last executing test programs: 1m45.299926051s ago: executing program 1 (id=12): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="1c002c80080000009d03000008"], 0x48}}, 0x0) 1m25.944929123s ago: executing program 1 (id=12): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="1c002c80080000009d03000008"], 0x48}}, 0x0) 1m10.240862721s ago: executing program 1 (id=12): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="1c002c80080000009d03000008"], 0x48}}, 0x0) 52.595772009s ago: executing program 1 (id=12): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="1c002c80080000009d03000008"], 0x48}}, 0x0) 29.210669787s ago: executing program 1 (id=12): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="1c002c80080000009d03000008"], 0x48}}, 0x0) 13.868343391s ago: executing program 3 (id=1230): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c472a440b72040155ab7d29a03010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000009c0)={0x24, &(0x7f00000006c0)={0x40, 0xe, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000200)={0x2c, &(0x7f0000000540)={0x40, 0x30, 0x1, 'a'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x18, &(0x7f0000000240)={0x40, 0x31, 0x1, "95"}, 0x0, 0x0, 0x0, 0x0}) 11.911341913s ago: executing program 1 (id=12): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="1c002c80080000009d03000008"], 0x48}}, 0x0) 10.185494228s ago: executing program 3 (id=1238): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xfc, 0x0, 0x0, 0x0, 0x2, 0x40}, {0x0, 0x0, 0xe3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2}]}) r2 = epoll_create1(0x0) r3 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x10, 0x101141) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000400)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0xa0028000}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r6 = userfaultfd(0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24}, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 8.171981137s ago: executing program 2 (id=1246): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x45, &(0x7f0000000000)={0x0, 0x0}, 0x8) 8.033335893s ago: executing program 3 (id=1248): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket(0x15, 0x5, 0x0) bind$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() openat$dir(0xffffffffffffff9c, 0x0, 0x90000, 0x45) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @ib={0x1b, 0x0, 0x0, {"ffd16b57c0d1c0c47ddc1c1a8480f330"}}, @ib={0x1b, 0x0, 0x0, {"6be30100"}}}}, 0x118) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @lsm, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x1010, 0xffffffffffffffff, 0x8452a000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0xffffffffffffffff, 0x0, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x78) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4, 0x4e22, @local}, {0x2, 0x4e23, @remote}, 0x184, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1}) connect$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x7}, 0x20) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, 0x0) 7.796928105s ago: executing program 2 (id=1249): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) 6.984712505s ago: executing program 2 (id=1251): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6.983983258s ago: executing program 3 (id=1252): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$cgroup_pressure(r0, &(0x7f00000001c0)={'some'}, 0x4cdad095) unlink(&(0x7f00000000c0)='./file0\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000780)=ANY=[@ANYRESOCT=r1, @ANYRESHEX, @ANYRESDEC=r1, @ANYRES16=r0, @ANYRES8=r1, @ANYRES8=r0]) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x19, &(0x7f0000000340)={r3, 0xfffffffe}, 0x8) write$FUSE_INIT(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) r4 = openat$sequencer(0xffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r4, 0xc0046d00, &(0x7f0000001500)) r5 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000240)='source', &(0x7f0000000b40)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\'Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xaf\b\x00\x00\x00\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\/\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b\xc7e\xab\x8f+\xda\x9b\xae\xf2\xca\xb9\xde\xb5\x8f\xdb\xba}\x7f\xf8\xe5i,m\b\xf0\xc7\xe9R\x9cY$\xcb\x00/!Z\xeb\x9bE\xf2\xb9\xcc\xf0\x9c\x02\xfc\x9c\x91q\xba|\x80n\x1f\xffG\xc3\x13\xe7v\xa7\x95md\x0f\xa5\x06\v^n\x84d5o\x02\xb3.\x8dc\x18\xe0\xc2\x9b\xe1D\x0fB] \xdfJGr\xdbc,\xef82%\x97\xe4;u\xa9\xe5\xef*n\xf613\x17\x80[\x90]\xef\xc1\x8e\rD\xd2\xe0\x8c\xf2\x00\x00\x00\x00\x00\x00\x00Gs\xab\x1e\xa13\x93\x8d\x04U\xf5\xb8Th9s3\xc9\xbf\xe5My$\x99.\xf0\xd5\xc8\xb1\xfc4\xe7\x83z\x11a\xb7\xebY\x1d\xcd\x81N\xed\xbd\xa5\xce\xa0f\xe5q2\xbc#w\xe4_\x8a-\xad\xc2/_\xe6\nE\xeb\x9c\x96\xf4`\xa2\x06\xe0^\xfb\x99\xbb}\xfb\x052_\x83*B\xf1\xf0\x95\xd2K\xd6\xe5\xb1\x1a\x02,\xbe\xf5\xd0\xd4\xa1A\xf3!\n\xc6b\xeb\x92\xea\xd8\xe1$\xbbUO\x1fS\x02\x9e\xa7|i:\xb1\xf60\xf6M\xe6,\x81=F\xa1\xca\x06\x0e\x14\x89/\xa7\"\x17-h9\x176\x9d\x04\x1el\xdcp\x89\x1b \x93f\x9a\x10\xd9\xa2Y\b\xfalA\xe1\x1bI\xb9\xf8\xa0\xb0\xc2\x04\xedO\n\vj&\xb5\x04\xc3{Yt\xf4rS^\x0e$\xe9\x05\xcd\x9b\x84\x14`\xed\x9e\xbbh\x81h\xf2\xe7\xe2DO\x1a\xe9\xc1\x1cu\xa5\xbd\x90\xbb\x03\xd5\x00\xf2\x83T\xe4\x0eF\x7f\x85\xb5\xe9CJ0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8}, @IFLA_GENEVE_DF={0x5}]}}}]}, 0x44}}, 0x0) 5.815518367s ago: executing program 0 (id=1257): syz_emit_ethernet(0x5e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004f0000500000000000059078ac1414000a010100441405030000000000000000ffffffff00000000890fcee0000002ac1414bb00000000830200000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="000000a551cf6e95345f9624532cce2d36de08a20c9e0242b561b3e883c25a02b49dec33b71925ec1e3f235e5dd270e648ba825791c3a02bd63ea3c55ac52e637470d9a94bdbb0f7613f54b32bcba5af4a4cd5563d13a024f76341a2b3b4ce248b116990a3b0988ae48107ee36e3d1b3c8b9d8438ccab5ad8d3ccfc47f0291f694bd520a58024f8b7d6647012b98c38446765d4b5bf250bd3e6022da539018194afc8998f6bc76af486edf7db8f22c1afd4188d1b4654cd1ec5277589c4ac37deff22ff3fab700"/212], 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x4b, 0x4, [0x2, 0x7, 0x8, 0x4]}, &(0x7f0000000080)=0x10) syz_emit_ethernet(0x46, &(0x7f0000000080)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33883", 0x10, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_ra={0xc0}}}}}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000100)=[{{&(0x7f0000000300)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c040) syz_usb_connect(0x0, 0x24, &(0x7f0000001180)={{0x12, 0x1, 0x0, 0x22, 0x6a, 0xa1, 0x40, 0xa07, 0xd0, 0x1013, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbd, 0x22, 0xf0}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0x4008af24, &(0x7f0000001040)) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r1, 0x7f}, 0x8) r4 = socket$netlink(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000000180)) 5.111677588s ago: executing program 3 (id=1258): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "db19ff47"}]}}, 0x0}, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, r7, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000000c0)=0xff, r7, 0x0, 0x0, 0x1}}, 0x20) unshare(0x28000400) r8 = open(&(0x7f0000000100)='./file0\x00', 0x82ff, 0x0) fcntl$setlease(r8, 0x400, 0x2) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="08000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdf", 0x80}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b9174", 0xf01}], 0x3) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0xf00) 4.168517598s ago: executing program 0 (id=1259): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x64ff, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x7, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x10, 0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x20000000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0xfffffff7, 0x0, 0xfffffffc]}) 3.894617784s ago: executing program 0 (id=1260): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) 3.615567488s ago: executing program 0 (id=1261): lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./bus\x00', 0x0) 3.330495847s ago: executing program 0 (id=1262): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket(0x15, 0x5, 0x0) bind$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() openat$dir(0xffffffffffffff9c, 0x0, 0x90000, 0x45) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @ib={0x1b, 0x0, 0x0, {"ffd16b57c0d1c0c47ddc1c1a8480f330"}}, @ib={0x1b, 0x0, 0x0, {"6be30100"}}}}, 0x118) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @lsm, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x1010, 0xffffffffffffffff, 0x8452a000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0xffffffffffffffff, 0x0, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x78) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4, 0x4e22, @local}, {0x2, 0x4e23, @remote}, 0x184, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1}) connect$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x7}, 0x20) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, 0x0) 1.917969564s ago: executing program 4 (id=1263): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4006}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)='m', 0x102, 0x0, &(0x7f0000000200)={0x3a, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.82170599s ago: executing program 4 (id=1264): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xa, 0x5, 0xa, 0x0, @loopback}, @mptcp=@ack={0x1e, 0xc, 0x75, 0x4, "74c01ff5132cf07c"}]}}}}}}}}, 0x0) 1.711884117s ago: executing program 4 (id=1265): r0 = socket$inet_smc(0x2b, 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = memfd_create(0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000240)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000280)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc03064ca, &(0x7f0000000380)={&(0x7f0000000300)=[r7, r8, r9], &(0x7f0000000340)=[0x80000, 0x7ff, 0x8], 0x0, 0x3, 0x7}) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x2000010, &(0x7f0000000140)=ANY=[], 0x3, 0x6b5, &(0x7f0000001240)="$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") ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x2, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae50511ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed33147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3310200970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000003c0)=@fd={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f06e4b56"}}) write$binfmt_elf32(r2, &(0x7f0000001e80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}}, 0x38) fcntl$setpipe(r1, 0x407, 0x8001a0) splice(r1, 0x0, r3, 0x0, 0x200002, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000000080)) 789.960906ms ago: executing program 4 (id=1266): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='cubic\x00', 0x6) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x58}}, 0x0) shutdown(r1, 0x2) 722.649177ms ago: executing program 3 (id=1267): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000080)={0x8000, 0x1}) r4 = socket(0x10, 0x2, 0x0) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000003180)=@nullb, 0xee01, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x1c, r5, 0xe7d02281b1d40d47, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_HEADER={0x4}, @ETHTOOL_A_WOL_HEADER={0x4, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x888}, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[], 0x24) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e06006220"], 0x9) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x102) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$VIDIOC_G_INPUT(r6, 0x80045626, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) creat(0x0, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xad, 0x0, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000803000/0x1000)=nil) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x1e, 0x0, &(0x7f0000000880)="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"}) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000010000000000000000000000000000000000000058"], 0x119) writev(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)='\v\x00\x00\x00', 0x4}], 0x1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$watch_queue(&(0x7f0000000240), 0x80) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) 277.035187ms ago: executing program 2 (id=1268): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000200)='./file0\x00', 0x60) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x18, "000080f100df000000a7d9de16c708db7200"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x840000000002, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x7fffffff}]}) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040eaf003120"], 0x7) r3 = syz_open_dev$mouse(0x0, 0x0, 0x2042) r4 = syz_io_uring_setup(0x24b9, &(0x7f0000000300)={0x0, 0x0, 0x400}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r4, 0x10a4, 0x0, 0x0, 0x0, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000640)='\"', 0x1}], 0x1) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 197.903689ms ago: executing program 4 (id=1269): madvise(&(0x7f0000664000/0x1000)=nil, 0x1000, 0x9) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$loop(0x0, 0x75f, 0x2a382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000340)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000340)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xd) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000640)="ffb3ef96fd55310531a92b9d4b2ebcb168c3e90db153fe8bc3c9e2cfd50d22329495b92a7e12a948fff8e40f44798512135fd8fec900cca0c10e9e61d61cff5507f9298209ab8dd95ba0cb024a07dc20d07ac8940c729de29318e23818b2169da4374e8ec904573105b3dafbed9c3958b6570ec6117f2a8b7823b94056c0bcfd679f57db483bb7631bfd74f5f73cdebd19d4bd31a81d7c73c4428a65dc3820987e1ea1c45773112d4e2b1cc8064f220c7b2d673f84d4b1a5a9aedc2063b740198f57d0848358b2cf118bfcdc7c40303dee672f1ca6384e006460df438bde154a0c", 0xe1}, {&(0x7f0000000140)="74812905b8bd297a48dc5adfa4052d6e7cdd8c1615a231859ac522b4ae78d7f1b3619ed73f0e93cf3ccd30f4e58303dfd9d20af483a3406d486bad53698267735b", 0x41}, {&(0x7f0000000000)="7c73c1e117e291cb6cef4163ed06963af9a19a5183aa91163ef7aa02b707e09546e781172decfece433c", 0x2a}, {&(0x7f00000004c0)="790f076461633e860315f3328f99377a0aa835675115acd2b7f10f5db17ec3fde9b974183c45cef27e5f95a42d5eee4f9c3ba0ef5c6601d08076576cddefe74f2b3b23c3b16076675cb1bcdede8d819967d59a7b7c2c34e76233d38be07bc9d91e27bfe688115bb226db5e1179a69c22357df381e6a73bd8b4132f610008d32103ebde594b4611450ab4bd7e97a51718c9e186ee8ae006e66ea2c6afbdfc76b2c4ba738000000021bfce27e702bb3159ac514b3b7141d184fc95a53e825dd7a264360483622d808bcc55ecdc58eaba26d65e8fb40c1446c7d56358b40a0632a44acdfd8232d2e421f97e40b190155087b0bab3d0d816eb3671842438c631384ca936a989ecb918492452a72e4c60592557ca046e36b047c4ca8a7a82b79e1bebf1d3668eceaf6899dc759640ba5fc108ada047d13471fc5aed0dcf3ba6ea78297ef956f42c6d5786f099da4e55771ad021baea2b99a7", 0x156}], 0x4) ioctl$TCFLSH(r7, 0x540b, 0x2) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21}, {0xa, 0x0, 0x0, @mcast2}, r6}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 0s ago: executing program 4 (id=1271): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x1, &(0x7f00000000c0)=ANY=[], 0x1e, 0x1b3, &(0x7f00000007c0)="$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") read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) sendmsg$nl_route(r4, 0x0, 0x4000080) kernel console output (not intermixed with test programs): 76][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.749168][ T5706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.766978][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.992105][ T8719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.733'. [ 288.993515][ T6763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.012424][ T8715] loop3: detected