last executing test programs: 10.235880371s ago: executing program 3 (id=1052): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x18, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 9.968751034s ago: executing program 3 (id=1055): syz_usb_connect$uac1(0x0, 0xda, &(0x7f0000000000)=ANY=[], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) 6.909571107s ago: executing program 3 (id=1076): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 6.792060617s ago: executing program 3 (id=1078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0xbc}}, 0x0) 6.449428375s ago: executing program 3 (id=1079): prlimit64(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000001105000300000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 6.323985555s ago: executing program 3 (id=1080): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x32, 0x0, 0x0) write(r0, 0x0, 0x0) 4.044988064s ago: executing program 2 (id=1095): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f0000000f00)={[{@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_winnt}, {@utf8no}, {@uni_xlate}, {@fat=@showexec}, {@fat=@flush}, {@shortname_win95}, {@numtail}, {@rodir}, {@utf8no}, {@shortname_mixed}, {@numtail}]}, 0x1, 0x26c, &(0x7f0000000340)="$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") mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) 3.696537024s ago: executing program 2 (id=1098): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) 3.516063979s ago: executing program 2 (id=1100): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000500)) 2.831722565s ago: executing program 2 (id=1104): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) 2.355810865s ago: executing program 2 (id=1107): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x0, 0xfffffdb7, &(0x7f0000000000)="8a39ebc33d3cd5262e53603ea04d6fc0ab41d63d38113db3693c0630ca49d0b531001caed5aecd8a6252d13c46385160a01fbb0607b2caa9b3105cab9e0c863e72c2a290ae1080fcb7920d45bb26b9224c"}) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) r1 = getpid() sched_setscheduler(0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000880)='./file0\x00', 0x80000c, &(0x7f0000000780)=ANY=[@ANYBLOB="706172743d3078300002a27f9edc6b44900000c63d5f852c6769643d215dd9be53b7de3d24d0b9696eb357036b81e23ff1873823ae7cbbcc50c0eda30000aa2a01019e5c3c47a005cd8c90a6710cd63597414df0dbb226adde892d84a9b2b1e467df7e391874b6966b20f5cd9e503c6b6f6d0c98f435ab0def859c1fb700"/139, @ANYRESOCT, @ANYRESOCT=r1, @ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES16, @ANYRES64], 0x1, 0x701, &(0x7f00000009c0)="$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") geteuid() mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) clock_adjtime(0x0, &(0x7f00000004c0)={0xc5}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) keyctl$revoke(0x3, r3) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) 1.629371955s ago: executing program 4 (id=1109): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='bcache_read\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0xa1ff) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000006c0)={[{@grpquota}, {@nobh}, {@resuid={'resuid', 0x3d, r6}}, {@max_batch_time={'max_batch_time', 0x3d, 0x100}}, {@lazytime}, {@jqfmt_vfsold}, {@dioread_lock}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000400)=0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x800000, &(0x7f0000001200)=ANY=[@ANYRESDEC=r8, @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYRES16=r7, @ANYRESDEC=r6, @ANYBLOB=',uid>', @ANYRESDEC=r8, @ANYBLOB="2c6d65617375a3f1ac84534e69742c736dae1d79134994216566d785241918893a08706964732e632c00000000000000400f7e8024128a5d2fa274a0a047510d46455c3ea0a8619c8149a6f1ad03b0948b7d32814dad00000000", @ANYRESHEX=r0, @ANYRES64=r5, @ANYRESOCT, @ANYRES32=r8, @ANYRESOCT=r2]) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x8) ftruncate(r3, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x1, 0x495, &(0x7f0000000a40)="$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") r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0) ftruncate(r11, 0x1005) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000013000100"/20, @ANYRES32=r13, @ANYBLOB="000000000000000014001a80100002800c00018008001d00403f0000"], 0x34}}, 0x0) sendmmsg$inet(r9, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100}}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @dev={0xac, 0x14, 0x14, 0x20}, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x88}}], 0x70}}], 0x1, 0x0) 1.061480622s ago: executing program 0 (id=1112): creat(&(0x7f0000003200)='./file0\x00', 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x178, &(0x7f0000000240)="$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") 1.040219394s ago: executing program 1 (id=1113): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001a0001000000000000000000022020000000000000000000080002007f"], 0x2c}}, 0x0) 1.013811366s ago: executing program 4 (id=1114): syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"/895, @ANYRESOCT=0x0, @ANYRES32], 0x0, 0x2b1, &(0x7f0000000840)="$eJzs3c9qY1UYAPDvJmkadZEibhTBC7pwVWbcummUEcSulAjqxuB0QJIykIGAI9iZ1TyBS/E1fATXvoHgVnDXLipX7r/8aZMa26YF+/tB28M55zvnu+e06Spfvn7zcPjwcRLPj3+PTieJxl7sxUkSO9GI2rNoBQDw/3GSZfFXVraT6ms9rcbmsgIANqn8/1+67VwAgJvx2RdfftLb33/waZp24vXui0k/iYjDF5N+Od57FN/GKA7iXnTjNCKbKtsffbz/IFppbifeOTya9CcL6/f+jCji41nZsST+flqq4vsR+c+teDnS6D3aqpfqxmvL939vSXz02/Hu23P570Y3fvsmHscoHhZpzOJ/uJ+mH2Y/Hn//Vb5NHp80or9dzJvJmvn39uavBAAAAAAAAAAAAAAAAAAAAACAO2A3TZOyfE9RvyfvqurvNE+L8d20trNYn6eMn9YLLusDZXWFn6Msfqrr69xL0zSrJs7iW/FGywcLAAAAAAAAAAAAAAAAAAAAQO7Jd0+Hg9HoYHzlRnM4GNXVAOq39V92wb25nrfi6XDQXL3g9vp7zVcbyHO9cHK0WnENx7JO46U8nxVzfq7y/e8rb88u9/MqvL6Ya32KVz+YZphWQ/UhDwfJv+3VqS/ul/mhdlw2n+JuRwfjrPiVOM0W77Sz4jDb13Qa7VeWDv2dZdl667z/R3lHVU9SlNhYb/etqnH2Aad/O53zd/Hr6gVXvmQ0r/J6AwAAAAAAAAAAAAAAAAAArLb4xukznl8Y2thYUgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABww2af/183OhGx2HOucVQFXzRnnFSTxk9u8fEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4I/4JAAD//5+RQjQ=") setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x48}}, 0x0) r1 = openat(r0, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000000)) 869.462908ms ago: executing program 1 (id=1115): unlinkat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x2, 0x0) syz_emit_ethernet(0x4b, &(0x7f00000017c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x15, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x5}, {'~'}}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 729.828179ms ago: executing program 4 (id=1116): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x10008c0, &(0x7f0000000080)=ANY=[@ANYBLOB="00b6c0932b2b78099d477dd049049de5974e717ad42e3ec27c7612f8edb0"], 0x16, 0x2c6, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0, 0x3, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 642.415357ms ago: executing program 0 (id=1117): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000380)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x24}}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) 641.900747ms ago: executing program 2 (id=1118): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)={0x298, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x38, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x437b9e34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x688842f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x17c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c8d3ad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bffc33b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x99d2592}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24db2aef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x482a808e}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36b6d0f2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24fe38f2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fee87dc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fded35e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17416c03}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1412b5d8}]}, {0x4}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a9cad5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a36c85a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x562cbb89}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1644e4b4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79c9dfa6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x486db1cb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62e8f93f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25731d0a}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x88, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e9e4bef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x428e1119}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6faf6718}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1881a454}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x298}, 0x1, 0x0, 0x0, 0x48081}, 0x8000890) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r7, 0x0, 0x8000f28, 0x0) splice(r6, 0x0, r8, 0x0, 0x800100000, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r6, 0x0, 0x0, 0x39, &(0x7f00000002c0), &(0x7f00000000c0)=""/57, 