl_net:caif_netlink_parms(): no params data found [ 165.094891][ T5044] raw_sendmsg: syz.2.412 forgot to set AF_INET. Fix it! [ 165.673343][ T5018] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.686360][ T5018] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.727909][ T48] Bluetooth: hci7: command tx timeout [ 165.821954][ T5018] device bridge_slave_0 entered promiscuous mode [ 166.337088][ T5018] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.353181][ T5018] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.411883][ T5018] device bridge_slave_1 entered promiscuous mode [ 166.481235][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 166.502767][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 166.594983][ T5018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.638315][ T5018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.696060][ T27] audit: type=1326 audit(1723762754.395:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5052 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f799b9 code=0x7fc00000 [ 166.770593][ T27] audit: type=1326 audit(1723762754.395:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5052 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fbb59f799b9 code=0x7fc00000 [ 166.777564][ T4870] device veth0_vlan entered promiscuous mode [ 166.854998][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 166.863210][ T27] audit: type=1326 audit(1723762754.395:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5052 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f799b9 code=0x7fc00000 [ 166.893040][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 166.923697][ T5018] team0: Port device team_slave_0 added [ 166.944392][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 166.950769][ T27] audit: type=1326 audit(1723762754.395:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5052 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f799b9 code=0x7fc00000 [ 166.964803][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.014480][ T5018] team0: Port device team_slave_1 added [ 167.040601][ T27] audit: type=1326 audit(1723762754.395:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5052 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f799b9 code=0x7fc00000 [ 167.071983][ T4870] device veth1_vlan entered promiscuous mode [ 167.106297][ T27] audit: type=1326 audit(1723762754.395:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5052 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f799b9 code=0x7fc00000 [ 167.185819][ T27] audit: type=1326 audit(1723762754.395:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5052 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f799b9 code=0x7fc00000 [ 167.319957][ T27] audit: type=1326 audit(1723762754.395:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5052 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f799b9 code=0x7fc00000 [ 167.595744][ T4947] udevd[4947]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 167.739776][ T3697] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.790889][ T3657] Bluetooth: hci7: command tx timeout [ 167.882461][ T27] audit: type=1326 audit(1723762754.395:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5052 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f799b9 code=0x7fc00000 [ 168.074250][ T5018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.090622][ T5018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.147617][ T5018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.210969][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 168.220224][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 168.295003][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.318491][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.375011][ T3697] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.413941][ T5018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.427016][ T5018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.521340][ T5018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.564244][ T4870] device veth0_macvtap entered promiscuous mode [ 168.725759][ T3697] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.853570][ T4870] device veth1_macvtap entered promiscuous mode [ 168.955589][ T3697] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.038386][ T5018] device hsr_slave_0 entered promiscuous mode [ 169.064988][ T5018] device hsr_slave_1 entered promiscuous mode [ 169.261112][ T5018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.272479][ T5018] Cannot create hsr debugfs directory [ 169.849607][ T4870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.891196][ T48] Bluetooth: hci7: command tx timeout [ 170.021664][ T4870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.088774][ T5068] loop2: detected capacity change from 0 to 40427 [ 170.100352][ T4870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.133365][ T4870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.144122][ T5078] netlink: 104 bytes leftover after parsing attributes in process `syz.1.421'. [ 170.177430][ T5068] F2FS-fs (loop2): invalid crc value [ 170.187558][ T4870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.201323][ T5068] F2FS-fs (loop2): Found nat_bits in checkpoint [ 170.232200][ T4870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.270706][ T4870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.305642][ T4870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.384489][ T4870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.400946][ T4870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.414155][ T4870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.425194][ T5068] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 170.476913][ T4870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.507038][ T4870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.520812][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.540378][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.579530][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.608628][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.835829][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 170.836291][ T27] audit: type=1804 audit(1723762758.525:218): pid=5087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.418" name="/newroot/80/file0/file0" dev="loop2" ino=10 res=1 errno=0 [ 171.525396][ T3646] syz-executor: attempt to access beyond end of device [ 171.525396][ T3646] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 171.545006][ T4870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.556147][ T4870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.568146][ T4870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.579022][ T4870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.599612][ T4870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.623400][ T4870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.640560][ T4870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.673974][ T4870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.727271][ T4870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.751740][ T4870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.772148][ T4870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.788775][ T4870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.812910][ T4870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.876931][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.892311][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.940857][ T3657] Bluetooth: hci7: command tx timeout [ 172.045872][ T4870] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.092720][ T4870] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.146129][ T4870] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.192878][ T4870] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.356341][ T5090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.423'. [ 172.832929][ T1164] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 172.994549][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.036252][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.110934][ T1164] usb 3-1: Using ep0 maxpacket: 16 [ 173.243163][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 173.261208][ T1164] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.310910][ T1164] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.339832][ T1164] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 173.360125][ T1164] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.381826][ T1164] usb 3-1: config 0 descriptor?? [ 173.437617][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.456302][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.516710][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 173.889319][ T1164] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 173.913715][ T1164] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 173.936479][ T1164] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 173.956086][ T1164] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 173.976866][ T1164] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 174.017603][ T1164] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 175.161753][ T1164] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x00 [ 175.298815][ T1164] cp2112 0003:10C4:EA90.0002: error requesting SMBus config [ 175.387826][ T5018] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.418470][ T1164] cp2112: probe of 0003:10C4:EA90.0002 failed with error -32 [ 175.490481][ T5018] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.510900][ T5132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.429'. [ 175.565731][ T5018] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.663590][ T5136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.429'. [ 176.029283][ T5018] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 176.513792][ T22] usb 3-1: USB disconnect, device number 2 [ 177.691789][ T3697] device hsr_slave_0 left promiscuous mode [ 177.723323][ T3697] device hsr_slave_1 left promiscuous mode [ 177.745561][ T3697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.763915][ T3697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.780754][ T3691] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 177.839091][ T3697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.847284][ T3697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.918309][ T3697] device bridge_slave_1 left promiscuous mode [ 177.927331][ T3697] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.942030][ T22] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 177.985266][ T3697] device bridge_slave_0 left promiscuous mode [ 178.013607][ T3697] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.030739][ T3691] usb 2-1: Using ep0 maxpacket: 8 [ 178.128358][ T3697] device veth1_macvtap left promiscuous mode [ 178.148077][ T3697] device veth0_macvtap left promiscuous mode [ 178.154811][ T3691] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 178.169035][ T3691] usb 2-1: config 179 has no interface number 0 [ 178.180919][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 178.192098][ T3697] device veth1_vlan left promiscuous mode [ 178.204846][ T3691] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 178.227518][ T3697] device veth0_vlan left promiscuous mode [ 178.251429][ T3691] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 178.280949][ T3691] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 178.313819][ T3691] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 178.340730][ T22] usb 3-1: unable to get BOS descriptor or descriptor too short [ 178.360936][ T3691] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 178.399944][ T3691] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 178.420927][ T22] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.435028][ T22] usb 3-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 178.468443][ T3691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.489873][ T22] usb 3-1: config 1 interface 0 has no altsetting 0 [ 178.541503][ T5159] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 178.681182][ T22] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 178.697544][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.735402][ T22] usb 3-1: Product: syz [ 178.756853][ T22] usb 3-1: Manufacturer: syz [ 178.764124][ T22] usb 3-1: SerialNumber: syz [ 178.837005][ T3691] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input9 [ 179.031833][ T3723] usb 2-1: USB disconnect, device number 2 [ 179.040680][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 179.052868][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 179.079629][ T3723] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 179.154731][ T22] usb 3-1: bad CDC descriptors [ 179.192011][ T22] usb 3-1: USB disconnect, device number 3 [ 179.725019][ T5180] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(66613249917818) <= P.seqno(0) <= S.SWH(66613249917892)) and (P.ackno exists or LAWL(274693996414901) <= P.ackno(274693996414904) <= S.AWH(274693996414904), sending SYNC... [ 180.660783][ T27] audit: type=1326 audit(1723762768.315:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5182 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f799b9 code=0x7fc00000 [ 180.854495][ T27] audit: type=1326 audit(1723762768.315:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5182 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fbb59f799b9 code=0x7fc00000 [ 180.885297][ T3697] team0 (unregistering): Port device team_slave_1 removed [ 180.965602][ T27] audit: type=1326 audit(1723762768.315:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5182 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f799b9 code=0x7fc00000 [ 180.988734][ T27] audit: type=1326 audit(1723762768.315:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5182 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f799b9 code=0x7fc00000 [ 181.057807][ T27] audit: type=1326 audit(1723762768.315:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5182 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f799b9 code=0x7fc00000 [ 181.110932][ T27] audit: type=1326 audit(1723762768.325:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5182 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f799b9 code=0x7fc00000 [ 181.160212][ T27] audit: type=1326 audit(1723762768.335:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5182 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f799b9 code=0x7fc00000 [ 181.219267][ T3697] team0 (unregistering): Port device team_slave_0 removed [ 181.233650][ T27] audit: type=1326 audit(1723762768.335:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5182 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f799b9 