last executing test programs: 7m21.05881284s ago: executing program 4 (id=67): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r0, 0x5605) syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0xfffffc7a) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) statx(0xffffffffffffffff, &(0x7f00000045c0)='./file0\x00', 0x6000, 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ldst={0x3, 0x3, 0x3, 0x0, 0xa, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x4}, 0x94) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a09040000000006000000020000000900010073797a3000e2ff000900020073797a32000000003c000480380001800b00010064796e736574000028000280080004400000000008000340000000000900010073797a31000000000800"], 0x90}}, 0x0) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x165) 7m17.795276811s ago: executing program 4 (id=71): syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000), 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1a, 0x9, 0xe08, 0xbe, 0x4000, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000280)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x18) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r4, &(0x7f0000000100)="85d8083ee347a168eb45e4efee954cead2ddf7b20873943328007adad3470f21675bbd2ac96468d2e3bd0bdd703a13c27f7032fb709fa9372acca1bcab6611e0fc2e36c0863146d7c92a9cbaf33b90498256450a9dc96e17263f3ae380655857c3fc309154b762efad79e87e342204b59c8c444f2fa8d5a0219742f21ebc6e1ea9f94243f3bcf49c34f83a1259e07c42bcc9ebfd45038a39688647e66186cc6c4d03c8a4d2d9a205839ae9c5178de3222c08ec96847868792a36ada58e38724c62775196fb8c5c2a4b44e93b48601f29cad748db952aefc7", &(0x7f00000002c0)=""/161}, 0x20) 7m16.082944527s ago: executing program 4 (id=77): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) 7m14.669518669s ago: executing program 4 (id=81): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r0, 0x5605) syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0xfffffc7a) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) statx(0xffffffffffffffff, &(0x7f00000045c0)='./file0\x00', 0x6000, 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ldst={0x3, 0x3, 0x3, 0x0, 0xa, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x4}, 0x94) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a09040000000006000000020000000900010073797a3000e2ff000900020073797a32000000003c000480380001800b00010064796e736574000028000280080004400000000008000340000000000900010073797a31000000000800"], 0x90}}, 0x0) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x165) 7m12.236296706s ago: executing program 4 (id=85): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) 7m11.649180135s ago: executing program 4 (id=87): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000b00)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 6m55.481356092s ago: executing program 32 (id=87): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000b00)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 24.673635711s ago: executing program 5 (id=1180): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) read$FUSE(r2, &(0x7f0000001340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r2, &(0x7f0000003740)={0xb8, 0x0, r3, [{{0x7, 0x2, 0x2, 0x7, 0x3, 0x9, {0x2, 0xfffffffffffff430, 0x5, 0x7, 0x1, 0x66c, 0x4, 0x10000, 0x5, 0x4000, 0x8, 0x0, r4, 0xfffffffb, 0x4}}, {0x6, 0x1, 0xc, 0x9, '/dev/video#\x00'}}]}, 0xb8) 21.341611712s ago: executing program 5 (id=1194): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0x8, 0x2) ppoll(&(0x7f00000002c0)=[{r1, 0x4}], 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21.235770404s ago: executing program 5 (id=1196): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x5fcf, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000080)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x2}, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 19.432597401s ago: executing program 5 (id=1205): socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @local, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "4bab6b", 0x48, 0x0, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, {[@routing={0x0, 0x8, 0x1, 0x3, 0x0, [@local, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2={0xfc, 0x2, '\x00', 0x1}]}]}}}}}, 0x0) 18.714799953s ago: executing program 5 (id=1206): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fchmodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xfffffe99) 18.379867058s ago: executing program 5 (id=1207): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000200)=@attr_other={0x0, 0x5477, 0x1, 0x0}) 4.341605283s ago: executing program 0 (id=1270): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r4, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r5 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0}, 0x0) 3.347994698s ago: executing program 33 (id=1207): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000200)=@attr_other={0x0, 0x5477, 0x1, 0x0}) 3.020887293s ago: executing program 3 (id=1281): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x28) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x1000000d}) openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x1f) 1.985121309s ago: executing program 3 (id=1286): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r1, 0x80) 1.666287414s ago: executing program 3 (id=1288): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) close_range(r0, 0xffffffffffffffff, 0x0) 1.481943637s ago: executing program 1 (id=1290): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x1, 0x0) dup2(r4, r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.407910108s ago: executing program 1 (id=1291): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000240)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x24000850}, 0x40040) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000100), 0x4) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008040) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="00940a37", 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x8, 0x7fffffffffffffff, 0x3, 0x3c7125e8, 0xffffffffffffffff, 0x10, 0x8}, &(0x7f0000000340)={0xe970, 0x9, 0x7fffffffffffffff, 0x8000, 0x8, 0x5, 0x40bd9b76, 0x10001}, &(0x7f00000003c0)={0x5, 0x0, 0x6b, 0x7fffffffffffffff, 0x2, 0xc, 0x2, 0x4000000000}, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x7fff]}, 0x8}) sendto$unix(0xffffffffffffffff, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643", 0xd4, 0x800, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r3, 0x0) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x2, 0x0) read(r4, &(0x7f0000000040)=""/148, 0xffffff96) recvfrom(0xffffffffffffffff, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.407222658s ago: executing program 3 (id=1292): syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1a, 0x9, 0xe08, 0xbe, 0x4000, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000280)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00'}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r2, &(0x7f0000000100)="85d8083ee347a168eb45e4efee954cead2ddf7b20873943328007adad3470f21675bbd2ac96468d2e3bd0bdd703a13c27f7032fb709fa9372acca1bcab6611e0fc2e36c0863146d7c92a9cbaf33b90498256450a9dc96e17263f3ae380655857c3fc309154b762efad79e87e342204b59c8c444f2fa8d5a0219742f21ebc6e1ea9f94243f3bcf49c34f83a1259e07c42bcc9ebfd45038a39688647e66186cc6c4d03c8a4d2d9a205839ae9c5178de3222c08ec96847868792a36ada58e38724c62775196fb8c5c2a4b44e93b48601f29cad748db952aefc7", &(0x7f00000002c0)=""/161}, 0x20) 1.323619159s ago: executing program 2 (id=1293): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000009f000040"]) 1.27137197s ago: executing program 2 (id=1294): mkdir(&(0x7f0000000180)='./file0\x00', 0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) linkat(r0, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.2515857s ago: executing program 0 (id=1295): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 1.203489091s ago: executing program 1 (id=1296): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() r3 = io_uring_setup(0x30a7, &(0x7f0000000000)={0x0, 0x9dd9, 0x2000, 0x2, 0x373}) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f0000000280)={&(0x7f0000000240)={&(0x7f0000000080)="8d981ea1d21e9c323ca7d532cdec0937b316013f0f25553ba24b280ed978b136d7c5e1f61ecbc67ba0bbd43817d8692de4a30854a3bbdd34b11ba9ec35055e155a51332b733d192394", 0x49, 0x1, 0xe28, 0xfffffffffffffff2}}, 0x1) r4 = syz_pidfd_open(r2, 0x0) open_by_handle_at(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe"], 0x1) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001380)={'macvtap0\x00', 0x1}) symlink(0x0, &(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') setxattr$trusted_overlay_redirect(0x0, &(0x7f0000001300), &(0x7f0000001340)='./file1\x00', 0x8, 0x0) 1.100973993s ago: executing program 2 (id=1297): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@x86={0x36, 0x9, 0xf4, 0x0, 0x3, 0x3, 0x0, 0xf8, 0x8, 0x7, 0x9, 0x2, 0x0, 0x9, 0x32, 0xc, 0x3, 0xe8, 0xc, '\x00', 0xb9, 0x6}) 1.082232283s ago: executing program 0 (id=1298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x2, 0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x2, r2, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x2, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 907.848946ms ago: executing program 0 (id=1299): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) umount2(&(0x7f0000000400)='./file0\x00', 0x2) 831.700417ms ago: executing program 2 (id=1300): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x10, &(0x7f0000000400)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 761.433218ms ago: executing program 0 (id=1301): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x28}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xfffffffe}, 0xc3) 761.307138ms ago: executing program 2 (id=1302): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1caf9cb51b14b437, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x6e0, 0x0, 0x6}]}) 587.68616ms ago: executing program 2 (id=1303): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 531.856331ms ago: executing program 0 (id=1304): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r4, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r5 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0}, 0x0) 503.297432ms ago: executing program 3 (id=1305): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 285.323825ms ago: executing program 1 (id=1306): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2000091, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 135.808668ms ago: executing program 1 (id=1307): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r1, 0x105, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x100}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 17.245309ms ago: executing program 3 (id=1308): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x80, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x9, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 0s ago: executing program 1 (id=1309): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x48400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) getresgid(0x0, &(0x7f0000000180), &(0x7f00000016c0)) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) kernel console output (not intermixed with test programs): 0: Port device team_slave_0 added [ 69.102702][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.110023][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.118434][ T4183] device bridge_slave_0 entered promiscuous mode [ 69.126015][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.133337][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.141335][ T4182] device bridge_slave_0 entered promiscuous mode [ 69.150783][ T4184] team0: Port device team_slave_1 added [ 69.179763][ T4191] team0: Port device team_slave_0 added [ 69.186113][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.193634][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.201579][ T4183] device bridge_slave_1 entered promiscuous mode [ 69.208720][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.216007][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.224330][ T4182] device bridge_slave_1 entered promiscuous mode [ 69.242208][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.249273][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.275228][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.288770][ T4191] team0: Port device team_slave_1 added [ 69.315476][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.322464][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.349076][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.403556][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.414435][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.426272][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.451182][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.458460][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.484625][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.505634][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.524414][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.531596][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.540312][ T4190] device bridge_slave_0 entered promiscuous mode [ 69.552589][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.559637][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.586187][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.622238][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.629558][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.638419][ T4190] device bridge_slave_1 entered promiscuous mode [ 69.650372][ T4182] team0: Port device team_slave_0 added [ 69.667276][ T4183] team0: Port device team_slave_0 added [ 69.675648][ T4183] team0: Port device team_slave_1 added [ 69.697499][ T4182] team0: Port device team_slave_1 added [ 69.706925][ T4184] device hsr_slave_0 entered promiscuous mode [ 69.713998][ T4184] device hsr_slave_1 entered promiscuous mode [ 69.773605][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.780596][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.806899][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.820862][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.832614][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.850133][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.857639][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.883874][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.898736][ T4191] device hsr_slave_0 entered promiscuous mode [ 69.905529][ T4191] device hsr_slave_1 entered promiscuous mode [ 69.912172][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.920130][ T4191] Cannot create hsr debugfs directory [ 69.926120][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.933858][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.959941][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.986687][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.993729][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.019747][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.040288][ T4190] team0: Port device team_slave_0 added [ 70.051127][ T4190] team0: Port device team_slave_1 added [ 70.106545][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.113705][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.139774][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.160039][ T4182] device hsr_slave_0 entered promiscuous mode [ 70.167272][ T4182] device hsr_slave_1 entered promiscuous mode [ 70.174074][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.181656][ T4182] Cannot create hsr debugfs directory [ 70.198709][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.206994][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.207055][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 70.234076][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 