last executing test programs: 6.33899416s ago: executing program 4 (id=1432): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400", 0x2}], 0x1}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x38, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.885653657s ago: executing program 4 (id=1435): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb0, 0xb4, 0xeb, 0x40, 0xeb1, 0x7007, 0x204, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0x36, 0xe0}}]}}]}}, 0x0) 3.89455326s ago: executing program 2 (id=1453): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x300}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) timer_create(0x3, 0x0, &(0x7f0000000080)) 3.839925885s ago: executing program 2 (id=1454): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x6c, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000009c0)={0x1, 0x0, [{0x0, 0xa0, &(0x7f0000000900)=""/160}]}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000680)=""/93, &(0x7f0000000700)=""/83}) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f00000002c0)=&(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000001c0)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x40086602, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r2, 0x0) fcntl$getownex(r2, 0x5, &(0x7f0000000000)) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) syz_read_part_table(0x5df, &(0x7f0000000980)="$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") syz_emit_ethernet(0x82, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @multicast1, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@rr={0x7, 0x13, 0x0, [@multicast2, @private, @broadcast, @broadcast]}, @timestamp={0x44, 0x28, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) 2.822987438s ago: executing program 0 (id=1455): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file0', [], 0xa, "e40bb4d3c3e78a9e86484df0744c9bd65ac708d841c22a9211ee13ccc541a2"}, 0x2a) 2.731813066s ago: executing program 4 (id=1456): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x1a, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000540)={0x2, 0x4e20, @local}, 0x10) listen(r0, 0xfffffffd) 2.697172958s ago: executing program 0 (id=1458): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e0000000000000000000000000040000000000000000000000000000000000000000000380003"], 0x78) write$binfmt_elf32(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000003800000000000000000000000000200000000000000000000000000003"], 0x158) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 2.647935132s ago: executing program 4 (id=1459): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000200)={r2}, 0x8) 2.586877897s ago: executing program 1 (id=1460): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\a\x00'/14, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000007000100000000000000000000000700000000000000"], 0x48}}, 0x0) 2.386906194s ago: executing program 0 (id=1461): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x569000, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r1, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.330375099s ago: executing program 4 (id=1462): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0x5490, 0x0) getdents(r0, 0x0, 0x0) 1.936531241s ago: executing program 3 (id=1463): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xe}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.22462417s ago: executing program 1 (id=1464): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) close_range(r0, 0xffffffffffffffff, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) 1.224088809s ago: executing program 3 (id=1465): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x300}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) timer_create(0x3, 0x0, &(0x7f0000000080)) 1.134151427s ago: executing program 0 (id=1466): r0 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x7) fcntl$addseals(r0, 0x409, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x11, r0, 0x7000) 1.10020918s ago: executing program 2 (id=1467): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r0, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x7d, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @empty}}}, 0x9c) 1.099407319s ago: executing program 4 (id=1468): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) getrlimit(0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r2}}, 0x18) 1.081099611s ago: executing program 1 (id=1469): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000005640)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001400)=""/119, 0x77}], 0x1, &(0x7f0000000800)=""/177, 0xb1}}, {{&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000004b40)=""/185, 0xb0}, {&(0x7f0000001e00)=""/233, 0xe9}, {&(0x7f00000004c0)=""/113, 0x71}, {&(0x7f0000001f00)=""/186, 0xba}], 0x4, 0x0, 0x5}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000001fc0)=""/120, 0x78}, {&(0x7f0000002040)=""/131, 0x83}, {&(0x7f0000002100)=""/108, 0x6c}, {&(0x7f0000000980)=""/9, 0x9}, {&(0x7f0000002180)=""/201, 0xc9}], 0x5, &(0x7f0000002300)=""/127, 0x7f}}, {{&(0x7f0000002380)=@nl=@unspec, 0x80, &(0x7f0000003400)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1, &(0x7f0000003780)=""/4096, 0x1000}}, {{&(0x7f0000003440)=@qipcrtr, 0x80, &(0x7f0000004900)=[{&(0x7f00000034c0)=""/87, 0x57}, {&(0x7f0000003540)=""/172, 0xac}, {&(0x7f0000003600)=""/39, 0x27}, {&(0x7f0000003640)=""/145, 0x91}, {&(0x7f0000004780)=""/115, 0x73}, {&(0x7f0000004800)=""/80, 0x50}, {&(0x7f0000004880)=""/114, 0x72}], 0x7, &(0x7f0000004980)=""/119, 0x77}}], 0x5, 0x2, 0x0) 1.042625664s ago: executing program 3 (id=1470): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x1405, 0x1, 0x0, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x0) 981.900959ms ago: executing program 0 (id=1471): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e0000000000000000000000000040000000000000000000000000000000000000000000380003"], 0x78) write$binfmt_elf32(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000003800000000000000000000000000200000000000000000000000000003"], 0x158) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 895.031356ms ago: executing program 1 (id=1472): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000200)={r2}, 0x8) 883.892477ms ago: executing program 2 (id=1473): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000500)=0x1, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20000000, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 866.257688ms ago: executing program 3 (id=1474): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000300), 0x20000000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_da_update_reserve_space\x00'}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x7) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) recvmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/186, 0xba}], 0x1}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f00000000c0)}, 0x20) close(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_sync_file_exit\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000400)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cpu.stat\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r3, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 759.763447ms ago: executing program 2 (id=1475): r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/9, 0x2c}], 0x1, 0x61, 0x0) 759.220708ms ago: executing program 1 (id=1476): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xe}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 698.929202ms ago: executing program 0 (id=1477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x569000, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r1, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 627.126558ms ago: executing program 3 (id=1478): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3, @empty}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 525.100996ms ago: executing program 1 (id=1479): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x6c, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000009c0)={0x1, 0x0, [{0x0, 0xa0, &(0x7f0000000900)=""/160}]}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000680)=""/93, &(0x7f0000000700)=""/83}) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f00000002c0)=&(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000001c0)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x40086602, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r2, 0x0) fcntl$getownex(r2, 0x5, &(0x7f0000000000)) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) syz_read_part_table(0x5df, &(0x7f0000000980)="$eJzs3L+LXFUUB/Dvmx9vZ0PCprISXEhhUHCFlDr4A5LVTgQ7C1uLEYmVhcwMESw0/hVaGIUgthYKEtR0ViIsWojYW7iFcmXeu29nBa1W1MDnU8w797x7z7nDu+174d5W9pLSbKL1NjkZ1eCnzPrgqaRJVkmmO31ms+aFW1evPbv/XFNTabrsqt7d2RZsh8LZr9Gnk9y8dfjWu7MLTVa5O1r26VUy/ajNpNvaZl3zV5s+brpa/Ocuf1b6B9Hmm+Srx84tmnF9Zuu8n1ysB+ggyTj1Z5XsbqL27P1vz++sn6hnZDf1pE370TIPlkfrvGlKKWWU5aVh5Ti5//GD66dqDYe+X7/+U59SyvR8WZ5MnNb84vd2OIdXvvxhmfUDQ/WLXcdS+vHRbvLq0fOPdLWa080AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPg/ufzaQ5+3w+DJ7repo0+efuaDjLZTV8lvQ7w/+4f6357f2bvx5vVRXp+//O0rb/x4+HN+STLOweH5ZOdk3kv95eO3u8ukZu/bPWv/xTjth+99sa1TSzfJ15e+O27HNX10MmG7p8xHZ20PAAAAAAAAAAAAAAAAAAAAnavXhvfZm7yY7ev+JbOkGT4FsBmUUsqvpZdcabK42ebGuf7+3e/rZwNKc6r4Jt67kJSddx7u78+y6ipNuhbNv/Qn+Vt/BAAA///KsGNm") syz_emit_ethernet(0x82, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @multicast1, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@rr={0x7, 0x13, 0x0, [@multicast2, @private, @broadcast, @broadcast]}, @timestamp={0x44, 0x28, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) 524.691366ms ago: executing program 2 (id=1480): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2}, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast2}, {@private=0xa010101}, {}, {@broadcast}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60001f00, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=1481): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x300}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) timer_create(0x3, 0x0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.286900][ T7236] hfsplus: failed to load attributes file [ 298.317671][ T7238] loop1: detected capacity change from 0 to 1024 [ 298.324541][ T7238] hfsplus: unable to parse mount options [ 298.451902][ T7059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.476798][ T7059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.504354][ T7059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.320978][ T7059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.633608][ T3602] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 299.644681][ T7059] device hsr_slave_0 entered promiscuous mode [ 299.678979][ T7059] device hsr_slave_1 entered promiscuous mode [ 299.702830][ T7059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.723548][ T7059] Cannot create hsr debugfs directory [ 299.994938][ T3602] usb 3-1: config 1 has an invalid descriptor of length 241, skipping remainder of the config [ 300.037297][ T3602] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 300.455475][ T3602] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 300.637007][ T3602] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 300.658758][ T3602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.775442][ T3602] usb 3-1: Product: syz [ 300.780076][ T3602] usb 3-1: Manufacturer: syz [ 300.785177][ T3602] usb 3-1: SerialNumber: syz [ 300.826966][ T3602] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 300.858202][ T3602] cdc_ncm 3-1:1.0: bind() failure [ 301.070802][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 301.070820][ T26] audit: type=1326 audit(1721654770.116:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.0.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fbcb75e99 code=0x7ffc0000 [ 301.159644][ T26] audit: type=1326 audit(1721654770.146:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.0.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fbcb75e99 code=0x7ffc0000 [ 301.170743][ T7231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.243847][ T7231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.289895][ T26] audit: type=1326 audit(1721654770.166:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.0.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1fbcb75e99 code=0x7ffc0000 [ 301.815717][ T26] audit: type=1326 audit(1721654770.166:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.0.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fbcb75e99 code=0x7ffc0000 [ 301.923774][ T7231] loop2: detected capacity change from 0 to 128 [ 302.096441][ T7231] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 302.282449][ T7231] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.301621][ T26] audit: type=1326 audit(1721654770.166:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.0.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fbcb75e99 code=0x7ffc0000 [ 302.498100][ T5332] usb 3-1: USB disconnect, device number 10 [ 302.563664][ T26] audit: type=1326 audit(1721654770.186:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.0.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1fbcb75e99 code=0x7ffc0000 [ 302.655033][ T26] audit: type=1326 audit(1721654770.186:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.0.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fbcb75e99 code=0x7ffc0000 [ 302.677204][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.747397][ T26] audit: type=1326 audit(1721654770.186:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.0.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fbcb75e99 code=0x7ffc0000 [ 302.840724][ T26] audit: type=1326 audit(1721654770.206:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.0.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f1fbcb75e99 code=0x7ffc0000 [ 302.862896][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.935997][ T26] audit: type=1326 audit(1721654770.206:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.0.