code=0x7fc00000 [ 181.313311][ T27] audit: type=1326 audit(1723762768.335:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5182 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f799b9 code=0x7fc00000 [ 181.379414][ T27] audit: type=1326 audit(1723762768.335:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5182 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f799b9 code=0x7fc00000 [ 181.432889][ T3697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.529476][ T3697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.640690][ T3723] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 182.022085][ T3723] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 182.040737][ T3723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.071049][ T3723] usb 1-1: config 0 descriptor?? [ 182.112851][ T3723] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 183.072190][ T3723] gspca_sonixj: reg_w1 err -110 [ 183.080738][ T3723] sonixj: probe of 1-1:0.0 failed with error -110 [ 183.243643][ T3697] bond0 (unregistering): Released all slaves [ 183.450880][ T5088] usb 1-1: USB disconnect, device number 4 [ 183.583952][ T5018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.681628][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.690173][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.717927][ T5018] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.744420][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.754975][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.786194][ T4407] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.793436][ T4407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.827963][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.840174][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.858867][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.887870][ T4407] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.895092][ T4407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.975036][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.044336][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.066598][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.080676][ T3723] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 184.114301][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.151813][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.169000][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.201577][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.229832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.239727][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.253048][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.281482][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.301571][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.340871][ T3723] usb 3-1: Using ep0 maxpacket: 16 [ 184.430814][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 184.460884][ T3723] usb 3-1: config 0 has an invalid interface number: 159 but max is 1 [ 184.473766][ T3723] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.534714][ T3723] usb 3-1: config 0 has no interface number 0 [ 184.560822][ T3723] usb 3-1: config 0 interface 159 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 184.592812][ T3723] usb 3-1: config 0 interface 159 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 184.627891][ T3723] usb 3-1: config 0 interface 159 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 184.698439][ T3723] usb 3-1: too many endpoints for config 0 interface 1 altsetting 1: 99, using maximum allowed: 30 [ 184.710784][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 184.720071][ T3723] usb 3-1: config 0 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 99 [ 184.860919][ T7] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.911036][ T7] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.932122][ T3723] usb 3-1: config 0 interface 1 has no altsetting 0 [ 184.980727][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 184.989838][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.091728][ T3723] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 185.132010][ T3723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.317698][ T3723] usb 3-1: Product: syz [ 185.413056][ T3723] usb 3-1: Manufacturer: syz [ 185.700671][ T3723] usb 3-1: SerialNumber: syz [ 185.741365][ T3723] usb 3-1: config 0 descriptor?? [ 185.760876][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.768657][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.861748][ T5018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.901885][ T7] hub 1-1:4.0: USB hub found [ 186.004508][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.020953][ T3660] Bluetooth: hci2: command 0x0406 tx timeout [ 186.027176][ T3660] Bluetooth: hci3: command 0x0406 tx timeout [ 186.027579][ T3657] Bluetooth: hci1: command 0x0406 tx timeout [ 186.040259][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.049054][ T3723] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 186.120825][ T7] hub 1-1:4.0: 2 ports detected [ 186.136896][ T5246] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(32723746235656) <= P.seqno(0) <= S.SWH(32723746235730)) and (P.ackno exists or LAWL(170682979980109) <= P.ackno(170682979980111) <= S.AWH(170682979980111), sending SYNC... [ 186.176767][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.198611][ T3723] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 186.203316][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.227672][ T3723] dib0700: firmware download failed at 7 with -22 [ 186.236100][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.263698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.306737][ T5018] device veth0_vlan entered promiscuous mode [ 186.320674][ T3723] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 186.355519][ T5018] device veth1_vlan entered promiscuous mode [ 186.363069][ T3723] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 186.382177][ T3723] dib0700: firmware download failed at 7 with -22 [ 186.516447][ T5018] device veth0_macvtap entered promiscuous mode [ 186.552349][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 186.583878][ T3723] usb 3-1: USB disconnect, device number 4 [ 186.598433][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 186.621884][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 186.631640][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 186.643031][ T5018] device veth1_macvtap entered promiscuous mode [ 186.669515][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.699622][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.739272][ T5018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.739296][ T5018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.739308][ T5018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.739322][ T5018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.739332][ T5018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.739346][ T5018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.739356][ T5018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.739369][ T5018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.739384][ T5018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.739397][ T5018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.739409][ T5018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.739423][ T5018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.752501][ T5018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.752669][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.753455][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.757812][ T5018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.757832][ T5018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.757844][ T5018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.757857][ T5018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.757886][ T5018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.757900][ T5018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.757911][ T5018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.757925][ T5018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.757940][ T5018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.757961][ T5018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.757974][ T5018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.757988][ T5018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.764102][ T5018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.764263][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.765008][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.777144][ T5018] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.777184][ T5018] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.777214][ T5018] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.777243][ T5018] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.087617][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.087694][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.092598][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 187.187685][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.187762][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.215081][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 187.430769][ T3688] hub 1-1:4.0: activate --> -90 [ 188.091097][ T3688] hub 1-1:4.0: hub_ext_port_status failed (err = -71) [ 188.110978][ T3688] usb 1-1-port1: cannot reset (err = -71) [ 188.130938][ T3688] usb 1-1-port1: cannot reset (err = -71) [ 188.131017][ T3688] usb 1-1-port1: Cannot enable. Maybe the USB cable is bad? [ 188.150902][ T3688] usb 1-1-port1: cannot disable (err = -71) [ 188.181799][ T3688] hub 1-1:4.0: hub_ext_port_status failed (err = -71) [ 188.196256][ T5003] usb 1-1: USB disconnect, device number 5 [ 188.201682][ T3688] usb 1-1-port1: cannot reset (err = -71) [ 188.207586][ T3688] usb 1-1-port1: attempt power cycle [ 188.761706][ T5280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.470'. [ 189.664772][ T5284] netlink: 28 bytes leftover after parsing attributes in process `syz.3.473'. [ 189.739542][ T5287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.473'. [ 189.752239][ T5286] binder: transaction release 5 bad object at offset 36, size 72 [ 190.280639][ T3688] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 190.680829][ T3688] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.680874][ T3688] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 190.855155][ T3688] usb 1-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 190.855187][ T3688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.855208][ T3688] usb 1-1: Product: syz [ 190.855222][ T3688] usb 1-1: Manufacturer: syz [ 190.855236][ T3688] usb 1-1: SerialNumber: syz [ 190.857364][ T3688] usb 1-1: config 0 descriptor?? [ 191.108164][ T5291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'. [ 191.209883][ T946] usb 1-1: USB disconnect, device number 10 [ 191.570742][ T3703] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 191.700692][ T3692] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 191.810599][ T3703] usb 5-1: Using ep0 maxpacket: 32 [ 191.930769][ T3703] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 191.951437][ T3692] usb 2-1: Using ep0 maxpacket: 32 [ 191.964303][ T3703] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 191.985488][ T3703] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 192.005993][ T3703] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 192.088828][ T3692] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.107787][ T3692] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.136946][ T3692] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 192.166487][ T3692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.190786][ T3703] usb 5-1: New USB device found, idVendor=10cf, idProduct=8067, bcdDevice=2c.27 [ 192.200170][ T3723] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 192.220989][ T3703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.229074][ T3703] usb 5-1: Product: syz [ 192.240928][ T3703] usb 5-1: Manufacturer: syz [ 192.247094][ T3703] usb 5-1: SerialNumber: syz [ 192.259992][ T3703] usb 5-1: config 0 descriptor?? [ 192.281559][ T3692] hub 2-1:4.0: USB hub found [ 192.291158][ T5300] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 192.339221][ T5300] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 192.428876][ T3703] vmk80xx 5-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 192.490798][ T3692] hub 2-1:4.0: 2 ports detected [ 192.587386][ T3723] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 192.617656][ T3723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.636882][ T3723] usb 1-1: config 0 descriptor?? [ 192.679829][ T7] usb 5-1: USB disconnect, device number 2 [ 192.693302][ T3723] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 192.846545][ T5317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.487'. [ 192.877190][ T27] kauditd_printk_skb: 38 callbacks suppressed [ 192.877206][ T27] audit: type=1326 audit(1723762780.575:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5316 comm="syz.3.487" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75e93799b9 code=0x0 [ 193.176430][ T3723] gspca_sonixj: reg_r err -71 [ 193.188873][ T3723] sonixj: probe of 1-1:0.0 failed with error -71 [ 193.697062][ T3723] usb 1-1: USB disconnect, device number 11 [ 194.185509][ T3688] hub 2-1:4.0: activate --> -90 [ 194.192740][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.199089][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.342908][ T5339] device vlan2 entered promiscuous mode [ 194.364410][ T5339] device bridge0 entered promiscuous mode [ 194.397494][ T5339] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 194.711036][ T3688] hub 2-1:4.0: hub_ext_port_status failed (err = -71) [ 194.747481][ T3688] usb 2-1-port1: cannot reset (err = -71) [ 194.750922][ T3703] usb 2-1: USB disconnect, device number 3 [ 194.756144][ T3688] usb 2-1-port1: attempt power cycle [ 197.024416][ T5359] "syz.4.500" (5359) uses obsolete ecb(arc4) skcipher [ 198.482226][ T27] audit: type=1326 audit(1723762786.185:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.2.503" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f799b9 code=0x0 [ 198.580751][ T5003] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 198.971093][ T5003] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 198.990293][ T5003] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.036427][ T5003] usb 4-1: config 0 descriptor?? [ 199.094584][ T5003] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 199.146157][ T27] audit: type=1326 audit(1723762786.845:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.0.509" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0125799b9 