70.240416][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.245930][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 70.262579][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 70.298761][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 70.298896][ T4183] device hsr_slave_0 entered promiscuous mode [ 70.311675][ T4183] device hsr_slave_1 entered promiscuous mode [ 70.318506][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.326133][ T4183] Cannot create hsr debugfs directory [ 70.444429][ T4190] device hsr_slave_0 entered promiscuous mode [ 70.451312][ T4190] device hsr_slave_1 entered promiscuous mode [ 70.458362][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.466001][ T4190] Cannot create hsr debugfs directory [ 70.691241][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.708883][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.719719][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.739940][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.778757][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.788658][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.807679][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.820925][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.885087][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.895094][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.927771][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.951640][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.009814][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.037521][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.051188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.061545][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.084840][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.092125][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.101822][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.130004][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.150163][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.162753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.173310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.181340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.190710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.200063][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.207373][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.219523][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.256639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.266056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.275007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.284213][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.291454][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.299877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.336146][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.353493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.362244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.373284][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.380381][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.389392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.398792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.412357][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.419929][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.424419][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.427317][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.442588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.451785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.461203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.471114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.480168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.489353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.497960][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.529368][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.539889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.549738][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.561946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.570973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.581137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.589420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.598217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.606960][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.618506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.626950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.636590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.646310][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.658546][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.677882][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.689832][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.702971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.712198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.721827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.732083][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.740962][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.748110][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.755958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.765179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.774170][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.782035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.790603][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.805797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.820031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.838263][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.851440][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.862160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.884650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.893560][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.900653][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.967293][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.976993][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.989692][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.014925][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.038200][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.057002][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.066574][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.077055][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.090810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.100301][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.122386][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.136500][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.150870][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.167811][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.179172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.207512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.227171][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.238566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.251711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.267643][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.281771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.290871][ T4235] Bluetooth: hci1: command 0x041b tx timeout [ 72.313275][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 72.320543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.335495][ T4235] Bluetooth: hci3: command 0x041b tx timeout [ 72.342164][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.349329][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.357618][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 72.364309][ T4264] Bluetooth: hci0: command 0x041b tx timeout [ 72.372581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.383497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.392132][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.399444][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.440126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.449754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.464811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.484181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.501489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.510647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.524774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.532584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.553272][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.562155][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.583408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.590947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.626856][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.638831][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.652186][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.665202][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.675082][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.685914][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.695061][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.710792][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.734416][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.759021][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.792888][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.809342][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.818807][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.828806][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.898301][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.907830][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.916854][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.930523][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.939683][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.948478][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.957271][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.966842][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.974872][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.982635][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.993910][ T4191] device veth0_vlan entered promiscuous mode [ 73.004985][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.017998][ T4184] device veth0_vlan entered promiscuous mode [ 73.035898][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.044208][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.051999][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.060972][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.069963][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.079452][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.088568][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.095732][ T4284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.104931][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.112887][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.121870][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.131190][ T4183] device veth0_vlan entered promiscuous mode [ 73.141347][ T4191] device veth1_vlan entered promiscuous mode [ 73.157977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.167597][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.176086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.185260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.194431][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.201502][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.220078][ T4184] device veth1_vlan entered promiscuous mode [ 73.235890][ T4183] device veth1_vlan entered promiscuous mode [ 73.252952][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.261986][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.270973][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.279735][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.287586][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.301342][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.326958][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.336654][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.347259][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.376835][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.386872][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.397737][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.407785][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.416854][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.425795][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.434878][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.450355][ T4191] device veth0_macvtap entered promiscuous mode [ 73.460840][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.470442][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.479707][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.491873][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.500925][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.520091][ T4184] device veth0_macvtap entered promiscuous mode [ 73.527879][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.538147][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.546941][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.556105][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.567924][ T4191] device veth1_macvtap entered promiscuous mode [ 73.595725][ T4184] device veth1_macvtap entered promiscuous mode [ 73.606888][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.615421][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.623780][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.631798][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.640698][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.655845][ T4183] device veth0_macvtap entered promiscuous mode [ 73.668610][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.682017][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.695035][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.704041][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.721982][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.735299][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.746302][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.758903][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.768188][ T4183] device veth1_macvtap entered promiscuous mode [ 73.776352][ T4190] device veth0_vlan entered promiscuous mode [ 73.783295][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.791207][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.799445][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.809681][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.818767][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.827884][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.840021][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.848012][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.857233][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.869787][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.881346][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.896060][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.911636][ T4190] device veth1_vlan entered promiscuous mode [ 