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fbcb75e99 code=0x7ffc0000 [ 302.975856][ T7059] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 303.050153][ T7059] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 303.073762][ T7321] loop1: detected capacity change from 0 to 16 [ 303.090374][ T7321] erofs: (device loop1): mounted with root inode @ nid 36. [ 303.106368][ T7059] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 303.171884][ T7059] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 303.205684][ T7325] bio_check_eod: 26 callbacks suppressed [ 303.205701][ T7325] syz.1.1022: attempt to access beyond end of device [ 303.205701][ T7325] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 303.219650][ T7321] erofs: (device loop1): z_erofs_readahead: readahead error at page 205 @ nid 36 [ 303.348523][ T7321] erofs: (device loop1): z_erofs_readahead: readahead error at page 197 @ nid 36 [ 303.432160][ T7321] erofs: (device loop1): z_erofs_readahead: readahead error at page 192 @ nid 36 [ 303.579557][ T7059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.595832][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 303.604362][ T7321] erofs: (device loop1): z_erofs_readahead: readahead error at page 180 @ nid 36 [ 303.643976][ T7321] erofs: (device loop1): z_erofs_readahead: readahead error at page 172 @ nid 36 [ 303.803708][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.833239][ T7321] erofs: (device loop1): z_erofs_readahead: readahead error at page 168 @ nid 36 [ 303.837253][ T7059] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.858114][ T7299] loop3: detected capacity change from 0 to 32768 [ 303.882753][ T7299] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1015 (7299) [ 303.914231][ T7299] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 303.916761][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 303.928979][ T7299] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 303.943996][ T7299] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 303.954524][ T7299] BTRFS info (device loop3): use zstd compression, level 3 [ 303.970592][ T7299] BTRFS info (device loop3): using free space tree [ 304.003868][ T7321] erofs: (device loop1): z_erofs_readahead: readahead error at page 160 @ nid 36 [ 304.013574][ T7321] erofs: (device loop1): z_erofs_readahead: readahead error at page 149 @ nid 36 [ 304.023222][ T7321] erofs: (device loop1): z_erofs_readahead: readahead error at page 144 @ nid 36 [ 304.024425][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 304.032713][ T7321] erofs: (device loop1): z_erofs_readahead: readahead error at page 140 @ nid 36 [ 304.070677][ T7321] erofs: (device loop1): z_erofs_readahead: readahead error at page 92 @ nid 36 [ 304.123720][ T7321] erofs: (device loop1): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 304.133066][ T7321] erofs: (device loop1): z_erofs_readahead: readahead error at page 69 @ nid 36 [ 304.143185][ T7321] erofs: (device loop1): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 304.153733][ T7321] erofs: (device loop1): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 304.163076][ T7299] BTRFS info (device loop3): enabling ssd optimizations [ 304.172868][ T3602] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.180117][ T3602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.234322][ T7321] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 304.253585][ T7321] erofs: (device loop1): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 304.260805][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 304.290864][ T7321] erofs: (device loop1): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 304.331734][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 304.362260][ T7321] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 304.362501][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 304.414434][ T7321] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 304.417332][ T6660] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.430682][ T6660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.453516][ T7321] erofs: (device loop1): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 304.462919][ T7321] erofs: (device loop1): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 304.478732][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 304.523545][ T7321] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 304.526002][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 304.532657][ T7321] erofs: (device loop1): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 304.561038][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 304.578814][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 304.593670][ T7321] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 304.615102][ T7321] syz.1.1022: attempt to access beyond end of device [ 304.615102][ T7321] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 304.619402][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 304.649684][ T7321] syz.1.1022: attempt to access beyond end of device [ 304.649684][ T7321] loop1: rw=524288, sector=1049272, nr_sectors = 16 limit=16 [ 304.652540][ T6176] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 304.690883][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 304.706444][ T7321] syz.1.1022: attempt to access beyond end of device [ 304.706444][ T7321] loop1: rw=524288, sector=376, nr_sectors = 16 limit=16 [ 304.714670][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 304.728867][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 304.754157][ T7321] syz.1.1022: attempt to access beyond end of device [ 304.754157][ T7321] loop1: rw=524288, sector=384, nr_sectors = 16 limit=16 [ 304.769986][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 304.791710][ T7321] syz.1.1022: attempt to access beyond end of device [ 304.791710][ T7321] loop1: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 304.802455][ T7059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 304.843921][ T7321] syz.1.1022: attempt to access beyond end of device [ 304.843921][ T7321] loop1: rw=524288, sector=728, nr_sectors = 16 limit=16 [ 304.878379][ T7321] syz.1.1022: attempt to access beyond end of device [ 304.878379][ T7321] loop1: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 304.924713][ T7059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 304.953649][ T7321] syz.1.1022: attempt to access beyond end of device [ 304.953649][ T7321] loop1: rw=524288, sector=525152, nr_sectors = 16 limit=16 [ 304.997169][ T7321] syz.1.1022: attempt to access beyond end of device [ 304.997169][ T7321] loop1: rw=524288, sector=13478624032, nr_sectors = 16 limit=16 [ 305.033000][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 305.055863][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 305.199559][ T7370] loop2: detected capacity change from 0 to 1024 [ 305.206944][ T7370] hfsplus: unable to parse mount options [ 305.279664][ T4758] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 306.768814][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 306.795501][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 306.835870][ T7059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.882254][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 306.882269][ T26] audit: type=1326 audit(1721654775.936:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7362 comm="syz.0.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1fbcb75f27 code=0x7ffc0000 [ 306.910773][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.991953][ T26] audit: type=1326 audit(1721654776.006:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7362 comm="syz.0.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1fbcb748d0 code=0x7ffc0000 [ 307.076850][ T26] audit: type=1326 audit(1721654776.006:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7362 comm="syz.0.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1fbcb75a9b code=0x7ffc0000 [ 307.166773][ T26] audit: type=1326 audit(1721654776.006:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7362 comm="syz.0.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1fbcb75a9b code=0x7ffc0000 [ 307.256781][ T26] audit: type=1326 audit(1721654776.006:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7362 comm="syz.0.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1fbcba7e85 code=0x7ffc0000 [ 307.329277][ T26] audit: type=1326 audit(1721654776.016:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7362 comm="syz.0.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1fbcb75a9b code=0x7ffc0000 [ 307.412009][ T26] audit: type=1326 audit(1721654776.016:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7362 comm="syz.0.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1fbcb74bca code=0x7ffc0000 [ 307.474728][ T26] audit: type=1326 audit(1721654776.026:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7362 comm="syz.0.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1fbcb74bca code=0x7ffc0000 [ 307.685604][ T26] audit: type=1326 audit(1721654776.106:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.3.1032" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faaeb975e99 code=0x0 [ 307.934820][ T26] audit: type=1326 audit(1721654776.286:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7362 comm="syz.0.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fbcb75e99 code=0x7ffc0000 [ 308.092697][ T7433] loop3: detected capacity change from 0 to 1024 [ 308.100121][ T7433] hfsplus: unable to parse mount options [ 308.146987][ T4758] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 308.158345][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 308.285334][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 308.311051][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 308.320368][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 308.340558][ T7059] device veth0_vlan entered promiscuous mode [ 308.754620][ T7059] device veth1_vlan entered promiscuous mode [ 309.075229][ T7059] device veth0_macvtap entered promiscuous mode [ 309.162516][ T7059] device veth1_macvtap entered promiscuous mode [ 309.321682][ T7059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.359354][ T7059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.369375][ T7059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.380643][ T7059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.396158][ T7059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.412413][ T7059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.443939][ T7059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.460245][ T7059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.480621][ T7059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.514873][ T7059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.562875][ T7059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.588092][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 309.608333][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 309.627242][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 309.644467][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 309.653079][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 309.674296][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 309.683014][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 309.715666][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 309.734272][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 309.753361][ T7059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.820394][ T7059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.891265][ T7059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.915173][ T7059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.940216][ T7059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.961066][ T7059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.993667][ T7059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.022125][ T7059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.038002][ T7059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.049074][ T7059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.073766][ T7059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.091574][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 310.142136][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 310.180635][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 310.205030][ T7059] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.243146][ T7059] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.260192][ T7059] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.307264][ T7059] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.493857][ T3784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.511286][ T3784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.559658][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 310.580949][ T3636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.602366][ T3636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.636137][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 310.762890][ T7492] loop4: detected capacity change from 0 to 512 [ 310.770544][ T7492] EXT4-fs: Ignoring removed i_version option [ 310.785799][ T7492] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 310.855987][ T7492] EXT4-fs (loop4): 1 truncate cleaned up [ 310.872004][ T7492] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 311.612054][ T7059] EXT4-fs (loop4): unmounting filesystem. [ 311.908607][ T7530] loop4: detected capacity change from 0 to 1024 [ 311.974364][ T7530] hfsplus: failed to load attributes file [ 312.249448][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 312.249464][ T26] audit: type=1326 audit(1721654781.306:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.3.1063" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faaeb975e99 code=0x0 [ 312.448211][ T7555] loop2: detected capacity change from 0 to 2048 [ 312.523201][ T7555] loop2: p1 < > p4 [ 312.531710][ T7555] loop2: p4 size 8388608 extends beyond EOD, truncated [ 312.972779][ T7570] loop3: detected capacity change from 0 to 256 [ 313.528010][ T3568] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 313.540164][ T3568] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 313.548836][ T3568] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 313.556780][ T3568] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 313.566211][ T3568] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 313.573530][ T3568] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 314.331633][ T7588] chnl_net:caif_netlink_parms(): no params data found [ 314.454611][ T7607] loop3: detected capacity change from 0 to 32768 [ 314.460669][ T7588] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.475454][ T7588] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.478334][ T7607] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1079 (7607) [ 314.483652][ T7588] device bridge_slave_0 entered promiscuous mode [ 314.504007][ T7588] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.511253][ T7588] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.528313][ T7588] device bridge_slave_1 entered promiscuous mode [ 314.563565][ T6657] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 314.578537][ T7588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.589705][ T7607] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 314.604003][ T7588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.613238][ T7607] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 314.631400][ T7607] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 314.651679][ T7607] BTRFS info (device loop3): use zstd compression, level 3 [ 314.664493][ T7607] BTRFS info (device loop3): using free space tree [ 314.715429][ T7588] team0: Port device team_slave_0 added [ 314.723333][ T7588] team0: Port device team_slave_1 added [ 314.742380][ T7627] loop2: detected capacity change from 0 to 16 [ 314.761304][ T7627] erofs: (device loop2): mounted with root inode @ nid 36. [ 314.781208][ T7588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.789095][ T7588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.810913][ T7627] erofs: (device loop2): z_erofs_readahead: readahead error at page 205 @ nid 36 [ 314.823570][ T6657] usb 1-1: Using ep0 maxpacket: 8 [ 314.839924][ T7627] erofs: (device loop2): z_erofs_readahead: readahead error at page 197 @ nid 36 [ 314.849180][ T7627] erofs: (device loop2): z_erofs_readahead: readahead error at page 192 @ nid 36 [ 314.858766][ T7627] erofs: (device loop2): z_erofs_readahead: readahead error at page 180 @ nid 36 [ 314.877762][ T7627] erofs: (device loop2): z_erofs_readahead: readahead error at page 172 @ nid 36 [ 314.887742][ T7627] erofs: (device loop2): z_erofs_readahead: readahead error at page 168 @ nid 36 [ 314.897359][ T7627] erofs: (device loop2): z_erofs_readahead: readahead error at page 160 @ nid 36 [ 314.907652][ T7627] erofs: (device loop2): z_erofs_readahead: readahead error at page 149 @ nid 36 [ 314.917785][ T7627] erofs: (device loop2): z_erofs_readahead: readahead error at page 144 @ nid 36 [ 314.927395][ T7627] erofs: (device loop2): z_erofs_readahead: readahead error at page 140 @ nid 36 [ 314.940335][ T7627] erofs: (device loop2): z_erofs_readahead: readahead error at page 92 @ nid 36 [ 314.950104][ T7627] erofs: (device loop2): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 314.959543][ T7627] erofs: (device loop2): z_erofs_readahead: readahead error at page 69 @ nid 36 [ 314.975431][ T7627] erofs: (device loop2): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 314.979980][ T7588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.985134][ T7627] erofs: (device loop2): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 314.995432][ T6657] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 315.004563][ T7627] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 315.026560][ T7627] erofs: (device loop2): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 315.037702][ T7627] erofs: (device loop2): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 315.049562][ T7627] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 315.061867][ T6657] usb 1-1: config 0 has no interface number 0 [ 315.062146][ T7607] BTRFS info (device loop3): enabling ssd optimizations [ 315.081331][ T7627] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 315.088386][ T7588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.091014][ T7627] erofs: (device loop2): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 315.109956][ T7588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.128614][ T7640] loop4: detected capacity change from 0 to 512 [ 315.145356][ T7588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.155383][ T7627] erofs: (device loop2): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 315.174576][ T7640] EXT4-fs: Ignoring removed i_version option [ 315.187526][ T7640] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 315.203718][ T6657] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 315.230351][ T6657] usb 1-1: New USB device strings: Mfr=0, Product=254, SerialNumber=0 [ 315.241793][ T7627] erofs: (device loop2): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 315.249991][ T6657] usb 1-1: Product: syz [ 315.258737][ T7640] EXT4-fs (loop4): 1 truncate cleaned up [ 315.279632][ T6657] usb 1-1: config 0 descriptor?? [ 315.285678][ T6176] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 315.286325][ T7640] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 315.296538][ T7627] erofs: (device loop2): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 315.338644][ T7588] device hsr_slave_0 entered promiscuous mode [ 315.347459][ T7627] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 315.359508][ T7627] bio_check_eod: 26 callbacks suppressed [ 315.359522][ T7627] syz.2.1082: attempt to access beyond end of device [ 315.359522][ T7627] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 315.380694][ T7627] syz.2.1082: attempt to access beyond end of device [ 315.380694][ T7627] loop2: rw=524288, sector=1049272, nr_sectors = 16 limit=16 [ 315.395507][ T7588] device hsr_slave_1 entered promiscuous mode [ 315.402733][ T7627] syz.2.1082: attempt to access beyond end of device [ 315.402733][ T7627] loop2: rw=524288, sector=376, nr_sectors = 16 limit=16 [ 315.432651][ T7627] syz.2.1082: attempt to access beyond end of device [ 315.432651][ T7627] loop2: rw=524288, sector=384, nr_sectors = 16 limit=16 [ 315.447358][ T7588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.456273][ T7588] Cannot create hsr debugfs directory [ 315.486447][ T6657] viperboard 1-1:0.143: version 0.00 found at bus 001 address 008 [ 315.504267][ T7627] syz.2.1082: attempt to access beyond end of device [ 315.504267][ T7627] loop2: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 315.544026][ T6657] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 315.554489][ T7627] syz.2.1082: attempt to access beyond end of device [ 315.554489][ T7627] loop2: rw=524288, sector=728, nr_sectors = 16 limit=16 [ 315.571843][ T6657] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 315.595727][ T6657] usb 1-1: USB disconnect, device number 8 [ 315.610065][ T7627] syz.2.1082: attempt to access beyond end of device [ 315.610065][ T7627] loop2: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 315.634601][ T3570] Bluetooth: hci6: command tx timeout [ 315.687197][ T7627] syz.2.1082: attempt to access beyond end of device [ 315.687197][ T7627] loop2: rw=524288, sector=525152, nr_sectors = 16 limit=16 [ 315.740313][ T7627] syz.2.1082: attempt to access beyond end of device [ 315.740313][ T7627] loop2: rw=524288, sector=13478624032, nr_sectors = 16 limit=16 [ 315.755468][ T7627] syz.2.1082: attempt to access beyond end of device [ 315.755468][ T7627] loop2: rw=524288, sector=13478624040, nr_sectors = 16 limit=16 [ 315.783852][ T7059] EXT4-fs (loop4): unmounting filesystem. [ 315.898079][ T7645] loop3: detected capacity change from 0 to 2048 [ 315.956962][ T7645] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.1084: bad orphan inode 8192 [ 316.041757][ T7653] loop4: detected capacity change from 0 to 256 [ 316.043296][ T7645] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 316.060316][ T7652] loop2: detected capacity change from 0 to 2048 [ 316.162858][ T26] audit: type=1800 audit(1721654785.216:273): pid=7645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1084" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 316.192864][ T7652] loop2: p1 < > p4 [ 316.208932][ T7652] loop2: p4 size 8388608 extends beyond EOD, truncated [ 316.226961][ T26] audit: type=1800 audit(1721654785.226:274): pid=7645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1084" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 316.280488][ T6176] EXT4-fs (loop3): unmounting filesystem. [ 316.315889][ T7588] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.453169][ T7588] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.598051][ T7588] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.771686][ T7672] loop4: detected capacity change from 0 to 1024 [ 316.983315][ T7672] hfsplus: failed to load attributes file [ 317.001395][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.008099][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.040999][ T7588] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.224668][ T7679] loop2: detected capacity change from 0 to 16 [ 317.260119][ T7679] erofs: (device loop2): mounted with root inode @ nid 36. [ 317.393336][ T7588] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 317.401812][ T7679] erofs: (device loop2): z_erofs_readahead: readahead error at page 205 @ nid 36 [ 317.425232][ T7679] erofs: (device loop2): z_erofs_readahead: readahead error at page 197 @ nid 36 [ 317.438079][ T7588] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 317.454430][ T7679] erofs: (device loop2): z_erofs_readahead: readahead error at page 192 @ nid 36 [ 317.464211][ T7679] erofs: (device loop2): z_erofs_readahead: readahead error at page 180 @ nid 36 [ 317.476567][ T7588] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 317.501350][ T7588] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 317.508437][ T7679] erofs: (device loop2): z_erofs_readahead: readahead error at page 172 @ nid 36 [ 317.544060][ T7679] erofs: (device loop2): z_erofs_readahead: readahead error at page 168 @ nid 36 [ 317.553361][ T7679] erofs: (device loop2): z_erofs_readahead: readahead error at page 160 @ nid 36 [ 317.605005][ T7679] erofs: (device loop2): z_erofs_readahead: readahead error at page 149 @ nid 36 [ 317.653615][ T7679] erofs: (device loop2): z_erofs_readahead: readahead error at page 144 @ nid 36 [ 317.662847][ T7679] erofs: (device loop2): z_erofs_readahead: readahead error at page 140 @ nid 36 [ 317.704360][ T7588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.713924][ T3570] Bluetooth: hci6: command tx timeout [ 317.714618][ T7679] erofs: (device loop2): z_erofs_readahead: readahead error at page 92 @ nid 36 [ 317.746860][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 317.755360][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.774095][ T7679] erofs: (device loop2): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 317.783215][ T7679] erofs: (device loop2): z_erofs_readahead: readahead error at page 69 @ nid 36 [ 317.800999][ T7588] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.824669][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 317.843771][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.852186][ T7679] erofs: (device loop2): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 317.874299][ T5332] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.881433][ T5332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.889191][ T7679] erofs: (device loop2): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 317.916833][ T7679] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 317.924056][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 317.934360][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 317.940252][ T7679] erofs: (device loop2): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 317.943024][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 317.967667][ T5332] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.974850][ T5332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.982250][ T7679] erofs: (device loop2): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 317.983583][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 317.993618][ T6661] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 318.000320][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 318.018078][ T7679] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 318.032813][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 318.044055][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.052910][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 318.069627][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 318.084365][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 318.093903][ T7679] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 318.102970][ T7679] erofs: (device loop2): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 318.123133][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 318.154558][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 318.163111][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 318.177091][ T7679] erofs: (device loop2): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 318.192644][ T7588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 318.205414][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 318.214527][ T7679] erofs: (device loop2): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 318.244222][ T7679] erofs: (device loop2): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 318.253353][ T7679] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 318.274687][ T6661] usb 4-1: Using ep0 maxpacket: 8 [ 318.393878][ T6661] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 318.412844][ T6661] usb 4-1: config 0 has no interface number 0 [ 318.460158][ T7588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.467492][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 318.475118][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 318.498818][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 318.503731][ T6661] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 318.529619][ T6661] usb 4-1: New USB device strings: Mfr=0, Product=254, SerialNumber=0 [ 318.535539][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 318.542349][ T6661] usb 4-1: Product: syz [ 318.574873][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 318.575576][ T6661] usb 4-1: config 0 descriptor?? [ 318.588953][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 318.608756][ T7588] device veth0_vlan entered promiscuous mode [ 318.617967][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 318.627040][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 318.641515][ T7588] device veth1_vlan entered promiscuous mode [ 318.668829][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 318.688540][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 318.697506][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 318.706962][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 318.717960][ T7588] device veth0_macvtap entered promiscuous mode [ 318.733763][ T7588] device veth1_macvtap entered promiscuous mode [ 318.752001][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.774114][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.784600][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.795240][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.797339][ T6661] viperboard 4-1:0.143: version 0.00 found at bus 004 address 009 [ 318.805175][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.805192][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.805206][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.854952][ T6661] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 318.865396][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.875504][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.890110][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.890550][ T6661] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 318.902403][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.921620][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.936668][ T7588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.948523][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 318.951444][ T6661] usb 4-1: USB disconnect, device number 9 [ 318.976470][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 318.996228][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 319.011238][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 319.026700][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.043328][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.054190][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.065082][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.075779][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.088518][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.111112][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.122003][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.132639][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.143344][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.155515][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.166232][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.177365][ T7588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.185080][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 319.194687][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 319.207118][ T7588] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.227257][ T7588] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.238137][ T7588] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.246923][ T7588] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.368651][ T3784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.387321][ T3784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.410377][ T5513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.413007][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 319.423349][ T5513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.442452][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 319.793792][ T3570] Bluetooth: hci6: command tx timeout [ 320.593350][ T7727] sctp: [Deprecated]: syz.1.1113 (pid 7727) Use of int in max_burst socket option deprecated. [ 320.593350][ T7727] Use