capacity change from 0 to 1024 [ 289.020009][ T8719] netlink: 'syz.0.733': attribute type 7 has an invalid length. [ 289.031519][ T8719] netlink: 'syz.0.733': attribute type 7 has an invalid length. [ 289.060685][ T8719] netlink: 'syz.0.733': attribute type 8 has an invalid length. [ 289.068665][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.733'. [ 289.070131][ T8715] hfsplus: request for non-existent node -709361664 in B*Tree [ 289.085121][ T8715] hfsplus: request for non-existent node -709361664 in B*Tree [ 289.093008][ T8715] hfsplus: b-tree write err: -5, ino 8 [ 289.298128][ T8728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.736'. [ 289.380764][ T8732] loop0: detected capacity change from 0 to 128 [ 289.486485][ T8732] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 289.517936][ T8739] netlink: 28 bytes leftover after parsing attributes in process `syz.2.735'. [ 289.569547][ T8739] netlink: 28 bytes leftover after parsing attributes in process `syz.2.735'. [ 289.588173][ T8732] ext4 filesystem being mounted at /150/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 289.770092][ T5577] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 290.005853][ T8752] loop2: detected capacity change from 0 to 4096 [ 290.048316][ T8752] ntfs3(loop2): It is recommened to use chkdsk. [ 290.068780][ T8752] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 290.105994][ T8752] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 290.130680][ T8752] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 290.161833][ T8752] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 290.180211][ T8752] ntfs3(loop2): try to read out of volume at offset 0x3fffffc1c00 [ 290.199200][ T8752] ntfs3(loop2): try to read out of volume at offset 0x3fffffc2c00 [ 290.217671][ T8752] ntfs3(loop2): try to read out of volume at offset 0x3fffffc4c00 [ 290.238155][ T8752] ntfs3(loop2): try to read out of volume at offset 0x3fffffc8c00 [ 290.253984][ T8752] ntfs3(loop2): try to read out of volume at offset 0x3fffffd0c00 [ 290.637645][ T8750] loop4: detected capacity change from 0 to 32768 [ 290.892707][ T8741] loop3: detected capacity change from 0 to 65536 [ 291.039440][ T8741] XFS (loop3): Mounting V5 Filesystem e4654a66-62e5-4963-a81e-012d9d4871af [ 291.050809][ T8750] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 291.080136][ T1069] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.184301][ T5234] ocfs2: Unmounting device (7,4) on (node local) [ 291.200632][ T8741] XFS (loop3): Ending clean mount [ 291.276016][ T1069] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.535064][ T1069] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.597486][ T5237] XFS (loop3): Unmounting Filesystem e4654a66-62e5-4963-a81e-012d9d4871af [ 291.666548][ T1069] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.834764][ T8808] netlink: 28 bytes leftover after parsing attributes in process `syz.3.748'. [ 291.868060][ T8808] netlink: 'syz.3.748': attribute type 7 has an invalid length. [ 291.875769][ T8808] netlink: 'syz.3.748': attribute type 8 has an invalid length. [ 291.913331][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.748'. [ 292.121131][ T8810] loop0: detected capacity change from 0 to 1024 [ 292.126563][ T8814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.749'. [ 292.176775][ T8810] hfsplus: request for non-existent node -709361664 in B*Tree [ 292.184510][ T8810] hfsplus: request for non-existent node -709361664 in B*Tree [ 292.192476][ T8810] hfsplus: b-tree write err: -5, ino 8 [ 292.474512][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.750'. [ 293.167462][ T1069] bridge_slave_1: left allmulticast mode [ 293.210307][ T1069] bridge_slave_1: left promiscuous mode [ 293.216086][ T1069] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.348609][ T1069] bridge_slave_0: left allmulticast mode [ 293.354312][ T1069] bridge_slave_0: left promiscuous mode [ 293.431007][ T1069] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.333278][ T5246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 294.345938][ T5246] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 294.381230][ T5246] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 294.399633][ T5246] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 294.417565][ T5246] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 294.429023][ T5246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 295.222993][ T8862] loop2: detected capacity change from 0 to 1024 [ 295.230081][ T8862] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.274570][ T8860] loop3: detected capacity change from 0 to 1024 [ 295.281803][ T8860] hfsplus: Unknown parameter '' [ 295.902770][ T8862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.231811][ T6763] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 296.302895][ T8871] loop4: detected capacity change from 0 to 8 [ 296.512868][ T6763] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 296.537867][ T5252] Bluetooth: hci2: command tx timeout [ 296.836818][ T6763] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 296.896994][ T6763] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 296.961119][ T6763] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 296.992813][ T6763] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 297.007577][ T6763] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 297.021214][ T1069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.030925][ T6763] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 297.048226][ T1069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.057205][ T6763] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 297.088256][ T1069] bond0 (unregistering): Released all slaves [ 297.094814][ T6763] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 297.111735][ T8831] netlink: 28 bytes leftover after parsing attributes in process `syz.0.752'. [ 297.120795][ T8831] netlink: 28 bytes leftover after parsing attributes in process `syz.0.752'. [ 297.136553][ T8867] netlink: 16 bytes leftover after parsing attributes in process `syz.3.763'. [ 297.175683][ T8876] netlink: 36 bytes leftover after parsing attributes in process `syz.4.767'. [ 297.507836][ T95] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 297.864178][ T8895] loop4: detected capacity change from 0 to 256 [ 297.874012][ T8895] exfat: Deprecated parameter 'namecase' [ 297.879943][ T8895] exfat: Deprecated parameter 'utf8' [ 297.885420][ T8895] exfat: Deprecated parameter 'namecase' [ 297.891228][ T8895] exfat: Deprecated parameter 'utf8' [ 297.940202][ T95] usb 1-1: Using ep0 maxpacket: 8 [ 297.975949][ T8895] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 298.144029][ T95] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 298.357870][ T95] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 298.407861][ T95] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 298.475324][ T95] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.498173][ T95] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 298.507387][ T95] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.581517][ T5252] Bluetooth: hci2: command tx timeout [ 298.677538][ T8906] loop3: detected capacity change from 0 to 1024 [ 298.685136][ T8906] hfsplus: Unknown parameter '' [ 298.764972][ T95] usb 1-1: GET_CAPABILITIES returned 0 [ 298.806864][ T95] usbtmc 1-1:16.0: can't read capabilities [ 298.858200][ T1069] hsr_slave_0: left promiscuous mode [ 298.881407][ T1069] hsr_slave_1: left promiscuous mode [ 298.907105][ T1069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.950320][ T1069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.048818][ T1069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.056808][ T1069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.112593][ T1069] veth1_macvtap: left promiscuous mode [ 299.124615][ T1069] veth0_macvtap: left promiscuous mode [ 299.146534][ T1069] veth1_vlan: left promiscuous mode [ 299.155353][ T1069] veth0_vlan: left promiscuous mode [ 299.194135][ T6763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.554600][ T8] usb 1-1: USB disconnect, device number 3 [ 299.841118][ T5246] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.857192][ T5246] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.870378][ T5246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.888849][ T5246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.896600][ T5246] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 299.904099][ T5246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.196223][ T8926] loop3: detected capacity change from 0 to 32768 [ 300.287226][ T8926] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 300.350758][ T8926] XFS (loop3): empty log check failed [ 300.356211][ T8926] XFS (loop3): log mount/recovery failed: error -5 [ 300.376024][ T8926] XFS (loop3): log mount failed [ 300.658304][ T5246] Bluetooth: hci2: command tx timeout [ 300.874874][ T8944] loop3: detected capacity change from 0 to 64 [ 301.574964][ T1069] team0 (unregistering): Port device team_slave_1 removed [ 301.648736][ T8948] loop3: detected capacity change from 0 to 1024 [ 301.655808][ T8948] hfsplus: Unknown parameter '' [ 301.914856][ T1069] team0 (unregistering): Port device team_slave_0 removed [ 301.932275][ T8942] loop0: detected capacity change from 0 to 32768 [ 301.939181][ T5246] Bluetooth: hci4: command tx timeout [ 302.022871][ T8942] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 302.212764][ T8942] (syz.0.784,8942,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 302.292908][ T5577] ocfs2: Unmounting device (7,0) on (node local) [ 302.631654][ T8961] loop0: detected capacity change from 0 to 256 [ 302.674060][ T8961] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 302.740308][ T5246] Bluetooth: hci2: command tx timeout [ 303.044900][ T8922] netlink: 16 bytes leftover after parsing attributes in process `syz.4.779'. [ 303.366864][ T8845] chnl_net:caif_netlink_parms(): no params data found [ 303.487635][ T8974] loop4: detected capacity change from 0 to 64 [ 304.017840][ T5246] Bluetooth: hci4: command tx timeout [ 304.043470][ T8845] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.082598][ T8845] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.108008][ T8845] bridge_slave_0: entered allmulticast mode [ 304.115120][ T8845] bridge_slave_0: entered promiscuous mode [ 304.166936][ T8845] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.184881][ T8845] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.198176][ T8845] bridge_slave_1: entered allmulticast mode [ 304.209609][ T8845] bridge_slave_1: entered promiscuous mode [ 304.281233][ T8845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.327562][ T1069] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.394562][ T8845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.428145][ T8923] chnl_net:caif_netlink_parms(): no params data found [ 304.456686][ T1069] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.599176][ T1069] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.673239][ T8845] team0: Port device team_slave_0 added [ 304.732559][ T8979] loop3: detected capacity change from 0 to 32768 [ 304.751486][ T8845] team0: Port device team_slave_1 added [ 304.788589][ T8979] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.796 (8979) [ 304.831912][ T8979] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 304.853719][ T1069] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.877971][ T8979] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 304.887372][ T8979] BTRFS info (device loop3): disk space caching is enabled [ 304.895124][ T8979] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 305.085726][ T8845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.092846][ T8845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.119075][ T8845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.131727][ T8845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.138841][ T8845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.164881][ T8845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.363923][ T8998] loop4: detected capacity change from 0 to 40427 [ 305.459158][ T8998] F2FS-fs (loop4): Found nat_bits in checkpoint [ 305.490519][ T8979] BTRFS info (device loop3): rebuilding free space tree [ 305.531488][ T8979] BTRFS info (device loop3): disabling free space tree [ 305.538669][ T8979] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 305.539952][ T1069] bridge_slave_1: left allmulticast mode [ 305.556286][ T8979] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 305.572154][ T1069] bridge_slave_1: left promiscuous mode [ 305.578414][ T1069] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.585475][ T8998] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 305.632911][ T1069] bridge_slave_0: left allmulticast mode [ 305.640239][ T1069] bridge_slave_0: left promiscuous mode [ 305.647144][ T1069] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.737580][ T5237] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 305.756949][ T5234] syz-executor: attempt to access beyond end of device [ 305.756949][ T5234] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 305.785293][ T5234] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 305.819890][ T5234] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 306.106640][ T5246] Bluetooth: hci4: command tx timeout [ 306.781279][ T9047] loop4: detected capacity change from 0 to 512 [ 306.993924][ T9047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.006927][ T9047] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.559830][ T5234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.787006][ T1069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.850356][ T1069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.867241][ T1069] bond0 (unregistering): Released all slaves [ 307.888991][ T8923] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.897104][ T8923] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.912684][ T8923] bridge_slave_0: entered allmulticast mode [ 307.945018][ T8923] bridge_slave_0: entered promiscuous mode [ 307.967893][ T8923] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.975125][ T8923] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.983207][ T8923] bridge_slave_1: entered allmulticast mode [ 307.991019][ T8923] bridge_slave_1: entered promiscuous mode [ 308.030364][ T9052] netlink: 16 bytes leftover after parsing attributes in process `syz.3.802'. [ 308.107200][ T8845] hsr_slave_0: entered promiscuous mode [ 308.126108][ T8845] hsr_slave_1: entered promiscuous mode [ 308.158787][ T8923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.180715][ T5246] Bluetooth: hci4: command tx timeout [ 308.299228][ T8923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.431272][ T8] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 308.454144][ T8923] team0: Port device team_slave_0 added [ 308.575521][ T8923] team0: Port device team_slave_1 added [ 308.644336][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 308.655831][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.674883][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 308.688658][ T8] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 308.710266][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.731270][ T8] usb 4-1: config 0 descriptor?? [ 308.782460][ T1069] hsr_slave_0: left promiscuous mode [ 308.799289][ T1069] hsr_slave_1: left promiscuous mode [ 308.805593][ T1069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.814892][ T1069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.828457][ T1069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.835004][ T9080] loop0: detected capacity change from 0 to 1024 [ 308.844696][ T1069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.893868][ T9080] hfsplus: request for