73.925780][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.940133][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.949081][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.968525][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.981936][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.997824][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.007854][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.023345][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.035661][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.046682][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.056806][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.066228][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.075479][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.089386][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.105573][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.122317][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.134056][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.144201][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.155002][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.166913][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.177930][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.187123][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.196217][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.205621][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.220919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.229766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.241992][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.252665][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.261756][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.270579][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.325594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.333668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.352082][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.383758][ T4227] Bluetooth: hci3: command 0x040f tx timeout [ 74.394261][ T4227] Bluetooth: hci2: command 0x040f tx timeout [ 74.400414][ T4227] Bluetooth: hci1: command 0x040f tx timeout [ 74.432780][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.446235][ T4227] Bluetooth: hci0: command 0x040f tx timeout [ 74.451337][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.454430][ T4227] Bluetooth: hci4: command 0x040f tx timeout [ 74.506070][ T4190] device veth0_macvtap entered promiscuous mode [ 74.524673][ T499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.527244][ T4190] device veth1_macvtap entered promiscuous mode [ 74.532839][ T499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.557452][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.566422][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.575761][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.609048][ T499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.630037][ T499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.641207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.650815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.660203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.680170][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.700679][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.710939][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.721716][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.731907][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.742415][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.754019][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.780141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.789732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.810833][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.822450][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.832707][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.844750][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.855164][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.866361][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.878024][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.892459][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.901588][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.912645][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.921691][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.932598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.941499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.950280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.959201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.968846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.977322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.987708][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.989288][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.006766][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.011807][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.022531][ T4182] device veth0_vlan entered promiscuous mode [ 75.041332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.049840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.081599][ T4182] device veth1_vlan entered promiscuous mode [ 75.109550][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.136649][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.168079][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.189239][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.215364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.229225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.237468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.248086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.262088][ T4182] device veth0_macvtap entered promiscuous mode [ 75.284531][ T4182] device veth1_macvtap entered promiscuous mode [ 75.315165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.346512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.356089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.370745][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.394789][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.404400][ T4300] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.415812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.439475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.479475][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.543243][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.571062][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.599701][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.683344][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.715577][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.726007][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.736854][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.748616][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.770677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.788210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.885347][ T4311] ax25_connect(): syz.2.3 uses autobind, please contact jreuter@yaina.de [ 76.608549][ T4264] Bluetooth: hci1: command 0x0419 tx timeout [ 76.617343][ T4264] Bluetooth: hci2: command 0x0419 tx timeout [ 76.623905][ T4264] Bluetooth: hci3: command 0x0419 tx timeout [ 76.629994][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 76.636492][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 76.666682][ T4315] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7'. [ 76.702937][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.719411][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.739046][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.753519][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.767320][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.785931][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.796943][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.807800][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.831986][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.865782][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.083446][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 77.092599][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 77.101758][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 77.110886][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 77.120126][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.129388][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.138565][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.147741][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.156966][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.166166][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.708510][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.727256][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.737662][ T4323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.755334][ T4323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.773579][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.807325][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.835425][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.873531][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.042921][ T499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.054555][ T499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.119435][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.304995][ T4338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.338877][ T4338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.487399][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.626179][ T4344] fuse: Invalid rootmode [ 79.679816][ T4344] process 'syz.4.14' launched './file0' with NULL argv: empty string added [ 82.123747][ T4375] netlink: 48 bytes leftover after parsing attributes in process `syz.2.20'. [ 83.005863][ T4379] overlayfs: conflicting options: userxattr,redirect_dir=on [ 85.480784][ T4385] sched: RT throttling activated [ 85.705130][ T4387] loop0: detected capacity change from 0 to 64 [ 86.195266][ T4387] ======================================================= [ 86.195266][ T4387] WARNING: The mand mount option has been deprecated and [ 86.195266][ T4387] and is ignored by this kernel. Remove the mand [ 86.195266][ T4387] option from the mount to silence this warning. [ 86.195266][ T4387] ======================================================= [ 86.412222][ T4387] hfs: unable to parse mount options [ 87.241664][ T2062] cfg80211: failed to load regulatory.db [ 87.270680][ T26] audit: type=1326 audit(1752902114.412:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.1.25" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f385c3389a9 code=0x0 [ 89.866305][ T4419] device vti0 entered promiscuous mode [ 94.655042][ T4462] ubi31: attaching mtd0 [ 94.697845][ T4462] ubi31: scanning is finished [ 95.011445][ T4462] ubi31: empty MTD device detected [ 95.170603][ T26] audit: type=1326 audit(1752902122.312:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.0.44" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3e08919a9 code=0x0 [ 96.280916][ T4462] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 96.311871][ T4471] loop2: detected capacity change from 0 to 7 [ 96.341067][ T4471] Dev loop2: unable to read RDB block 7 [ 96.353257][ T4462] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 96.360605][ T4462] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 96.378896][ T4471] loop2: AHDI p2 p3 [ 96.383593][ T4471] loop2: partition table partially beyond EOD, truncated [ 96.418420][ T4471] loop2: p3 start 335544320 is beyond EOD, truncated [ 96.576637][ T4462] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 96.608895][ T4462] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 96.672259][ T4462] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 98.225653][ T4462] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1907860990 [ 98.279786][ T4462] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 98.338850][ T4473] ubi31: background thread "ubi_bgt31d" started, PID 4473 [ 99.363811][ T4493] ax25_connect(): syz.1.52 uses autobind, please contact jreuter@yaina.de [ 100.488757][ T4494] loop4: detected capacity change from 0 to 4096 [ 102.731392][ T4503] overlayfs: failed to resolve './file1': -2 [ 102.768537][ T4490] syz.3.53 (4490): drop_caches: 2 [ 104.160651][ T2302] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 104.352607][ T26] audit: type=1326 audit(1752902131.492:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.62" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3e08919a9 code=0x0 [ 105.093525][ T2302] usb 2-1: device descriptor read/all, error -71 [ 105.187981][ T4526] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 105.203796][ T4540] ax25_connect(): syz.4.66 uses autobind, please contact jreuter@yaina.de [ 105.417107][ T4526] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 108.824251][ T4557] syz.1.70 uses obsolete (PF_INET,SOCK_PACKET) [ 110.506728][ T4565] syz.0.72 (4565): drop_caches: 2 [ 111.881795][ T4580] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 113.460625][ T26] audit: type=1326 audit(1752902140.602:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4602 comm="syz.2.83" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28acf4d9a9 code=0x0 [ 117.822520][ T4637] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 117.835356][ T4637] ubi: mtd0 is already attached to ubi31 [ 118.503800][ T4638] ax25_connect(): syz.2.91 uses autobind, please contact jreuter@yaina.de [ 121.093171][ T4250] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 121.393181][ T4250] usb 2-1: Using ep0 maxpacket: 32 [ 123.139490][ T4664] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 123.494035][ T4250] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 123.502621][ T4250] usb 2-1: config 0 has no interface number 0 [ 123.509785][ T4250] usb 2-1: config 0 interface 184 has no altsetting 0 [ 124.807534][ T4250] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 124.818071][ T4250] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.827749][ T4250] usb 2-1: Product: syz [ 124.838825][ T4250] usb 2-1: config 0 descriptor?? [ 124.864853][ T4250] usb 2-1: can't set config #0, error -71 [ 124.924053][ T4250] usb 2-1: USB disconnect, device number 4 [ 128.374313][ T4699] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 129.567160][ T4710] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 130.582838][ T4722] ax25_connect(): syz.0.115 uses autobind, please contact jreuter@yaina.de [ 132.044440][ T4736] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 132.053523][ T4736] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 132.895126][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.901446][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.169404][ T4751] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 135.808752][ T1108] Bluetooth: hci5: command 0x0409 tx timeout [ 135.935658][ T4742] chnl_net:caif_netlink_parms(): no params data found [ 137.112759][ T4742] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.133241][ T4742] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.162031][ T4742] device bridge_slave_0 entered promiscuous mode [ 137.189038][ T4742] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.215662][ T4742] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.242491][ T4742] device bridge_slave_1 entered promiscuous mode [ 137.429375][ T4742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.003649][ T4778] ax25_connect(): syz.2.130 uses autobind, please contact jreuter@yaina.de [ 138.034960][ T4250] Bluetooth: hci5: command 0x041b tx timeout [ 138.293540][ T4742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.486119][ T4742] team0: Port device team_slave_0 added [ 138.509746][ T4742] team0: Port device team_slave_1 added [ 138.552995][ T4742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.650793][ T2302] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 139.249394][ T4742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.725116][ T4742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.769205][ T4742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.776504][ T4742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.953661][ T4742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.985042][ T4791] fuse: Unknown parameter 'user_id00000000000000000000' [ 140.123326][ T4250] Bluetooth: hci5: command 0x040f tx timeout [ 140.979646][ T4800] syz.1.135 (4800): drop_caches: 2 [ 140.994769][ T4800] syz.1.135 (4800): drop_caches: 2 [ 141.412590][ T4803] overlayfs: missing 'lowerdir' [ 141.449743][ T4742] device hsr_slave_0 entered promiscuous mode [ 142.063839][ T4742] device hsr_slave_1 entered promiscuous mode [ 142.094869][ T4742] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.102521][ T4742] Cannot create hsr debugfs directory [ 142.203189][ T1108] Bluetooth: hci5: command 0x0419 tx timeout [ 142.531093][ T4250] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 142.651758][ T4184] syz-executor (4184) used greatest stack depth: 20872 bytes left [ 142.961002][ T4250] usb 1-1: Using ep0 maxpacket: 16 [ 143.193352][ T4250] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.229423][ T4250] usb 1-1: config 0 has no interfaces? [ 143.278242][ T4359] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.423311][ T4250] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 143.467003][ T4250] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.493899][ T4250] usb 1-1: Product: syz [ 143.509956][ T4250] usb 1-1: Manufacturer: syz [ 143.513851][ T4359] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.525275][ T4250] usb 1-1: SerialNumber: syz [ 143.601980][ T4250] usb 1-1: config 0 descriptor?? [ 143.684073][ T4817] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 143.713144][ T4817] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 143.725900][ T4359] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.858790][ T4359] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.930464][ T4227] usb 1-1: USB disconnect, device number 3 [ 144.963658][ T4829] fuse: Unknown parameter 'user_id00000000000000000000' [ 145.073580][ T4742] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 148.195701][ T4742] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 148.374672][ T4742] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 150.323291][ T21] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 150.744472][ T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 150.867604][ T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 151.224590][ T21] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.274795][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 151.339676][ T21] usb 4-1: SerialNumber: syz [ 151.583298][ T21] usb 4-1: can't set config #1, error -71 [ 151.594203][ T4742] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 151.613652][ T21] usb 4-1: USB disconnect, device number 2 [ 151.959349][ T4886] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 152.083579][ T4886] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 152.286944][ T4878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.593154][ T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 153.161442][ T4742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.373754][ T4908] syz.1.159 (4908): drop_caches: 2 [ 153.383262][ T13] usb 1-1: unable to get BOS descriptor or descriptor too short [ 153.409649][ T4908] syz.1.159 (4908): drop_caches: 2 [ 154.383349][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.648777][ T13] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.670136][ T13] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 33279, setting to 1024 [ 154.717429][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.732929][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.751008][ T13] usb 1-1: config 1 interface 1 has no altsetting 0 [ 154.794465][ T4742] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.874981][ T4918] device vti0 entered promiscuous mode [ 154.943879][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.952737][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.990489][ T4916] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 155.003489][ T13] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.003823][ T499] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.019836][ T499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.034511][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.038858][ T4916] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 155.075647][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.111878][ T13] usb 1-1: Product: syz [ 155.123373][ T13] usb 1-1: Manufacturer: syz [ 155.143353][ T13] usb 1-1: SerialNumber: syz [ 155.158713][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.184416][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.206826][ T499] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.213986][ T499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.241633][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.258098][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.303744][ T13] usb 1-1: can't set config #1, error -71 [ 155.341562][ T13] usb 1-1: USB disconnect, device number 4 [ 155.364490][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.387197][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.533971][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.574063][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.606902][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.679448][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.763595][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.819707][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.857547][ T4931] loop0: detected capacity change from 0 to 4096 [ 155.880942][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.723824][ T4359] device hsr_slave_0 left promiscuous mode [ 158.033195][ T4359] device hsr_slave_1 left promiscuous mode [ 158.045148][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.053637][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.068073][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.075931][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.349431][ T4359] device bridge_slave_1 left promiscuous mode [ 158.409237][ T4359] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.755868][ T4359] device bridge_slave_0 left promiscuous mode [ 158.803247][ T4359] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.848349][ T4959] overlayfs: unrecognized mount option "verity=on" or missing value [ 159.216822][ T4359] device veth1_macvtap left promiscuous mode [ 159.230597][ T4359] device veth0_macvtap left promiscuous mode [ 159.238289][ T4359] device veth1_vlan left promiscuous mode [ 159.255952][ T4359] device veth0_vlan left promiscuous mode [ 160.037396][ T4991] ubi: mtd0 is already attached to ubi31 [ 161.041131][ T4996] loop0: detected capacity change from 0 to 4096 [ 162.100903][ T5007] loop1: detected capacity change from 0 to 64 [ 162.215383][ T5007] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop1 [ 162.312552][ T5010] loop1: detected capacity change from 0 to 1024 [ 162.357416][ T5010] hfsplus: unable to parse mount options [ 162.382324][ T4359] team0 (unregistering): Port device team_slave_1 removed [ 162.448328][ T4359] team0 (unregistering): Port device team_slave_0 removed [ 162.498157][ T4359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.554924][ T4359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.881412][ T4359] bond0 (unregistering): Released all slaves [ 163.098383][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.120754][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.270443][ T4742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.832830][ T5041] overlayfs: unrecognized mount option "verity=on" or missing value [ 167.767096][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.785954][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.956914][ T4742] device veth0_vlan entered promiscuous mode [ 168.752177][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.781258][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.083328][ T5070] delete_channel: no stack [ 169.123212][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.183529][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.347863][ T4742] device veth1_vlan entered promiscuous mode [ 170.102720][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.124558][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.235598][ T4742] device veth0_macvtap entered promiscuous mode [ 170.322105][ T4742] device veth1_macvtap entered promiscuous mode [ 170.371130][ T5092] device vti0 entered promiscuous mode [ 170.411145][ T4742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.446402][ T4742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.504944][ T4742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.539617][ T4742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.563349][ T4742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.587098][ T4742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.611231][ T4742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.632565][ T4742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.695008][ T4742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.725830][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.758397][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.806123][ T4742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.838021][ T4742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.877741][ T4742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.925618][ T4742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.953087][ T4742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.025007][ T4742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.153302][ T4742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.428605][ T4742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.471854][ T5106] ptrace attach of "./syz-executor exec"[4190] was attempted by "./syz-executor exec"[5106] [ 171.472535][ T4742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.670247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.685841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.738203][ T4742] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.784291][ T4742] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.820303][ T4742] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.853151][ T4742] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.875649][ T5111] overlayfs: unrecognized mount option "verity=on" or missing value [ 172.260347][ T4338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.303478][ T4338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.418591][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 172.473863][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.515988][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.570410][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 175.253435][ T23] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 175.673400][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 175.771706][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 176.073602][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 176.908637][ T5135] delete_channel: no stack [ 177.026333][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 177.038798][ T23] usb 2-1: SerialNumber: syz [ 177.493229][ T23] usb 2-1: can't set config #1, error -71 [ 177.529988][ T23] usb 2-1: USB disconnect, device number 5 [ 177.831882][ T5147] ubi: mtd0 is already attached to ubi31 [ 178.906962][ T5153] netlink: 60 bytes leftover after parsing attributes in process `syz.5.209'. [ 178.981186][ T5159] overlayfs: unrecognized mount option "verity=on" or missing value [ 181.738407][ T5172] device vti0 entered promiscuous mode [ 181.810289][ T5176] netlink: 48 bytes leftover after parsing attributes in process `syz.0.215'. [ 184.131322][ T5196] delete_channel: no stack [ 184.508102][ T5207] ubi: mtd0 is already attached to ubi31 [ 186.160482][ T5219] overlayfs: unrecognized mount option "verity=on" or missing value [ 188.892573][ T5240] ubi: mtd0 is already attached to ubi31 [ 191.218834][ T5249] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 191.864749][ T4298] Bluetooth: hci3: command 0x0406 tx timeout [ 191.870949][ T4298] Bluetooth: hci1: command 0x0406 tx timeout [ 191.948859][ T4298] Bluetooth: hci4: command 0x0406 tx timeout [ 191.983658][ T4298] Bluetooth: hci0: command 0x0406 tx timeout [ 192.064394][ T5234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'. [ 194.071793][ T5290] overlayfs: unrecognized mount option "verity=on" or missing value [ 194.288564][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.301214][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.643442][ T5326] device vlan2 entered promiscuous mode [ 198.667286][ T5326] device bond0 entered promiscuous mode [ 198.672898][ T5326] device bond_slave_0 entered promiscuous mode [ 198.688946][ T5328] delete_channel: no stack [ 198.749027][ T5326] device bond_slave_1 entered promiscuous mode [ 201.915441][ T5359] overlayfs: unrecognized mount option "verity=on" or missing value [ 202.088320][ T5367] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 203.955673][ T5386] ubi: mtd0 is already attached to ubi31 [ 205.784249][ T5404] device vti0 entered promiscuous mode [ 207.461138][ T5418] ubi: mtd0 is already attached to ubi31 [ 208.188532][ T5423] overlayfs: unrecognized mount option "verity=on" or missing value [ 209.247661][ T5440] ubi: mtd0 is already attached to ubi31 [ 210.396379][ T4236] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 211.030871][ T5232] Bluetooth: hci5: command 0x0405 tx timeout [ 211.192478][ T5452] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 211.273155][ T4236] usb 1-1: Using ep0 maxpacket: 32 [ 212.056611][ T5452] orangefs_mount: mount request failed with -4 [ 212.173212][ T4236] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 212.182364][ T4236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.216384][ T4236] usb 1-1: config 0 descriptor?? [ 212.571766][ T4236] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 212.591630][ T4236] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 212.628705][ T4236] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 212.694372][ T5462] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 212.704117][ T5462] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 213.353247][ T4236] usb 1-1: media controller created [ 213.383429][ T4236] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.919840][ T5472] ubi: mtd0 is already attached to ubi31 [ 214.663118][ T4236] az6027: usb out operation failed. (-71) [ 214.669534][ T4236] stb0899_attach: Driver disabled by Kconfig [ 214.737441][ T4236] az6027: no front-end attached [ 214.737441][ T4236] [ 214.779003][ T5481] overlayfs: unrecognized mount option "verity=on" or missing value [ 214.803316][ T4236] az6027: usb out operation failed. (-71) [ 214.977786][ T4236] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 215.059455][ T5487] ubi: mtd0 is already attached to ubi31 [ 215.778711][ T4236] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 215.819128][ T4236] dvb-usb: schedule remote query interval to 400 msecs. [ 215.826615][ T4236] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 215.839026][ T4236] usb 1-1: USB disconnect, device number 5 [ 216.228095][ T5497] overlayfs: missing 'lowerdir' [ 218.159223][ T4236] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 218.258068][ T5513] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 218.264856][ T5513] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 218.273329][ T5513] vhci_hcd vhci_hcd.0: Device attached [ 218.326484][ T5517] vhci_hcd: connection closed [ 218.337922][ T4359] vhci_hcd: stop threads [ 218.374646][ T4359] vhci_hcd: release socket [ 218.379169][ T4359] vhci_hcd: disconnect device [ 218.583187][ T2302] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 218.956840][ T5537] ubi: mtd0 is already attached to ubi31 [ 219.656450][ T5541] overlayfs: unrecognized mount option "verity=on" or missing value [ 219.685384][ T5542] overlayfs: missing 'lowerdir' [ 219.884786][ T2302] usb 6-1: Using ep0 maxpacket: 32 [ 220.429076][ T5547] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 220.507634][ T5547] overlayfs: failed to set xattr on upper [ 220.514263][ T5547] overlayfs: ...falling back to index=off,metacopy=off. [ 220.533649][ T5547] overlayfs: failed to resolve './file0': -2 [ 220.608814][ T2302] usb 6-1: unable to read config index 0 descriptor/all [ 220.619568][ T2302] usb 6-1: can't read configurations, error -71 [ 220.853030][ T5557] loop0: detected capacity change from 0 to 64 [ 221.772730][ T5557] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop0 [ 222.192173][ T5566] tmpfs: Unknown parameter 'usrquota' [ 222.274839][ T5557] loop0: detected capacity change from 0 to 1024 [ 222.481906][ T5557] hfsplus: unable to parse mount options [ 224.527934][ T5592] overlayfs: missing 'lowerdir' [ 225.738054][ T5599] overlayfs: unrecognized mount option "verity=on" or missing value [ 225.946245][ T5610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 225.968711][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.977577][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.904944][ T5632] loop5: detected capacity change from 0 to 64 [ 226.967134][ T5632] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop5 [ 227.082764][ T5632] loop5: detected capacity change from 0 to 1024 [ 227.093075][ T2062] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 227.117032][ T5632] hfsplus: unable to parse mount options [ 227.538696][ T5645] ubi: mtd0 is already attached to ubi31 [ 228.662215][ T5651] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 228.671837][ T5651] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 228.753718][ T2062] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 228.821227][ T2062] usb 3-1: config 0 has no interface number 0 [ 228.945173][ T2062] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 229.050267][ T2062] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.417585][ T2062] usb 3-1: config 0 descriptor?? [ 229.507297][ T2062] usb 3-1: selecting invalid altsetting 1 [ 229.530988][ T2062] dvb_ttusb_budget: ttusb_init_controller: error [ 229.562157][ T2062] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 230.411161][ T2062] DVB: Unable to find symbol cx22700_attach() [ 230.602769][ T2062] DVB: Unable to find symbol tda10046_attach() [ 230.610178][ T2062] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 230.630617][ T2062] usb 3-1: USB disconnect, device number 2 [ 231.353032][ T5689] overlayfs: unrecognized mount option "verity=on" or missing value [ 231.445915][ T5691] overlayfs: workdir and upperdir must reside under the same mount [ 233.020436][ T5710] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 233.029732][ T5710] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 237.810927][ T5751] overlayfs: unrecognized mount option "verity=on" or missing value [ 238.209495][ T5757] overlayfs: workdir and upperdir must reside under the same mount [ 239.461389][ T5779] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 239.470460][ T5779] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 241.675479][ T5805] syz.5.362 (5805): drop_caches: 2 [ 241.681406][ T5805] ODEBUG: Out of memory. ODEBUG disabled [ 241.717819][ T5805] syz.5.362 (5805): drop_caches: 2 [ 244.260601][ T5840] overlayfs: missing 'lowerdir' [ 244.610747][ T5232] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 244.853353][ T5232] usb 6-1: Using ep0 maxpacket: 8 [ 244.973350][ T5232] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 245.054548][ T5232] usb 6-1: config 0 has no interface number 0 [ 245.083197][ T5232] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 245.177351][ T5232] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 245.276579][ T5232] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 245.361829][ T5232] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 245.848944][ T5232] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.287491][ T5232] usb 6-1: config 0 descriptor?? [ 247.303237][ T5232] usb 6-1: can't set config #0, error -71 [ 247.318373][ T5232] usb 6-1: USB disconnect, device number 4 [ 247.795313][ T5869] syz.0.375 (5869): drop_caches: 2 [ 247.802627][ T5869] syz.0.375 (5869): drop_caches: 2 [ 247.827532][ T13] Bluetooth: hci5: command 0x0406 tx timeout [ 250.445693][ T5891] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 250.452270][ T5891] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 250.460812][ T5891] vhci_hcd vhci_hcd.0: Device attached [ 250.468464][ T5892] vhci_hcd: connection closed [ 250.477920][ T4312] vhci_hcd: stop threads [ 250.558705][ T4312] vhci_hcd: release socket [ 250.651590][ T4312] vhci_hcd: disconnect device [ 250.693246][ T5232] vhci_hcd: vhci_device speed not set [ 252.015735][ T5911] overlayfs: missing 'lowerdir' [ 252.783257][ T13] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 253.163638][ T13] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 253.209499][ T13] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.358813][ T13] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 253.475957][ T13] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.734345][ T13] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 253.788561][ T13] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 253.862888][ T13] usb 6-1: Product: syz [ 253.881069][ T13] usb 6-1: Manufacturer: syz [ 254.130184][ T13] cdc_wdm 6-1:1.0: skipping garbage [ 254.208606][ T13] cdc_wdm 6-1:1.0: skipping garbage [ 254.305469][ T13] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 254.687266][ T13] usb 6-1: USB disconnect, device number 5 [ 256.066816][ T5962] overlayfs: missing 'lowerdir' [ 256.652383][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.658800][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.684652][ T4255] Bluetooth: hci5: command 0x0406 tx timeout [ 261.388763][ T6006] overlayfs: failed to resolve './file0': -2 [ 261.903163][ T1108] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 262.099673][ T26] audit: type=1326 audit(1752902289.242:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.5.409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f575679c9a9 code=0x0 [ 262.175241][ T6027] overlayfs: missing 'workdir' [ 262.283159][ T1108] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 262.489753][ T1108] usb 1-1: config 0 has no interface number 0 [ 262.527208][ T1108] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 262.556669][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.582155][ T1108] usb 1-1: config 0 descriptor?? [ 262.710109][ T1108] usb 1-1: selecting invalid altsetting 1 [ 262.733413][ T1108] dvb_ttusb_budget: ttusb_init_controller: error [ 262.739804][ T1108] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 263.998948][ T1108] DVB: Unable to find symbol cx22700_attach() [ 264.297763][ T6054] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 264.307289][ T6054] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 265.081625][ T1108] DVB: Unable to find symbol tda10046_attach() [ 265.093179][ T1108] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 265.108386][ T6033] autofs4:pid:6033:autofs_fill_super: called with bogus options [ 265.193425][ T1108] usb 1-1: USB disconnect, device number 6 [ 265.518110][ T4316] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 265.867034][ T4316] Bluetooth: hci5: Injecting HCI hardware error event [ 265.990164][ T146] Bluetooth: hci5: hardware error 0x00 [ 265.992273][ T6061] loop0: detected capacity change from 0 to 64 [ 266.145346][ T6061] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop0 [ 266.475209][ T6061] loop0: detected capacity change from 0 to 1024 [ 266.568911][ T6061] hfsplus: unable to parse mount options [ 267.204844][ T6082] ubi: mtd0 is already attached to ubi31 [ 267.327826][ T6089] overlayfs: missing 'workdir' [ 268.284732][ T26] audit: type=1326 audit(1752902295.432:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.2.423" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28acf4d9a9 code=0x0 [ 268.595625][ T6109] ubi: mtd0 is already attached to ubi31 [ 269.413219][ T4298] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 269.849209][ T4298] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 269.860178][ T4298] usb 1-1: config 0 has no interface number 0 [ 269.872681][ T4298] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 269.882128][ T4298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.907358][ T4298] usb 1-1: config 0 descriptor?? [ 269.953337][ T4298] usb 1-1: selecting invalid altsetting 1 [ 269.962077][ T4298] dvb_ttusb_budget: ttusb_init_controller: error [ 269.972695][ T4298] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 270.059150][ T4298] DVB: Unable to find symbol cx22700_attach() [ 270.106188][ T4298] DVB: Unable to find symbol tda10046_attach() [ 270.112860][ T4298] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 270.749168][ T4298] usb 1-1: USB disconnect, device number 7 [ 270.820145][ T6133] batman_adv: batadv0: Adding interface: dummy0 [ 271.047578][ T6133] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.891088][ T6133] batman_adv: batadv0: Interface activated: dummy0 [ 272.263667][ T6136] batadv0: mtu less than device minimum [ 272.353699][ T6136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 272.366919][ T6136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 272.379615][ T6136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 272.392125][ T6136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 272.404840][ T6136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 272.417428][ T6136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 272.430016][ T6136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 272.442718][ T6136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 272.455312][ T6136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 273.992420][ T6143] autofs4:pid:6143:autofs_fill_super: called with bogus options [ 274.750558][ T6149] ubi: mtd0 is already attached to ubi31 [ 275.434879][ T6161] overlayfs: missing 'workdir' [ 276.924733][ T6167] ubi: mtd0 is already attached to ubi31 [ 277.137072][ T6174] overlayfs: failed to resolve './file0': -2 [ 277.297841][ T26] audit: type=1326 audit(1752902304.442:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.5.441" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f575679c9a9 code=0x0 [ 277.374607][ T6182] syz.0.443 (6182): drop_caches: 2 [ 277.385551][ T6182] syz.0.443 (6182): drop_caches: 2 [ 277.808642][ T6191] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 277.817747][ T6191] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 279.017109][ T6198] binder: 6197:6198 unknown command 0 [ 279.043674][ T6198] binder: 6197:6198 ioctl c0306201 200000000080 returned -22 [ 282.652852][ T6228] ubi: mtd0 is already attached to ubi31 [ 282.855528][ T6232] syz.5.458 (6232): drop_caches: 2 [ 282.861102][ T6232] syz.5.458 (6232): drop_caches: 2 [ 283.496486][ T26] audit: type=1326 audit(1752902310.642:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6238 comm="syz.5.461" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f575679c9a9 code=0x0 [ 285.866838][ T6260] ubi: mtd0 is already attached to ubi31 [ 286.120060][ T6269] syz.0.470 (6269): drop_caches: 2 [ 286.128653][ T6269] syz.0.470 (6269): drop_caches: 2 [ 286.379681][ T6274] ubi: mtd0 is already attached to ubi31 [ 288.136617][ T26] audit: type=1326 audit(1752902315.282:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.2.477" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28acf4d9a9 code=0x0 [ 289.412163][ T6302] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 289.428074][ T6302] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 289.777034][ T6306] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 289.803147][ T6306] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 289.820206][ T6311] ubi: mtd0 is already attached to ubi31 [ 290.018635][ T6315] syz.2.483 (6315): drop_caches: 2 [ 290.024248][ T6315] syz.2.483 (6315): drop_caches: 2 [ 290.181545][ T6317] overlayfs: overlapping lowerdir path [ 292.884069][ T26] audit: type=1326 audit(1752902320.032:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6336 comm="syz.2.490" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28acf4d9a9 code=0x0 [ 292.905694][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.407836][ T6349] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 293.413761][ T6347] netlink: 2640 bytes leftover after parsing attributes in process `syz.0.494'. [ 293.872054][ T6356] ubi: mtd0 is already attached to ubi31 [ 296.405561][ T6383] overlayfs: failed to resolve './file0': -2 [ 298.773356][ T6406] syz.5.508 (6406): drop_caches: 2 [ 298.778882][ T6406] syz.5.508 (6406): drop_caches: 2 [ 299.163668][ T6415] ubi: mtd0 is already attached to ubi31 [ 300.722025][ T6431] overlayfs: overlapping lowerdir path [ 301.126525][ T21] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 302.426283][ T6444] overlayfs: failed to resolve './file0': -2 [ 302.623183][ T21] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 302.631369][ T21] usb 6-1: config 0 has no interface number 0 [ 303.404996][ T21] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 303.414408][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.449947][ T21] usb 6-1: config 0 descriptor?? [ 303.493202][ T21] usb 6-1: can't set config #0, error -71 [ 303.500755][ T6454] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 303.505511][ T21] usb 6-1: USB disconnect, device number 6 [ 303.509930][ T6454] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 303.565021][ T4338] Bluetooth: hci2: Frame reassembly failed (-84) [ 303.995382][ T6468] fuse: Bad value for 'fd' [ 306.708914][ T5232] Bluetooth: hci2: command 0x1003 tx timeout [ 306.715909][ T4199] Bluetooth: hci2: sending frame failed (-49) [ 306.835662][ T6492] overlayfs: overlapping lowerdir path [ 307.021699][ T6496] overlayfs: failed to resolve './file0': -2 [ 307.713205][ T21] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 308.103618][ T21] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 308.134481][ T21] usb 1-1: config 0 has no interface number 0 [ 308.204490][ T21] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 308.280760][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.423672][ T21] usb 1-1: config 0 descriptor?? [ 308.465580][ T21] usb 1-1: selecting invalid altsetting 1 [ 308.485203][ T21] dvb_ttusb_budget: ttusb_init_controller: error [ 308.512070][ T21] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 308.599706][ T21] DVB: Unable to find symbol cx22700_attach() [ 308.654466][ T6513] sg_write: process 379 (syz.2.541) changed security contexts after opening file descriptor, this is not allowed. [ 308.660009][ T21] DVB: Unable to find symbol tda10046_attach() [ 308.700350][ T21] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 308.763192][ T4316] Bluetooth: hci2: command 0x1001 tx timeout [ 308.769733][ T4199] Bluetooth: hci2: sending frame failed (-49) [ 308.936411][ T23] usb 1-1: USB disconnect, device number 8 [ 310.978325][ T6529] capability: warning: `syz.5.545' uses 32-bit capabilities (legacy support in use) [ 311.292286][ T5232] Bluetooth: hci2: command 0x1009 tx timeout [ 312.356691][ T26] audit: type=1326 audit(1752902339.502:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.0.549" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3e08919a9 code=0x0 [ 313.678242][ T6548] overlayfs: unrecognized mount option "verity=on" or missing value [ 315.968852][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'. [ 