code=0x0 [ 199.310678][ T5003] gspca_sonixj: reg_w1 err -71 [ 199.315657][ T5003] sonixj: probe of 4-1:0.0 failed with error -71 [ 199.362465][ T5003] usb 4-1: USB disconnect, device number 2 [ 199.933735][ C0] eth0: bad gso: type: 1, size: 1408 [ 201.652630][ T4928] udevd[4928]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 207.240638][ T946] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 207.470643][ T946] usb 3-1: device descriptor read/64, error -71 [ 207.760670][ T946] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 208.050457][ T5459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.532'. [ 208.346861][ T5460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.532'. [ 208.375849][ T5468] usb usb9: usbfs: process 5468 (syz.2.536) did not claim interface 0 before use [ 208.583124][ T5460] device hsr_slave_1 left promiscuous mode [ 208.651464][ T5470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.537'. [ 208.716685][ T27] audit: type=1326 audit(1723762796.425:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5469 comm="syz.0.537" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0125799b9 code=0x0 [ 209.306918][ T946] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 209.989285][ T4928] udevd[4928]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 210.200929][ T946] usb 3-1: Using ep0 maxpacket: 8 [ 210.323223][ T946] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 210.353207][ T946] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 210.383958][ T946] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 210.427727][ T946] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.462548][ T946] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 210.478695][ T946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.760840][ T946] usb 3-1: GET_CAPABILITIES returned 0 [ 210.766470][ T946] usbtmc 3-1:16.0: can't read capabilities [ 211.031071][ T3703] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 211.090799][ T3688] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 211.270923][ T3703] usb 1-1: Using ep0 maxpacket: 32 [ 211.350958][ T3688] usb 4-1: Using ep0 maxpacket: 32 [ 211.366338][ T11] device hsr_slave_0 left promiscuous mode [ 211.386255][ T11] device hsr_slave_1 left promiscuous mode [ 211.394143][ T3703] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 211.423618][ T3703] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 211.435995][ T3703] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 211.450763][ T3703] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 211.477614][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.486372][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.498496][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.501121][ T3688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 211.507369][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.538035][ T11] device bridge_slave_1 left promiscuous mode [ 211.550375][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.570950][ T11] device bridge_slave_0 left promiscuous mode [ 211.599211][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.641754][ T3703] usb 1-1: New USB device found, idVendor=10cf, idProduct=8067, bcdDevice=2c.27 [ 211.658426][ T3703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.686515][ T3703] usb 1-1: Product: syz [ 211.691274][ T3703] usb 1-1: Manufacturer: syz [ 211.696286][ T3703] usb 1-1: SerialNumber: syz [ 211.713938][ T11] device veth1_macvtap left promiscuous mode [ 211.729072][ T3703] usb 1-1: config 0 descriptor?? [ 211.734323][ T11] device veth0_macvtap left promiscuous mode [ 211.741048][ T3688] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 213.394076][ T3688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.403645][ T3688] usb 4-1: Product: syz [ 213.408020][ T3688] usb 4-1: Manufacturer: syz [ 213.413650][ T3688] usb 4-1: SerialNumber: syz [ 213.427406][ T3688] usb 4-1: config 0 descriptor?? [ 213.437097][ T11] device veth1_vlan left promiscuous mode [ 213.452093][ T5497] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 213.462724][ T5497] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 213.470250][ T11] device veth0_vlan left promiscuous mode [ 213.507712][ T3703] vmk80xx 1-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 213.625106][ T5088] usb 3-1: USB disconnect, device number 7 [ 213.702104][ T3703] usb 1-1: USB disconnect, device number 12 [ 213.880705][ T3692] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 214.693985][ T27] audit: type=1326 audit(1723762802.395:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.0.554" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0125799b9 code=0x0 [ 214.743494][ T3688] ath6kl: Failed to submit usb control message: -110 [ 214.752479][ T3688] ath6kl: unable to send the bmi data to the device: -110 [ 214.759671][ T3688] ath6kl: Unable to send get target info: -110 [ 214.776314][ T3688] ath6kl: Failed to init ath6kl core: -110 [ 214.809984][ T3688] ath6kl_usb: probe of 4-1:0.0 failed with error -110 [ 214.880608][ T3692] usb 2-1: Using ep0 maxpacket: 16 [ 215.075885][ T11] team0 (unregistering): Port device team_slave_1 removed [ 215.121442][ T11] team0 (unregistering): Port device team_slave_0 removed [ 215.162717][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.190917][ T3692] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 215.200048][ T3692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.208348][ T3692] usb 2-1: Product: syz [ 215.213145][ T3692] usb 2-1: Manufacturer: syz [ 215.217801][ T3692] usb 2-1: SerialNumber: syz [ 215.234052][ T3692] r8152-cfgselector 2-1: config 0 descriptor?? [ 215.237245][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.671485][ T11] bond0 (unregistering): Released all slaves [ 215.791445][ T3692] r8152-cfgselector 2-1: Unknown version 0x0000 [ 215.808746][ T3692] r8152-cfgselector 2-1: bad CDC descriptors [ 215.850584][ T3723] usb 4-1: USB disconnect, device number 3 [ 215.951086][ T3692] r8152-cfgselector 2-1: Unknown version 0x0000 [ 215.965165][ T3692] r8152-cfgselector 2-1: USB disconnect, device number 8 [ 216.751513][ T3660] Bluetooth: hci5: command 0x0406 tx timeout [ 217.060787][ T3723] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 217.239585][ C0] eth0: bad gso: type: 1, size: 1408 [ 217.301038][ T3723] usb 3-1: device descriptor read/64, error -71 [ 217.590750][ T3723] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 217.790943][ T3723] usb 3-1: device descriptor read/64, error -71 [ 217.922121][ T3723] usb usb3-port1: attempt power cycle [ 217.970744][ T3692] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 218.230765][ T3692] usb 2-1: Using ep0 maxpacket: 32 [ 218.370592][ T3723] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 218.441411][ T3692] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 218.569232][ T5535] udevd[5535]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 218.589489][ T3692] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 218.769675][ T3692] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 218.947243][ T3692] usb 2-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 219.100722][ T3723] usb 3-1: device descriptor read/8, error -71 [ 219.260829][ T3692] usb 2-1: New USB device found, idVendor=10cf, idProduct=8067, bcdDevice=2c.27 [ 219.273287][ T5584] smc: net device lo applied user defined pnetid SYZ2 [ 219.279280][ T3692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.309019][ T3692] usb 2-1: Product: syz [ 219.309441][ T5584] smc: net device lo erased user defined pnetid SYZ2 [ 219.323125][ T3692] usb 2-1: Manufacturer: syz [ 219.349077][ T3692] usb 2-1: SerialNumber: syz [ 219.365168][ T3692] usb 2-1: config 0 descriptor?? [ 219.445501][ T5570] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 219.522955][ T5570] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 219.590830][ T3723] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 219.703941][ T3723] usb 3-1: Using ep0 maxpacket: 16 [ 219.934111][ T3692] vmk80xx 2-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 220.060993][ T3723] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 220.072453][ T3723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.091114][ T3723] usb 3-1: Product: syz [ 220.095717][ T3723] usb 3-1: Manufacturer: syz [ 220.097629][ C0] eth0: bad gso: type: 1, size: 1408 [ 220.101721][ T3723] usb 3-1: SerialNumber: syz [ 220.120356][ T3723] r8152-cfgselector 3-1: config 0 descriptor?? [ 220.152890][ T1164] usb 2-1: USB disconnect, device number 9 [ 220.385359][ T5592] device syzkaller0 entered promiscuous mode [ 220.470991][ T3723] r8152-cfgselector 3-1: Unknown version 0x0000 [ 220.505408][ T3723] r8152-cfgselector 3-1: Unknown version 0x0000 [ 220.516172][ T3723] r8152-cfgselector 3-1: bad CDC descriptors [ 220.550904][ T3723] r8152-cfgselector 3-1: Unknown version 0x0000 [ 220.564577][ T3723] r8152-cfgselector 3-1: USB disconnect, device number 11 [ 222.893191][ T1164] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 223.171346][ T1164] usb 1-1: Using ep0 maxpacket: 32 [ 223.372643][ T1164] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.504517][ T1164] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.573157][ T1164] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 223.624452][ T1164] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.860390][ T1164] hub 1-1:4.0: USB hub found [ 224.000823][ T1164] hub 1-1:4.0: 2 ports detected [ 225.061472][ T5628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.579'. [ 225.082500][ T5629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.579'. [ 225.565916][ T5637] ptrace attach of "./syz-executor exec"[5641] was attempted by " [ 225.674531][ T3723] usb 1-1: USB disconnect, device number 13 [ 225.734651][ T1164] hub 1-1:4.0: hub_ext_port_status failed (err = -71) [ 226.418406][ T5658] capability: warning: `syz.1.587' uses 32-bit capabilities (legacy support in use) [ 227.690739][ T5088] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 227.918690][ T27] audit: type=1326 audit(1723762815.615:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e93799b9 code=0x7ffc0000 [ 227.941059][ T5088] usb 1-1: Using ep0 maxpacket: 32 [ 227.959147][ T5679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.593'. [ 227.993888][ T27] audit: type=1326 audit(1723762815.655:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f75e93799b9 code=0x7ffc0000 [ 228.060890][ T5088] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 228.096839][ T5688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.595'. [ 228.110655][ T27] audit: type=1326 audit(1723762815.655:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e93799b9 code=0x7ffc0000 [ 228.149032][ T5088] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 228.199902][ T5679] device bond1 entered promiscuous mode [ 228.212462][ T5088] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 228.236126][ T5686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.593'. [ 228.263137][ T27] audit: type=1326 audit(1723762815.655:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e93799b9 code=0x7ffc0000 [ 228.291702][ T5088] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 228.333581][ T5686] bond1 (unregistering): Released all slaves [ 228.386835][ T27] audit: type=1326 audit(1723762815.655:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f75e93799b9 code=0x7ffc0000 [ 228.490704][ T27] audit: type=1326 audit(1723762815.655:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e93799b9 code=0x7ffc0000 [ 228.531020][ T5088] usb 1-1: New USB device found, idVendor=10cf, idProduct=8067, bcdDevice=2c.27 [ 228.558309][ T5088] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.605353][ T27] audit: type=1326 audit(1723762815.655:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e93799b9 code=0x7ffc0000 [ 228.607403][ T5088] usb 1-1: Product: syz [ 228.718825][ T5088] usb 1-1: Manufacturer: syz [ 228.787610][ T27] audit: type=1326 audit(1723762815.665:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f75e93799b9 code=0x7ffc0000 [ 228.833535][ T5088] usb 1-1: SerialNumber: syz [ 228.957362][ T27] audit: type=1326 audit(1723762815.665:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e93799b9 code=0x7ffc0000 [ 228.996075][ T5088] usb 1-1: config 0 descriptor?? [ 229.032810][ T5664] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 229.040147][ T5664] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 229.158354][ T5088] vmk80xx 1-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 229.301106][ T27] audit: type=1326 audit(1723762815.665:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e93799b9 code=0x7ffc0000 [ 229.323308][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.433110][ T5088] usb 1-1: USB disconnect, device number 14 [ 230.337573][ T5088] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 230.620747][ T5088] usb 4-1: Using ep0 maxpacket: 32 [ 230.780880][ T5088] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.827482][ T5088] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.860610][ T3691] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 231.782268][ T5088] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 231.794719][ T5088] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.931843][ T5088] hub 4-1:4.0: USB hub found [ 232.080730][ T3691] usb 5-1: Using ep0 maxpacket: 8 [ 232.997968][ T5088] hub 4-1:4.0: 2 ports detected [ 233.061092][ T3691] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 233.070958][ T3723] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 233.089236][ T3691] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 233.111696][ T3691] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 233.136924][ T3691] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.170718][ T3691] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 233.201110][ T3691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.218805][ T5776] device gretap0 entered promiscuous mode [ 233.250772][ T5776] device macsec1 entered promiscuous mode [ 233.282811][ T5776] device gretap0 left promiscuous mode [ 233.291006][ T5088] hub 4-1:4.0: set hub depth failed [ 233.337318][ T5088] usb 4-1: USB disconnect, device number 4 [ 233.441086][ T3723] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 233.468615][ T3723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.498922][ T3723] usb 3-1: config 0 descriptor?? [ 233.530857][ T3691] usb 5-1: usb_control_msg returned -71 [ 233.536821][ T3691] usbtmc 5-1:16.0: can't read capabilities [ 233.569052][ T3723] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 233.621877][ T3691] usb 5-1: USB disconnect, device