struct sctp_assoc_value instead [ 320.672029][ T7729] loop3: detected capacity change from 0 to 256 [ 320.709661][ T7720] loop4: detected capacity change from 0 to 32768 [ 321.244527][ T3597] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 321.259339][ T7743] loop3: detected capacity change from 0 to 1024 [ 321.313190][ T7743] hfsplus: failed to load attributes file [ 321.586767][ T3597] usb 1-1: Using ep0 maxpacket: 8 [ 321.663708][ T5305] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 321.733858][ T3597] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 321.742070][ T3597] usb 1-1: config 0 has no interface number 0 [ 321.833907][ T3597] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 321.843370][ T3597] usb 1-1: New USB device strings: Mfr=0, Product=254, SerialNumber=0 [ 321.851622][ T3597] usb 1-1: Product: syz [ 321.857947][ T3597] usb 1-1: config 0 descriptor?? [ 321.873788][ T3570] Bluetooth: hci6: command tx timeout [ 322.053980][ T3597] viperboard 1-1:0.143: version 0.00 found at bus 001 address 009 [ 322.085632][ T3597] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 322.096900][ T5305] usb 4-1: config 1 has an invalid descriptor of length 241, skipping remainder of the config [ 322.112140][ T3597] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 322.126779][ T5305] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 322.168693][ T5305] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 322.190187][ T3597] usb 1-1: USB disconnect, device number 9 [ 322.364172][ T5305] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 322.381646][ T5305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.392087][ T5305] usb 4-1: Product: syz [ 322.409625][ T5305] usb 4-1: Manufacturer: syz [ 322.427715][ T5305] usb 4-1: SerialNumber: syz [ 322.465168][ T7759] sctp: [Deprecated]: syz.1.1126 (pid 7759) Use of int in max_burst socket option deprecated. [ 322.465168][ T7759] Use struct sctp_assoc_value instead [ 322.481843][ T5305] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 322.491479][ T5305] cdc_ncm 4-1:1.0: bind() failure [ 322.856623][ T7743] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3043124579 (6086249158 ns) > initial count (1073742976 ns). Using initial count to start timer. [ 322.947224][ T7743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.966225][ T7743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.114638][ T7743] snd_dummy snd_dummy.0: control 0:0:0:syz1:1 is already present [ 323.296920][ T7743] loop3: detected capacity change from 0 to 128 [ 323.337479][ T7743] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 323.369735][ T7743] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 323.462082][ T5305] usb 4-1: USB disconnect, device number 10 [ 324.740650][ T7783] loop4: detected capacity change from 0 to 1024 [ 324.904294][ T7783] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 325.010003][ T7795] netlink: 'syz.3.1139': attribute type 9 has an invalid length. [ 325.018042][ T7795] netlink: 'syz.3.1139': attribute type 6 has an invalid length. [ 325.107988][ T26] audit: type=1800 audit(1721654794.166:275): pid=7783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1137" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 325.178938][ T7797] EXT4-fs error (device loop4): ext4_get_group_desc:277: comm syz.4.1137: block_group >= groups_count - block_group = 25264513, groups_count = 1 [ 325.235894][ T7797] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4618: inode #808464432: comm syz.4.1137: unable to read itable block [ 325.513552][ T7790] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 14684760171883984868 in block_group 0 [ 325.521960][ T7059] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #2: block 48: comm syz-executor: lblock 0 mapped to illegal pblock 48 (length 1) [ 325.589462][ T7059] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 325.615950][ T7801] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1143'. [ 325.625254][ T7059] EXT4-fs error (device loop4): __ext4_get_inode_loc:4495: comm syz-executor: Invalid inode table block 6238793120835947071 in block_group 0 [ 325.648200][ T7059] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 325.662270][ T7801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.692619][ T7801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.719025][ T7059] EXT4-fs error (device loop4): ext4_dirty_inode:6072: inode #2: comm syz-executor: mark_inode_dirty error [ 325.803926][ T7801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.823207][ T5513] EXT4-fs error (device loop4): __ext4_get_inode_loc:4495: comm kworker/u4:16: Invalid inode table block 6238793120835947071 in block_group 0 [ 325.867616][ T7059] EXT4-fs (loop4): unmounting filesystem. [ 325.880165][ T7059] EXT4-fs error (device loop4): __ext4_get_inode_loc:4495: comm syz-executor: Invalid inode table block 6238793120835947071 in block_group 0 [ 325.947972][ T7059] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 326.496101][ T5513] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.642921][ T5513] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.785768][ T5513] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.955886][ T5513] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.986914][ T7819] loop3: detected capacity change from 0 to 1024 [ 327.032426][ T7819] hfsplus: failed to load attributes file [ 327.049408][ T3570] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 327.063790][ T3570] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 327.073872][ T3570] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 327.082689][ T3570] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 327.093262][ T3570] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 327.103800][ T3570] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 327.114467][ T3598] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 327.353590][ T3598] usb 1-1: Using ep0 maxpacket: 8 [ 327.439330][ T4963] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 327.484302][ T3598] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 327.514303][ T3598] usb 1-1: config 0 has no interface number 0 [ 327.593954][ T3598] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 327.613545][ T3598] usb 1-1: New USB device strings: Mfr=0, Product=254, SerialNumber=0 [ 327.621983][ T3598] usb 1-1: Product: syz [ 327.642582][ T7833] sctp: [Deprecated]: syz.1.1156 (pid 7833) Use of int in max_burst socket option deprecated. [ 327.642582][ T7833] Use struct sctp_assoc_value instead [ 327.646436][ T3598] usb 1-1: config 0 descriptor?? [ 327.748683][ T7820] chnl_net:caif_netlink_parms(): no params data found [ 327.793265][ T3568] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 327.808273][ T3568] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 327.813769][ T4963] usb 4-1: config 1 has an invalid descriptor of length 241, skipping remainder of the config [ 327.817532][ T3568] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 327.845035][ T3568] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 327.852739][ T3568] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 327.860221][ T3568] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 327.868360][ T3598] viperboard 1-1:0.143: version 0.00 found at bus 001 address 010 [ 327.882049][ T4963] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 327.893990][ T3598] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 327.902709][ T3598] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 327.924157][ T4963] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 328.103669][ T4963] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 328.123511][ T4963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.131617][ T4963] usb 4-1: Product: syz [ 328.143595][ T4963] usb 4-1: Manufacturer: syz [ 328.148221][ T4963] usb 4-1: SerialNumber: syz [ 328.202573][ T5337] usb 1-1: USB disconnect, device number 10 [ 328.204579][ T4963] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 328.228233][ T4963] cdc_ncm 4-1:1.0: bind() failure [ 328.257706][ T7820] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.275914][ T7820] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.309957][ T7820] device bridge_slave_0 entered promiscuous mode [ 328.380977][ T7820] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.398538][ T7820] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.429599][ T7820] device bridge_slave_1 entered promiscuous mode [ 328.547390][ T7820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.571656][ T7820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.735852][ T7815] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3043124579 (6086249158 ns) > initial count (1073742976 ns). Using initial count to start timer. [ 328.842897][ T7815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.882237][ T7815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.064892][ T7820] team0: Port device team_slave_0 added [ 329.090993][ T7815] snd_dummy snd_dummy.0: control 0:0:0:syz1:1 is already present [ 329.142133][ T7820] team0: Port device team_slave_1 added [ 329.153924][ T3570] Bluetooth: hci2: command tx timeout [ 329.420838][ T7815] loop3: detected capacity change from 0 to 128 [ 329.450861][ T7815] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 329.479248][ T7836] chnl_net:caif_netlink_parms(): no params data found [ 329.516718][ T7820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.526555][ T7820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.572763][ T7820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.596910][ T7815] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 329.630933][ T7820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.689063][ T3597] usb 4-1: USB disconnect, device number 11 [ 329.742194][ T7820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.800899][ T7857] dccp_invalid_packet: P.Data Offset(224) too large [ 329.844946][ T7820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.901009][ T5513] device hsr_slave_0 left promiscuous mode [ 329.925591][ T5513] device hsr_slave_1 left promiscuous mode [ 329.963784][ T3570] Bluetooth: hci7: command tx timeout [ 329.991362][ T5513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.010891][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.067507][ T5513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.119756][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.166255][ T5513] device bridge_slave_1 left promiscuous mode [ 330.172422][ T5513] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.230350][ T5513] device bridge_slave_0 left promiscuous mode [ 330.271762][ T5513] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.390512][ T5513] device veth1_macvtap left promiscuous mode [ 330.404594][ T5513] device veth0_macvtap left promiscuous mode [ 330.424881][ T5513] device veth1_vlan left promiscuous mode [ 330.457610][ T5513] device veth0_vlan left promiscuous mode [ 331.129123][ T7891] sctp: [Deprecated]: syz.1.1166 (pid 7891) Use of int in max_burst socket option deprecated. [ 331.129123][ T7891] Use struct sctp_assoc_value instead [ 331.153610][ T3568] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 331.162356][ T3568] Bluetooth: hci6: Injecting HCI hardware error event [ 331.172791][ T3570] Bluetooth: hci6: hardware error 0x00 [ 331.243666][ T3568] Bluetooth: hci2: command tx timeout [ 331.684109][ T3559] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 331.695288][ T3559] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 331.704307][ T3559] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 331.715399][ T3559] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 331.728555][ T3559] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 331.738238][ T3559] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.033711][ T3568] Bluetooth: hci7: command tx timeout [ 332.393765][ T5513] team0 (unregistering): Port device team_slave_1 removed [ 332.452509][ T5513] team0 (unregistering): Port device team_slave_0 removed [ 332.507756][ T5513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.585048][ T5513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.663846][ T6657] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 333.023636][ T6657] usb 2-1: config 1 has an invalid descriptor of length 241, skipping remainder of the config [ 333.034206][ T6657] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 333.043110][ T6657] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 333.068609][ T5513] bond0 (unregistering): Released all slaves [ 333.146698][ T7877] netlink: 'syz.0.1162': attribute type 9 has an invalid length. [ 333.154962][ T7877] netlink: 'syz.0.1162': attribute type 6 has an invalid length. [ 333.213657][ T6657] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 333.232185][ T6657] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.243754][ T3570] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 333.250542][ T6657] usb 2-1: Product: syz [ 333.258818][ T6657] usb 2-1: Manufacturer: syz [ 333.265087][ T6657] usb 2-1: SerialNumber: syz [ 333.304670][ T6657] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 333.313715][ T3570] Bluetooth: hci2: command tx timeout [ 333.319246][ T6657] cdc_ncm 2-1:1.0: bind() failure [ 333.428262][ T7820] device hsr_slave_0 entered promiscuous mode [ 333.445496][ T7820] device hsr_slave_1 entered promiscuous mode [ 333.452566][ T7820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.471218][ T7820] Cannot create hsr debugfs directory [ 333.701726][ T7910] dccp_invalid_packet: P.Data Offset(224) too large [ 333.727528][ T7836] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.753364][ T7836] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.782649][ T7836] device bridge_slave_0 entered promiscuous mode [ 333.795391][ T3570] Bluetooth: hci0: command tx timeout [ 333.853922][ T7836] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.861040][ T7836] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.903214][ T7906] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3043124579 (6086249158 ns) > initial count (1073742976 ns). Using initial count to start timer. [ 333.944816][ T7836] device bridge_slave_1 entered promiscuous mode [ 334.043814][ T7906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.057750][ T7906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.113670][ T3570] Bluetooth: hci7: command tx timeout [ 334.195378][ T7906] snd_dummy snd_dummy.0: control 0:0:0:syz1:1 is already present [ 334.235234][ T7836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.293344][ T7836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.379920][ T4963] usb 2-1: USB disconnect, device number 7 [ 334.491263][ T7895] chnl_net:caif_netlink_parms(): no params data found [ 334.561449][ T7836] team0: Port device team_slave_0 added [ 334.624614][ T7836] team0: Port device team_slave_1 added [ 334.965845][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.982720][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.043550][ T7836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.241108][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.255172][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.290921][ T7836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.393842][ T3570] Bluetooth: hci2: command tx timeout [ 335.458807][ T7836] device hsr_slave_0 entered promiscuous mode [ 335.471386][ T7836] device hsr_slave_1 entered promiscuous mode [ 335.489228][ T7836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.503526][ T7836] Cannot create hsr debugfs directory [ 335.526510][ T7895] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.551935][ T7895] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.568604][ T7895] device bridge_slave_0 entered promiscuous mode [ 335.604163][ T7895] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.611620][ T7895] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.632759][ T7895] device bridge_slave_1 entered promiscuous mode [ 335.746170][ T7895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.874877][ T3570] Bluetooth: hci0: command tx timeout [ 335.880281][ T7895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.912278][ T7952] netlink: 'syz.1.1181': attribute type 9 has an invalid length. [ 335.955250][ T7952] netlink: 'syz.1.1181': attribute type 6 has an invalid length. [ 336.048529][ T7895] team0: Port device team_slave_0 added [ 336.119964][ T7895] team0: Port device team_slave_1 added [ 336.176859][ T7820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 336.204703][ T3570] Bluetooth: hci7: command tx timeout [ 336.340090][ T7820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 336.392108][ T7895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.407007][ T7895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.543602][ T7895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.577765][ T7961] dccp_invalid_packet: P.Data Offset(224) too large [ 336.687926][ T7820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 336.714248][ T7895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.721307][ T7895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.854810][ T7895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.891710][ T7820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 337.120166][ T7836] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.414602][ T7836] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.495082][ T7895] device hsr_slave_0 entered promiscuous mode [ 337.521701][ T7895] device hsr_slave_1 entered promiscuous mode [ 337.571752][ T7895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.596710][ T7895] Cannot create hsr debugfs directory [ 337.653243][ T7836] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.876087][ T5513] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.954885][ T3570] Bluetooth: hci0: command tx timeout [ 337.974746][ T7836] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.079918][ T5513] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.254232][ T5513] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.313959][ T7820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.389529][ T7820] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.472527][ T5513] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.546019][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 338.561716][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 338.645053][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 338.663258][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 338.688041][ T5305] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.695227][ T5305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.703785][ T6657] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 338.750360][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 338.775835][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 338.805621][ T5305] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.812723][ T5305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.914004][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 338.925540][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 338.965103][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 338.990104][ T7836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 339.011030][ T7836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 339.083901][ T6657] usb 1-1: config 1 has an invalid descriptor of length 241, skipping remainder of the config [ 339.104439][ T6657] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 339.123686][ T7836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 339.134095][ T6657] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 339.161714][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 339.177620][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 339.186350][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 339.209941][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 339.220621][ T8000] sctp: [Deprecated]: syz.1.1188 (pid 8000) Use of int in maxseg socket option. [ 339.220621][ T8000] Use struct sctp_assoc_value instead [ 339.238931][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 339.247570][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 339.261127][ T7820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 339.276147][ T7820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 339.299788][ T7836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 339.303938][ T6657] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 339.333272][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 339.343144][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 339.344630][ T6657] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.358097][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 339.364098][ T6657] usb 1-1: Product: syz [ 339.404082][ T6657] usb 1-1: Manufacturer: syz [ 339.418941][ T6657] usb 1-1: SerialNumber: syz [ 339.492288][ T6657] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 339.526595][ T6657] cdc_ncm 1-1:1.0: bind() failure [ 340.020743][ T7983] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3043124579 (6086249158 ns) > initial count (1073742976 ns). Using initial count to start timer. [ 340.041140][ T5302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 340.049338][ T3570] Bluetooth: hci0: command tx timeout [ 340.059663][ T5302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 340.109002][ T7836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.138251][ T7820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.153350][ T7983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.204026][ T7983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.237014][ T6657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 340.254807][ T6657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 340.382074][ T7836] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.503708][ T7983] snd_dummy snd_dummy.0: control 0:0:0:syz1:1 is already present [ 340.521147][ T6657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 340.537133][ T6657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 340.549118][ T6657] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.556324][ T6657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.584545][ T8018] dccp_invalid_packet: P.Data Offset(224) too large [ 340.739693][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 340.760799][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 340.779927][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 340.800255][ T4963] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.807484][ T4963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.860707][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 340.864489][ T5305] usb 1-1: USB disconnect, device number 11 [ 340.997634][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 341.014584][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 341.065118][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 341.094421][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 341.104826][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 341.196504][ T7836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 341.234355][ T7836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.271017][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 341.280356][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 341.303038][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 341.312304][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 341.332355][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 341.352202][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 341.437808][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 341.457513][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 341.479326][ T7895] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 341.624322][ T7895] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 341.670195][ T7820] device veth0_vlan entered promiscuous mode [ 341.703947][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 341.712506][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 341.747328][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 341.774695][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 341.793970][ T7895] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 341.950274][ T7820] device veth1_vlan entered promiscuous mode [ 341.961935][ T7895] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 342.002921][ T8058] netlink: 'syz.1.1194': attribute type 9 has an invalid length. [ 342.015217][ T8058] netlink: 'syz.1.1194': attribute type 6 has an invalid length. [ 342.078388][ T5302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 342.097507][ T5302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 342.120430][ T5302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 342.129450][ T5302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 342.157963][ T7836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.180908][ T5513] device hsr_slave_0 left promiscuous mode [ 342.190615][ T5513] device hsr_slave_1 left promiscuous mode [ 342.203397][ T5513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.218893][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.247905][ T5513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.265580][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.282532][ T5513] device bridge_slave_1 left promiscuous mode [ 342.299586][ T5513] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.317864][ T5513] device bridge_slave_0 left promiscuous mode [ 342.330844][ T5513] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.369969][ T8065] sctp: [Deprecated]: syz.0.1197 (pid 8065) Use of int in maxseg socket option. [ 342.369969][ T8065] Use struct sctp_assoc_value instead [ 342.431505][ T5513] device veth1_macvtap left promiscuous mode [ 342.449734][ T5513] device veth0_macvtap left promiscuous mode [ 342.476844][ T5513] device veth1_vlan left promiscuous mode [ 342.489654][ T5513] device veth0_vlan left promiscuous mode [ 343.471405][ T5513] team0 (unregistering): Port device team_slave_1 removed [ 343.585674][ T5513] team0 (unregistering): Port device team_slave_0 removed [ 343.640615][ T5513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.706436][ T5513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.050050][ T8071] dccp_invalid_packet: P.Data Offset(224) too large [ 344.574884][ T5513] bond0 (unregistering): Released all slaves [ 344.760634][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 344.774776][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 344.796158][ T7820] device veth0_macvtap entered promiscuous mode [ 344.816248][ T5302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 344.839001][ T5302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 344.875692][ T5302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 344.911320][ T7820] device veth1_macvtap entered promiscuous mode [ 344.952257][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 344.962862][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 344.980189][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 345.009643][ T7836] device veth0_vlan entered promiscuous mode [ 345.025549][ T5302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 345.051546][ T5302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 345.096840][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.112039][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.126382][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.140809][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.150943][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.170273][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.182275][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.185201][ T8087] sctp: [Deprecated]: syz.1.1206 (pid 8087) Use of int in maxseg socket option. [ 345.185201][ T8087] Use struct sctp_assoc_value instead [ 345.192908][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.218207][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.228833][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.242466][ T7820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.252815][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 345.262597][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 345.276851][ T7836] device veth1_vlan entered promiscuous mode [ 345.324688][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.361106][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.378690][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.389895][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.400462][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.420396][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.430686][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.441658][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.457380][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.468161][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.522820][ T7820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.549121][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 345.570806][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 345.591179][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 345.615927][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 345.651648][ T8094] netlink: 'syz.0.1208': attribute type 9 has an invalid length. [ 345.660030][ T8094] netlink: 'syz.0.1208': attribute type 6 has an invalid length. [ 345.682744][ T7895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.702919][ T7820] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.725587][ T7820] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.750552][ T7820] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.778846][ T7820] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.850851][ T6657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 345.884220][ T6657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 345.907224][ T7895] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.952327][ T7836] device veth0_macvtap entered promiscuous mode [ 345.982295][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 346.006406][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 346.065215][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 346.110927][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 346.123162][ T8091] dccp_invalid_packet: P.Data Offset(224) too large [ 346.139604][ T3598] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.146832][ T3598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.193010][ T7836] device veth1_macvtap entered promiscuous mode [ 346.226864][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 346.247072][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 346.274862][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 346.298761][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 346.320168][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 346.354375][ T5332] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.361457][ T5332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.395578][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 346.460734][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.525144][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.562583][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.586866][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.617676][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.637737][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.650387][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.666726][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.690538][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.747890][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.806734][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.861386][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.909976][ T7836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.950091][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 346.988454][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 347.022482][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 347.046645][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 347.069763][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 347.123082][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 347.135403][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 347.156791][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 347.174736][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 347.193096][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 347.216895][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.240535][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.273113][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.297301][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.341516][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.388422][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.412965][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.437963][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.454528][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.467362][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.478078][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.509099][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.535302][ T7836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.641263][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 347.655116][ T3829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.676026][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 347.696416][ T3829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.717380][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 347.774172][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 347.833614][ T7895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 347.872180][ T6657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 347.945735][ T7836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.967814][ T7836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.994947][ T7836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.023913][ T7836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.066521][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.084852][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.131984][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 348.285405][ T8115] sctp: [Deprecated]: syz.1.1216 (pid 8115) Use of int in maxseg socket option. [ 348.285405][ T8115] Use struct sctp_assoc_value instead [ 348.345360][ T3708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.452442][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.515880][ T3708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.531866][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.583774][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 348.630961][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 349.457548][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 349.482494][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 349.527103][ T7895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.653056][ T5302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 349.663781][ T5302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 349.738009][ T5302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 349.764678][ T5302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 349.793901][ T3559] Bluetooth: hci3: command 0x0406 tx timeout [ 349.804337][ T7895] device veth0_vlan entered promiscuous mode [ 349.826512][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 349.839965][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 349.841218][ T8143] loop4: detected capacity change from 0 to 64 [ 349.854322][ T7895] device veth1_vlan entered promiscuous mode [ 349.882500][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 349.894605][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 349.924174][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 349.954299][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 350.037999][ T7895] device veth0_macvtap entered promiscuous mode [ 350.475325][ T8145] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 350.475325][ T8145] program syz.4.1224 not setting count and/or reply_len properly [ 350.509951][ T8149] sctp: [Deprecated]: syz.2.1227 (pid 8149) Use of int in maxseg socket option. [ 350.509951][ T8149] Use struct sctp_assoc_value instead [ 350.511021][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 350.550383][ T7895] device veth1_macvtap entered promiscuous mode [ 350.846703][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.322753][ T8158] dccp_invalid_packet: P.Data Offset(224) too large [ 351.330186][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.430874][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.444901][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.456143][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.468024][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.479224][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.592043][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.651286][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.654174][ T8163] loop4: detected capacity change from 0 to 4096 [ 351.676829][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.711747][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.769952][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.780493][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.837017][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.883100][ T7895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.902712][ T8157] netlink: 'syz.0.1226': attribute type 9 has an invalid length. [ 351.911763][ T8157] netlink: 'syz.0.1226': attribute type 6 has an invalid length. [ 351.950771][ T4758] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 351.994484][ T6657] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 352.004331][ T4963] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 352.025688][ T6657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 352.069155][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.120913][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.183832][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.228727][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.246219][ T4963] usb 3-1: Using ep0 maxpacket: 16 [ 352.273230][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.320102][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.362736][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.419015][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.450311][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.497918][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.528974][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.554892][ T4963] usb 3-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=28.e0 [ 352.576568][ T4963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.590259][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.601354][ T4963] usb 3-1: Product: syz [ 352.609618][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.622103][ T4963] usb 3-1: Manufacturer: syz [ 352.627014][ T4963] usb 3-1: SerialNumber: syz [ 352.633246][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.645248][ T4963] usb 3-1: config 0 descriptor?? [ 352.677987][ T7895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.692474][ T4963] ums-freecom 3-1:0.0: USB Mass Storage device detected [ 352.707324][ T7895] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.719605][ T7895] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.752641][ T7895] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.783804][ T7895] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.818863][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 352.830200][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 352.893376][ T8167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.919962][ T8167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.091968][ T8181] loop4: detected capacity change from 0 to 1024 [ 353.106059][ T4488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.133900][ T4488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.168836][ T8181] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 353.201826][ T5302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 353.263852][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.306552][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.339239][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 353.483148][ T26] audit: type=1800 audit(1721654822.536:276): pid=8181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1235" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 353.566652][ T8181] EXT4-fs error (device loop4): ext4_get_group_desc:277: comm syz.4.1235: block_group >= groups_count - block_group = 25264513, groups_count = 1 [ 353.726797][ T8181] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4618: inode #808464432: comm syz.4.1235: unable to read itable block [ 354.002609][ T8194] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 354.002609][ T8194] program syz.1.1238 not setting count and/or reply_len properly [ 354.808090][ T7820] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #2: block 48: comm syz-executor: lblock 0 mapped to illegal pblock 48 (length 1) [ 354.894000][ T7820] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 354.908752][ T7820] EXT4-fs error (device loop4): __ext4_get_inode_loc:4495: comm syz-executor: Invalid inode table block 6238793120835947071 in block_group 0 [ 354.924758][ T7820] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 354.935307][ T7820] EXT4-fs error (device loop4): ext4_dirty_inode:6072: inode #2: comm syz-executor: mark_inode_dirty error [ 355.034113][ T4963] usb 3-1: USB disconnect, device number 11 [ 355.171900][ T5513] EXT4-fs error (device loop4): __ext4_get_inode_loc:4495: comm kworker/u4:16: Invalid inode table block 6238793120835947071 in block_group 0 [ 355.217599][ T7820] EXT4-fs (loop4): unmounting filesystem. [ 356.002602][ T7820] EXT4-fs error (device loop4): __ext4_get_inode_loc:4495: comm syz-executor: Invalid inode table block 6238793120835947071 in block_group 0 [ 356.023185][ T7820] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 356.039734][ T7820] EXT4-fs error (device loop4): ext4_quota_off:7066: inode #3: comm syz-executor: mark_inode_dirty error [ 356.337139][ T8190] loop3: detected capacity change from 0 to 32768 [ 356.537209][ T5513] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.729235][ T5513] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.925276][ T5513] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.953357][ T8204] dccp_invalid_packet: P.Data Offset(224) too large [ 357.595651][ T8223] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 357.595651][ T8223] program syz.2.1251 not setting count and/or reply_len properly [ 357.637355][ T5513] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.004844][ T3570] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 358.044901][ T3570] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 358.054282][ T3570] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 358.064287][ T3568] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 358.073229][ T3570] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 358.082918][ T3570] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 358.253948][ T7] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 358.488076][ T8245] dccp_close: ABORT with 1 bytes unread [ 358.493835][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 358.773691][ T7] usb 3-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=28.e0 [ 358.782812][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.813915][ T7] usb 3-1: Product: syz [ 358.818149][ T7] usb 3-1: Manufacturer: syz [ 358.822753][ T7] usb 3-1: SerialNumber: syz [ 358.841697][ T7] usb 3-1: config 0 descriptor?? [ 358.884815][ T7] ums-freecom 3-1:0.0: USB Mass Storage device detected [ 358.948473][ T8230] chnl_net:caif_netlink_parms(): no params data found [ 359.108523][ T8235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.134293][ T8235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.590096][ T8254] loop3: detected capacity change from 0 to 32768 [ 359.766304][ T8282] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 359.766304][ T8282] program syz.1.1263 not setting count and/or reply_len properly [ 359.807431][ T8230] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.821479][ T8230] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.108434][ T8230] device bridge_slave_0 entered promiscuous mode [ 360.117069][ T3570] Bluetooth: hci2: command tx timeout [ 360.326950][ T8230] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.377198][ T8230] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.414734][ T8230] device bridge_slave_1 entered promiscuous mode [ 360.667853][ T8290] dccp_close: ABORT with 1 bytes unread [ 360.802307][ T8230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.854481][ T8230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.256428][ T8230] team0: Port device team_slave_0 added [ 361.306700][ T5513] device hsr_slave_0 left promiscuous mode [ 361.337420][ T5513] device hsr_slave_1 left promiscuous mode [ 361.412190][ T5513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.454720][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.484279][ T5513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.543697][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.577987][ T5513] device bridge_slave_1 left promiscuous mode [ 361.602551][ T5513] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.620857][ T5513] device bridge_slave_0 left promiscuous mode [ 361.639456][ T5513] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.125317][ T8315] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 362.125317][ T8315] program syz.1.1275 not setting count and/or reply_len properly [ 362.193675][ T3559] Bluetooth: hci2: command tx timeout [ 362.242564][ T8303] loop3: detected capacity change from 0 to 2048 [ 362.290940][ T5603] usb 3-1: USB disconnect, device number 12 [ 362.383162][ T8303] loop3: p1 < > p3 p4 < > [ 362.503902][ T8314] dccp_invalid_packet: P.Data Offset(224) too large [ 362.634016][ T5513] device veth1_macvtap left promiscuous mode [ 362.653154][ T8303] loop3: p3 start 4259840 is beyond EOD, truncated [ 362.660241][ T5513] device veth0_macvtap left promiscuous mode [ 