non-existent node -709361664 in B*Tree [ 308.901582][ T9080] hfsplus: request for non-existent node -709361664 in B*Tree [ 308.910282][ T9080] hfsplus: b-tree write err: -5, ino 8 [ 308.945500][ T1069] veth1_macvtap: left promiscuous mode [ 308.959514][ T1069] veth0_macvtap: left promiscuous mode [ 308.981630][ T1069] veth1_vlan: left promiscuous mode [ 308.987197][ T1069] veth0_vlan: left promiscuous mode [ 309.001745][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 309.103499][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 309.110071][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 309.131727][ T8] usb 4-1: USB disconnect, device number 4 [ 309.163557][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 309.172469][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 309.191829][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 309.223650][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 309.248846][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.276264][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 309.297445][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.543674][ T25] usb 5-1: GET_CAPABILITIES returned 0 [ 309.583976][ T25] usbtmc 5-1:16.0: can't read capabilities [ 310.137337][ T1069] team0 (unregistering): Port device team_slave_1 removed [ 310.214993][ T1069] team0 (unregistering): Port device team_slave_0 removed [ 310.942023][ T9085] netlink: 'syz.3.817': attribute type 16 has an invalid length. [ 310.949896][ T9085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.817'. [ 310.978277][ T8923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.011382][ T8923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.075902][ T8923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.132558][ T8923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.178118][ T8923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.204037][ C0] vkms_vblank_simulate: vblank timer overrun [ 311.376853][ T8923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.712637][ T9105] netlink: 392 bytes leftover after parsing attributes in process `syz.3.822'. [ 311.893540][ T8923] hsr_slave_0: entered promiscuous mode [ 311.906143][ T8923] hsr_slave_1: entered promiscuous mode [ 311.923147][ T8923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.932205][ T8923] Cannot create hsr debugfs directory [ 312.500692][ T5319] usb 5-1: USB disconnect, device number 6 [ 313.125086][ T9133] netlink: 'syz.3.829': attribute type 16 has an invalid length. [ 313.141309][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.829'. [ 314.123950][ T8845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 314.189259][ T8845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 314.233665][ T8845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 314.255435][ T8845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 314.417461][ T8923] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 314.464522][ T8923] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 314.476109][ T8923] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 314.493172][ T8923] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 314.526892][ T8845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.566232][ T8845] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.602180][ T6592] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.609347][ T6592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.619260][ T6592] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.626382][ T6592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.647934][ T5319] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 314.731279][ T8845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.812765][ T8923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.821842][ T5319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 314.874486][ T5319] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 314.888273][ T5319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.906756][ T8923] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.908310][ T5319] usb 4-1: Product: syz [ 314.934836][ T5319] usb 4-1: Manufacturer: syz [ 314.949584][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.950160][ T5319] usb 4-1: SerialNumber: syz [ 314.956755][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.001281][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.008468][ T1069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.038887][ T5319] usb 4-1: config 0 descriptor?? [ 315.099422][ T9185] netlink: 'syz.0.840': attribute type 16 has an invalid length. [ 315.107232][ T9185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.840'. [ 315.229646][ T8845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.385861][ T8845] veth0_vlan: entered promiscuous mode [ 315.446913][ T8845] veth1_vlan: entered promiscuous mode [ 315.575705][ T8845] veth0_macvtap: entered promiscuous mode [ 315.594517][ T8845] veth1_macvtap: entered promiscuous mode [ 315.773907][ T8845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.791964][ T8845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.813859][ T8845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.953756][ T8845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.000362][ T5319] usb 4-1: USB disconnect, device number 5 [ 316.312714][ T61] Bluetooth: hci5: Frame reassembly failed (-84) [ 316.356620][ T8845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.367301][ T8845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.394621][ T8845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.443047][ T8845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.485361][ T8845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.486148][ T9212] netlink: 20 bytes leftover after parsing attributes in process `syz.4.844'. [ 316.509111][ T8845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.520206][ T8845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.551638][ T8845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.579766][ T8845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.597300][ T8845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.637128][ T8845] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.657088][ T8845] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.686123][ T8845] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.707825][ T8845] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.761299][ T8923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.993584][ T1069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.032166][ T1069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.043935][ T8923] veth0_vlan: entered promiscuous mode [ 317.052334][ T9232] netlink: 16 bytes leftover after parsing attributes in process `syz.0.849'. [ 317.063798][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'. [ 317.105341][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.106397][ T8923] veth1_vlan: entered promiscuous mode [ 317.126014][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.294467][ T9239] input: syz1 as /devices/virtual/input/input6 [ 317.305942][ T8923] veth0_macvtap: entered promiscuous mode [ 317.342402][ T8923] veth1_macvtap: entered promiscuous mode [ 317.381299][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.381910][ T9206] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 317.388104][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.406611][ T8923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.481055][ T8923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.525035][ T8923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.565022][ T8923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.587417][ T9248] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 317.604966][ T8923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.622222][ T8923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.651418][ T8923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.682285][ T8923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.701508][ T8923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.721888][ T9252] netlink: 28 bytes leftover after parsing attributes in process `syz.0.853'. [ 317.733741][ T9252] netlink: 28 bytes leftover after parsing attributes in process `syz.0.853'. [ 317.767122][ T8923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.795986][ T8923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.847856][ T8923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.887869][ T8923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.938943][ T5246] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 317.951884][ T8923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.044899][ T8923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.106762][ T8923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.176874][ T8923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.216445][ T8923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.281006][ T8923] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.316682][ T8923] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.346645][ T8923] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.374762][ T8923] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.701327][ T7040] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.911926][ T7040] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.030033][ T7040] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.052406][ T5883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.075867][ T5883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.124005][ T7040] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.150806][ T1069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.162585][ T1069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.327328][ T7040] bridge_slave_1: left allmulticast mode [ 319.337613][ T7040] bridge_slave_1: left promiscuous mode [ 319.345133][ T7040] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.355582][ T7040] bridge_slave_0: left allmulticast mode [ 319.361760][ T7040] bridge_slave_0: left promiscuous mode [ 319.367484][ T7040] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.029921][ T7040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.128095][ T7040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.253380][ T7040] bond0 (unregistering): Released all slaves [ 320.262243][ T9317] loop3: detected capacity change from 0 to 1024 [ 320.290558][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.861'. [ 320.353890][ T9320] loop0: detected capacity change from 0 to 8 [ 320.621593][ T9317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.013314][ T5252] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 321.024783][ T5252] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 321.033990][ T5252] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 321.140771][ T5252] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 321.148550][ T5252] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 321.171950][ T5252] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 321.265735][ T9325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.864'. [ 321.300165][ T5237] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.332695][ T9325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.864'. [ 321.490263][ T9325] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 321.507189][ T9325] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 321.827822][ T5241] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 321.976130][ T9365] loop4: detected capacity change from 0 to 64 [ 322.021965][ T5241] usb 4-1: Using ep0 maxpacket: 8 [ 322.049367][ T5241] usb 4-1: config 0 has no interfaces? [ 322.079372][ T5241] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 322.106451][ T9321] chnl_net:caif_netlink_parms(): no params data found [ 322.374836][ T9343] dccp_close: ABORT with 32 bytes unread [ 322.765365][ T5241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.797545][ T5241] usb 4-1: config 0 descriptor?? [ 322.966416][ T7040] hsr_slave_0: left promiscuous mode [ 323.019757][ T7040] hsr_slave_1: left promiscuous mode [ 323.027147][ T9345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.032439][ T9381] loop4: detected capacity change from 0 to 1024 [ 323.060108][ T7040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.084275][ T9345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.086481][ T7040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.103250][ T9381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.135314][ T7040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.148018][ T7040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.456093][ T5246] Bluetooth: hci2: command tx timeout [ 323.471652][ T9387] loop0: detected capacity change from 0 to 32768 [ 323.496564][ T7040] veth1_macvtap: left promiscuous mode [ 323.498593][ T5234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.502190][ T7040] veth0_macvtap: left promiscuous mode [ 323.517241][ T7040] veth1_vlan: left promiscuous mode [ 323.522651][ T7040] veth0_vlan: left promiscuous mode [ 323.613226][ T9387] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 323.634438][ T9387] XFS (loop0): empty log check failed [ 323.640469][ T9387] XFS (loop0): log mount/recovery failed: error -5 [ 323.648456][ T9387] XFS (loop0): log mount failed [ 324.602554][ T7040] team0 (unregistering): Port device team_slave_1 removed [ 324.686650][ T7040] team0 (unregistering): Port device team_slave_0 removed [ 325.539196][ T5246] Bluetooth: hci2: command tx timeout [ 325.629705][ T46] usb 4-1: USB disconnect, device number 6 [ 325.638211][ T9400] netlink: 16 bytes leftover after parsing attributes in process `syz.4.883'. [ 325.853389][ T9414] loop2: detected capacity change from 0 to 64 [ 326.069149][ T9321] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.076312][ T9321] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.244185][ T9321] bridge_slave_0: entered allmulticast mode [ 326.490777][ T9321] bridge_slave_0: entered promiscuous mode [ 326.734168][ T9321] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.790083][ T9321] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.797398][ T9321] bridge_slave_1: entered allmulticast mode [ 326.804964][ T9321] bridge_slave_1: entered promiscuous mode [ 327.269448][ T9443] fuse: Unknown parameter '0x0000000000000003' [ 327.521609][ T46] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 327.619526][ T5246] Bluetooth: hci2: command tx timeout [ 327.744183][ T9435] loop4: detected capacity change from 0 to 1024 [ 327.880290][ T9435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.936635][ T9321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.976526][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 327.992512][ T9447] loop2: detected capacity change from 0 to 8 [ 328.012924][ T9321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.069507][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.083109][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.086055][ T5234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.092961][ T46] usb 1-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 328.092989][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.122074][ T46] usb 1-1: config 0 descriptor?? [ 328.221142][ T9321] team0: Port device team_slave_0 added [ 328.239472][ T9455] netlink: 16 bytes leftover after parsing attributes in process `syz.3.896'. [ 328.273364][ T9321] team0: Port device team_slave_1 added [ 328.418861][ T9321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.446616][ T9321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.508800][ T9321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.541831][ T9321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.546096][ T46] hid-led 0003:1D34:0004.0002: unknown main item tag 0xd [ 328.562567][ T9321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.595073][ T9321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.732574][ T9321] hsr_slave_0: entered promiscuous mode [ 328.743146][ T9321] hsr_slave_1: entered promiscuous mode [ 328.751198][ T9466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.900'. [ 328.764053][ T46] hid-led 0003:1D34:0004.0002: probe with driver hid-led failed with error -71 [ 328.784445][ T46] usb 1-1: USB disconnect, device number 4 [ 329.432899][ T9496] loop0: detected capacity change from 0 to 1024 [ 329.500107][ T9496] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.601680][ T5577] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.714225][ T5246] Bluetooth: hci2: command tx timeout [ 329.871161][ T9491] loop2: detected capacity change from 0 to 32768 [ 329.915456][ T9491] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.906 (9491) [ 329.925243][ T5246] Bluetooth: unknown link type 4 [ 329.934563][ T5246] Bluetooth: hci1: connection err: -111 [ 329.945423][ T5246] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 330.215395][ T9491] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 330.268436][ T9491] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 330.277373][ T9491] BTRFS info (device loop2): using free-space-tree [ 330.593524][ T9321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 330.858338][ T9321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 330.959660][ T9321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 330.990287][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.911'. [ 331.035903][ T9321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 331.253613][ T9548] netlink: 16 bytes leftover after parsing attributes in process `syz.3.913'. [ 331.804079][ T9321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.054806][ T9561] loop3: detected capacity change from 0 to 1024 [ 332.062786][ T9321] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.074202][ T1069] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.081413][ T1069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.109365][ T8923] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 332.184006][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.191228][ T1069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.272403][ T9561] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.309339][ T9321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.452150][ T5237] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.773608][ T9321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.870284][ T9595] netlink: 304 bytes leftover after parsing attributes in process `syz.0.922'. [ 332.872921][ T9321] veth0_vlan: entered promiscuous mode [ 332.916382][ T9321] veth1_vlan: entered promiscuous mode [ 333.038294][ T9321] veth0_macvtap: entered promiscuous mode [ 333.236625][ T9321] veth1_macvtap: entered promiscuous mode [ 333.266896][ T9321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.277649][ T9321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.287569][ T9321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.301002][ T9321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.311132][ T9321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.321806][ T9321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.332156][ T9321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.343315][ T9321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.518374][ T9321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.913308][ T9321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.998116][ T9321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.052659][ T9321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.107033][ T9321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.143796][ T9321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.186098][ T9321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.203229][ T9321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.241839][ T9321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.285673][ T9626] loop4: detected capacity change from 0 to 1024 [ 334.289138][ T9321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.366269][ T9627] netlink: 16 bytes leftover after parsing attributes in process `syz.3.929'. [ 334.403103][ T9626] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.449583][ T9321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.461294][ T9321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.470896][ T9321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.481898][ T9321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.543193][ T5234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.710069][ T5883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.718177][ T5883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.799500][ T5883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.807370][ T5883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.898574][ T9617] loop2: detected capacity change from 0 to 32768 [ 334.977835][ T9617] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.928 (9617) [ 335.058096][ T5288] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 335.127244][ T9617] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 335.145735][ T9617] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 335.155924][ T9617] BTRFS info (device loop2): using free-space-tree [ 335.248650][ T5288] usb 5-1: Using ep0 maxpacket: 8 [ 335.265296][ T5288] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.283833][ T5288] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 335.312597][ T5288] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 335.324045][ T5288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.337420][ T5288] usb 5-1: config 0 descriptor?? [ 335.357693][ T5288] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 336.784005][ T46] usb 5-1: USB disconnect, device number 7 [ 336.841004][ T8923] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 336.995602][ T9687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.943'. [ 337.020960][ T9684] random: crng reseeded on system resumption [ 337.135054][ T9690] loop0: detected capacity change from 0 to 1024 [ 337.193582][ T9690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.389182][ T5577] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.614452][ T9699] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.703952][ T9701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.947'. [ 337.751277][ T9699] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.868469][ T9699] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.122624][ T5706] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.193088][ T9699] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.286294][ T5706] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.326646][ T9699] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.346464][ T9699] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.434625][ T5706] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.456235][ T9699] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.473594][ T9699] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.527911][ T5706] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.638986][ T5706] bridge_slave_1: left allmulticast mode [ 338.644675][ T5706] bridge_slave_1: left promiscuous mode [ 338.672216][ T5706] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.693044][ T5706] bridge_slave_0: left allmulticast mode [ 338.701827][ T5706] bridge_slave_0: left promiscuous mode [ 338.707650][ T5706] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.165524][ T5706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.177083][ T5706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.192533][ T5706] bond0 (unregistering): Released all slaves [ 339.564392][ T5252] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.586696][ T5252] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.244302][ T5252] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.255285][ T5252] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.264618][ T5252] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 340.272327][ T5252] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.361577][ T9715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.951'. [ 340.786392][ T9746] loop2: detected capacity change from 0 to 1024 [ 340.819689][ T9746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.921870][ T5706] hsr_slave_0: left promiscuous mode [ 340.951668][ T8923] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.969838][ T5706] hsr_slave_1: left promiscuous mode [ 340.976514][ T5706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.015884][ T5706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.035519][ T5706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.059413][ T5706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.126436][ T5706] veth1_macvtap: left promiscuous mode [ 341.140886][ T5706] veth0_macvtap: left promiscuous mode [ 341.156940][ T5706] veth1_vlan: left promiscuous mode [ 341.176281][ T5706] veth0_vlan: left promiscuous mode [ 342.231755][ T5706] team0 (unregistering): Port device team_slave_1 removed [ 342.307405][ T5706] team0 (unregistering): Port device team_slave_0 removed [ 342.346642][ T5252] Bluetooth: hci2: command tx timeout [ 342.915074][ T9762] netlink: 16 bytes leftover after parsing attributes in process `syz.2.960'. [ 342.929765][ T9764] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.036768][ T9764] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.117443][ T9718] chnl_net:caif_netlink_parms(): no params data found [ 343.911696][ T9764] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.231543][ T9764] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.354758][ T9718] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.374211][ T9718] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.390823][ T9718] bridge_slave_0: entered allmulticast mode [ 344.418548][ T5252] Bluetooth: hci2: command tx timeout [ 344.420637][ T9718] bridge_slave_0: entered promiscuous mode [ 344.457871][ T9800] netlink: 20 bytes leftover after parsing attributes in process `syz.0.964'. [ 344.526723][ T9800] geneve3: entered promiscuous mode [ 344.608265][ T9801] netlink: 20 bytes leftover after parsing attributes in process `syz.4.967'. [ 344.627969][ T9718] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.635124][ T9718] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.659790][ T9718] bridge_slave_1: entered allmulticast mode [ 344.680644][ T9718] bridge_slave_1: entered promiscuous mode [ 344.847625][ T9764] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.878403][ T9718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.903896][ T9764] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.971696][ T9764] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.005149][ T9718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.084120][ T9764] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.102876][ T9718] team0: Port device team_slave_0 added [ 345.137055][ T9718] team0: Port device team_slave_1 added [ 345.313850][ T9718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.338112][ T9718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.438682][ T9718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.509211][ T9718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.568286][ T9718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.650324][ T9718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.187462][ T9837] netlink: 16 bytes leftover after parsing attributes in process `syz.2.975'. [ 346.499476][ T5252] Bluetooth: hci2: command tx timeout [ 346.556529][ T9718] hsr_slave_0: entered promiscuous mode [ 346.594157][ T9718] hsr_slave_1: entered promiscuous mode [ 346.608844][ T9859] netlink: 20 bytes leftover after parsing attributes in process `syz.3.981'. [ 346.915524][ T9869] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.060183][ T9869] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.248487][ T9869] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.376669][ T9869] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.404363][ T9869] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.446373][ T9869] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.493023][ T9903] netlink: 16 bytes leftover after parsing attributes in process `syz.0.994'. [ 348.541671][ T9869] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.584779][ T5252] Bluetooth: hci2: command tx timeout [ 348.609810][ T9869] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.753429][ T9910] netlink: 20 bytes leftover after parsing attributes in process `syz.3.993'. [ 348.958866][ T9910] geneve2: entered promiscuous mode [ 349.153554][ T9912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.996'. [ 349.299561][ T9718] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 349.363165][ T9718] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 349.391156][ T9718] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 349.443620][ T9718] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 349.613139][ T9928] netlink: 44 bytes leftover after parsing attributes in process `syz.4.999'. [ 349.713829][ T9718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.764655][ T9718] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.837668][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.844858][ T5883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.903944][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.911192][ T5883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.953049][ T9718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 349.977336][ T9718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.067922][ T95] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 350.988663][ T95] usb 5-1: Using ep0 maxpacket: 16 [ 351.000602][ T95] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 351.014339][ T9718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.032819][ T95] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 351.043005][ T95] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.072816][ T95] usb 5-1: Product: syz [ 351.092021][ T95] usb 5-1: Manufacturer: syz [ 351.096682][ T95] usb 5-1: SerialNumber: syz [ 351.128777][ T95] usb 5-1: config 0 descriptor?? [ 351.150030][ T95] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 351.186254][ T9718] veth0_vlan: entered promiscuous mode [ 351.189394][ T95] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 351.277677][ T9718] veth1_vlan: entered promiscuous mode [ 351.316992][ T9965] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1006'. [ 351.350272][ T9961] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1007'. [ 351.379262][ T9718] veth0_macvtap: entered promiscuous mode [ 351.388610][ T9718] veth1_macvtap: entered promiscuous mode [ 351.406721][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.417400][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.427449][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.439487][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.449647][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.460835][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.471541][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.482297][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.495380][ T9718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.522540][ T46] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 351.560444][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.571387][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.581596][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.593370][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.603306][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.615800][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.625967][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.636682][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.648974][ T9718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.659089][ T9718] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.668289][ T9718] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.677289][ T9718] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.686149][ T9718] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.742133][ T95] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 351.933367][ T7040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.986347][ T46] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 351.997350][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.005464][ T46] usb 3-1: Product: syz [ 352.009725][ T46] usb 3-1: Manufacturer: syz [ 352.014885][ T46] usb 3-1: SerialNumber: syz [ 352.023276][ T46] usb 3-1: config 0 descriptor?? [ 352.027114][ T7040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.087907][ T5319] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 352.141128][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.177186][ T95] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 352.199385][ T95] em28xx 5-1:0.0: board has no eeprom [ 352.216740][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.248122][ T5319] usb 4-1: Using ep0 maxpacket: 16 [ 352.287633][ T5319] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 352.299841][ T46] usb-storage 3-1:0.0: USB Mass Storage device detected [ 352.308091][ T5319] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 352.370910][ T5319] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 352.394106][ T5319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.404554][ T5319] usb 4-1: Product: syz [ 352.409052][ T5319] usb 4-1: Manufacturer: syz [ 352.413671][ T5319] usb 4-1: SerialNumber: syz [ 352.503297][ T95] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 352.558847][ T95] em28xx 5-1:0.0: dvb set to bulk mode. [ 352.564892][ T5334] em28xx 5-1:0.0: Binding DVB extension [ 352.586739][ T95] usb 5-1: USB disconnect, device number 8 [ 352.670919][ T95] em28xx 5-1:0.0: Disconnecting em28xx [ 352.680892][ T9971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.752828][ T5334] em28xx 5-1:0.0: Registering input extension [ 352.763140][ T9971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.783466][ T95] em28xx 5-1:0.0: Closing input extension [ 352.859996][ T9971] mmap: syz.3.1008 (9971) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 352.877033][ T95] em28xx 5-1:0.0: Freeing device [ 352.998832][ T5319] usb 4-1: 0:2 : does not exist [ 353.007996][ T5288] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 353.019881][ T5319] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 353.047374][ T5319] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 353.088932][ T5319] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 353.133033][ T5319] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 353.192195][ T5288] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.203911][ T5319] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 353.255514][ T5319] usb 4-1: USB disconnect, device number 7 [ 353.323749][ T7059] udevd[7059]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.421684][ T9999] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1011'. [ 353.474374][ T5288] usb 1-1: config 0 has no interfaces? [ 353.529518][ T5288] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 353.604879][ T5288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.711376][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.716973][ T5288] usb 1-1: Product: syz [ 353.777982][ T5288] usb 1-1: Manufacturer: syz [ 353.793777][ T5288] usb 1-1: SerialNumber: syz [ 353.849345][ T5288] usb 1-1: config 0 descriptor?? [ 354.476227][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.654216][ T25] usb 3-1: USB disconnect, device number 2 [ 354.749545][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.884089][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.018918][ T52] bridge_slave_1: left allmulticast mode [ 356.036621][ T52] bridge_slave_1: left promiscuous mode [ 356.042673][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.061212][ T52] bridge_slave_0: left allmulticast mode [ 356.074144][ T52] bridge_slave_0: left promiscuous mode [ 356.152805][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.562484][ T5246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 356.601722][ T5246] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 356.610407][ T5246] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 356.626224][ T5246] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 356.635973][ T5246] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 356.645743][ T5246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 357.107286][ T5334] usb 1-1: USB disconnect, device number 5 [ 357.593792][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.613690][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.631913][ T52] bond0 (unregistering): Released all slaves [ 357.653972][T10063] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1017'. [ 357.715500][T10063] geneve2: entered promiscuous mode [ 357.729062][T10086] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 357.746012][T10061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1018'. [ 357.793919][T10083] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1019'. [ 358.740537][ T5252] Bluetooth: hci2: command tx timeout [ 359.257283][T10097] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1023'. [ 359.268900][T10097] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1023'. [ 359.505700][ T52] hsr_slave_0: left promiscuous mode [ 359.518307][ T52] hsr_slave_1: left promiscuous mode [ 359.524417][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.535521][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.575109][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.591649][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.665131][ T52] veth1_macvtap: left promiscuous mode [ 359.684721][ T52] veth0_macvtap: left promiscuous mode [ 359.700240][ T52] veth1_vlan: left promiscuous mode [ 359.706190][ T52] veth0_vlan: left promiscuous mode [ 359.738487][ T5334] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 359.897933][ T5334] usb 1-1: Using ep0 maxpacket: 8 [ 359.905192][ T5334] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.935311][ T5334] usb 1-1: config 0 has no interfaces? [ 359.948017][ T5334] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 359.957506][ T5334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.981005][ T5334] usb 1-1: config 0 descriptor?? [ 360.243616][T10120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.306395][T10120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.324643][ T5334] usb 1-1: USB disconnect, device number 6 [ 360.646453][ T52] team0 (unregistering): Port device team_slave_1 removed [ 360.709359][ T52] team0 (unregistering): Port device team_slave_0 removed [ 360.824579][ T5252] Bluetooth: hci2: command tx timeout [ 361.353665][T10130] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1032'. [ 361.368818][T10134] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1033'. [ 361.401265][T10134] geneve2: entered promiscuous mode [ 361.431829][T10141] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1035'. [ 361.509193][T10145] vlan3: entered promiscuous mode [ 361.535439][T10145] batadv0: entered promiscuous mode [ 361.622210][T10145] vlan3: entered allmulticast mode [ 361.627647][T10145] batadv0: entered allmulticast mode [ 361.652159][T10145] team0: Port device vlan3 added [ 361.955139][T10057] chnl_net:caif_netlink_parms(): no params data found [ 362.081532][T10168] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1044'. [ 362.211227][T10057] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.233957][T10057] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.241739][ T5334] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 362.271369][T10057] bridge_slave_0: entered allmulticast mode [ 362.290885][T10057] bridge_slave_0: entered promiscuous mode [ 362.312258][T10176] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1046'. [ 362.347072][T10057] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.371971][T10057] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.397119][T10057] bridge_slave_1: entered allmulticast mode [ 362.406046][ T5334] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 362.415962][ T5334] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.434670][T10057] bridge_slave_1: entered promiscuous mode [ 362.447599][ T5334] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 362.472318][ T5334] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 362.503903][ T5334] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 362.521546][ T5334] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 362.531431][ T5334] usb 3-1: Product: syz [ 362.535749][ T5334] usb 3-1: Manufacturer: syz [ 362.550332][T10057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.556723][ T5334] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 362.574602][T10057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.632349][T10057] team0: Port device team_slave_0 added [ 362.909360][ T5252] Bluetooth: hci2: command tx timeout [ 363.444815][T10057] team0: Port device team_slave_1 added [ 363.516778][T10057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.516800][T10057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.516824][T10057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.518724][T10057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.518740][T10057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.518762][T10057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.768790][ T5319] usb 3-1: USB disconnect, device number 3 [ 363.875338][T10057] hsr_slave_0: entered promiscuous mode [ 363.897300][T10057] hsr_slave_1: entered promiscuous mode [ 363.993207][T10219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1053'. [ 364.743066][T10226] random: crng reseeded on system resumption [ 364.978338][ T5252] Bluetooth: hci2: command tx timeout [ 365.296933][T10057] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 365.335243][T10057] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 365.496285][T10057] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 365.665766][T10057] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 365.893759][T10242] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1058'. [ 365.967118][T10057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.023693][T10057] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.067218][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.074438][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.115925][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.123102][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.224817][T10057] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.702462][T10057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.883122][T10057] veth0_vlan: entered promiscuous mode [ 366.922822][T10057] veth1_vlan: entered promiscuous mode [ 367.114876][T10057] veth0_macvtap: entered promiscuous mode [ 367.352722][T10057] veth1_macvtap: entered promiscuous mode [ 367.860323][T10057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.964293][T10057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.032034][T10057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.074544][T10057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.112833][T10057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.136190][ T29] audit: type=1326 audit(1729301278.485:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10295 comm="syz.2.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe30f77dff9 code=0x7ffc0000 [ 368.156967][T10057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.197794][T10057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.197832][ T29] audit: type=1326 audit(1729301278.485:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10295 comm="syz.2.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe30f77dff9 code=0x7ffc0000 [ 368.222292][T10057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.291935][ T29] audit: type=1326 audit(1729301278.485:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10295 comm="syz.2.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fe30f77dff9 code=0x7ffc0000 [ 368.303247][T10057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.378141][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 368.387096][ T29] audit: type=1326 audit(1729301278.485:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10295 comm="syz.2.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe30f77dff9 code=0x7ffc0000 [ 368.394692][T10057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.467821][T10057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.487802][ T29] audit: type=1326 audit(1729301278.485:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10295 comm="syz.2.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fe30f77dff9 code=0x7ffc0000 [ 368.525041][T10057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.558266][T10057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.564315][ T29] audit: type=1326 audit(1729301278.485:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10295 comm="syz.2.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe30f77dff9 code=0x7ffc0000 [ 368.582246][T10057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.621230][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.633382][ T29] audit: type=1326 audit(1729301278.485:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10295 comm="syz.2.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe30f77dff9 code=0x7ffc0000 [ 368.635260][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 368.677886][T10057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.695712][ T29] audit: type=1326 audit(1729301278.485:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10295 comm="syz.2.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe30f77e033 code=0x7ffc0000 [ 368.697774][T10057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.752688][ T29] audit: type=1326 audit(1729301278.485:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10295 comm="syz.2.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe30f77e033 code=0x7ffc0000 [ 368.758342][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 368.797899][T10057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.807857][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 368.813989][ T29] audit: type=1326 audit(1729301278.525:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10295 comm="syz.2.