number 3 [ 233.800797][ T3723] gspca_sonixj: reg_w1 err -71 [ 233.805680][ T3723] sonixj: probe of 3-1:0.0 failed with error -71 [ 233.812201][ T5088] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 233.852488][ T3723] usb 3-1: USB disconnect, device number 12 [ 234.155972][ T5088] usb 4-1: Using ep0 maxpacket: 32 [ 237.240778][ T5088] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 237.248415][ T5088] usb 4-1: can't read configurations, error -71 [ 237.454698][ T5817] netlink: 830 bytes leftover after parsing attributes in process `syz.3.621'. [ 237.570730][ T946] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 237.661718][ T3692] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 237.830637][ T946] usb 5-1: Using ep0 maxpacket: 32 [ 237.860686][ T3692] usb 2-1: device descriptor read/64, error -71 [ 237.951067][ T946] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.977855][ T946] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.025401][ T946] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 238.065443][ T946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.150768][ T3692] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 238.164674][ T946] hub 5-1:4.0: USB hub found [ 238.360576][ T3692] usb 2-1: device descriptor read/64, error -71 [ 238.370825][ T946] hub 5-1:4.0: 2 ports detected [ 238.525266][ T3692] usb usb2-port1: attempt power cycle [ 239.650738][ T3692] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 239.692660][ T5848] sctp: [Deprecated]: syz.0.630 (pid 5848) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.692660][ T5848] Use struct sctp_sack_info instead [ 239.771276][ T3692] usb 2-1: device descriptor read/8, error -71 [ 239.828405][ T5850] netlink: 68 bytes leftover after parsing attributes in process `syz.0.631'. [ 239.900742][ T946] hub 5-1:4.0: activate --> -90 [ 239.946404][ T5853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.632'. [ 240.058958][ T3692] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 240.161079][ T3692] usb 2-1: device descriptor read/8, error -71 [ 240.291272][ T3692] usb usb2-port1: unable to enumerate USB device [ 240.440666][ T3723] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 243.908875][ T28] INFO: task syz.1.103:3996 blocked for more than 143 seconds. [ 244.743945][ T28] Not tainted 6.1.105-syzkaller #0 [ 244.783071][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 244.831056][ T28] task:syz.1.103 state:D stack:24624 pid:3996 ppid:3645 flags:0x00004004 [ 244.912572][ T28] Call Trace: [ 244.916224][ T28] [ 244.919482][ T28] __schedule+0x143f/0x4570 [ 244.936775][ T28] ? release_firmware_map_entry+0x186/0x186 [ 244.948335][ T5868] usb 5-1: USB disconnect, device number 4 [ 244.958919][ T28] ? blk_check_plugged+0x250/0x250 [ 244.966132][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 244.976841][ T28] ? blk_check_plugged+0x250/0x250 [ 244.992842][ T28] ? print_irqtrace_events+0x210/0x210 [ 244.998381][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 245.003635][ T28] schedule+0xbf/0x180 [ 245.007749][ T28] io_schedule+0x88/0x100 [ 245.020626][ T28] folio_wait_bit_common+0x878/0x1290 [ 245.034903][ T28] ? folio_wait_bit+0x20/0x20 [ 245.046592][ T28] ? migration_entry_wait_on_locked+0x1160/0x1160 [ 245.055357][ T28] ? erofs_map_blocks+0x14d0/0x14d0 [ 245.063978][ T28] ? bio_add_page+0x3a4/0x750 [ 245.068736][ T28] z_erofs_runqueue+0x993/0x1ca0 [ 245.073915][ T28] ? z_erofs_do_read_page+0x3bd0/0x3bd0 [ 245.079494][ T28] ? __lock_acquire+0x1f80/0x1f80 [ 245.085135][ T28] ? z_erofs_pcluster_readmore+0x41a/0x450 [ 245.091266][ T28] z_erofs_readahead+0xc26/0x1030 [ 245.096478][ T28] ? z_erofs_read_folio+0x760/0x760 [ 245.107949][ T28] ? __lock_acquire+0x1f80/0x1f80 [ 245.115590][ T28] ? blk_start_plug+0x95/0x110 [ 245.121918][ T28] read_pages+0x17f/0x830 [ 245.126379][ T28] ? folio_add_lru+0x34d/0xd70 [ 245.131342][ T28] ? folio_add_lru+0x34d/0xd70 [ 245.136223][ T28] ? page_cache_ra_unbounded+0x7b0/0x7b0 [ 245.308247][ T28] ? __lock_acquire+0x125b/0x1f80 [ 245.427784][ T28] ? __filemap_add_folio+0x1ba0/0x1ba0 [ 245.459234][ T28] page_cache_ra_unbounded+0x68b/0x7b0 [ 245.488484][ T28] force_page_cache_ra+0x2a3/0x300 [ 245.526705][ T28] generic_fadvise+0x553/0x7b0 [ 245.552142][ T28] ? dump_task+0x620/0x620 [ 245.578790][ T28] ? __fget_files+0x28/0x4a0 [ 245.606471][ T28] ? __fdget+0x182/0x210 [ 245.635797][ T28] __x64_sys_fadvise64+0x138/0x180 [ 245.662140][ T28] do_syscall_64+0x3b/0xb0 [ 245.684922][ T28] ? clear_bhb_loop+0x45/0xa0 [ 245.713749][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.748024][ T28] RIP: 0033:0x7fb2153799b9 [ 245.773887][ T28] RSP: 002b:00007fb216183038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 245.819261][ T28] RAX: ffffffffffffffda RBX: 00007fb215516058 RCX: 00007fb2153799b9 [ 245.911090][ T28] RDX: 0000000000004101 RSI: 0000000000e0ffff RDI: 0000000000000004 [ 245.919504][ T28] RBP: 00007fb2153e78d8 R08: 0000000000000000 R09: 0000000000000000 [ 245.927675][ T28] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 245.935769][ T28] R13: 0000000000000000 R14: 00007fb215516058 R15: 00007ffc9b8ebd18 [ 245.948634][ T28] [ 245.951967][ T28] [ 245.951967][ T28] Showing all locks held in the system: [ 245.960290][ T28] 2 locks held by kworker/u4:1/11: [ 245.967195][ T28] #0: ffff888012879138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 245.980407][ T28] #1: ffffc90000107d20 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 245.992307][ T28] 1 lock held by rcu_tasks_kthre/12: [ 246.006521][ T28] #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 246.017221][ T28] 1 lock held by rcu_tasks_trace/13: [ 246.026585][ T28] #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 246.037754][ T28] 1 lock held by khungtaskd/28: [ 246.043848][ T28] #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 246.054223][ T28] 2 locks held by getty/3394: [ 246.058966][ T28] #0: ffff88807f580098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 246.068953][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 246.079242][ T28] 6 locks held by kworker/1:7/3723: [ 246.084600][ T28] #0: ffff888018e88938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 246.096164][ T28] #1: ffffc90004667d20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 246.110251][ T28] #2: ffff888022a2e190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5730 [ 246.124365][ T28] #3: ffff888022a414f8 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x2471/0x5730 [ 246.137315][ T28] #4: ffff88802257c468 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x249e/0x5730 [ 246.147190][ T28] #5: ffffffff8de48c90 (ehci_cf_port_reset_rwsem){.+.+}-{3:3}, at: hub_port_reset+0x1f4/0x1f00 [ 246.157744][ T28] 1 lock held by syz.1.103/3996: [ 246.162714][ T28] #0: ffff88806ff40338 (mapping.invalidate_lock#3){.+.