362.684051][ T5513] device veth1_vlan left promiscuous mode [ 362.713861][ T5513] device veth0_vlan left promiscuous mode [ 362.943882][ T8336] dccp_close: ABORT with 1 bytes unread [ 364.147270][ T8358] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 364.147270][ T8358] program syz.1.1287 not setting count and/or reply_len properly [ 364.273770][ T3559] Bluetooth: hci2: command tx timeout [ 364.932180][ T5513] team0 (unregistering): Port device team_slave_1 removed [ 364.963787][ T8364] loop1: detected capacity change from 16 to 14 [ 364.997772][ T5513] team0 (unregistering): Port device team_slave_0 removed [ 365.043574][ T5603] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 365.059813][ T8367] dccp_close: ABORT with 1 bytes unread [ 365.134498][ T5513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.239478][ T5513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.292768][ T5603] usb 4-1: Using ep0 maxpacket: 16 [ 365.573773][ T5603] usb 4-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=28.e0 [ 365.587157][ T5603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.595807][ T5603] usb 4-1: Product: syz [ 365.600087][ T5603] usb 4-1: Manufacturer: syz [ 365.605284][ T5603] usb 4-1: SerialNumber: syz [ 365.619109][ T5603] usb 4-1: config 0 descriptor?? [ 365.665051][ T5603] ums-freecom 4-1:0.0: USB Mass Storage device detected [ 365.821954][ T5513] bond0 (unregistering): Released all slaves [ 365.889472][ T8360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.900517][ T8360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.905514][ T8230] team0: Port device team_slave_1 added [ 366.117782][ T8230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.163805][ T8230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.267832][ T8230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.321565][ T8230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.353617][ T3570] Bluetooth: hci2: command tx timeout [ 366.361279][ T8230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.476147][ T8230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.957050][ T8386] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1297'. [ 367.208551][ T8230] device hsr_slave_0 entered promiscuous mode [ 367.253872][ T8230] device hsr_slave_1 entered promiscuous mode [ 367.648155][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1300'. [ 367.649791][ T8377] dccp_invalid_packet: P.Data Offset(224) too large [ 367.672744][ T8403] netlink: 'syz.0.1300': attribute type 14 has an invalid length. [ 367.699624][ T8403] netlink: 'syz.0.1300': attribute type 12 has an invalid length. [ 367.748012][ T8403] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.756887][ T8403] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.765713][ T8403] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.775095][ T8403] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.881724][ T8403] device vxlan0 entered promiscuous mode [ 368.554517][ T8414] dccp_close: ABORT with 1 bytes unread [ 368.739989][ T5603] usb 4-1: USB disconnect, device number 12 [ 369.491680][ T8443] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1309'. [ 370.171548][ T8230] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 370.273932][ T3559] Bluetooth: hci4: command 0x0406 tx timeout [ 370.276130][ T8230] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 370.334321][ T8230] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 370.356488][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1312'. [ 370.383938][ T8451] netlink: 'syz.1.1312': attribute type 14 has an invalid length. [ 370.394882][ T8453] dccp_close: ABORT with 1 bytes unread [ 370.405103][ T8451] netlink: 'syz.1.1312': attribute type 12 has an invalid length. [ 370.488629][ T8451] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.497558][ T8451] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.506465][ T8451] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.515401][ T8451] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.733921][ T8451] device vxlan0 entered promiscuous mode [ 370.776508][ T8230] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 370.863775][ T5603] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 370.965694][ T8230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.028481][ T5302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 371.037213][ T5302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 371.085213][ T8230] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.098849][ T5302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 371.122572][ T5603] usb 1-1: Using ep0 maxpacket: 16 [ 371.129110][ T5302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 371.154832][ T5302] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.161952][ T5302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.235636][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 371.263310][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 371.284480][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 371.292963][ T3601] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.300129][ T3601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.431389][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 371.494774][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 371.505585][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 371.543835][ T5603] usb 1-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=28.e0 [ 371.552919][ T5603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.573526][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 371.604320][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 371.613135][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 371.629519][ T5603] usb 1-1: Product: syz [ 371.633917][ T5603] usb 1-1: Manufacturer: syz [ 371.638529][ T5603] usb 1-1: SerialNumber: syz [ 371.678366][ T5603] usb 1-1: config 0 descriptor?? [ 371.694919][ T8230] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 371.715559][ T8230] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 371.744706][ T5603] ums-freecom 1-1:0.0: USB Mass Storage device detected [ 371.764792][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 371.772802][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 371.796679][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 371.815543][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 371.824682][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 371.878664][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 372.014607][ T8460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.037114][ T8460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.255466][ T8470] loop3: detected capacity change from 0 to 2048 [ 372.302739][ T8470] loop3: p1 < > p3 p4 < > [ 372.335671][ T8470] loop3: p3 start 4259840 is beyond EOD, truncated [ 372.564876][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 372.573253][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 372.630712][ T8230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.705640][ T8470] dccp_invalid_packet: P.Data Offset(224) too large [ 373.135609][ T8501] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1323'. [ 374.037637][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 374.063288][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 374.123783][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 374.154372][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 374.216248][ T8230] device veth0_vlan entered promiscuous mode [ 374.226036][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 374.244200][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 374.269006][ T8230] device veth1_vlan entered promiscuous mode [ 374.846417][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 374.987735][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 375.064435][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 375.114877][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 375.153226][ T8230] device veth0_macvtap entered promiscuous mode [ 375.167413][ T8230] device veth1_macvtap entered promiscuous mode [ 375.231822][ T5302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 375.243138][ T5302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 375.292698][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1330'. [ 375.324996][ T8544] netlink: 'syz.1.1330': attribute type 14 has an invalid length. [ 375.342492][ T8544] netlink: 'syz.1.1330': attribute type 12 has an invalid length. [ 375.358006][ T3598] usb 1-1: USB disconnect, device number 12 [ 375.386507][ T8230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.422459][ T8230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.464399][ T8230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.498413][ T8230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.528989][ T8230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.562822][ T8230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.596295][ T8230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.607877][ T8230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.618307][ T8230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.629228][ T8230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.834495][ T8230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.872839][ T8230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.899923][ T8230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.932296][ T8230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.966456][ T8230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.990487][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 376.002601][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 376.023408][ T8230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.043107][ T8230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.072385][ T8230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.127835][ T8230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.166035][ T8230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.197921][ T8536] loop3: detected capacity change from 0 to 40427 [ 376.208723][ T8230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.255733][ T8536] F2FS-fs (loop3): invalid crc value [ 376.266156][ T8230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.309207][ T8536] F2FS-fs (loop3): Found nat_bits in checkpoint [ 376.346038][ T8230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.376212][ T8230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.412017][ T8230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.431882][ T8536] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 376.607773][ T8230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.652194][ T8230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.752609][ T8581] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1334'. [ 376.926905][ T8230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.216355][ T8230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.227987][ T8230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.275826][ T7895] bio_check_eod: 85 callbacks suppressed [ 377.275842][ T7895] syz-executor: attempt to access beyond end of device [ 377.275842][ T7895] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 377.307197][ T8230] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.394631][ T8230] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.422107][ T8230] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.450107][ T8230] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.480886][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 377.498629][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 377.715315][ T4488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.734002][ T4488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.831957][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 377.869739][ T4488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.921550][ T4488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.003064][ T3597] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 378.258111][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 378.293797][ T3597] usb 2-1: Using ep0 maxpacket: 16 [ 378.464267][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.470628][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.753957][ T3597] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=28.e0 [ 378.763076][ T3597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.822836][ T3597] usb 2-1: Product: syz [ 378.829443][ T3597] usb 2-1: Manufacturer: syz [ 378.844482][ T3597] usb 2-1: SerialNumber: syz [ 378.875100][ T3597] usb 2-1: config 0 descriptor?? [ 378.924815][ T3597] ums-freecom 2-1:0.0: USB Mass Storage device detected [ 379.009701][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1343'. [ 379.083989][ T8611] netlink: 'syz.2.1343': attribute type 14 has an invalid length. [ 379.143852][ T8611] netlink: 'syz.2.1343': attribute type 12 has an invalid length. [ 379.173233][ T8592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.181659][ T8611] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.190558][ T8611] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.199527][ T8611] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.208317][ T8611] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.224652][ T8611] device vxlan0 entered promiscuous mode [ 379.275379][ T8592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.517730][ T8603] loop3: detected capacity change from 0 to 2048 [ 379.614660][ T8603] loop3: p1 < > p3 p4 < > [ 379.639780][ T8603] loop3: p3 start 4259840 is beyond EOD, truncated [ 379.694933][ T8629] dccp_invalid_packet: P.Data Offset(224) too large [ 379.732891][ T3003] loop3: p1 < > p3 p4 < > [ 379.756544][ T3003] loop3: p3 start 4259840 is beyond EOD, truncated [ 381.117051][ T8644] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1349'. [ 381.400898][ T6657] usb 2-1: USB disconnect, device number 8 [ 382.472099][ T8664] loop3: detected capacity change from 0 to 2048 [ 382.575090][ T8664] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 382.646200][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1358'. [ 382.684155][ T8679] netlink: 'syz.0.1358': attribute type 14 has an invalid length. [ 382.711298][ T8679] netlink: 'syz.0.1358': attribute type 12 has an invalid length. [ 382.747370][ T7895] EXT4-fs (loop3): unmounting filesystem. [ 382.949246][ T8682] loop3: detected capacity change from 0 to 1024 [ 383.612468][ T5302] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 384.293773][ T5302] usb 3-1: Using ep0 maxpacket: 16 [ 384.294487][ T8704] xt_hashlimit: invalid rate [ 384.324146][ T8699] dccp_invalid_packet: P.Data Offset(224) too large [ 385.183866][ T5302] usb 3-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=28.e0 [ 385.210224][ T5302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.228931][ T5302] usb 3-1: Product: syz [ 385.233129][ T5302] usb 3-1: Manufacturer: syz [ 385.253615][ T5302] usb 3-1: SerialNumber: syz [ 385.275029][ T5302] usb 3-1: config 0 descriptor?? [ 385.325297][ T5302] ums-freecom 3-1:0.0: USB Mass Storage device detected [ 385.556786][ T8695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.585471][ T8695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.932294][ T8716] loop4: detected capacity change from 0 to 40427 [ 386.009886][ T8716] F2FS-fs (loop4): invalid crc value [ 386.066555][ T8716] F2FS-fs (loop4): Found nat_bits in checkpoint [ 386.178553][ T8716] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 