315.979274][ T6570] net_ratelimit: 10 callbacks suppressed [ 315.979288][ T6570] netlink: set zone limit has 8 unknown bytes [ 316.051427][ T6574] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.560'. [ 316.098950][ T4236] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 316.463179][ T4236] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 317.177759][ T4236] usb 2-1: config 0 has no interface number 0 [ 317.184119][ T4236] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 317.195221][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.213500][ T6589] overlayfs: unrecognized mount option "verity=on" or missing value [ 317.237004][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.244849][ T4236] usb 2-1: config 0 descriptor?? [ 317.250888][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.122159][ T4236] usb 2-1: selecting invalid altsetting 1 [ 318.133170][ T4236] dvb_ttusb_budget: ttusb_init_controller: error [ 318.139609][ T4236] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 318.246101][ T4236] DVB: Unable to find symbol cx22700_attach() [ 318.399696][ T4236] DVB: Unable to find symbol tda10046_attach() [ 318.432928][ T4236] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 319.323234][ T6607] overlayfs: workdir and upperdir must reside under the same mount [ 319.362019][ T6612] ubi: mtd0 is already attached to ubi31 [ 319.390647][ T4236] usb 2-1: USB disconnect, device number 6 [ 319.394750][ T6611] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.571'. [ 324.039917][ T6651] ubi: mtd0 is already attached to ubi31 [ 325.683803][ T4316] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 326.133334][ T4316] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 326.148744][ T4316] usb 3-1: config 0 has no interface number 0 [ 326.188565][ T4316] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 326.218363][ T4316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.284587][ T4316] usb 3-1: config 0 descriptor?? [ 326.350783][ T4316] usb 3-1: selecting invalid altsetting 1 [ 326.369771][ T4316] dvb_ttusb_budget: ttusb_init_controller: error [ 326.396684][ T4316] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 326.575180][ T4316] DVB: Unable to find symbol cx22700_attach() [ 329.276338][ T4316] DVB: Unable to find symbol tda10046_attach() [ 329.282570][ T4316] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 329.527549][ T4316] usb 3-1: USB disconnect, device number 3 [ 332.809108][ T4236] Bluetooth: hci4: command 0x0405 tx timeout [ 333.030625][ T6722] tipc: Started in network mode [ 333.141138][ T6722] tipc: Node identity 4, cluster identity 4711 [ 333.245369][ T6722] tipc: Node number set to 4 [ 346.709813][ T6799] tipc: Started in network mode [ 346.727383][ T6799] tipc: Node identity 4, cluster identity 4711 [ 346.738359][ T6799] tipc: Node number set to 4 [ 347.073616][ T6808] binder: 6804:6808 unknown command 0 [ 347.079346][ T6808] binder: 6804:6808 ioctl c0306201 200000000080 returned -22 [ 349.345667][ T6825] ubi: mtd0 is already attached to ubi31 [ 353.038529][ T4250] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 353.062393][ T6869] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 353.076433][ T6869] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 353.773887][ T4250] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 353.808982][ T4250] usb 6-1: config 0 has no interface number 0 [ 353.865221][ T4250] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 353.911542][ T4250] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.946391][ T4250] usb 6-1: config 0 descriptor?? [ 353.994733][ T4250] usb 6-1: selecting invalid altsetting 1 [ 354.000566][ T4250] dvb_ttusb_budget: ttusb_init_controller: error [ 354.023656][ T4250] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 354.110162][ T6882] ubi: mtd0 is already attached to ubi31 [ 354.256512][ T4250] DVB: Unable to find symbol cx22700_attach() [ 354.298394][ T4250] DVB: Unable to find symbol tda10046_attach() [ 354.313236][ T4250] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 354.388869][ T4250] usb 6-1: USB disconnect, device number 7 [ 356.422392][ T6911] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 356.441036][ T6911] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 356.597909][ T6915] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 356.632325][ T6915] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 358.620722][ T6937] syz.2.659 (6937): drop_caches: 2 [ 358.628856][ T6937] syz.2.659 (6937): drop_caches: 2 [ 359.435828][ T6940] ubi: mtd0 is already attached to ubi31 [ 359.710631][ T6947] 9pnet_virtio: no channels available for device syz [ 361.042417][ T26] audit: type=1326 audit(1752902388.182:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.1.667" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f385c3389a9 code=0x0 [ 362.095500][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 362.263151][ T6968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.281880][ T6968] bond0: (slave rose0): Enslaving as an active interface with an up link [ 362.291962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 364.173536][ T6982] syz.1.674 (6982): drop_caches: 2 [ 364.184082][ T6982] syz.1.674 (6982): drop_caches: 2 [ 366.755295][ T7019] ubi: mtd0 is already attached to ubi31 [ 366.837808][ T26] audit: type=1326 audit(1752902393.982:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.0.683" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3e08919a9 code=0x0 [ 370.920769][ T7075] kvm: emulating exchange as write [ 371.768652][ T7101] overlayfs: missing 'lowerdir' [ 373.833694][ T7118] syz.3.699 (7118): drop_caches: 2 [ 373.842589][ T7118] syz.3.699 (7118): drop_caches: 2 [ 377.125421][ T4235] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 378.033040][ T4235] usb 1-1: Using ep0 maxpacket: 16 [ 378.180038][ T4235] usb 1-1: config 0 has no interfaces? [ 378.188344][ T4235] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 378.213051][ T4235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.326442][ T4235] usb 1-1: config 0 descriptor?? [ 378.606469][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.617394][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.831280][ T4235] usb 1-1: USB disconnect, device number 9 [ 379.241299][ T7167] overlayfs: missing 'lowerdir' [ 379.762223][ T7164] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 379.843401][ T7164] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 383.594822][ T7230] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 383.614052][ T7230] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 391.229949][ T7314] overlayfs: missing 'lowerdir' [ 396.366012][ T7359] ubi: mtd0 is already attached to ubi31 [ 398.353352][ T7383] ax25_connect(): syz.3.772 uses autobind, please contact jreuter@yaina.de [ 399.133096][ T21] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 399.499072][ T7402] block device autoloading is deprecated and will be removed. [ 399.522727][ T21] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 399.556836][ T21] usb 1-1: config 0 has no interface number 0 [ 399.587817][ T21] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 399.617049][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.673732][ T21] usb 1-1: config 0 descriptor?? [ 399.737550][ T21] usb 1-1: selecting invalid altsetting 1 [ 399.770614][ T21] dvb_ttusb_budget: ttusb_init_controller: error [ 399.818346][ T21] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 400.540133][ T21] DVB: Unable to find symbol cx22700_attach() [ 400.662716][ T21] DVB: Unable to find symbol tda10046_attach() [ 400.673056][ T21] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 400.929279][ T21] usb 1-1: USB disconnect, device number 10 [ 402.421330][ T7436] ax25_connect(): syz.5.788 uses autobind, please contact jreuter@yaina.de [ 404.213075][ T4264] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 404.219757][ T7451] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 404.463100][ T4264] usb 3-1: Using ep0 maxpacket: 32 [ 404.519055][ T7464] ax25_connect(): syz.0.800 uses autobind, please contact jreuter@yaina.de [ 404.548761][ T7464] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 404.583273][ T4264] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 404.756405][ T1108] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 404.826291][ T4264] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 405.032507][ T4264] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 405.042091][ T4264] usb 3-1: Product: syz [ 405.213712][ T1108] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 405.228796][ T1108] usb 6-1: config 0 has no interface number 0 [ 405.254432][ T1108] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 405.287282][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.373096][ T4264] usb 3-1: Manufacturer: syz [ 405.388162][ T4264] usb 3-1: SerialNumber: syz [ 405.429899][ T4264] usb 3-1: config 0 descriptor?? [ 405.483402][ T7445] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 405.637929][ T1108] usb 6-1: config 0 descriptor?? [ 405.695254][ T1108] usb 6-1: selecting invalid altsetting 1 [ 405.750360][ T1108] dvb_ttusb_budget: ttusb_init_controller: error [ 405.762153][ T1108] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 405.778148][ T4298] usb 3-1: USB disconnect, device number 4 [ 405.935104][ T1108] DVB: Unable to find symbol cx22700_attach() [ 406.021684][ T1108] DVB: Unable to find symbol tda10046_attach() [ 406.035232][ T1108] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 406.058237][ T1108] usb 6-1: USB disconnect, device number 8 [ 407.145576][ T7494] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 407.301499][ T7499] ubi: mtd0 is already attached to ubi31 [ 407.852082][ T26] audit: type=1326 audit(1752902434.992:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7500 comm="syz.2.810" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28acf4d9a9 code=0x0 [ 410.529787][ T7532] netlink: 'syz.2.819': attribute type 1 has an invalid length. [ 410.960998][ T7539] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 410.994818][ T7544] device veth3 entered promiscuous mode [ 411.024792][ T7544] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 411.035719][ T7548] kvm [7547]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0xb7 [ 414.093990][ T7579] ubi: mtd0 is already attached to ubi31 [ 414.687342][ T7562] autofs4:pid:7562:autofs_fill_super: called with bogus options [ 415.094947][ T7590] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:85:67:f0 [ 415.178565][ T7590] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:85:67:f0 [ 415.269342][ T7590] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:85:67:f0 [ 415.360177][ T7590] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:85:67:f0 [ 415.433234][ T7590] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:85:67:f0 [ 415.519651][ T7590] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:85:67:f0 [ 415.644669][ T7590] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:85:67:f0 [ 415.757128][ T7590] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:85:67:f0 [ 415.784895][ T7596] overlayfs: missing 'lowerdir' [ 415.797700][ T7590] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:85:67:f0 [ 419.276177][ T7637] syz.3.849 (7637): drop_caches: 2 [ 419.286450][ T7639] overlayfs: missing 'workdir' [ 420.083342][ T26] audit: type=1326 audit(1752902447.232:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.5.856" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f575679c9a9 code=0x0 [ 421.178093][ T7672] input: syz1 as /devices/virtual/input/input6 [ 421.398774][ T4298] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 421.471728][ T7681] overlayfs: missing 'workdir' [ 421.813794][ T4298] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 421.841188][ T4298] usb 1-1: config 0 has no interface number 0 [ 421.907544][ T4298] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 421.957148][ T4298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.246745][ T4298] usb 1-1: config 0 descriptor?? [ 422.298107][ T4298] usb 1-1: selecting invalid altsetting 1 [ 422.313292][ T4298] dvb_ttusb_budget: ttusb_init_controller: error [ 422.342596][ T4298] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 423.041974][ T4298] DVB: Unable to find symbol cx22700_attach() [ 423.101591][ T4298] DVB: Unable to find symbol tda10046_attach() [ 423.132569][ T4298] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 423.218829][ T4298] usb 1-1: USB disconnect, device number 11 [ 424.341234][ T7707] overlayfs: missing 'lowerdir' [ 424.627160][ T26] audit: type=1326 audit(1752902451.772:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7704 comm="syz.1.871" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f385c3389a9 code=0x0 [ 425.329147][ T7716] ax25_connect(): syz.0.877 uses autobind, please contact jreuter@yaina.de [ 425.534179][ T7724] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 428.024715][ T7744] syz.1.881 (7744): drop_caches: 2 [ 428.033994][ T7744] syz.1.881 (7744): drop_caches: 2 [ 428.153059][ T13] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 429.253223][ T13] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 429.288453][ T13] usb 1-1: config 0 has no interface number 0 [ 429.318612][ T13] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 429.360382][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.394992][ T7752] APIC base relocation is unsupported by KVM [ 429.423912][ T13] usb 1-1: config 0 descriptor?? [ 429.519574][ T13] usb 1-1: selecting invalid altsetting 1 [ 429.544208][ T13] dvb_ttusb_budget: ttusb_init_controller: error [ 429.603235][ T13] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 429.677611][ T26] audit: type=1326 audit(1752902456.822:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.1.886" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f385c3389a9 code=0x0 [ 429.756917][ T13] DVB: Unable to find symbol cx22700_attach() [ 429.848908][ T13] DVB: Unable to find symbol tda10046_attach() [ 429.861816][ T13] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 429.918613][ T13] usb 1-1: USB disconnect, device number 12 [ 430.414649][ T7766] overlayfs: missing 'lowerdir' [ 432.309241][ T7779] loop2: detected capacity change from 0 to 7 [ 432.347520][ T4191] Dev loop2: unable to read RDB block 7 [ 432.368783][ T4191] loop2: unable to read partition table [ 432.391497][ T4191] loop2: partition table beyond EOD, truncated [ 432.585542][ T7779] Dev loop2: unable to read RDB block 7 [ 432.591438][ T7779] loop2: unable to read partition table [ 432.602871][ T7779] loop2: partition table beyond EOD, truncated [ 432.679388][ T7787] ax25_connect(): syz.1.892 uses autobind, please contact jreuter@yaina.de [ 432.842046][ T7779] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 434.030397][ T7797] 9pnet_virtio: no channels available for device syz [ 434.807153][ T26] audit: type=1326 audit(1752902461.952:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.5.902" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f575679c9a9 code=0x0 [ 435.285431][ T7824] overlayfs: unrecognized mount option "verity=on" or missing value [ 437.548193][ T7847] ax25_connect(): syz.0.908 uses autobind, please contact jreuter@yaina.de [ 439.893067][ T7866] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 439.902060][ T7866] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 440.031256][ T7870] overlayfs: unrecognized mount option "verity=on" or missing value [ 440.045996][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.052505][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.980340][ T26] audit: type=1326 audit(1752902468.122:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.0.917" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3e08919a9 