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe30f77dff9 code=0x7ffc0000 [ 368.815855][ T9] usb 5-1: SerialNumber: syz [ 368.829008][T10057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.865153][T10057] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.875402][T10057] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.907776][T10057] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.916580][T10057] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.180469][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.180495][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.264662][ T7040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.264685][ T7040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.843757][ T9] usb 5-1: 0:2 : does not exist [ 369.857817][ T9] usb 5-1: unit 5 not found! [ 369.916500][ T9] usb 5-1: USB disconnect, device number 9 [ 370.088079][ T5319] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 370.192267][ T7059] udevd[7059]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.288761][T10329] input: syz1 as /devices/virtual/input/input8 [ 370.996108][ T5319] usb 4-1: config 0 has an invalid interface number: 46 but max is 0 [ 371.012263][ T5319] usb 4-1: config 0 has no interface number 0 [ 371.019329][ T5319] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 371.041197][ T5319] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 371.057970][ T5319] usb 4-1: New USB device strings: Mfr=1, Product=5, SerialNumber=3 [ 371.077908][ T5319] usb 4-1: Product: syz [ 371.092368][ T5319] usb 4-1: Manufacturer: syz [ 371.112873][ T5319] usb 4-1: SerialNumber: syz [ 371.201726][ T5319] usb 4-1: config 0 descriptor?? [ 371.218555][T10316] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 371.235525][ T5319] ums-karma 4-1:0.46: USB Mass Storage device detected [ 371.386100][ T1130] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.397200][ T5319] ums-karma 4-1:0.46: probe with driver ums-karma failed with error -5 [ 371.408380][T10339] random: crng reseeded on system resumption [ 371.455407][ T5319] usb 4-1: USB disconnect, device number 8 [ 371.553505][ T1130] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.671941][ T1130] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.807654][ T1130] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.074229][ T1130] bridge_slave_1: left allmulticast mode [ 372.094552][ T1130] bridge_slave_1: left promiscuous mode [ 372.109176][ T1130] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.148715][ T1130] bridge_slave_0: left allmulticast mode [ 372.154426][ T1130] bridge_slave_0: left promiscuous mode [ 372.161156][ T1130] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.937518][ T5246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 372.954791][ T5246] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 372.967880][ T5334] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 372.975680][ T5246] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 372.987223][ T5246] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 372.999067][ T5246] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 373.007347][ T5246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 373.018056][ T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 373.131203][ T5334] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.154889][ T5334] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 373.182752][ T1130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.215857][ T1130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.241851][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.254022][ T1130] bond0 (unregistering): Released all slaves [ 373.273423][ T5334] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 373.307824][ T8] usb 5-1: config 0 has no interfaces? [ 373.412872][ T8] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 373.427936][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.428092][ T5334] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 373.445420][ T8] usb 5-1: Product: syz [ 373.449765][ T8] usb 5-1: Manufacturer: syz [ 373.454382][ T8] usb 5-1: SerialNumber: syz [ 373.459515][ T5334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.468246][ T5334] usb 3-1: Product: syz [ 373.473581][ T8] usb 5-1: config 0 descriptor?? [ 373.479239][ T5334] usb 3-1: Manufacturer: syz [ 373.485459][ T5334] usb 3-1: SerialNumber: syz [ 373.772518][T10367] chnl_net:caif_netlink_parms(): no params data found [ 373.909609][ T5334] usb 3-1: USB disconnect, device number 4 [ 373.999278][T10371] loop0: detected capacity change from 0 to 32768 [ 374.007662][T10371] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1087 (10371) [ 374.147915][T10371] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 374.169333][T10371] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 374.182026][T10371] BTRFS info (device loop0): using free-space-tree [ 374.207145][T10367] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.219719][T10367] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.230112][T10367] bridge_slave_0: entered allmulticast mode [ 374.288976][T10367] bridge_slave_0: entered promiscuous mode [ 374.308945][T10367] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.332644][T10367] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.358349][T10367] bridge_slave_1: entered allmulticast mode [ 374.508949][T10367] bridge_slave_1: entered promiscuous mode [ 374.706568][ T1130] hsr_slave_0: left promiscuous mode [ 374.733551][ T5577] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 374.765786][ T1130] hsr_slave_1: left promiscuous mode [ 374.822747][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.830922][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.839477][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.847043][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.865321][ T1130] veth1_macvtap: left promiscuous mode [ 374.881296][ T1130] veth0_macvtap: left promiscuous mode [ 374.886891][ T1130] veth1_vlan: left promiscuous mode [ 374.943881][ T1130] veth0_vlan: left promiscuous mode [ 375.057970][ T5252] Bluetooth: hci2: command tx timeout [ 375.719985][ T5319] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 375.896186][ T5319] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 375.936703][ T5319] usb 1-1: New USB device strings: Mfr=210, Product=154, SerialNumber=3 [ 375.952708][ T5319] usb 1-1: Product: syz [ 375.956993][ T5319] usb 1-1: Manufacturer: syz [ 375.995505][ T5319] usb 1-1: SerialNumber: syz [ 376.006973][ T5319] usb 1-1: config 0 descriptor?? [ 376.136958][ T8] usb 5-1: USB disconnect, device number 10 [ 376.573637][ T1130] team0 (unregistering): Port device team_slave_1 removed [ 376.683845][ T1130] team0 (unregistering): Port device team_slave_0 removed [ 376.686002][T10437] netlink: 'syz.4.1098': attribute type 27 has an invalid length. [ 377.027631][ T5319] usb 1-1: non-Atmel transceiver xxxx6103 [ 377.141960][T10441] loop4: detected capacity change from 0 to 1024 [ 377.151900][ T5252] Bluetooth: hci2: command tx timeout [ 377.293184][T10441] hfsplus: request for non-existent node -709361664 in B*Tree [ 377.301253][T10441] hfsplus: request for non-existent node -709361664 in B*Tree [ 377.310701][T10441] hfsplus: b-tree write err: -5, ino 8 [ 377.794657][ T5319] usb 1-1: Firmware version (0.0) predates our first public release. [ 377.802898][ T5319] usb 1-1: Please update to version 0.2 or newer [ 377.810049][ T5319] usb 1-1: atusb_probe: initialization failed, error = -19 [ 377.825302][ T5319] usb 1-1: USB disconnect, device number 7 [ 378.340590][T10445] loop4: detected capacity change from 0 to 32768 [ 378.375001][T10445] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1101 (10445) [ 378.523829][T10445] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 378.556401][T10445] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 378.587901][T10445] BTRFS info (device loop4): using free-space-tree [ 378.628177][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 378.671099][T10457] loop0: detected capacity change from 0 to 1024 [ 378.776431][T10457] hfsplus: request for non-existent node -709361664 in B*Tree [ 378.793545][T10457] hfsplus: request for non-existent node -709361664 in B*Tree [ 378.803258][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 378.810293][ T8] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 378.828787][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.835142][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.835879][T10457] hfsplus: b-tree write err: -5, ino 8 [ 378.842545][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 379.227852][ T5252] Bluetooth: hci2: command tx timeout [ 379.304573][T10367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.437259][ T5234] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 379.463132][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 379.472909][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.488008][ T8] usb 3-1: Product: syz [ 379.492257][ T8] usb 3-1: Manufacturer: syz [ 379.496886][ T8] usb 3-1: SerialNumber: syz [ 379.537107][T10367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.764663][T10367] team0: Port device team_slave_0 added [ 379.774142][T10453] sctp: [Deprecated]: syz.2.1105 (pid 10453) Use of struct sctp_assoc_value in delayed_ack socket option. [ 379.774142][T10453] Use struct sctp_sack_info instead [ 379.823943][T10367] team0: Port device team_slave_1 added [ 379.967536][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 380.086999][T10367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.151373][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 380.166214][T10367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.257184][T10367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.269157][ T8] usb 3-1: 0:2 : does not exist [ 380.281109][ T8] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 380.296688][ T8] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 380.343784][T10479] block device autoloading is deprecated and will be removed. [ 380.362905][ T8] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 380.383581][ T8] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 380.397098][T10367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.413083][T10367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.456371][ T8] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 380.498096][T10367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.557031][ T8] usb 3-1: USB disconnect, device number 5 [ 380.643284][ T7059] udevd[7059]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 380.982084][T10367] hsr_slave_0: entered promiscuous mode [ 381.054804][T10367] hsr_slave_1: entered promiscuous mode [ 381.300680][ T5252] Bluetooth: hci2: command tx timeout [ 383.146343][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 383.154208][ T9] usb 5-1: too many configurations: 109, using maximum allowed: 8 [ 383.165835][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 383.183834][ T9] usb 5-1: can't read configurations, error -71 [ 383.246517][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 383.246535][ T29] audit: type=1326 audit(1729301293.595:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.3.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97f17dff9 code=0x7ffc0000 [ 383.375398][ T29] audit: type=1326 audit(1729301293.645:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.3.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fb97f17dff9 code=0x7ffc0000 [ 383.433286][ T29] audit: type=1326 audit(1729301293.645:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.3.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97f17dff9 code=0x7ffc0000 [ 383.502530][ T29] audit: type=1326 audit(1729301293.645:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.3.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97f17dff9 code=0x7ffc0000 [ 383.554605][ T29] audit: type=1326 audit(1729301293.645:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.3.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fb97f17dff9 code=0x7ffc0000 [ 383.609315][ T29] audit: type=1326 audit(1729301293.645:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.3.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97f17dff9 code=0x7ffc0000 [ 383.674607][ T29] audit: type=1326 audit(1729301293.645:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.3.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97f17dff9 code=0x7ffc0000 [ 383.719657][T10519] loop2: detected capacity change from 0 to 32768 [ 383.759459][T10519] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1116 (10519) [ 383.816792][ T29] audit: type=1326 audit(1729301293.655:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.3.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fb97f17dff9 code=0x7ffc0000 [ 383.875468][T10519] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 383.904984][T10519] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 383.914773][ T29] audit: type=1326 audit(1729301293.655:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.3.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97f17dff9 code=0x7ffc0000 [ 383.929466][T10367] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 383.956184][T10519] BTRFS info (device loop2): using free-space-tree [ 383.990247][ T29] audit: type=1326 audit(1729301293.665:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.3.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97f17dff9 code=0x7ffc0000 [ 384.098779][T10367] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 384.112309][T10367] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 384.192106][T10367] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 384.249476][T10565] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1120'. [ 384.364819][T10565] geneve3: entered promiscuous mode [ 384.787517][T10367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.851318][ T8923] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 384.886381][T10367] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.933848][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.940999][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.010547][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.017787][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.145973][T10367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.578776][T10367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.601376][T10598] loop4: detected capacity change from 0 to 764 [ 385.710136][T10367] veth0_vlan: entered promiscuous mode [ 385.722489][ T5288] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 385.726411][T10367] veth1_vlan: entered promiscuous mode [ 385.759960][T10598] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 386.619713][T10367] veth0_macvtap: entered promiscuous mode [ 386.626107][ T5288] usb 3-1: Using ep0 maxpacket: 8 [ 386.687659][ T5288] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.698085][ T5288] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 386.709459][T10367] veth1_macvtap: entered promiscuous mode [ 386.844626][ T5288] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 386.854212][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.869338][ T5288] usb 3-1: config 0 descriptor?? [ 386.877958][ T5288] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 386.943853][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.027801][T10625] loop4: detected capacity change from 0 to 1024 [ 387.119884][T10625] hfsplus: request for non-existent node -709361664 in B*Tree [ 387.127489][T10625] hfsplus: request for non-existent node -709361664 in B*Tree [ 387.136659][T10625] hfsplus: b-tree write err: -5, ino 8 [ 387.690672][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.817899][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.981566][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.002251][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.016190][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.135269][T10636] loop0: detected capacity change from 0 to 1024 [ 388.181414][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.206636][T10636] hfsplus: request for non-existent node -709361664 in B*Tree [ 388.214285][T10636] hfsplus: request for non-existent node -709361664 in B*Tree [ 388.223763][T10636] hfsplus: b-tree write err: -5, ino 8 [ 388.368298][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.772413][T10367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.843097][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.853750][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.863733][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.874331][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.884416][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.895203][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.907966][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.919803][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.936598][T10367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.991407][T10623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1131'. [ 