386.296494][ T8230] syz-executor: attempt to access beyond end of device [ 386.296494][ T8230] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 386.995147][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 387.015414][ T8752] loop4: detected capacity change from 0 to 1024 [ 387.259715][ T5305] usb 3-1: USB disconnect, device number 13 [ 387.693780][ T5305] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 387.951923][ T8764] dccp_invalid_packet: P.Data Offset(224) too large [ 388.091066][ T5305] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04 [ 388.106687][ T5305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.145245][ T5305] usb 3-1: config 0 descriptor?? [ 388.195783][ T5305] go7007: probe of 3-1:0.0 failed with error -12 [ 388.407692][ T5305] usb 3-1: USB disconnect, device number 14 [ 388.789915][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 388.971419][ T8790] 9pnet_rdma: rdma_create_trans (8790): problem binding to privport: 13 [ 389.010650][ T8794] loop4: detected capacity change from 0 to 16 [ 389.068969][ T8794] erofs: (device loop4): mounted with root inode @ nid 36. [ 389.206023][ T8801] loop3: detected capacity change from 0 to 2048 [ 389.303271][ T8801] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 389.441771][ T7895] EXT4-fs (loop3): unmounting filesystem. [ 389.614226][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 390.011385][ T8817] dccp_invalid_packet: P.Data Offset(224) too large [ 390.231847][ T3554] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 390.488606][ T8835] 9pnet_rdma: rdma_create_trans (8835): problem binding to privport: 13 [ 390.614363][ T3554] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04 [ 390.637205][ T3554] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.656818][ T3554] usb 4-1: config 0 descriptor?? [ 390.700714][ T8839] overlayfs: failed to resolve './file0': -2 [ 390.715785][ T3554] go7007: probe of 4-1:0.0 failed with error -12 [ 390.754028][ T3570] Bluetooth: hci5: command 0x0406 tx timeout [ 390.954676][ T3554] usb 4-1: USB disconnect, device number 13 [ 391.024240][ T26] audit: type=1326 audit(1721654860.086:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.4.1417" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcba2975e99 code=0x0 [ 391.179947][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 391.424477][ T8862] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1417'. [ 391.433920][ T8862] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1417'. [ 391.443038][ T8862] netlink: 'syz.4.1417': attribute type 5 has an invalid length. [ 391.450863][ T8862] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1417'. [ 392.161749][ T8867] 9pnet_rdma: rdma_create_trans (8867): problem binding to privport: 13 [ 392.222381][ T8873] overlayfs: failed to resolve './file0': -2 [ 392.842017][ T26] audit: type=1400 audit(1721654861.896:278): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=8895 comm="syz.0.1433" [ 392.852911][ T8876] dccp_invalid_packet: P.Data Offset(224) too large [ 393.139651][ T26] audit: type=1326 audit(1721654862.196:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8902 comm="syz.0.1436" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1fbcb75e99 code=0x0 [ 393.981985][ T8906] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1436'. [ 393.993525][ T8906] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1436'. [ 394.002489][ T8906] netlink: 'syz.0.1436': attribute type 5 has an invalid length. [ 394.010309][ T8906] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1436'. [ 394.050451][ T8910] 9pnet_rdma: rdma_create_trans (8910): problem binding to privport: 13 [ 394.394081][ T3598] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 394.459450][ T26] audit: type=1400 audit(1721654863.516:280): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=8921 comm="syz.0.1444" [ 394.754838][ T3598] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 394.774671][ T3598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.813785][ T3598] usb 4-1: config 0 descriptor?? [ 394.939765][ T26] audit: type=1326 audit(1721654863.996:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8941 comm="syz.0.1452" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1fbcb75e99 code=0x0 [ 395.774719][ T8949] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1452'. [ 395.784121][ T8949] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1452'. [ 395.793082][ T8949] netlink: 'syz.0.1452': attribute type 5 has an invalid length. [ 395.800929][ T8949] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1452'. [ 395.878834][ T8953] dccp_invalid_packet: P.Data Offset(224) too large [ 395.895173][ T3598] ath6kl: Failed to submit usb control message: -110 [ 395.905358][ T3598] ath6kl: unable to send the bmi data to the device: -110 [ 395.953726][ T3598] ath6kl: Unable to send get target info: -110 [ 395.970065][ T3598] ath6kl: Failed to init ath6kl core: -110 [ 396.085229][ T3598] ath6kl_usb: probe of 4-1:0.0 failed with error -110 [ 396.135953][ T3598] usb 4-1: USB disconnect, device number 14 [ 396.239424][ T26] audit: type=1400 audit(1721654865.296:282): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=8959 comm="syz.1.1457" [ 397.040156][ T8974] loop4: detected capacity change from 0 to 16 [ 397.104591][ T8974] erofs: (device loop4): mounted with root inode @ nid 36. [ 398.915536][ T27] INFO: task syz.0.853:6608 blocked for more than 143 seconds. [ 398.939975][ T27] Not tainted 6.1.100-syzkaller #0 [ 398.958844][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 398.988054][ T27] task:syz.0.853 state:D stack:25784 pid:6608 ppid:6221 flags:0x00004004 [ 399.018109][ T27] Call Trace: [ 399.028580][ T27] [ 399.037347][ T27] __schedule+0x143f/0x4570 [ 399.045311][ T27] ? __sched_text_start+0x8/0x8 [ 399.054034][ T27] ? blk_check_plugged+0x250/0x250 [ 399.091102][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 399.100832][ T27] ? blk_check_plugged+0x250/0x250 [ 399.123530][ T27] ? print_irqtrace_events+0x210/0x210 [ 399.133845][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 399.139013][ T27] schedule+0xbf/0x180 [ 399.161070][ T27] io_schedule+0x88/0x100 [ 399.173568][ T27] folio_wait_bit_common+0x878/0x1290 [ 399.179190][ T27] ? folio_wait_bit+0x20/0x20 [ 399.192267][ T9013] dccp_invalid_packet: P.Data Offset(224) too large [ 399.199480][ T27] ? migration_entry_wait_on_locked+0x1160/0x1160 [ 399.213562][ T27] ? erofs_map_blocks+0x14d0/0x14d0 [ 399.218802][ T27] ? bio_add_page+0x3a4/0x750 [ 399.243560][ T27] z_erofs_runqueue+0x993/0x1ca0 [ 399.253849][ T27] ? z_erofs_do_read_page+0x3bd0/0x3bd0 [ 399.269698][ T27] ? __lock_acquire+0x1f80/0x1f80 [ 399.279876][ T27] ? z_erofs_pcluster_readmore+0x413/0x450 [ 399.295386][ T27] z_erofs_readahead+0xc26/0x1030 [ 399.300476][ T27] ? z_erofs_read_folio+0x760/0x760 [ 399.316625][ T27] ? __lock_acquire+0x1f80/0x1f80 [ 399.322140][ T27] ? blk_start_plug+0x95/0x110 [ 399.333559][ T27] read_pages+0x17f/0x830 [ 399.337963][ T27] ? folio_add_lru+0x34d/0xd70 [ 399.342743][ T27] ? folio_add_lru+0x34d/0xd70 [ 399.363578][ T27] ? page_cache_ra_unbounded+0x7b0/0x7b0 [ 399.369281][ T27] ? __lock_acquire+0x125b/0x1f80 [ 399.383587][ T27] ? __filemap_add_folio+0x1ba0/0x1ba0 [ 399.389126][ T27] page_cache_ra_unbounded+0x68b/0x7b0 [ 399.395226][ T27] force_page_cache_ra+0x2a3/0x300 [ 399.400411][ T27] generic_fadvise+0x553/0x7b0 [ 399.419586][ T27] ? dump_task+0x620/0x620 [ 399.426183][ T27] ? __fget_files+0x28/0x4a0 [ 399.430831][ T27] ? __fdget+0x182/0x210 [ 399.435529][ T27] __x64_sys_fadvise64+0x138/0x180 [ 399.440679][ T27] do_syscall_64+0x3b/0xb0 [ 399.445529][ T27] ? clear_bhb_loop+0x45/0xa0 [ 399.450240][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.456847][ T27] RIP: 0033:0x7f302af75e99 [ 399.461408][ T27] RSP: 002b:00007f302bde9048 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 399.470334][ T27] RAX: ffffffffffffffda RBX: 00007f302b105f60 RCX: 00007f302af75e99 [ 399.478879][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 399.487352][ T27] RBP: 00007f302afe4e5d R08: 0000000000000000 R09: 0000000000000000 [ 399.495828][ T27] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 399.504314][ T27] R13: 000000000000000b R14: 00007f302b105f60 R15: 00007ffc64f9b798 [ 399.516795][ T27] [ 399.520134][ T27] [ 399.520134][ T27] Showing all locks held in the system: [ 399.641204][ T27] 1 lock held by rcu_tasks_kthre/12: [ 399.662147][ T27] #0: ffffffff8d12af10 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 399.673129][ T27] 1 lock held by rcu_tasks_trace/13: [ 399.678597][ T27] #0: ffffffff8d12b710 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 399.689997][ T27] 1 lock held by khungtaskd/27: [ 399.694920][ T27] #0: ffffffff8d12ad40 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 399.723634][ T27] 2 locks held by getty/3302: [ 399.728703][ T27] #0: ffff88814afd1098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 399.753570][ T27] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 399.763966][ T27] 3 locks held by kworker/u4:14/3832: [ 399.770219][ T27] #0: ffff8880b983aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 399.780304][ T27] #1: ffff8880b9827788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x43d/0x770 [ 399.792137][ T27] #2: ffff8880b9828358 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 399.802211][ T27] 1 lock held by syz.0.853/6608: [ 399.807707][ T27] #0: ffff888059dd8890 (mapping.invalidate_lock#11){.+.+}-{3:3}, at: page_cache_ra_unbounded+0xed/0x7b0 [ 399.820697][ T27] 1 lock held by syz.1.1022/7321: [ 399.826192][ T27] #0: ffff888059dd8de8 (mapping.invalidate_lock#11){.+.+}-{3:3}, at: page_cache_ra_unbounded+0xed/0x7b0 [ 399.837709][ T27] 1 lock held by syz.2.1096/7679: [ 399.842983][ T27] #0: ffff888059dd9898 (mapping.invalidate_lock#11){.+.+}-{3:3}, at: page_cache_ra_unbounded+0xed/0x7b0 [ 399.863589][ T27] 5 locks held by kworker/u4:17/8535: [ 399.872523][ T27] 1 lock held by vhost-9013/9019: [ 399.893541][ T27] [ 399.895904][ T27] ============================================= [ 399.895904][ T27] [ 399.904953][ T27] NMI backtrace for cpu 1 [ 399.909289][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.100-syzkaller #0 [ 399.917192][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 399.927259][ T27] Call Trace: [ 399.930561][ T27] [ 399.933498][ T27] dump_stack_lvl+0x1e3/0x2cb [ 399.938203][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 399.943585][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 399.949047][ T27] ? panic+0x764/0x764 [ 399.953107][ T27] ? vprintk_emit+0x622/0x740 [ 399.957791][ T27] ? printk_sprint+0x490/0x490 [ 399.962650][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 399.967762][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 399.972718][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 399.978889][ T27] ? _printk+0xd1/0x111 [ 399.983051][ T27] ? panic+0x764/0x764 [ 399.987117][ T27] ? __wake_up_klogd+0xcc/0x100 [ 399.991960][ T27] ? panic+0x764/0x764 [ 399.996022][ T27] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 400.002087][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 400.008147][ T27] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 400.014145][ T27] watchdog+0xf88/0xfd0 [ 400.018295][ T27] ? watchdog+0x1f8/0xfd0 [ 400.022616][ T27] kthread+0x28d/0x320 [ 400.026674][ T27] ? hungtask_pm_notify+0x50/0x50 [ 400.031688][ T27] ? kthread_blkcg+0xd0/0xd0 [ 400.036267][ T27] ret_from_fork+0x1f/0x30 [ 400.040693][ T27] [ 400.044969][ T27] Sending NMI from CPU 1 to CPUs 0: [ 400.050447][ C0] NMI backtrace for cpu 0 [ 400.050458][ C0] CPU: 0 PID: 3598 Comm: kworker/0:4 Not tainted 6.1.100-syzkaller #0 [ 400.050473][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 400.050482][ C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 400.050505][ C0] RIP: 0010:wg_ratelimiter_gc_entries+0x90/0x470 [ 400.050524][ C0] Code: 00 00 00 48 8b 1d a0 7c 54 0c 48 89 04 24 48 01 c3 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 93 e5 32 fc 4c 8b 23 <4d> 85 e4 0f 84 68 01 00 00 49 83 c4 a0 0f 84 5e 01 00 00 49 8d 6c [ 400.050537][ C0] RSP: 0018:ffffc9000450fc08 EFLAGS: 00000246 [ 400.050549][ C0] RAX: 1ffff1100bdb6078 RBX: ffff88805edb03c0 RCX: 0000000000000001 [ 400.050560][ C0] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc9000450fb80 [ 400.050569][ C0] RBP: ffffc9000450fde0 R08: dffffc0000000000 R09: 0000000000000003 [ 400.050579][ C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: 0000000000000000 [ 400.050589][ C0] R13: dffffc0000000000 R14: 0000005d21faab18 R15: ffffffff8daf3aa0 [ 400.050600][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 400.050612][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 400.050622][ C0] CR2: 0000001b2d7d1ff8 CR3: 000000000ce8e000 CR4: 00000000003506f0 [ 400.050635][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 400.050644][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 400.050652][ C0] Call Trace: [ 400.050656][ C0] [ 400.050662][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 400.050685][ C0] ? read_lock_is_recursive+0x10/0x10 [ 400.050708][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 400.050731][ C0] ? nmi_handle+0x25/0x440 [ 400.050760][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 400.050782][ C0] ? nmi_handle+0x12e/0x440 [ 400.050803][ C0] ? nmi_handle+0x25/0x440 [ 400.050823][ C0] ? wg_ratelimiter_gc_entries+0x90/0x470 [ 400.050840][ C0] ? default_do_nmi+0x62/0x150 [ 400.050856][ C0] ? exc_nmi+0xa8/0x100 [ 400.050869][ C0] ? end_repeat_nmi+0x16/0x31 [ 400.050896][ C0] ? wg_ratelimiter_gc_entries+0x90/0x470 [ 400.050913][ C0] ? wg_ratelimiter_gc_entries+0x90/0x470 [ 400.050931][ C0] ? wg_ratelimiter_gc_entries+0x90/0x470 [ 400.050948][ C0] [ 400.050952][ C0] [ 400.050959][ C0] ? process_one_work+0x7a9/0x11d0 [ 400.050976][ C0] process_one_work+0x8a9/0x11d0 [ 400.051000][ C0] ? worker_detach_from_pool+0x260/0x260 [ 400.051019][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 400.051036][ C0] ? kthread_data+0x4e/0xc0 [ 400.051059][ C0] ? wq_worker_running+0x97/0x190 [ 400.051082][ C0] worker_thread+0xa47/0x1200 [ 400.051111][ C0] kthread+0x28d/0x320 [ 400.051123][ C0] ? worker_clr_flags+0x190/0x190 [ 400.051139][ C0] ? kthread_blkcg+0xd0/0xd0 [ 400.051152][ C0] ret_from_fork+0x1f/0x30 [ 400.051179][ C0] [ 400.358402][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 400.365292][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.100-syzkaller #0 [ 400.373195][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 400.383347][ T27] Call Trace: [ 400.386637][ T27] [ 400.389568][ T27] dump_stack_lvl+0x1e3/0x2cb [ 400.394242][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 400.399689][ T27] ? panic+0x764/0x764 [ 400.403749][ T27] ? llist_add_batch+0x160/0x1d0 [ 400.408698][ T27] ? vscnprintf+0x59/0x80 [ 400.413029][ T27] panic+0x318/0x764 [ 400.416916][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 400.423056][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 400.428421][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 400.434594][ T27] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 400.440936][ T27] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 400.447107][ T27] watchdog+0xfc7/0xfd0 [ 400.451282][ T27] ? watchdog+0x1f8/0xfd0 [ 400.455619][ T27] kthread+0x28d/0x320 [ 400.459689][ T27] ? hungtask_pm_notify+0x50/0x50 [ 400.464714][ T27] ? kthread_blkcg+0xd0/0xd0 [ 400.469299][ T27] ret_from_fork+0x1f/0x30 [ 400.473737][ T27] [ 400.476870][ T27] Kernel Offset: disabled [ 400.481187][ T27] Rebooting in 86400 seconds..