code=0x0 [ 443.298831][ T7906] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 443.308705][ T7906] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 443.567740][ T7911] syz.2.928 (7911): drop_caches: 2 [ 443.575666][ T7911] syz.2.928 (7911): drop_caches: 2 [ 444.377273][ T7915] overlayfs: unrecognized mount option "verity=on" or missing value [ 445.308024][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.930'. [ 447.946816][ T26] audit: type=1326 audit(1752902475.082:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.0.937" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3e08919a9 code=0x0 [ 448.501598][ T7952] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 448.510684][ T7952] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 448.913800][ T1108] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 449.287102][ T1108] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 449.374482][ T1108] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 449.384860][ T1108] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 449.556151][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.633446][ T7954] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 449.893442][ T1108] usb 2-1: USB disconnect, device number 7 [ 449.978100][ T7973] block nbd0: shutting down sockets [ 454.189983][ T8010] syz.5.957 (8010): drop_caches: 2 [ 454.214251][ T8010] syz.5.957 (8010): drop_caches: 2 [ 456.565725][ T8026] ubi: mtd0 is already attached to ubi31 [ 459.782657][ T26] audit: type=1326 audit(1752902486.922:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8046 comm="syz.3.967" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25036819a9 code=0x0 [ 460.601934][ T8062] Zero length message leads to an empty skb [ 463.052626][ T1108] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 463.376339][ T1108] usb 4-1: Using ep0 maxpacket: 32 [ 463.540939][ T1108] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 463.766166][ T1108] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 463.799428][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 463.852973][ T1108] usb 4-1: Product: syz [ 463.877576][ T1108] usb 4-1: Manufacturer: syz [ 463.903140][ T1108] usb 4-1: SerialNumber: syz [ 463.953786][ T1108] usb 4-1: config 0 descriptor?? [ 464.023266][ T8085] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 464.043985][ T1108] hub 4-1:0.0: bad descriptor, ignoring hub [ 464.049967][ T1108] hub: probe of 4-1:0.0 failed with error -5 [ 464.127248][ T8110] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 464.136257][ T8110] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 464.408425][ T8116] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 464.414992][ T8116] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 464.439984][ T8116] vhci_hcd vhci_hcd.0: Device attached [ 464.448148][ T8117] vhci_hcd: connection closed [ 464.449479][ T4860] vhci_hcd: stop threads [ 464.531060][ T4860] vhci_hcd: release socket [ 464.535726][ T4860] vhci_hcd: disconnect device [ 465.814039][ T23] usb 4-1: USB disconnect, device number 3 [ 466.145552][ T26] audit: type=1326 audit(1752902493.292:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8146 comm="syz.5.986" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f575679c9a9 code=0x0 [ 466.295695][ T8155] overlayfs: unrecognized mount option "verity=on" or missing value [ 467.639149][ T8174] 9pnet_virtio: no channels available for device syz [ 467.983283][ T8181] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 467.992247][ T8181] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 469.455390][ T8199] overlayfs: unrecognized mount option "verity=on" or missing value [ 470.743414][ T26] audit: type=1326 audit(1752902497.872:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8206 comm="syz.2.1005" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28acf4d9a9 code=0x0 [ 470.894437][ T8049] Set syz1 is full, maxelem 65536 reached [ 471.285113][ T8218] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 471.294124][ T8218] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 471.597811][ T8222] autofs4:pid:8222:autofs_fill_super: called with bogus options [ 472.878433][ T8237] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1016'. [ 473.702691][ T8237] netlink: 'syz.3.1016': attribute type 7 has an invalid length. [ 473.710588][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1016'. [ 473.750800][ T8237] device erspan0 entered promiscuous mode [ 473.759416][ T8237] device batadv_slave_1 entered promiscuous mode [ 473.778014][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 473.802790][ T8242] overlayfs: unrecognized mount option "verity=on" or missing value [ 474.107255][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880601b6400: rx timeout, send abort [ 474.117481][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880601b6400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 474.928365][ T5232] Bluetooth: hci2: command 0x1003 tx timeout [ 474.942230][ T8233] Bluetooth: hci2: sending frame failed (-49) [ 476.081570][ T26] audit: type=1326 audit(1752902503.222:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.5.1024" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f575679c9a9 code=0x0 [ 477.004941][ T4250] Bluetooth: hci2: command 0x1001 tx timeout [ 477.011075][ T8233] Bluetooth: hci2: sending frame failed (-49) [ 477.212792][ T8282] xt_hashlimit: size too large, truncated to 1048576 [ 479.083865][ T4250] Bluetooth: hci2: command 0x1009 tx timeout [ 480.305169][ T8310] overlayfs: unrecognized mount option "verity=on" or missing value [ 481.917807][ T8324] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.661356][ T8324] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.764293][ T8324] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.180212][ T8324] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.474787][ T8324] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.491680][ T8324] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.511990][ T8324] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.586570][ T8324] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.894750][ T8351] overlayfs: unrecognized mount option "verity=on" or missing value [ 487.449559][ T8365] device syzkaller1 entered promiscuous mode [ 490.845271][ T8399] overlayfs: failed to resolve './file1': -2 [ 491.124281][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 491.733397][ T23] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 491.750690][ T23] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 491.763172][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 491.777012][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 491.790844][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 491.946236][ T23] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 491.996017][ T23] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 492.022351][ T23] usb 2-1: Product: syz [ 492.029401][ T23] usb 2-1: Manufacturer: syz [ 492.725410][ T23] cdc_wdm 2-1:1.0: skipping garbage [ 492.733290][ T23] cdc_wdm 2-1:1.0: skipping garbage [ 492.789897][ T23] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 493.704101][ T23] cdc_wdm 2-1:1.0: Unknown control protocol [ 493.778862][ T4250] usb 2-1: USB disconnect, device number 8 [ 495.670987][ T8476] ax25_connect(): syz.3.1086 uses autobind, please contact jreuter@yaina.de [ 498.567054][ T8509] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 499.314955][ T26] audit: type=1326 audit(1752902526.462:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.5.1101" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f575679c9a9 code=0x0 [ 500.506328][ T8540] [U] ^R [ 501.485208][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.491550][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.887397][ T8572] ax25_connect(): syz.5.1115 uses autobind, please contact jreuter@yaina.de [ 503.387731][ T8576] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 503.396831][ T8576] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 504.659325][ T26] audit: type=1326 audit(1752902531.802:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.3.1118" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25036819a9 code=0x0 [ 505.202239][ T8590] overlayfs: unrecognized mount option "verity=on" or missing value [ 508.397331][ T8626] overlayfs: unrecognized mount option "verity=on" or missing value [ 508.696828][ T8630] ax25_connect(): syz.1.1132 uses autobind, please contact jreuter@yaina.de [ 511.034437][ T8651] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 513.350305][ T8677] overlayfs: unrecognized mount option "verity=on" or missing value [ 515.018819][ T8690] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 515.027943][ T8690] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 515.853203][ T1108] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 516.149955][ T8703] comedi comedi3: bad chanlist[0]=0xffff0001 chan=1 range length=1 [ 516.423014][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 516.612089][ T8715] overlayfs: unrecognized mount option "verity=on" or missing value [ 516.923822][ T1108] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 516.975896][ T1108] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 516.985945][ T1108] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 516.995841][ T1108] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 517.006015][ T1108] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 517.019174][ T1108] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 517.029941][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.167672][ T8722] loop6: detected capacity change from 0 to 524287999 [ 517.185670][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 517.196832][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 517.205879][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 517.217056][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 517.256249][ T8722] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 517.291126][ T8722] Buffer I/O error on dev loop6, logical block 0, async page read [ 517.310033][ T8722] ldm_validate_partition_table(): Disk read failed. [ 517.323807][ T8722] Dev loop6: unable to read RDB block 0 [ 517.332625][ T8722] loop6: unable to read partition table [ 517.344700][ T8722] loop6: partition table beyond EOD, truncated [ 517.351005][ T8722] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 517.413227][ T1108] usb 3-1: usb_control_msg returned -32 [ 517.418906][ T1108] usbtmc 3-1:16.0: can't read capabilities [ 519.332352][ T4316] usb 3-1: USB disconnect, device number 5 [ 519.363782][ T8746] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 519.429157][ T8757] ubi: mtd0 is already attached to ubi31 [ 519.985864][ T8746] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 521.983116][ T8781] block nbd3: shutting down sockets [ 522.067844][ T263] blk_update_request: I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 522.231633][ T5971] blk_update_request: I/O error, dev nbd3, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 522.838745][ T8779] Mount JFS Failure: -5 [ 523.276990][ T8796] ax25_connect(): syz.3.1183 uses autobind, please contact jreuter@yaina.de [ 523.404836][ T1108] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 523.418020][ T1108] Bluetooth: hci3: Injecting HCI hardware error event [ 523.489021][ T146] Bluetooth: hci3: hardware error 0x00 [ 525.377656][ T8829] 9pnet_virtio: no channels available for device syz [ 525.799086][ T8837] ax25_connect(): syz.2.1199 uses autobind, please contact jreuter@yaina.de [ 530.006741][ T8870] block device autoloading is deprecated and will be removed. [ 530.981886][ T8890] ubi: mtd0 is already attached to ubi31 [ 535.205080][ T8927] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 535.214074][ T8927] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 536.494365][ T8934] md2: error: bitmap file must open for write [ 536.572827][ T8939] binder: BINDER_SET_CONTEXT_MGR already set [ 536.603896][ T8939] binder: 8938:8939 ioctl 4018620d 200000000040 returned -16 [ 536.728452][ T8939] syz.1.1231 (8939): drop_caches: 2 [ 538.278012][ T8972] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 538.287181][ T8972] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 538.366576][ T8970] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 538.374881][ T8970] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 538.404980][ T8970] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 538.607230][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1244'. [ 538.625104][ T8979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.632728][ T8979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.649323][ T8979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.658566][ T8979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.658587][ T8992] block device autoloading is deprecated and will be removed. [ 540.536769][ T9022] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 540.545810][ T9022] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 542.025968][ T9054] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 542.034150][ T9054] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 542.215995][ T9061] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 542.330215][ T9071] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 542.351293][ T9067] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 542.360383][ T9067] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 542.552404][ T9075] kvm: pic: level sensitive irq not supported [ 542.552711][ T9075] kvm: pic: non byte read [ 542.564083][ T9075] kvm: pic: non byte read [ 542.568426][ T9075] kvm: pic: non byte read [ 542.572817][ T9075] kvm: pic: non byte read [ 542.663306][ T9075] kvm: pic: non byte read [ 542.668045][ T9075] kvm: pic: non byte read [ 542.686759][ T9075] kvm: pic: non byte read [ 542.694074][ T9075] kvm: pic: non byte read [ 542.698763][ T9075] kvm: pic: non byte read [ 542.707771][ T9075] kvm: pic: non byte read [ 543.980400][ T9101] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 544.001242][ T9101] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 544.293636][ T9098] chnl_net:caif_netlink_parms(): no params data found [ 544.350402][ T9098] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.357662][ T9098] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.367194][ T9098] device bridge_slave_0 entered promiscuous mode [ 544.367774][ T499] nci: nci_rx_work: unknown MT 0x7 [ 544.390551][ T9098] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.399098][ T9098] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.416094][ T9098] device bridge_slave_1 entered promiscuous mode [ 544.537220][ T9098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.588141][ T9098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.618599][ T9098] team0: Port device team_slave_0 added [ 544.626727][ T9098] team0: Port device team_slave_1 added [ 544.649572][ T9098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.658954][ T9098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.686320][ T9098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.699704][ T9098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.706951][ T9098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.733333][ T9098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.768947][ T9098] device hsr_slave_0 entered promiscuous mode [ 544.776271][ T9098] device hsr_slave_1 entered promiscuous mode [ 544.997162][ T9134] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 545.011024][ T9134] binder: 9133:9134 ioctl 4018620d 200000000040 returned -1 [ 545.021152][ T9098] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 545.041696][ T9098] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 