389.042722][ T9] usb 3-1: USB disconnect, device number 6 [ 389.190695][T10367] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.203875][T10367] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.216901][T10367] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.237821][T10367] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.486022][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.517882][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.603569][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.642891][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.728029][ T5319] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 389.922167][T10653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.951077][T10653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.055700][T10670] loop4: detected capacity change from 0 to 1024 [ 390.180060][T10670] hfsplus: request for non-existent node -709361664 in B*Tree [ 390.187649][T10670] hfsplus: request for non-existent node -709361664 in B*Tree [ 390.196517][T10670] hfsplus: b-tree write err: -5, ino 8 [ 390.832762][T10678] process 'syz.4.1147' launched './file0' with NULL argv: empty string added [ 390.931389][T10683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1147'. [ 390.976454][T10683] input: syz0 as /devices/virtual/input/input9 [ 391.859265][T10714] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1151'. [ 393.139317][ T5319] sched: DL replenish lagged too much [ 393.143144][ T5319] usb 3-1: unable to get BOS descriptor or descriptor too short [ 393.156379][ T5319] usb 3-1: no configurations [ 393.161230][ T5319] usb 3-1: can't read configurations, error -22 [ 394.113821][T10740] loop0: detected capacity change from 0 to 1024 [ 394.243547][T10740] hfsplus: request for non-existent node -709361664 in B*Tree [ 394.252055][T10740] hfsplus: request for non-existent node -709361664 in B*Tree [ 394.260309][T10740] hfsplus: b-tree write err: -5, ino 8 [ 394.767947][ T5288] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 394.879820][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.990084][ T5288] usb 1-1: Using ep0 maxpacket: 16 [ 395.001446][ T5288] usb 1-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 395.020173][ T5288] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 395.042556][ T5288] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 395.052259][ T5288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.065518][ T5288] usb 1-1: Product: syz [ 395.070082][ T5288] usb 1-1: Manufacturer: syz [ 395.077487][ T5288] usb 1-1: SerialNumber: syz [ 395.344066][T10747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.423348][T10747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.571898][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.716130][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.767809][ T5288] usb 1-1: 0:2 : does not exist [ 395.790906][ T5288] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 395.812270][ T5288] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 395.832335][ T5288] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 395.854489][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.856114][ T5288] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 395.920520][ T5288] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 395.960502][ T5288] usb 1-1: USB disconnect, device number 8 [ 396.014451][ T7059] udevd[7059]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 396.138264][ T35] bridge_slave_1: left allmulticast mode [ 396.143971][ T35] bridge_slave_1: left promiscuous mode [ 396.191390][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.273006][ T35] bridge_slave_0: left allmulticast mode [ 396.288980][ T35] bridge_slave_0: left promiscuous mode [ 396.308046][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.649124][ T5246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 396.670856][ T5246] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 396.688329][ T5246] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 396.700033][ T5246] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 396.728034][ T5246] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 396.738778][ T5246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 397.200067][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.213515][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.226219][ T35] bond0 (unregistering): Released all slaves [ 397.595715][T10786] tun0: tun_chr_ioctl cmd 1074025677 [ 397.625641][T10786] tun0: linktype set to 65534 [ 397.709545][T10792] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 397.903746][T10803] loop2: detected capacity change from 0 to 764 [ 397.985165][T10803] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 398.309995][T10812] loop0: detected capacity change from 0 to 1024 [ 399.047119][ T5319] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 399.066816][ T5252] Bluetooth: hci2: command tx timeout [ 399.522892][T10814] 9pnet_virtio: no channels available for device 127.0.0.1 [ 399.617784][ T5319] usb 4-1: New USB device found, idVendor=0547, idProduct=0080, bcdDevice=67.51 [ 399.691292][ T5319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.704738][T10812] hfsplus: request for non-existent node -709361664 in B*Tree [ 399.712390][T10812] hfsplus: request for non-existent node -709361664 in B*Tree [ 399.720257][T10812] hfsplus: b-tree write err: -5, ino 8 [ 399.748721][ T5319] usb 4-1: Product: syz [ 399.774244][ T5319] usb 4-1: Manufacturer: syz [ 399.816964][ T5319] usb 4-1: SerialNumber: syz [ 399.955267][ T5319] usb 4-1: config 0 descriptor?? [ 399.962580][ T5319] usbtest 4-1:0.0: EZ-USB device [ 399.967578][ T5319] usbtest 4-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 400.113153][ T35] hsr_slave_0: left promiscuous mode [ 400.123354][ T35] hsr_slave_1: left promiscuous mode [ 400.132220][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.140217][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.148592][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.156010][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.179328][ T5288] usb 4-1: USB disconnect, device number 9 [ 400.224681][ T35] veth1_macvtap: left promiscuous mode [ 400.237952][ T35] veth0_macvtap: left promiscuous mode [ 400.243787][ T35] veth1_vlan: left promiscuous mode [ 400.258904][ T35] veth0_vlan: left promiscuous mode [ 400.947575][ T35] team0 (unregistering): Port device team_slave_1 removed [ 401.013793][ T35] team0 (unregistering): Port device team_slave_0 removed [ 401.145528][ T5252] Bluetooth: hci2: command tx timeout [ 401.670541][ T5319] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 401.847443][ T5319] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 401.873132][T10763] chnl_net:caif_netlink_parms(): no params data found [ 401.875261][ T5319] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.900351][ T5319] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 401.914920][ T5319] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 401.930536][ T5319] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 401.959244][ T5319] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 401.972400][ T5319] usb 5-1: Product: syz [ 401.977266][ T5319] usb 5-1: Manufacturer: syz [ 402.281567][T10859] loop0: detected capacity change from 0 to 1024 [ 402.895781][ T5319] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 402.922095][T10859] hfsplus: request for non-existent node -709361664 in B*Tree [ 402.929941][T10859] hfsplus: request for non-existent node -709361664 in B*Tree [ 402.937880][T10859] hfsplus: b-tree write err: -5, ino 8 [ 403.114876][ T5291] usb 5-1: USB disconnect, device number 13 [ 403.187127][T10763] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.218010][ T5252] Bluetooth: hci2: command tx timeout [ 403.224842][T10763] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.237695][T10763] bridge_slave_0: entered allmulticast mode [ 403.245037][T10763] bridge_slave_0: entered promiscuous mode [ 403.319389][T10875] random: crng reseeded on system resumption [ 403.386457][T10763] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.398796][T10763] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.413297][T10763] bridge_slave_1: entered allmulticast mode [ 403.440646][T10763] bridge_slave_1: entered promiscuous mode [ 403.584108][T10763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.680452][T10763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.940342][T10763] team0: Port device team_slave_0 added [ 403.960272][T10763] team0: Port device team_slave_1 added [ 404.002735][T10763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.013821][T10763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.065204][T10763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.129647][T10763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.145153][T10763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.262708][T10763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.355210][T10908] fuse: Bad value for 'fd' [ 404.598192][ T5288] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 404.626357][T10763] hsr_slave_0: entered promiscuous mode [ 404.689276][T10763] hsr_slave_1: entered promiscuous mode [ 404.908017][ T5288] usb 4-1: Using ep0 maxpacket: 8 [ 404.917963][ T5288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.939366][ T5288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.058080][T10928] loop4: detected capacity change from 0 to 1024 [ 405.165522][T10928] hfsplus: request for non-existent node -709361664 in B*Tree [ 405.173228][T10928] hfsplus: request for non-existent node -709361664 in B*Tree [ 405.182271][T10928] hfsplus: b-tree write err: -5, ino 8 [ 405.681146][ T5252] Bluetooth: hci2: command tx timeout [ 405.835283][ T5288] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 405.910027][ T5288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.969526][ T5288] usb 4-1: config 0 descriptor?? [ 405.993127][ T5288] usbhid 4-1:0.0: can't add hid device: -22 [ 406.015078][ T5288] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 406.322234][ T5291] usb 4-1: USB disconnect, device number 10 [ 406.895683][ T5288] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 406.994442][T10763] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 407.031937][T10763] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 407.064635][T10763] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 407.072880][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.088951][ T5288] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 407.107135][ T5288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.107496][T10763] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 407.139222][ T5288] usb 5-1: config 0 descriptor?? [ 407.471730][T10763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.552634][T10763] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.597647][ T5288] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 407.636712][ T5288] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0003/input/input10 [ 407.757890][T10986] loop2: detected capacity change from 0 to 1024 [ 407.791386][T10986] hfsplus: request for non-existent node -709361664 in B*Tree [ 407.799128][T10986] hfsplus: request for non-existent node -709361664 in B*Tree [ 407.807976][T10986] hfsplus: b-tree write err: -5, ino 8 [ 407.996955][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.004194][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.288713][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.295956][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.367465][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 408.467099][T10763] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 408.529836][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 408.543438][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 408.564045][T10763] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 408.581959][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.621371][ T9] usb 4-1: config 0 descriptor?? [ 408.700439][ T5288] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 408.891751][ T5288] usb 5-1: USB disconnect, device number 14 [ 409.119805][T10763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.238997][T10763] veth0_vlan: entered promiscuous mode [ 409.239318][T11014] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1222'. [ 409.259847][T10763] veth1_vlan: entered promiscuous mode [ 409.271537][ T9] ath6kl: Failed to submit usb control message: -71 [ 409.291855][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 409.304847][T11018] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1222'. [ 409.316240][ T9] ath6kl: Unable to send get target info: -71 [ 409.334978][ T9] ath6kl: Failed to init ath6kl core: -71 [ 409.344348][T10763] veth0_macvtap: entered promiscuous mode [ 409.377274][ T9] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 409.406100][T10763] veth1_macvtap: entered promiscuous mode [ 409.433191][ T9] usb 4-1: USB disconnect, device number 11 [ 409.531256][T10763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.597887][T10763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.644189][T10763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.678589][T10763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.695187][T10763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.707800][T10763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.743969][T10763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.765834][T10763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.785063][T10763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.825862][T10763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.861164][T10763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.888406][T10763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.908544][T10763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.957935][T10763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.977766][T10763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.993475][T10763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.027890][T10763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.045844][T10763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.074135][T10763] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.088185][T10763] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.096994][T10763] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.127961][T10763] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.247948][ T25] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 410.283072][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.310184][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.358813][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.380664][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.422539][ T25] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 410.437862][ T25] usb 4-1: New USB device strings: Mfr=210, Product=154, SerialNumber=3 [ 410.458334][ T25] usb 4-1: Product: syz [ 410.462559][ T25] usb 4-1: Manufacturer: syz [ 410.467223][ T25] usb 4-1: SerialNumber: syz [ 410.521471][ T25] usb 4-1: config 0 descriptor?? [ 411.206768][T11076] loop0: detected capacity change from 0 to 1024 [ 411.750276][T11076] hfsplus: request for non-existent node -709361664 in B*Tree [ 411.757892][T11076] hfsplus: request for non-existent node -709361664 in B*Tree [ 411.765646][T11076] hfsplus: b-tree write err: -5, ino 8 [ 412.338383][ T25] usb 4-1: Firmware version (0.0) predates