0x2, 0x0, 0xf1, 0x66, &(0x7f0000000380)="5282e2e02ebbad9fd8260b640dd9f80223f3af2f6312bddc4b78b076742e516e57722ed89aeb2dc66e17aba080dbb7d689c3e87bcb6cbe0d09ae81cdd3260e98eac59c24f15024917fa85221081db846941641a36855bae0b6ee3c4f49c6e4ba20fdf5a4f28832c4eb8ccbf7ee6c979d53ffa53de4a0993a776828dbd01d3d46eb44dcaafe9b1d57d8d73d264c879c546829d5f2e54bbf2cd4331aa529238721c898e03338732dfa335875a9a912cbcef36db0db5d5ee968478aba6b3473e7a2884df25a48e2f968e9b1a61c47b3d76fb7efb28f769c00c0fada8c2d374a129ac6c6c9bb05ba05a27436572b8e333b1629", &(0x7f0000000600)="e2d6f1f71577d5a6322e593bc295990d840cc7419f22bbb4defd6f188f1557ef7dd630e264c49ff9bcedf0348004e5badeb1331660655cbf1de9d07f64645bcb45a599fe1fd752cdc704a8cfeffd039d1d33749a38e6b38ec58e46f4bc4e16b2d44ca58a9d7a", 0x0, 0x0, 0x3}, 0x50) socket$kcm(0x2, 0x0, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01}, @val, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5}}}}}, 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x30, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}]}, 0x30}}, 0x4000880) 522.605686ms ago: executing program 1 (id=1119): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6}]}]}, 0x28}}, 0x0) 457.580872ms ago: executing program 0 (id=1120): socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @null, @bpq0, 0x0, [@bcast, @default, @default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}) 402.721147ms ago: executing program 0 (id=1121): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={0x0, 'xfrm0\x00', {0xffffffff}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000007"], 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc95}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0xaa}]}, 0x0, 0x5}, 0x90) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_procfs$namespace(0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SIOCRSSL2CALL(r2, 0x89e2, 0x0) close(0xffffffffffffffff) 369.509109ms ago: executing program 4 (id=1122): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8", 0x18) 277.285197ms ago: executing program 1 (id=1123): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001d80)=[{{&(0x7f00000002c0)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)='(', 0x1}], 0x1}}, {{&(0x7f0000000340), 0x10, &(0x7f0000001040)=[{&(0x7f0000000ac0)='U', 0x1}], 0x1}}], 0x2, 0x0) 215.362422ms ago: executing program 0 (id=1124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x34}}, 0x0) 144.680588ms ago: executing program 1 (id=1125): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 101.274632ms ago: executing program 4 (id=1126): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0) 98.890432ms ago: executing program 0 (id=1127): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x8}, 0x90) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8953, &(0x7f0000000280)) 58.319715ms ago: executing program 4 (id=1128): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 0s ago: executing program 1 (id=1129): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x6, 'syz1\x00', @default, 0x0, 0x2, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): promiscuous mode [ 323.207255][ T441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.261824][ T441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.325695][ T441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.345032][ T441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.385740][ T441] device bridge_slave_1 left promiscuous mode [ 323.440635][ T441] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.490340][ T441] device bridge_slave_0 left promiscuous mode [ 323.497673][ T441] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.512230][ T441] device hsr_slave_0 left promiscuous mode [ 323.522376][ T441] device hsr_slave_1 left promiscuous mode [ 323.537170][ T441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.552074][ T441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.572078][ T441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.579745][ T441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.595580][ T441] device bridge_slave_1 left promiscuous mode [ 323.610644][ T441] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.628745][ T441] device bridge_slave_0 left promiscuous mode [ 323.637307][ T441] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.672648][ T441] device veth1_macvtap left promiscuous mode [ 323.678804][ T441] device veth0_macvtap left promiscuous mode [ 323.695694][ T441] device veth1_vlan left promiscuous mode [ 323.702762][ T441] device veth0_vlan left promiscuous mode [ 323.709906][ T441] device veth1_macvtap left promiscuous mode [ 323.718970][ T441] device veth0_macvtap left promiscuous mode [ 323.725299][ T441] device veth1_vlan left promiscuous mode [ 323.731793][ T441] device veth0_vlan left promiscuous mode [ 323.742361][ T441] device veth1_macvtap left promiscuous mode [ 323.748406][ T441] device veth0_macvtap left promiscuous mode [ 323.755370][ T441] device veth1_vlan left promiscuous mode [ 323.762321][ T441] device veth0_vlan left promiscuous mode [ 324.190758][ T5883] Bluetooth: hci5: command 0x0409 tx timeout [ 324.366025][ T441] team0 (unregistering): Port device team_slave_1 removed [ 324.396160][ T441] team0 (unregistering): Port device team_slave_0 removed [ 324.429118][ T441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.459156][ T441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.579894][ T441] bond0 (unregistering): Released all slaves [ 324.866936][ T441] team0 (unregistering): Port device team_slave_1 removed [ 324.900109][ T441] team0 (unregistering): Port device team_slave_0 removed [ 324.932561][ T441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.949891][ T441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.057053][ T441] bond0 (unregistering): Released all slaves [ 325.285371][ T441] team0 (unregistering): Port device team_slave_1 removed [ 325.303727][ T441] team0 (unregistering): Port device team_slave_0 removed [ 325.318356][ T441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.339887][ T441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.472103][ T441] bond0 (unregistering): Released all slaves [ 325.547987][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 325.557135][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 325.567003][ T3809] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.575114][ T3809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.632140][ T5883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 325.640175][ T5883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 325.666640][ T5883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 325.675743][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.682860][ T5883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.691548][ T5883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 325.700329][ T5883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 325.721328][ T5883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 325.760937][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 325.769719][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 325.789256][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 325.821207][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 325.830021][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 325.854681][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 325.877118][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 325.888432][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 325.897367][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 325.911309][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 325.926846][ T6781] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 325.975524][ T6781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 326.014520][ T6871] chnl_net:caif_netlink_parms(): no params data found [ 326.064854][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 326.083081][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 326.112790][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 326.141495][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 326.164865][ T6774] device veth0_vlan entered promiscuous mode [ 326.185307][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 326.206327][ T6774] device veth1_vlan entered promiscuous mode [ 326.270530][ T3778] Bluetooth: hci5: command 0x041b tx timeout [ 326.367226][ T6774] device veth0_macvtap entered promiscuous mode [ 326.405447][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 326.429668][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 326.462261][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 326.505219][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 326.536899][ T6774] device veth1_macvtap entered promiscuous mode [ 326.562289][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 326.585185][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 326.664087][ T6781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.724781][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 326.740826][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 