+}-{3:3}, at: page_cache_ra_unbounded+0xed/0x7b0 [ 246.174004][ T28] 2 locks held by kworker/u4:26/5741: [ 246.179394][ T28] #0: ffff8880b983a9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa8/0x140 [ 246.189402][ T28] #1: ffff8880b9827788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x3a3/0x770 [ 246.200935][ T28] [ 246.203277][ T28] ============================================= [ 246.203277][ T28] [ 246.214564][ T28] NMI backtrace for cpu 1 [ 246.218953][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.105-syzkaller #0 [ 246.226890][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 246.236976][ T28] Call Trace: [ 246.240257][ T28] [ 246.243190][ T28] dump_stack_lvl+0x1e3/0x2cb [ 246.247882][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 246.253269][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 246.258742][ T28] ? panic+0x764/0x764 [ 246.262811][ T28] ? vprintk_emit+0x622/0x740 [ 246.267502][ T28] ? printk_sprint+0x490/0x490 [ 246.272300][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 246.277428][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 246.282385][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 246.288549][ T28] ? _printk+0xd1/0x111 [ 246.292710][ T28] ? panic+0x764/0x764 [ 246.296781][ T28] ? __wake_up_klogd+0xcc/0x100 [ 246.301637][ T28] ? panic+0x764/0x764 [ 246.305706][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 246.311786][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 246.317870][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 246.323866][ T28] watchdog+0xf88/0xfd0 [ 246.328038][ T28] ? watchdog+0x1f8/0xfd0 [ 246.332387][ T28] kthread+0x28d/0x320 [ 246.336480][ T28] ? hungtask_pm_notify+0x50/0x50 [ 246.341514][ T28] ? kthread_blkcg+0xd0/0xd0 [ 246.346107][ T28] ret_from_fork+0x1f/0x30 [ 246.350549][ T28] [ 246.354323][ T28] Sending NMI from CPU 1 to CPUs 0: [ 246.359594][ C0] NMI backtrace for cpu 0 [ 246.359607][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.1.105-syzkaller #0 [ 246.359625][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 246.359635][ C0] RIP: 0010:validate_chain+0x162/0x5950 [ 246.359657][ C0] Code: 87 10 00 0f 84 ea 03 00 00 48 b8 eb 83 b5 80 46 86 c8 61 49 0f af c6 48 c1 e8 2f 48 8d 1c c5 a0 a1 5f 90 48 89 d8 48 c1 e8 03 <48> 89 44 24 58 42 80 3c 20 00 74 08 48 89 df e8 3a ee 76 00 48 89 [ 246.359672][ C0] RSP: 0018:ffffc900001473c0 EFLAGS: 00000802 [ 246.359688][ C0] RAX: 1ffffffff20d9cd9 RBX: ffffffff906ce6c8 RCX: ffffffff816b2c82 [ 246.359702][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9073a220 [ 246.359714][ C0] RBP: ffffc90000147670 R08: dffffc0000000000 R09: fffffbfff20e7445 [ 246.359727][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 246.359740][ C0] R13: ffff88813fefc6a8 R14: d106c1dd46eae3c2 R15: 1ffff11027fdf8d5 [ 246.359753][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 246.359769][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.359781][ C0] CR2: 00007fa21b6e73f8 CR3: 0000000022e69000 CR4: 00000000003506f0 [ 246.359797][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 246.359807][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 246.359818][ C0] Call Trace: [ 246.359823][ C0] [ 246.359829][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 246.359856][ C0] ? read_lock_is_recursive+0x10/0x10 [ 246.359883][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 246.359918][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 246.359945][ C0] ? nmi_handle+0x12e/0x440 [ 246.359972][ C0] ? nmi_handle+0x25/0x440 [ 246.359997][ C0] ? validate_chain+0x162/0x5950 [ 246.360013][ C0] ? default_do_nmi+0x62/0x150 [ 246.360040][ C0] ? exc_nmi+0xa8/0x100 [ 246.360066][ C0] ? end_repeat_nmi+0x16/0x31 [ 246.360093][ C0] ? validate_chain+0x112/0x5950 [ 246.360109][ C0] ? validate_chain+0x162/0x5950 [ 246.360125][ C0] ? validate_chain+0x162/0x5950 [ 246.360142][ C0] ? validate_chain+0x162/0x5950 [ 246.360157][ C0] [ 246.360162][ C0] [ 246.360168][ C0] ? validate_chain+0x112/0x5950 [ 246.360184][ C0] ? validate_chain+0x112/0x5950 [ 246.360199][ C0] ? reacquire_held_locks+0x660/0x660 [ 246.360226][ C0] ? reacquire_held_locks+0x660/0x660 [ 246.360256][ C0] ? validate_chain+0x112/0x5950 [ 246.360275][ C0] ? reacquire_held_locks+0x660/0x660 [ 246.360304][ C0] ? unwind_next_frame+0x111a/0x2220 [ 246.360333][ C0] ? reacquire_held_locks+0x660/0x660 [ 246.360361][ C0] ? ret_from_fork+0x1f/0x30 [ 246.360387][ C0] ? arch_stack_walk+0x10d/0x140 [ 246.360407][ C0] ? mark_lock+0x9a/0x340 [ 246.360433][ C0] __lock_acquire+0x125b/0x1f80 [ 246.360466][ C0] lock_acquire+0x1f8/0x5a0 [ 246.360490][ C0] ? debug_check_no_obj_freed+0xd8/0x4e0 [ 246.360522][ C0] ? read_lock_is_recursive+0x10/0x10 [ 246.360550][ C0] ? mark_lock+0x9a/0x340 [ 246.360579][ C0] ? __lock_acquire+0x125b/0x1f80 [ 246.360610][ C0] ? _raw_spin_lock_irqsave+0xac/0x120 [ 246.360635][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 246.360656][ C0] ? debug_check_no_obj_freed+0xd8/0x4e0 [ 246.360682][ C0] ? _raw_spin_lock+0x40/0x40 [ 246.360706][ C0] debug_check_no_obj_freed+0xd8/0x4e0 [ 246.360733][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 246.360754][ C0] kmem_cache_free+0x241/0x510 [ 246.360777][ C0] ? rcu_core+0xad5/0x1810 [ 246.360798][ C0] ? security_inode_free+0xc0/0xc0 [ 246.360824][ C0] rcu_core+0xad5/0x1810 [ 246.360847][ C0] ? rcu_core+0xa6b/0x1810 [ 246.360869][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 246.360890][ C0] ? rcu_qs+0xed/0x190 [ 246.360915][ C0] ? rcu_softirq_qs+0x300/0x300 [ 246.360941][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 246.360967][ C0] ? sched_clock_cpu+0x71/0x2b0 [ 246.360992][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 246.361019][ C0] ? print_irqtrace_events+0x210/0x210 [ 246.361049][ C0] handle_softirqs+0x2ee/0xa40 [ 246.361080][ C0] ? run_ksoftirqd+0xc6/0x120 [ 246.361097][ C0] ? do_softirq+0x240/0x240 [ 246.361121][ C0] ? preempt_schedule_common+0xa6/0xd0 [ 246.361148][ C0] ? run_ksoftirqd+0xa3/0x120 [ 246.361165][ C0] run_ksoftirqd+0xc6/0x120 [ 246.361181][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 246.361198][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 246.361223][ C0] ? smpboot_thread_fn+0x2c3/0xa30 [ 246.361247][ C0] ? smpboot_thread_fn+0x4e7/0xa30 [ 246.361271][ C0] ? smpboot_thread_fn+0x63c/0xa30 [ 246.361295][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 246.361317][ C0] smpboot_thread_fn+0x52c/0xa30 [ 246.361342][ C0] ? smpboot_thread_fn+0x4a/0xa30 [ 246.361371][ C0] kthread+0x28d/0x320 [ 246.361385][ C0] ? cpu_report_death+0x2b0/0x2b0 [ 246.361410][ C0] ? kthread_blkcg+0xd0/0xd0 [ 246.361426][ C0] ret_from_fork+0x1f/0x30 [ 246.361455][ C0] [ 246.365176][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 246.365192][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.105-syzkaller #0 [ 246.365217][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 246.365230][ T28] Call Trace: [ 246.365237][ T28] [ 246.365246][ T28] dump_stack_lvl+0x1e3/0x2cb [ 246.365286][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 246.365321][ T28] ? panic+0x764/0x764 [ 246.365343][ T28] ? llist_add_batch+0x160/0x1d0 [ 246.365380][ T28] ? vscnprintf+0x59/0x80 [ 246.365407][ T28] panic+0x318/0x764 [ 246.365431][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 246.365467][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 246.365496][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 246.365528][ T28] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 246.365565][ T28] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 246.365602][ T28] watchdog+0xfc7/0xfd0 [ 246.365638][ T28] ? watchdog+0x1f8/0xfd0 [ 246.365673][ T28] kthread+0x28d/0x320 [ 246.365692][ T28] ? hungtask_pm_notify+0x50/0x50 [ 246.365720][ T28] ? kthread_blkcg+0xd0/0xd0 [ 246.365743][ T28] ret_from_fork+0x1f/0x30 [ 246.365787][ T28] [ 246.366137][ T28] Kernel Offset: disabled [ 246.963063][ T28] Rebooting in 86400 seconds..