545.071545][ T9098] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 545.112533][ T9098] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 545.278686][ T9153] overlayfs: failed to get inode (-116) [ 545.290966][ T9098] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.298090][ T9098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.305441][ T9098] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.312494][ T9098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.340390][ T9153] overlayfs: failed to get inode (-116) [ 545.362444][ T4312] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.389194][ T4312] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.456089][ T9158] overlayfs: failed to clone upperpath [ 545.581440][ T9098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.616087][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 545.628733][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 545.658672][ T9098] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.680952][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 545.696928][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 545.709979][ T4312] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.717218][ T4312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.772767][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 545.803496][ T2062] Bluetooth: hci2: command 0x0409 tx timeout [ 545.818174][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 545.833992][ T4312] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.841256][ T4312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.861449][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 545.890305][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 545.932474][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 545.934280][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 545.939935][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 545.941072][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 545.950346][ T9098] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 545.950372][ T9098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 546.015278][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 546.016148][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 546.016728][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 546.017564][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 546.018321][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 546.019051][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 546.067670][ T9182] tipc: Enabling of bearer rejected, failed to enable media [ 546.154994][ T9188] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 546.273759][ T9195] 9pnet_virtio: no channels available for device syz [ 546.415940][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 546.416848][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 546.435297][ T9098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.532615][ T9201] input: syz0 as /devices/virtual/input/input8 [ 546.717024][ T5232] [ 546.719400][ T5232] ====================================================== [ 546.726430][ T5232] WARNING: possible circular locking dependency detected [ 546.733482][ T5232] 5.15.189-syzkaller #0 Not tainted [ 546.738707][ T5232] ------------------------------------------------------ [ 546.745745][ T5232] kworker/0:8/5232 is trying to acquire lock: [ 546.751833][ T5232] ffff88801b780c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 546.762935][ T5232] [ 546.762935][ T5232] but task is already holding lock: [ 546.770317][ T5232] ffffffff8d4be228 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 546.779401][ T5232] [ 546.779401][ T5232] which lock already depends on the new lock. [ 546.779401][ T5232] [ 546.789823][ T5232] [ 546.789823][ T5232] the existing dependency chain (in reverse order) is: [ 546.798873][ T5232] [ 546.798873][ T5232] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 546.806907][ T5232] __mutex_lock_common+0x1eb/0x2390 [ 546.812656][ T5232] mutex_lock_nested+0x17/0x20 [ 546.817971][ T5232] rfkill_register+0x33/0x8a0 [ 546.823197][ T5232] hci_register_dev+0x452/0x970 [ 546.828597][ T5232] vhci_create_device+0x32c/0x5c0 [ 546.834176][ T5232] vhci_write+0x391/0x450 [ 546.839048][ T5232] vfs_write+0x712/0xd00 [ 546.843845][ T5232] ksys_write+0x14d/0x250 [ 546.848726][ T5232] do_syscall_64+0x4c/0xa0 [ 546.853685][ T5232] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 546.860131][ T5232] [ 546.860131][ T5232] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 546.868094][ T5232] __mutex_lock_common+0x1eb/0x2390 [ 546.873849][ T5232] mutex_lock_nested+0x17/0x20 [ 546.879164][ T5232] vhci_send_frame+0x88/0x100 [ 546.884395][ T5232] hci_send_frame+0x1a9/0x2e0 [ 546.889617][ T5232] hci_tx_work+0x9f9/0x1710 [ 546.894659][ T5232] process_one_work+0x863/0x1000 [ 546.900141][ T5232] worker_thread+0xaa8/0x12a0 [ 546.905366][ T5232] kthread+0x436/0x520 [ 546.909974][ T5232] ret_from_fork+0x1f/0x30 [ 546.914937][ T5232] [ 546.914937][ T5232] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 546.924175][ T5232] __flush_work+0xdd/0x1b0 [ 546.929146][ T5232] hci_dev_do_close+0x1e7/0x1030 [ 546.934637][ T5232] hci_unregister_dev+0x2d7/0x580 [ 546.940224][ T5232] vhci_release+0x73/0xc0 [ 546.945111][ T5232] __fput+0x234/0x930 [ 546.949640][ T5232] task_work_run+0x125/0x1a0 [ 546.954806][ T5232] do_exit+0x61e/0x20a0 [ 546.959509][ T5232] do_group_exit+0x12e/0x300 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 546.964653][ T5232] get_signal+0x6ca/0x12c0 [ 546.969607][ T5232] arch_do_signal_or_restart+0xc1/0x1300 [ 546.975784][ T5232] exit_to_user_mode_loop+0x9e/0x130 [ 546.981621][ T5232] exit_to_user_mode_prepare+0xb1/0x140 [ 546.987730][ T5232] syscall_exit_to_user_mode+0x16/0x40 [ 546.993737][ T5232] do_syscall_64+0x58/0xa0 [ 546.998686][ T5232] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 547.005104][ T5232] [ 547.005104][ T5232] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 547.012771][ T5232] __mutex_lock_common+0x1eb/0x2390 [ 547.018493][ T5232] mutex_lock_nested+0x17/0x20 [ 547.023784][ T5232] bg_scan_update+0x44/0x3b0 [ 547.029002][ T5232] process_one_work+0x863/0x1000 [ 547.034475][ T5232] worker_thread+0xaa8/0x12a0 [ 547.039681][ T5232] kthread+0x436/0x520 [ 547.044439][ T5232] ret_from_fork+0x1f/0x30 [ 547.049381][ T5232] [ 547.049381][ T5232] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 547.059315][ T5232] __lock_acquire+0x2c33/0x7c60 [ 547.064695][ T5232] lock_acquire+0x197/0x3f0 [ 547.069719][ T5232] __flush_work+0xdd/0x1b0 [ 547.074653][ T5232] __cancel_work_timer+0x3ac/0x520 [ 547.080284][ T5232] hci_request_cancel_all+0xcc/0x300 [ 547.086095][ T5232] hci_dev_do_close+0x4e/0x1030 [ 547.091469][ T5232] hci_rfkill_set_block+0x10a/0x190 [ 547.097190][ T5232] rfkill_set_block+0x1c6/0x420 [ 547.102563][ T5232] rfkill_epo+0x75/0x170 [ 547.107329][ T5232] rfkill_op_handler+0x76/0x220 [ 547.112701][ T5232] process_one_work+0x863/0x1000 [ 547.118160][ T5232] worker_thread+0xaa8/0x12a0 [ 547.123356][ T5232] kthread+0x436/0x520 [ 547.127941][ T5232] ret_from_fork+0x1f/0x30 [ 547.132880][ T5232] [ 547.132880][ T5232] other info that might help us debug this: [ 547.132880][ T5232] [ 547.143114][ T5232] Chain exists of: [ 547.143114][ T5232] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 547.143114][ T5232] [ 547.158838][ T5232] Possible unsafe locking scenario: [ 547.158838][ T5232] [ 547.166287][ T5232] CPU0 CPU1 [ 547.171646][ T5232] ---- ---- [ 547.177003][ T5232] lock(rfkill_global_mutex); [ 547.181764][ T5232] lock(&data->open_mutex); [ 547.188871][ T5232] lock(rfkill_global_mutex); [ 547.196151][ T5232] lock((work_completion)(&hdev->bg_scan_update)); [ 547.202735][ T5232] [ 547.202735][ T5232] *** DEADLOCK *** [ 547.202735][ T5232] [ 547.210871][ T5232] 3 locks held by kworker/0:8/5232: [ 547.216061][ T5232] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 547.226415][ T5232] #1: ffffc9000309fd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 547.236769][ T5232] #2: ffffffff8d4be228 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 547.246476][ T5232] [ 547.246476][ T5232] stack backtrace: [ 547.252363][ T5232] CPU: 0 PID: 5232 Comm: kworker/0:8 Not tainted 5.15.189-syzkaller #0 [ 547.260597][ T5232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 547.270650][ T5232] Workqueue: events rfkill_op_handler [ 547.276044][ T5232] Call Trace: [ 547.279318][ T5232] [ 547.282255][ T5232] dump_stack_lvl+0x168/0x230 [ 547.286942][ T5232] ? load_image+0x3b0/0x3b0 [ 547.291443][ T5232] ? show_regs_print_info+0x20/0x20 [ 547.296643][ T5232] ? print_circular_bug+0x12b/0x1a0 [ 547.301842][ T5232] check_noncircular+0x274/0x310 [ 547.306783][ T5232] ? add_chain_block+0x940/0x940 [ 547.311824][ T5232] ? lockdep_lock+0xdc/0x1e0 [ 547.316418][ T5232] ? __lock_acquire+0x12d9/0x7c60 [ 547.321442][ T5232] ? lockdep_lock+0x1e0/0x1e0 [ 547.326124][ T5232] ? mark_lock+0x94/0x320 [ 547.330466][ T5232] __lock_acquire+0x2c33/0x7c60 [ 547.335321][ T5232] ? unwind_next_frame+0x1296/0x1d90 [ 547.340609][ T5232] ? verify_lock_unused+0x140/0x140 [ 547.345818][ T5232] ? ret_from_fork+0x1e/0x30 [ 547.350413][ T5232] lock_acquire+0x197/0x3f0 [ 547.354981][ T5232] ? __flush_work+0xc1/0x1b0 [ 547.359571][ T5232] ? __lock_acquire+0x7c60/0x7c60 [ 547.364595][ T5232] ? read_lock_is_recursive+0x10/0x10 [ 547.369969][ T5232] ? start_flush_work+0x776/0x820 [ 547.374994][ T5232] ? kasan_set_track+0x62/0x70 [ 547.379766][ T5232] __flush_work+0xdd/0x1b0 [ 547.384187][ T5232] ? __flush_work+0xc1/0x1b0 [ 547.388775][ T5232] ? flush_work+0x20/0x20 [ 547.393105][ T5232] ? try_to_grab_pending+0xf3/0x7e0 [ 547.398304][ T5232] ? lockdep_hardirqs_off+0x70/0x100 [ 547.403589][ T5232] ? mark_lock+0x94/0x320 [ 547.407924][ T5232] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 547.413901][ T5232] ? lock_chain_count+0x20/0x20 [ 547.418751][ T5232] ? lockdep_hardirqs_off+0x70/0x100 [ 547.424036][ T5232] ? mark_lock+0x94/0x320 [ 547.428365][ T5232] ? __cancel_work_timer+0x331/0x520 [ 547.433653][ T5232] __cancel_work_timer+0x3ac/0x520 [ 547.438766][ T5232] ? cancel_work_sync+0x20/0x20 [ 547.443624][ T5232] ? __cancel_work+0x1f4/0x2d0 [ 547.448385][ T5232] ? lockdep_hardirqs_on+0x94/0x140 [ 547.453580][ T5232] ? __cancel_work+0x26f/0x2d0 [ 547.458344][ T5232] ? cancel_work+0x20/0x20 [ 547.462762][ T5232] hci_request_cancel_all+0xcc/0x300 [ 547.468054][ T5232] hci_dev_do_close+0x4e/0x1030 [ 547.472913][ T5232] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 547.478827][ T5232] ? _raw_spin_unlock+0x40/0x40 [ 547.483819][ T5232] ? kobject_uevent_env+0x371/0x890 [ 547.489053][ T5232] hci_rfkill_set_block+0x10a/0x190 [ 547.494262][ T5232] ? rcu_lock_release+0x20/0x20 [ 547.499122][ T5232] rfkill_set_block+0x1c6/0x420 [ 547.503977][ T5232] rfkill_epo+0x75/0x170 [ 547.508349][ T5232] rfkill_op_handler+0x76/0x220 [ 547.513264][ T5232] process_one_work+0x863/0x1000 [ 547.518228][ T5232] ? worker_detach_from_pool+0x240/0x240 [ 547.523861][ T5232] ? lockdep_hardirqs_off+0x70/0x100 [ 547.529186][ T5232] ? _raw_spin_lock_irq+0xab/0xe0 [ 547.534304][ T5232] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 547.539811][ T5232] ? wq_worker_running+0x97/0x170 [ 547.544838][ T5232] worker_thread+0xaa8/0x12a0 [ 547.549590][ T5232] ? lockdep_hardirqs_on+0x94/0x140 [ 547.554806][ T5232] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 547.560707][ T5232] kthread+0x436/0x520 [ 547.564831][ T5232] ? rcu_lock_release+0x20/0x20 [ 547.569706][ T5232] ? kthread_blkcg+0xd0/0xd0 [ 547.574294][ T5232] ret_from_fork+0x1f/0x30 [ 547.578717][ T5232] [ 547.883995][ T4264] Bluetooth: hci2: command 0x041b tx timeout [ 548.804539][ T499] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.876797][ T499] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.946937][ T499] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.046766][ T499] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.191658][ T499] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.229090][ T499] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.277202][ T499] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.327582][ T499] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.808736][ T499] device erspan0 left promiscuous mode [ 550.276892][ T499] device batadv_slave_1 left promiscuous mode [ 550.286301][ T499] device hsr_slave_0 left promiscuous mode [ 550.292585][ T499] device hsr_slave_1 left promiscuous mode [ 550.301522][ T499] batman_adv: batadv0: Interface deactivated: dummy0 [ 550.308385][ T499] batman_adv: batadv0: Removing interface: dummy0 [ 550.315634][ T499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.323157][ T499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.330845][ T499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.338709][ T499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.348236][ T499] device bridge_slave_1 left promiscuous mode [ 550.354831][ T499] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.363421][ T499] device bridge_slave_0 left promiscuous mode [ 550.369664][ T499] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.381026][ T499] device hsr_slave_0 left promiscuous mode [ 550.387480][ T499] device hsr_slave_1 left promiscuous mode [ 550.396179][ T499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.403894][ T499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.411651][ T499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.421670][ T499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.429535][ T499] device bridge_slave_1 left promiscuous mode [ 550.436094][ T499] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.443975][ T499] device bridge_slave_0 left promiscuous mode [ 550.450151][ T499] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.462069][ T499] device veth1_macvtap left promiscuous mode [ 550.468145][ T499] device veth0_macvtap left promiscuous mode [ 550.474289][ T499] device veth1_vlan left promiscuous mode [ 550.480061][ T499] device veth0_vlan left promiscuous mode [ 550.486443][ T499] device veth1_macvtap left promiscuous mode [ 550.492487][ T499] device veth0_macvtap left promiscuous mode [ 550.498580][ T499] device veth1_vlan left promiscuous mode [ 550.504432][ T499] device veth0_vlan left promiscuous mode [ 550.645424][ T499] team0 (unregistering): Port device team_slave_1 removed [ 550.658559][ T499] team0 (unregistering): Port device team_slave_0 removed [ 550.669345][ T499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.682459][ T499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.730255][ T499] bond0 (unregistering): Released all slaves [ 550.806022][ T499] team0 (unregistering): Port device team_slave_1 removed [ 550.817038][ T499] team0 (unregistering): Port device team_slave_0 removed [ 550.829797][ T499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.843234][ T499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.889714][ T499] bond0 (unregistering): Released all slaves [ 552.935743][ T499] device hsr_slave_0 left promiscuous mode [ 552.942151][ T499] device hsr_slave_1 left promiscuous mode [ 552.950478][ T499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.958499][ T499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.967784][ T499] device bridge_slave_1 left promiscuous mode [ 552.974473][ T499] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.982790][ T499] device bridge_slave_0 left promiscuous mode [ 552.991192][ T499] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.080275][ T499] team0 (unregistering): Port device team_slave_1 removed [ 553.092206][ T499] team0 (unregistering): Port device team_slave_0 removed [ 553.102777][ T499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.115280][ T499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.159545][ T499] bond0 (unregistering): Released all slaves