326.749713][ T6871] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.780630][ T6871] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.790822][ T6871] device bridge_slave_0 entered promiscuous mode [ 326.815056][ T6871] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.830638][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.839530][ T6871] device bridge_slave_1 entered promiscuous mode [ 326.871048][ T6774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.899752][ T6774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.920763][ T6774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.950820][ T6774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.979302][ T6774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.002060][ T6774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.020502][ T6774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.045081][ T6774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.069933][ T6774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.093359][ T6774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.130508][ T6774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.170668][ T6774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.200692][ T6774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.228720][ T6774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.240128][ T6774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.250540][ T6774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.262292][ T6774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.275256][ T6774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.124311][ T6781] device veth0_vlan entered promiscuous mode [ 328.164576][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 328.178947][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 328.359198][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 328.369192][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 328.378700][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 328.387662][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 328.398738][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 328.407176][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 328.419981][ T6774] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.455158][ T3809] Bluetooth: hci5: command 0x040f tx timeout [ 328.490535][ T6774] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.605768][ T6774] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.728182][ T6774] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.018405][ T6871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.049433][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 329.061161][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 329.177019][ T6781] device veth1_vlan entered promiscuous mode [ 329.215379][ T6871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.386883][ T6039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.436476][ T6039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.058773][ T5883] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 330.067433][ T5883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 330.076538][ T5883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 330.102359][ T6871] team0: Port device team_slave_0 added [ 330.111704][ T6781] device veth0_macvtap entered promiscuous mode [ 330.129507][ T6871] team0: Port device team_slave_1 added [ 330.151584][ T6781] device veth1_macvtap entered promiscuous mode [ 330.181927][ T3986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.229092][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.269940][ T3986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.300239][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.323500][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.343211][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.377307][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.390619][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.409952][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.431021][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.451643][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.474914][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.504240][ T6781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.512024][ T3778] Bluetooth: hci5: command 0x0419 tx timeout [ 330.550240][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 330.561218][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 330.569602][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 330.578164][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 330.587336][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 330.605976][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.623533][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.637502][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.649838][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.660438][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.673751][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.683940][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.694718][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.704869][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.715724][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.766046][ T6781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.801086][ T6871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.808048][ T6871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.882871][ T6871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.922990][ T6871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.929949][ T6871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.000437][ T6871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.104515][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 331.113911][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 331.125389][ T6781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.139210][ T6781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.148152][ T6781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.158322][ T6781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.921135][ T6871] device hsr_slave_0 entered promiscuous mode [ 331.929248][ T6871] device hsr_slave_1 entered promiscuous mode [ 331.982554][ T3788] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 332.125495][ T3986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.160684][ T3986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.201776][ T3885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.213486][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 332.231681][ T3885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.237792][ T6988] loop3: detected capacity change from 0 to 128 [ 332.291856][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 332.380653][ T6988] EXT4-fs error (device loop3): ext4_fill_super:4840: inode #2: comm syz.3.513: iget: checksum invalid [ 332.409038][ T6988] EXT4-fs (loop3): get root inode failed [ 332.425736][ T6988] EXT4-fs (loop3): mount failed [ 332.447830][ T6871] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.514438][ T3788] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 332.530607][ T3788] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.546496][ T6871] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.550591][ T3788] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 332.609416][ T3788] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 332.719404][ T6871] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.723454][ T6994] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 332.860913][ T3788] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 332.878425][ T6871] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.880246][ T3788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.905086][ T6996] loop3: detected capacity change from 0 to 256 [ 332.942300][ T3788] usb 5-1: Product: syz [ 332.946489][ T3788] usb 5-1: Manufacturer: syz [ 332.970508][ T3788] usb 5-1: SerialNumber: syz [ 333.021841][ T6992] loop2: detected capacity change from 0 to 32768 [ 333.048296][ T6996] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 333.061666][ T3788] cdc_ncm 5-1:1.0: skipping garbage [ 333.066881][ T3788] cdc_ncm 5-1:1.0: skipping garbage [ 333.088284][ T3788] cdc_ncm 5-1:1.0: skipping garbage [ 333.094640][ T6996] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 333.096608][ T6871] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 333.112013][ T3788] cdc_ncm 5-1:1.0: skipping garbage [ 333.153374][ T3788] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 333.203040][ T3788] cdc_ncm 5-1:1.0: bind() failure [ 333.755118][ T6871] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 333.769509][ T3609] usb 5-1: USB disconnect, device number 9 [ 333.857114][ T6871] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 333.926478][ T6871] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 334.216306][ T7005] loop2: detected capacity change from 0 to 128 [ 334.352824][ T6871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.395570][ T7005] EXT4-fs (loop2): Project quota feature not enabled. Cannot enable project quota enforcement. [ 334.447170][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 334.477592][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 334.492786][ T6871] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.540091][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 334.611616][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.664035][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.671175][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.708916][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 334.744628][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 334.787184][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.794388][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.806081][ T7011] loop4: detected capacity change from 0 to 512 [ 334.908406][ T7011] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 335.008088][ T7013] loop2: detected capacity change from 0 to 512 [ 335.032818][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 335.042173][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 335.051264][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 335.060296][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 335.067406][ T7011] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.520: iget: bad i_size value: -67835469387268086 [ 335.070944][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 335.089963][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 335.100687][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 335.109204][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 335.118962][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 335.128471][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 335.149313][ T7011] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.520: couldn't read orphan inode 15 (err -117) [ 335.243957][ T6871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.390065][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 335.398671][ T7013] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #15: comm syz.2.521: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 335.399723][ T7011] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 335.419065][ T7013] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.521: couldn't read orphan inode 15 (err -117) [ 335.441097][ T7013] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 335.481538][ T7013] netlink: 204 bytes leftover after parsing attributes in process `syz.2.521'. [ 335.484900][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 335.498845][ T7011] ext2 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 335.499399][ T7013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.521'. [ 335.509421][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 335.694427][ T7002] chnl_net:caif_netlink_parms(): no params data found [ 335.842178][ T7002] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.849430][ T7002] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.858504][ T7002] device bridge_slave_0 entered promiscuous mode [ 335.868121][ T7002] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.903917][ T7002] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.926481][ T7002] device bridge_slave_1 entered promiscuous mode [ 335.948555][ T6871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.958089][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 335.960522][ T3615] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 335.966475][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 336.024442][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 336.037588][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 336.241740][ T7002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.270834][ T3783] Bluetooth: hci2: command 0x0409 tx timeout [ 336.326492][ T7002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.381144][ T3615] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 336.418317][ T3615] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 336.455241][ T3615] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 336.490716][ T3615] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 336.700825][ T3615] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 336.743866][ T3615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 336.758128][ T7002] team0: Port device team_slave_0 added [ 336.794383][ T7002] team0: Port device team_slave_1 added [ 336.801002][ T3615] usb 3-1: SerialNumber: syz [ 336.879521][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.889193][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.935851][ T7002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.946960][ T7027] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 336.982774][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.990011][ T7027] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 336.993567][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.022581][ T3615] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 337.028769][ T7002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.126725][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 337.147170][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 338.085303][ T23] Bluetooth: hci0: command 0x0c1a tx timeout [ 338.178272][ T6871] device veth0_vlan entered promiscuous mode [ 338.213434][ T3615] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 338.302661][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 338.317704][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 338.475484][ T3615] usb 3-1: USB disconnect, device number 11 [ 338.710867][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.809773][ T3787] Bluetooth: hci2: command 0x041b tx timeout [ 339.398989][ T7002] device hsr_slave_0 entered promiscuous mode [ 339.413092][ T7002] device hsr_slave_1 entered promiscuous mode [ 339.529554][ T7002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.539791][ T7002] Cannot create hsr debugfs directory [ 339.559543][ T6871] device veth1_vlan entered promiscuous mode [ 339.582067][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.682959][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.730710][ T3807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 339.739829][ T3807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 339.764985][ T6871] device veth0_macvtap entered promiscuous mode [ 339.794593][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.843883][ T6871] device veth1_macvtap entered promiscuous mode [ 339.947397][ T3615] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 339.981973][ T6871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.005915][ T6871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.018402][ T6871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.039860][ T6871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.049835][ T6871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.060667][ T6871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.079553][ T6871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.095688][ T6871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.106281][ T6871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.117035][ T6871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.129563][ T6871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.140319][ T6871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.161965][ T6871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.184082][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 340.199399][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 340.207916][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 340.217474][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 340.226539][ T3783] Bluetooth: hci0: command 0x0406 tx timeout [ 340.234978][ T6871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.247926][ T6871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.269193][ T6871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.270636][ T3807] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 340.280188][ T6871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.304672][ T6871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.316268][ T6871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.328312][ T6871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.345206][ T6871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.360695][ T3615] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.376871][ T3615] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 340.386244][ T6871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.398823][ T3615] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 340.408562][ T6871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.419700][ T3615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.428719][ T6871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.442212][ T3615] usb 3-1: config 0 descriptor?? [ 340.448731][ T6871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.471363][ T6871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.485697][ T6871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.499853][ T6871] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.509482][ T6871] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.526537][ T6871] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.555534][ T3787] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 340.569652][ T3787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 340.573095][ T7103] 9pnet_virtio: no channels available for device syz [ 340.640814][ T3807] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 340.706285][ T3807] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 340.766647][ T3807] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 340.799117][ T3807] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 340.824257][ T7107] 9pnet_virtio: no channels available for device syz [ 340.832119][ T3809] Bluetooth: hci2: command 0x040f tx timeout [ 340.920734][ T3615] usb 3-1: string descriptor 0 read error: -71 [ 340.930846][ T3615] usb 3-1: USB disconnect, device number 12 [ 340.935031][ T3807] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 340.979633][ T3988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.992325][ T3807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 341.021587][ T3988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.021737][ T3807] usb 4-1: SerialNumber: syz [ 341.071396][ T7085] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 341.094951][ T7085] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 341.096464][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 341.111408][ T3807] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 341.124179][ T1522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.150903][ T1522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.236890][ T7125] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 341.296383][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 341.392869][ T3807] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 341.450703][ T3807] usb 4-1: USB disconnect, device number 12 [ 341.672910][ T7002] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 341.715152][ T7002] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 341.757953][ T7002] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 341.826298][ T7002] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 342.269234][ T7002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.326673][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 342.335374][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 342.473959][ T7134] loop0: detected capacity change from 0 to 32768 [ 342.492123][ T7002] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.616728][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 342.626646][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.661579][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.668679][ T3615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.730777][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 342.752394][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 342.783048][ T3615] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.790798][ T3615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.872499][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 342.887159][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 342.914218][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 342.931442][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 342.942193][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 342.961133][ T3615] Bluetooth: hci2: command 0x0419 tx timeout [ 342.980620][ T3789] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 342.991261][ T3787] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 342.999238][ T3787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 343.017429][ T3787] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 343.029709][ T3787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 343.045983][ T3787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 343.060008][ T3787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 343.077538][ T3787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 343.092005][ T7002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 343.332308][ T9] device hsr_slave_0 left promiscuous mode [ 343.339140][ T9] device hsr_slave_1 left promiscuous mode [ 343.348541][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.356564][ T3789] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 343.374879][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.393123][ T3789] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 343.406085][ T3789] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 343.418013][ T3789] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 343.434661][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.443602][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.451890][ T9] device bridge_slave_1 left promiscuous mode [ 343.458277][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.483222][ T9] device bridge_slave_0 left promiscuous mode [ 343.489462][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.506927][ T9] device hsr_slave_0 left promiscuous mode [ 343.513142][ T3789] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 343.532521][ T3789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 343.541280][ T3789] usb 3-1: SerialNumber: syz [ 343.563358][ T9] device hsr_slave_1 left promiscuous mode [ 343.580994][ T7191] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 343.588195][ T7191] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 343.601048][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.608516][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.621407][ T3789] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 343.643060][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.672281][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.684833][ T9] device bridge_slave_1 left promiscuous mode [ 343.691923][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.713562][ T9] device bridge_slave_0 left promiscuous mode [ 343.719841][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.747524][ T9] device veth1_macvtap left promiscuous mode [ 343.753852][ T9] device veth0_macvtap left promiscuous mode [ 343.761399][ T9] device veth1_vlan left promiscuous mode [ 343.767227][ T9] device veth0_vlan left promiscuous mode [ 343.798646][ T9] device veth1_macvtap left promiscuous mode [ 343.823796][ T9] device veth0_macvtap left promiscuous mode [ 343.849274][ T9] device veth1_vlan left promiscuous mode [ 343.860811][ T9] device veth0_vlan left promiscuous mode [ 344.014270][ T7221] loop3: detected capacity change from 0 to 512 [ 344.186074][ T7221] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 344.222606][ T7221] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 344.912143][ T7221] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 344.942418][ T7221] System zones: 1-12 [ 344.994268][ T7221] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz.3.579: corrupted in-inode xattr [ 345.060647][ T7221] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.579: couldn't read orphan inode 15 (err -117) [ 345.080974][ T7221] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 345.240563][ T3799] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 345.828595][ T9] team0 (unregistering): Port device team_slave_1 removed [ 345.869153][ T9] team0 (unregistering): Port device team_slave_0 removed [ 345.894141][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.921774][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.129007][ T9] bond0 (unregistering): Released all slaves [ 346.151607][ T3799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.193374][ T3799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.221408][ T3799] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 346.239563][ T3799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.267390][ T3799] usb 5-1: config 0 descriptor?? [ 346.569045][ T9] team0 (unregistering): Port device team_slave_1 removed [ 346.607009][ T9] team0 (unregistering): Port device team_slave_0 removed [ 346.629432][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.683250][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.800105][ T3799] belkin 0003:1020:0006.0003: report_id 0 is invalid [ 346.818276][ T3799] belkin 0003:1020:0006.0003: item 0 0 1 8 parsing failed [ 346.848287][ T3799] belkin 0003:1020:0006.0003: parse failed [ 346.860665][ T3799] belkin: probe of 0003:1020:0006.0003 failed with error -22 [ 346.979035][ T9] bond0 (unregistering): Released all slaves [ 347.002222][ T3783] usb 5-1: USB disconnect, device number 10 [ 347.119225][ T7002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.156823][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 347.164432][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 347.191668][ T3789] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 