our first public release. [ 412.346606][ T25] usb 4-1: Please update to version 0.2 or newer [ 412.432154][ T1130] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.156475][ T1130] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.315326][ T25] usb 4-1: USB disconnect, device number 12 [ 413.343725][ T1130] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.536526][ T1130] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.780643][T11104] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 414.110884][ T1130] bridge_slave_1: left allmulticast mode [ 414.116768][ T1130] bridge_slave_1: left promiscuous mode [ 414.177415][ T1130] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.221938][ T1130] bridge_slave_0: left allmulticast mode [ 414.233175][ T1130] bridge_slave_0: left promiscuous mode [ 414.247977][ T1130] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.307099][ T5246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 414.319094][ T5246] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 414.330095][ T5246] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 414.345598][ T5246] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 414.353648][ T5246] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 414.386308][ T5246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 414.633338][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1242'. [ 414.689989][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1242'. [ 415.415676][ T1130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.426910][ T1130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.437811][ T1130] bond0 (unregistering): Released all slaves [ 415.475993][T11130] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1242'. [ 416.499601][ T5252] Bluetooth: hci2: command tx timeout [ 416.958671][T11172] fuse: Unknown parameter '000000000000000000000040xffffffffffffffff00000000000000000004' [ 417.026542][T11172] CIFS: VFS: Malformed UNC in devname [ 417.545357][ T1130] hsr_slave_0: left promiscuous mode [ 417.565425][ T1130] hsr_slave_1: left promiscuous mode [ 417.654409][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.680818][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.689920][T11188] input: syz1 as /devices/virtual/input/input11 [ 417.737630][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.773657][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.866538][ T1130] veth1_macvtap: left promiscuous mode [ 417.888431][ T1130] veth0_macvtap: left promiscuous mode [ 417.909660][ T1130] veth1_vlan: left promiscuous mode [ 417.925909][ T1130] veth0_vlan: left promiscuous mode [ 418.152849][ T5291] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 418.325565][ T5291] usb 5-1: config index 0 descriptor too short (expected 48285, got 77) [ 418.337884][ T5291] usb 5-1: config 66 has too many interfaces: 207, using maximum allowed: 32 [ 418.363547][ T5291] usb 5-1: config 66 has an invalid descriptor of length 170, skipping remainder of the config [ 418.374445][ T5291] usb 5-1: config 66 has 0 interfaces, different from the descriptor's value: 207 [ 418.448789][ T5291] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=ff.ff [ 418.458645][ T5291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.482378][ T5291] usb 5-1: Product: syz [ 418.486569][ T5291] usb 5-1: Manufacturer: syz [ 418.492317][ T5291] usb 5-1: SerialNumber: syz [ 418.527886][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 418.587833][ T5252] Bluetooth: hci2: command tx timeout [ 418.751540][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 418.770588][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.785889][ T9] usb 1-1: Product: syz [ 418.790257][ T9] usb 1-1: Manufacturer: syz [ 418.795224][ T9] usb 1-1: SerialNumber: syz [ 418.808266][ T9] usb 1-1: config 0 descriptor?? [ 418.815620][ T9] adutux 1-1:0.0: interrupt endpoints not found [ 418.823602][T11194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.861163][T11194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.042717][ T9] usb 1-1: USB disconnect, device number 9 [ 419.117894][ T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 419.306682][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 419.325741][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.357992][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.394108][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 419.435124][ T25] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 419.465913][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.466450][ T1130] team0 (unregistering): Port device team_slave_1 removed [ 419.494988][ T25] usb 4-1: config 0 descriptor?? [ 419.762495][ T1130] team0 (unregistering): Port device team_slave_0 removed [ 420.022314][ T25] input: HID 0955:7214 Haptics as /devices/virtual/input/input12 [ 420.176867][ T25] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 420.228301][ T25] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 420.657944][ T5252] Bluetooth: hci2: command tx timeout [ 421.445197][ T5241] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 421.457272][ T5241] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 421.471675][ T5241] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 421.490407][ T5241] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 421.569097][ T25] usb 4-1: reset high-speed USB device number 13 using dummy_hcd [ 421.712719][ T25] usb 4-1: device descriptor read/64, error -32 [ 421.825856][ T5291] usb 5-1: USB disconnect, device number 15 [ 421.955610][T11217] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 421.968742][ T25] usb 4-1: reset high-speed USB device number 13 using dummy_hcd [ 422.350999][T11221] loop4: detected capacity change from 0 to 1024 [ 422.398315][ T25] usb 4-1: device descriptor read/64, error -32 [ 422.522603][T11221] hfsplus: request for non-existent node -709361664 in B*Tree [ 422.530639][T11221] hfsplus: request for non-existent node -709361664 in B*Tree [ 422.544911][T11221] hfsplus: b-tree write err: -5, ino 8 [ 422.987880][ T5252] Bluetooth: hci2: command tx timeout [ 423.080105][ T5252] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 423.357504][T11126] chnl_net:caif_netlink_parms(): no params data found [ 423.551570][ T5291] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 423.703578][T11237] overlayfs: failed to resolve './file1': -2 [ 423.759255][T11126] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.777956][T11126] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.789430][T11126] bridge_slave_0: entered allmulticast mode [ 423.796404][T11126] bridge_slave_0: entered promiscuous mode [ 423.804326][T11126] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.811678][T11126] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.819448][T11126] bridge_slave_1: entered allmulticast mode [ 423.830258][T11126] bridge_slave_1: entered promiscuous mode [ 423.847649][ T46] usb 4-1: USB disconnect, device number 13 [ 423.858099][ T46] ------------[ cut here ]------------ [ 423.863584][ T46] WARNING: CPU: 1 PID: 46 at drivers/thermal/thermal_thresholds.c:28 thermal_thresholds_flush+0x1ff/0x230 [ 423.874935][ T46] Modules linked in: [ 423.878979][ T46] CPU: 1 UID: 0 PID: 46 Comm: kworker/1:1 Not tainted 6.12.0-rc3-next-20241016-syzkaller #0 [ 423.889073][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 423.899188][ T46] Workqueue: usb_hub_wq hub_event [ 423.904221][ T46] RIP: 0010:thermal_thresholds_flush+0x1ff/0x230 [ 423.910614][ T46] Code: 34 24 eb 05 e8 02 76 36 f9 4c 89 f7 be 0f 00 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c7 3a ff ff e8 e2 75 36 f9 90 <0f> 0b 90 e9 7f fe ff ff 48 c7 c1 3c e6 1d 90 80 e1 07 80 c1 03 38 [ 423.930320][ T46] RSP: 0018:ffffc90000b67168 EFLAGS: 00010283 [ 423.936383][ T46] RAX: ffffffff885e6c6e RBX: 0000000000000000 RCX: 0000000000100000 [ 423.944641][ T46] RDX: ffffc90014770000 RSI: 0000000000005da3 RDI: 0000000000005da4 [ 423.952725][ T46] RBP: ffffffff8f97be40 R08: ffffffff885e6ae2 R09: 1ffffffff285d30e [ 423.961176][ T46] R10: dffffc0000000000 R11: fffffbfff285d30f R12: dffffc0000000000 [ 423.969499][ T46] R13: dffffc0000000000 R14: ffff88805f60a000 R15: ffff88805f60a7c0 [ 423.977504][ T46] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 423.986656][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 423.993348][ T46] CR2: 000000110c3ee1a3 CR3: 000000006e892000 CR4: 00000000003526f0 [ 424.002280][ T46] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 424.010315][ T46] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 424.018472][ T46] Call Trace: [ 424.021799][ T46] [ 424.024765][ T46] ? __warn+0x168/0x4e0 [ 424.028991][ T46] ? thermal_thresholds_flush+0x1ff/0x230 [ 424.034714][ T46] ? report_bug+0x2b3/0x500 [ 424.039285][ T46] ? thermal_thresholds_flush+0x1ff/0x230 [ 424.045012][ T46] ? handle_bug+0x60/0x90 [ 424.049398][ T46] ? exc_invalid_op+0x1a/0x50 [ 424.054088][ T46] ? asm_exc_invalid_op+0x1a/0x20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 424.059207][ T46] ? thermal_thresholds_flush+0x72/0x230 [ 424.065277][ T46] ? thermal_thresholds_flush+0x1fe/0x230 [ 424.071372][ T46] ? thermal_thresholds_flush+0x1ff/0x230 [ 424.077141][ T46] ? thermal_thresholds_flush+0x1fe/0x230 [ 424.082993][ T46] thermal_zone_device_unregister+0x29e/0x370 [ 424.089270][ T46] power_supply_unregister+0xe8/0x140 [ 424.094680][ T46] ? __pfx_shield_remove+0x10/0x10 [ 424.099963][ T46] shield_remove+0x72/0x120 [ 424.104497][ T46] hid_device_remove+0x225/0x370 [ 424.109550][ T46] ? __pfx_hid_device_remove+0x10/0x10 [ 424.115036][ T46] device_release_driver_internal+0x4a9/0x7c0 [ 424.121222][ T46] bus_remove_device+0x34f/0x420 [ 424.126205][ T46] device_del+0x57a/0x9b0 [ 424.130627][ T46] ? __pfx_device_del+0x10/0x10 [ 424.135519][ T46] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 424.141955][ T46] hid_destroy_device+0x6a/0x1b0 [ 424.146926][ T46] usbhid_disconnect+0x9e/0xc0 [ 424.151785][ T46] usb_unbind_interface+0x25e/0x940 [ 424.157035][ T46] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 424.162855][ T46] ? __pfx_usb_unbind_interface+0x10/0x10 [ 424.169044][ T46] device_release_driver_internal+0x503/0x7c0 [ 424.175165][ T46] bus_remove_device+0x34f/0x420 [ 424.180526][ T46] device_del+0x57a/0x9b0 [ 424.184912][ T46] ? kobject_put+0x272/0x480 [ 424.190039][ T46] ? __pfx_device_del+0x10/0x10 [ 424.194935][ T46] ? kobject_put+0x44d/0x480 [ 424.199584][ T46] usb_disable_device+0x3bf/0x850 [ 424.204608][ T46] usb_disconnect+0x340/0x950 [ 424.209333][ T46] hub_event+0x1ebc/0x5150 [ 424.213760][ T46] ? debug_object_deactivate+0x2d5/0x390 [ 424.219468][ T46] ? __pfx_hub_event+0x10/0x10 [ 424.224226][ T46] ? __pfx_lock_acquire+0x10/0x10 [ 424.229290][ T46] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 424.235265][ T46] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 424.241722][ T46] ? process_scheduled_works+0x976/0x1850 [ 424.247504][ T46] process_scheduled_works+0xa63/0x1850 [ 424.253191][ T46] ? __pfx_process_scheduled_works+0x10/0x10 [ 424.259342][ T46] ? assign_work+0x364/0x3d0 [ 424.263980][ T46] worker_thread+0x870/0xd30 [ 424.269077][ T46] ? __kthread_parkme+0x169/0x1d0 [ 424.274164][ T46] ? __pfx_worker_thread+0x10/0x10 [ 424.279708][ T46] kthread+0x2f0/0x390 [ 424.283828][ T46] ? __pfx_worker_thread+0x10/0x10 [ 424.289033][ T46] ? __pfx_kthread+0x10/0x10 [ 424.293658][ T46] ret_from_fork+0x4b/0x80 [ 424.298187][ T46] ? __pfx_kthread+0x10/0x10 [ 424.302823][ T46] ret_from_fork_asm+0x1a/0x30 [ 424.307647][ T46] [ 424.310827][ T46] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 424.318128][ T46] CPU: 1 UID: 0 PID: 46 Comm: kworker/1:1 Not tainted 6.12.0-rc3-next-20241016-syzkaller #0 [ 424.328219][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 424.338300][ T46] Workqueue: usb_hub_wq hub_event [ 424.343376][ T46] Call Trace: [ 424.346676][ T46] [ 424.349641][ T46] dump_stack_lvl+0x241/0x360 [ 424.354350][ T46] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.359573][ T46] ? __pfx__printk+0x10/0x10 [ 424.364208][ T46] ? vscnprintf+0x5d/0x90 [ 424.368576][ T46] panic+0x349/0x880 [ 424.372505][ T46] ? __warn+0x177/0x4e0 [ 424.376692][ T46] ? __pfx_panic+0x10/0x10 [ 424.381167][ T46] ? ret_from_fork_asm+0x1a/0x30 [ 424.386141][ T46] __warn+0x34b/0x4e0 [ 424.390148][ T46] ? thermal_thresholds_flush+0x1ff/0x230 [ 424.395899][ T46] report_bug+0x2b3/0x500 [ 424.400266][ T46] ? thermal_thresholds_flush+0x1ff/0x230 [ 424.406026][ T46] handle_bug+0x60/0x90 [ 424.410209][ T46] exc_invalid_op+0x1a/0x50 [ 424.414735][ T46] asm_exc_invalid_op+0x1a/0x20 [ 424.419600][ T46] RIP: 0010:thermal_thresholds_flush+0x1ff/0x230 [ 424.425931][ T46] Code: 34 24 eb 05 e8 02 76 36 f9 4c 89 f7 be 0f 00 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c7 3a ff ff e8 e2 75 36 f9 90 <0f> 0b 90 e9 7f fe ff ff 48 c7 c1 3c e6 1d 90 80 e1 07 80 c1 03 38 [ 424.445554][ T46] RSP: 0018:ffffc90000b67168 EFLAGS: 00010283 [ 424.451644][ T46] RAX: ffffffff885e6c6e RBX: 0000000000000000 RCX: 0000000000100000 [ 424.459672][ T46] RDX: ffffc90014770000 RSI: 0000000000005da3 RDI: 0000000000005da4 [ 424.467664][ T46] RBP: ffffffff8f97be40 R08: ffffffff885e6ae2 R09: 1ffffffff285d30e [ 424.475658][ T46] R10: dffffc0000000000 R11: fffffbfff285d30f R12: dffffc0000000000 [ 424.483657][ T46] R13: dffffc0000000000 R14: ffff88805f60a000 R15: ffff88805f60a7c0 [ 424.491647][ T46] ? thermal_thresholds_flush+0x72/0x230 [ 424.497319][ T46] ? thermal_thresholds_flush+0x1fe/0x230 [ 424.503061][ T46] ? thermal_thresholds_flush+0x1fe/0x230 [ 424.508789][ T46] thermal_zone_device_unregister+0x29e/0x370 [ 424.514879][ T46] power_supply_unregister+0xe8/0x140 [ 424.520254][ T46] ? __pfx_shield_remove+0x10/0x10 [ 424.525362][ T46] shield_remove+0x72/0x120 [ 424.529881][ T46] hid_device_remove+0x225/0x370 [ 424.534849][ T46] ? __pfx_hid_device_remove+0x10/0x10 [ 424.540316][ T46] device_release_driver_internal+0x4a9/0x7c0 [ 424.546403][ T46] bus_remove_device+0x34f/0x420 [ 424.551347][ T46] device_del+0x57a/0x9b0 [ 424.555679][ T46] ? __pfx_device_del+0x10/0x10 [ 424.560525][ T46] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 424.566865][ T46] hid_destroy_device+0x6a/0x1b0 [ 424.571809][ T46] usbhid_disconnect+0x9e/0xc0 [ 424.576577][ T46] usb_unbind_interface+0x25e/0x940 [ 424.581788][ T46] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 424.587513][ T46] ? __pfx_usb_unbind_interface+0x10/0x10 [ 424.593230][ T46] device_release_driver_internal+0x503/0x7c0 [ 424.599313][ T46] bus_remove_device+0x34f/0x420 [ 424.604286][ T46] device_del+0x57a/0x9b0 [ 424.608615][ T46] ? kobject_put+0x272/0x480 [ 424.613197][ T46] ? __pfx_device_del+0x10/0x10 [ 424.618045][ T46] ? kobject_put+0x44d/0x480 [ 424.622665][ T46] usb_disable_device+0x3bf/0x850 [ 424.627692][ T46] usb_disconnect+0x340/0x950 [ 424.632383][ T46] hub_event+0x1ebc/0x5150 [ 424.636810][ T46] ? debug_object_deactivate+0x2d5/0x390 [ 424.642469][ T46] ? __pfx_hub_event+0x10/0x10 [ 424.647237][ T46] ? __pfx_lock_acquire+0x10/0x10 [ 424.652259][ T46] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 424.658256][ T46] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 424.664615][ T46] ? process_scheduled_works+0x976/0x1850 [ 424.670423][ T46] process_scheduled_works+0xa63/0x1850 [ 424.676008][ T46] ? __pfx_process_scheduled_works+0x10/0x10 [ 424.682182][ T46] ? assign_work+0x364/0x3d0 [ 424.686809][ T46] worker_thread+0x870/0xd30 [ 424.691437][ T46] ? __kthread_parkme+0x169/0x1d0 [ 424.696486][ T46] ? __pfx_worker_thread+0x10/0x10 [ 424.701617][ T46] kthread+0x2f0/0x390 [ 424.705691][ T46] ? __pfx_worker_thread+0x10/0x10 [ 424.710802][ T46] ? __pfx_kthread+0x10/0x10 [ 424.715390][ T46] ret_from_fork+0x4b/0x80 [ 424.719805][ T46] ? __pfx_kthread+0x10/0x10 [ 424.724399][ T46] ret_from_fork_asm+0x1a/0x30 [ 424.729177][ T46] [ 424.732342][ T46] Kernel Offset: disabled [ 424.736723][ T46] Rebooting in 86400 seconds..