347.217464][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 347.229680][ T7247] cgroup: none used incorrectly [ 347.246407][ T3789] usb 3-1: USB disconnect, device number 13 [ 347.247744][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 347.332676][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 347.362138][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 347.382592][ T7002] device veth0_vlan entered promiscuous mode [ 347.410569][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 347.421150][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 347.443913][ T7002] device veth1_vlan entered promiscuous mode [ 347.500023][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 347.510715][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 347.529230][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 347.538225][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 347.553495][ T7002] device veth0_macvtap entered promiscuous mode [ 347.579786][ T7002] device veth1_macvtap entered promiscuous mode [ 347.594947][ T7256] loop4: detected capacity change from 0 to 512 [ 347.617312][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.630227][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.640639][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.651180][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.666131][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.688121][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.701525][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.721269][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.739972][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.771016][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.793333][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.802296][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 347.811692][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 347.820000][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 347.829294][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 347.842438][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.858934][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.860700][ T7256] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.587: casefold flag without casefold feature [ 347.875056][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.895665][ T3789] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 347.910745][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.921247][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.923261][ T7256] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz.4.587: missing EA_INODE flag [ 347.931931][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.954871][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.965493][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.977013][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.987974][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.999552][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.006463][ T7256] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.587: error while reading EA inode 2 err=-117 [ 348.020568][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 348.029328][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 348.042120][ T7002] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.061132][ T7002] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.080603][ T7002] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.089687][ T7002] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.090142][ T7256] EXT4-fs (loop4): 1 orphan inode deleted [ 348.146636][ T7256] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 348.380592][ T3789] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.383148][ T1522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.400505][ T3789] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 348.411223][ T1522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.437777][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 348.625373][ T7258] loop3: detected capacity change from 0 to 40427 [ 348.654457][ T1522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.663384][ T1522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.682495][ T3789] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 348.704008][ T3789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 348.720619][ T3789] usb 3-1: SerialNumber: syz [ 348.730777][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 348.862035][ T3809] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 348.884825][ T7258] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 348.910496][ T7258] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 349.002858][ T3789] usb 3-1: 0:2 : does not exist [ 349.011163][ T7258] F2FS-fs (loop3): invalid crc value [ 349.053905][ T7258] F2FS-fs (loop3): Found nat_bits in checkpoint [ 349.211981][ T7258] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 349.233962][ T7258] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 349.260761][ T3809] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.280879][ T3809] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 349.420861][ T3809] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 349.435741][ T3809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 349.449564][ T3789] usb 3-1: USB disconnect, device number 14 [ 349.498047][ T3809] usb 1-1: SerialNumber: syz [ 349.683240][ T5078] udevd[5078]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.795899][ T3809] usb 1-1: 0:2 : does not exist [ 350.000008][ T7262] loop0: detected capacity change from 0 to 512 [ 350.165641][ T7262] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 350.235630][ T7262] EXT4-fs (loop0): orphan cleanup on readonly fs [ 350.267638][ T7262] EXT4-fs warning (device loop0): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 350.387074][ T7262] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 350.397497][ T7328] netlink: 'syz.4.612': attribute type 29 has an invalid length. [ 350.420185][ T7262] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.589: bg 0: block 40: padding at end of block bitmap is not set [ 350.504513][ T7262] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6186: Corrupt filesystem [ 350.542055][ T7328] netlink: 'syz.4.612': attribute type 29 has an invalid length. [ 350.564514][ T7262] EXT4-fs (loop0): 1 truncate cleaned up [ 350.597100][ T7262] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 350.616563][ T7329] netlink: 'syz.4.612': attribute type 29 has an invalid length. [ 350.883786][ T3809] usb 1-1: USB disconnect, device number 4 [ 351.731143][ T5078] udevd[5078]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.080210][ T7379] tipc: Started in network mode [ 352.116945][ T7379] tipc: Node identity ac1414aa, cluster identity 4711 [ 352.136648][ T7379] tipc: New replicast peer: 0.0.0.0 [ 352.163302][ T7379] tipc: Enabled bearer , priority 10 [ 352.187368][ T7382] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 352.219296][ T7382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 352.247847][ T7382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 352.265880][ T7382] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 352.296308][ T7385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.638'. [ 352.328824][ T7388] 8021q: adding VLAN 0 to HW filter on device bond1 [ 352.374255][ T7388] bond0: (slave bond1): Enslaving as an active interface with an up link [ 352.540657][ T3808] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 352.566426][ T7403] netlink: 24 bytes leftover after parsing attributes in process `syz.3.645'. [ 352.940737][ T3808] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 352.962682][ T3808] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 352.987651][ T3808] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 353.014328][ T3808] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 353.161182][ T3808] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 353.172341][ T3808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 353.208149][ T3808] usb 5-1: SerialNumber: syz [ 353.250806][ T7390] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 353.268969][ T7390] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 353.279015][ T3789] tipc: Node number set to 2886997162 [ 353.291521][ T3808] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 353.312667][ T7444] device team0 entered promiscuous mode [ 353.325876][ T7444] device team_slave_0 entered promiscuous mode [ 353.334704][ T7444] device team_slave_1 entered promiscuous mode [ 353.347831][ T7444] device veth0 entered promiscuous mode [ 353.361116][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 353.537196][ T3808] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 353.596802][ T3808] usb 5-1: USB disconnect, device number 11 [ 353.807731][ T7467] loop0: detected capacity change from 0 to 1024 [ 353.928305][ T7467] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 354.023772][ T3789] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 354.120873][ T7481] loop2: detected capacity change from 0 to 1024 [ 354.130724][ T7479] device team0 entered promiscuous mode [ 354.140748][ T7479] device team_slave_0 entered promiscuous mode [ 354.147321][ T7479] device team_slave_1 entered promiscuous mode [ 354.177912][ T7483] loop4: detected capacity change from 0 to 512 [ 354.188634][ T7479] device veth0 entered promiscuous mode [ 354.193373][ T7485] loop0: detected capacity change from 0 to 1024 [ 354.203352][ T7479] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 354.212235][ T7479] Cannot create hsr debugfs directory [ 354.234709][ T3807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 354.250611][ T7483] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 354.274893][ T7485] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 354.294225][ T7483] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 354.354016][ T7483] EXT4-fs error (device loop4): __ext4_get_inode_loc:4309: comm syz.4.672: Invalid inode table block 0 in block_group 0 [ 354.391305][ T7483] EXT4-fs (loop4): get root inode failed [ 354.397181][ T7483] EXT4-fs (loop4): mount failed [ 354.402763][ T3789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.422485][ T3789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.436305][ T3789] usb 2-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 354.446883][ T3789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.459413][ T3789] usb 2-1: config 0 descriptor?? [ 354.584419][ T7491] syz.2.674[7491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.584547][ T7491] syz.2.674[7491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 355.365757][ T7483] loop4: detected capacity change from 0 to 4096 [ 355.434841][ T7483] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 355.493613][ T3789] wacom 0003:056A:00B1.0004: unknown main item tag 0x0 [ 355.504034][ T7497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.675'. [ 355.511637][ T3789] wacom 0003:056A:00B1.0004: Unknown device_type for 'HID 056a:00b1'. Assuming pen. [ 355.526676][ T3789] wacom 0003:056A:00B1.0004: hidraw0: USB HID v0.00 Device [HID 056a:00b1] on usb-dummy_hcd.1-1/input0 [ 355.529651][ T7491] syz.2.674[7491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 355.541643][ T3789] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B1.0004/input/input7 [ 355.630774][ T7491] syz.2.674[7491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 355.813625][ T3789] usb 2-1: USB disconnect, device number 12 [ 355.842337][ T9] device hsr_slave_0 left promiscuous mode [ 355.869432][ T9] device hsr_slave_1 left promiscuous mode [ 355.897849][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.946155][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.984571][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.004220][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.015917][ T9] device bridge_slave_1 left promiscuous mode [ 356.026875][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.039452][ T9] device bridge_slave_0 left promiscuous mode [ 356.054178][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.075854][ T9] device veth1_macvtap left promiscuous mode [ 356.084330][ T9] device veth0_macvtap left promiscuous mode [ 356.095936][ T9] device veth1_vlan left promiscuous mode [ 356.104269][ T9] device veth0_vlan left promiscuous mode [ 356.585345][ T9] team0 (unregistering): Port device team_slave_1 removed [ 356.599772][ T9] team0 (unregistering): Port device team_slave_0 removed [ 356.615186][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.629283][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.701767][ T9] bond0 (unregistering): Released all slaves [ 356.766281][ T7524] device team0 entered promiscuous mode [ 356.772036][ T7524] device team_slave_0 entered promiscuous mode [ 356.797320][ T7524] device team_slave_1 entered promiscuous mode [ 356.805690][ T7524] device veth0 entered promiscuous mode [ 356.813109][ T7524] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 356.821316][ T7524] Cannot create hsr debugfs directory [ 356.830188][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 356.907477][ T7532] loop0: detected capacity change from 0 to 512 [ 357.018103][ T7532] EXT4-fs (loop0): Ignoring removed nobh option [ 357.033429][ T7532] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 357.120019][ T7536] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.690'. [ 357.124096][ T7532] EXT4-fs (loop0): 1 truncate cleaned up [ 357.135906][ T7532] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 357.207195][ T7540] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.690'. [ 357.469275][ T7559] loop2: detected capacity change from 0 to 1024 [ 357.620638][ T3808] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 357.699451][ T7568] loop4: detected capacity change from 0 to 1024 [ 357.745498][ T7568] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 357.745498][ T7568] [ 357.756578][ T7568] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 357.789515][ T7571] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 357.815813][ T7569] loop0: detected capacity change from 0 to 1024 [ 357.901073][ T3808] usb 2-1: Using ep0 maxpacket: 8 [ 358.144801][ T3808] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 358.154463][ T3808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.176166][ T3808] usb 2-1: config 0 descriptor?? [ 359.012822][ T7581] loop4: detected capacity change from 0 to 2048 [ 359.148937][ T7582] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 359.238475][ T4376] hfsplus: b-tree write err: -5, ino 4 [ 359.724123][ T1522] hfsplus: b-tree write err: -5, ino 4 [ 359.863107][ T7579] loop3: detected capacity change from 0 to 32768 [ 360.116714][ T7579] XFS (loop3): Mounting V5 Filesystem [ 360.788739][ T7579] XFS (loop3): Ending clean mount [ 360.796077][ T7579] XFS (loop3): Quotacheck needed: Please wait. [ 360.844063][ T7579] XFS (loop3): Quotacheck: Done. [ 360.946049][ T6747] XFS (loop3): Unmounting Filesystem [ 361.089465][ T7614] loop4: detected capacity change from 0 to 1024 [ 361.166938][ T7614] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 361.166938][ T7614] [ 361.178075][ T7614] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 361.262175][ T7590] loop2: detected capacity change from 0 to 40427 [ 361.365228][ T7590] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 361.410525][ T7590] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 361.510931][ T3808] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 361.675079][ T3808] asix: probe of 2-1:0.0 failed with error -32 [ 361.724318][ T7590] F2FS-fs (loop2): invalid crc value [ 362.044034][ T7590] F2FS-fs (loop2): Found nat_bits in checkpoint [ 362.227211][ T7590] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 362.251074][ T7590] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 362.287960][ T3789] usb 2-1: USB disconnect, device number 13 [ 362.348065][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.712'. [ 362.357283][ T26] audit: type=1800 audit(1722458323.183:3): pid=7590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.708" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 363.093355][ T7654] loop3: detected capacity change from 0 to 256 [ 363.228863][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.730'. [ 363.527060][ T26] audit: type=1800 audit(1722458324.363:4): pid=7590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.708" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 363.610128][ T7640] loop1: detected capacity change from 0 to 32768 [ 363.682997][ T7671] loop0: detected capacity change from 0 to 256 [ 363.879578][ T7640] XFS (loop1): Mounting V5 Filesystem [ 363.929322][ T6781] attempt to access beyond end of device [ 363.929322][ T6781] loop2: rw=2049, want=45104, limit=40427 [ 363.942905][ T7687] loop3: detected capacity change from 0 to 256 [ 364.159514][ T7640] XFS (loop1): Ending clean mount [ 364.171867][ T7640] XFS (loop1): Quotacheck needed: Please wait. [ 364.333973][ T7640] XFS (loop1): Quotacheck: Done. [ 364.393496][ T7699] device pim6reg1 entered promiscuous mode [ 364.502307][ T7002] XFS (loop1): Unmounting Filesystem [ 365.003400][ T7716] loop2: detected capacity change from 0 to 256 [ 365.632792][ T7734] netlink: 'syz.3.762': attribute type 29 has an invalid length. [ 365.670634][ T7734] netlink: 'syz.3.762': attribute type 29 has an invalid length. [ 365.718240][ T7738] netlink: 'syz.3.762': attribute type 29 has an invalid length. [ 365.746239][ T7734] netlink: 'syz.3.762': attribute type 29 has an invalid length. [ 365.771653][ T7734] netlink: 'syz.3.762': attribute type 29 has an invalid length. [ 366.102638][ T7754] netlink: 'syz.1.770': attribute type 29 has an invalid length. [ 366.144782][ T7755] netlink: 168 bytes leftover after parsing attributes in process `syz.3.771'. [ 366.191129][ T7754] netlink: 'syz.1.770': attribute type 29 has an invalid length. [ 366.230772][ T7756] netlink: 'syz.1.770': attribute type 29 has an invalid length. [ 366.256344][ T7757] netlink: 'syz.1.770': attribute type 29 has an invalid length. [ 366.322058][ T7754] netlink: 'syz.1.770': attribute type 29 has an invalid length. [ 366.353489][ T7728] loop0: detected capacity change from 0 to 32768 [ 366.552528][ T7728] XFS (loop0): Mounting V5 Filesystem [ 366.703856][ T7728] XFS (loop0): Ending clean mount [ 366.721224][ T7728] XFS (loop0): Quotacheck needed: Please wait. [ 366.846660][ T7728] XFS (loop0): Quotacheck: Done. [ 367.062696][ T6871] XFS (loop0): Unmounting Filesystem [ 367.301073][ T7797] loop2: detected capacity change from 0 to 2048 [ 367.855404][ T7797] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 367.878185][ T7797] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038 (0x7fffffff) [ 368.183324][ T7807] loop1: detected capacity change from 0 to 1024 [ 369.046501][ T7813] loop0: detected capacity change from 0 to 2048 [ 369.227990][ T7813] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 369.270461][ T7813] UDF-fs: Scanning with blocksize 512 failed [ 369.292008][ T7813] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 369.406957][ T7805] loop3: detected capacity change from 0 to 32768 [ 369.515124][ T7805] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop3 scanned by syz.3.789 (7805) [ 369.580490][ T7805] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 369.589180][ T7805] BTRFS info (device loop3): disabling tree log [ 369.656143][ T7805] BTRFS info (device loop3): enabling tree log [ 369.716432][ T7828] loop4: detected capacity change from 0 to 1024 [ 369.730444][ T7805] BTRFS info (device loop3): using free space tree [ 369.735616][ T7827] sp0: Synchronizing with TNC [ 369.753377][ T7805] BTRFS info (device loop3): has skinny extents [ 369.840845][ T7828] EXT4-fs (loop4): Ignoring removed oldalloc option [ 369.891907][ T7815] loop2: detected capacity change from 0 to 32768 [ 369.938981][ T7828] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 370.202030][ T7805] BTRFS info (device loop3): enabling ssd optimizations [ 370.229108][ T7815] XFS (loop2): Mounting V5 Filesystem [ 370.381276][ T7805] BTRFS info (device loop3): checking UUID tree [ 370.657570][ T7815] XFS (loop2): Ending clean mount [ 370.922488][ T6781] XFS (loop2): Unmounting Filesystem [ 371.019777][ T7858] loop0: detected capacity change from 0 to 32768 [ 371.074686][ T7879] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 371.497708][ T7858] XFS (loop0): Mounting V5 Filesystem [ 371.754062][ T7912] device vlan1 entered promiscuous mode [ 371.765970][ T7858] XFS (loop0): Ending clean mount [ 371.786958][ T7912] device bond0 entered promiscuous mode [ 371.812406][ T7912] device bond_slave_0 entered promiscuous mode [ 371.820056][ T7912] device bond_slave_1 entered promiscuous mode [ 371.826606][ T6871] XFS (loop0): Unmounting Filesystem [ 371.858031][ T7912] device bond1 entered promiscuous mode [ 371.897385][ T7912] device bond0 left promiscuous mode [ 371.926050][ T7912] device bond_slave_0 left promiscuous mode [ 371.949398][ T7912] device bond_slave_1 left promiscuous mode [ 371.990657][ T7912] device bond1 left promiscuous mode [ 372.381515][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.815'. [ 372.433987][ T3802] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 372.450126][ T3802] Bluetooth: hci1: Injecting HCI hardware error event [ 372.484930][ T3576] Bluetooth: hci1: hardware error 0x00 [ 372.734150][ T7947] loop4: detected capacity change from 0 to 1024 [ 372.810352][ T7947] EXT4-fs (loop4): Ignoring removed oldalloc option [ 372.873903][ T7947] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 373.491018][ T7975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.832'. [ 373.672382][ T7977] loop0: detected capacity change from 0 to 2048 [ 373.753007][ T7984] loop4: detected capacity change from 0 to 256 [ 373.758293][ T7977] UDF-fs: bad mount option "gid=" or missing value [ 374.558657][ T8000] loop2: detected capacity change from 0 to 1024 [ 374.742887][ T26] audit: type=1800 audit(1722458335.583:5): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.841" name="bus" dev="loop2" ino=26 res=0 errno=0 [ 374.950934][ T8016] loop4: detected capacity change from 0 to 1024 [ 374.992756][ T26] audit: type=1804 audit(1722458335.823:6): pid=8008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.841" name=2F6E6577726F6F742F36352FE91F7189591E9233614B2F627573 dev="loop2" ino=26 res=1 errno=0 [ 375.064712][ T26] audit: type=1800 audit(1722458335.883:7): pid=8008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.841" name="bus" dev="loop2" ino=26 res=0 errno=0 [ 375.103013][ T8016] EXT4-fs (loop4): Ignoring removed oldalloc option [ 375.162942][ T8016] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 375.197443][ T8025] IPv6: ADDRCONF(NETDEV_CHANGE): rose3: link becomes ready [ 375.310467][ T3808] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 375.730966][ T3808] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.780581][ T3808] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 375.923524][ T3808] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 375.948126][ T3808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 376.015419][ T3808] usb 1-1: SerialNumber: syz [ 376.023120][ T8055] loop3: detected capacity change from 0 to 256 [ 376.060844][ T8057] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 376.222028][ T8065] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 376.279533][ T8067] validate_nla: 2 callbacks suppressed [ 376.279552][ T8067] netlink: 'syz.4.863': attribute type 10 has an invalid length. [ 376.294280][ T8065] FAT-fs (loop3): Filesystem has been set read-only [ 376.322889][ T3808] usb 1-1: 0:2 : does not exist [ 376.331065][ T8065] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 376.343147][ T3808] usb 1-1: unit 5 not found! [ 376.368796][ T8065] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 376.395500][ T8067] team0: Port device netdevsim0 added [ 376.405969][ T3808] usb 1-1: USB disconnect, device number 5 [ 376.431535][ T26] audit: type=1800 audit(1722458337.273:8): pid=8065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.859" name="file1" dev="loop3" ino=1048694 res=0 errno=0 [ 376.587093][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.867'. [ 376.716587][ T5078] udevd[5078]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 376.848856][ T8087] loop0: detected capacity change from 0 to 128 [ 376.895688][ T8087] EXT4-fs (loop0): Unrecognized mount option "permit_directio" or missing value [ 376.997542][ T8092] loop1: detected capacity change from 0 to 512 [ 377.097180][ T8092] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 377.122317][ T8092] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038 (0x7fffffff) [ 377.177864][ T8092] EXT4-fs error (device loop1): ext4_empty_dir:3108: inode #12: block 31: comm syz.1.875: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=1, rec_len=6, size=1024 fake=1 [ 377.205913][ T8092] EXT4-fs (loop1): Remounting filesystem read-only [ 377.213079][ T8092] EXT4-fs warning (device loop1): ext4_empty_dir:3110: inode #12: comm syz.1.875: directory missing '..' [ 377.503943][ T8119] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 377.514842][ T8119] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 377.557696][ T8123] loop4: detected capacity change from 0 to 512 [ 377.728315][ T8133] loop2: detected capacity change from 0 to 1024 [ 377.775111][ T8136] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 377.824021][ T8133] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 377.844529][ T8133] EXT4-fs (loop2): orphan cleanup on readonly fs [ 377.860522][ T8133] EXT4-fs error (device loop2): ext4_free_blocks:6226: comm syz.2.891: Freeing blocks not in datazone - block = 0, count = 4096 [ 378.001067][ T8133] EXT4-fs (loop2): 1 orphan inode deleted [ 378.031898][ T8133] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 378.601809][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.608461][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.967521][ T8184] loop4: detected capacity change from 0 to 512 [ 379.740611][ T3615] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 380.004065][ T8192] loop2: detected capacity change from 0 to 2048 [ 380.130670][ T3615] usb 2-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 380.146459][ T3615] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 380.230669][ T3615] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 380.240445][ T3615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 380.248523][ T3615] usb 2-1: SerialNumber: syz [ 380.543892][ T3615] usb 2-1: 0:2 : does not exist [ 380.548803][ T3615] usb 2-1: unit 5: unexpected type 0x0d [ 380.568329][ T3615] usb 2-1: USB disconnect, device number 14 [ 381.939111][ T8194] loop0: detected capacity change from 0 to 512 [ 382.013544][ T8192] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 382.120008][ T5078] udevd[5078]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.170567][ T8192] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038 (0x7fffffff) [ 382.202073][ T8202] loop3: detected capacity change from 0 to 512 [ 382.215330][ T8199] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 382.250587][ T8202] EXT4-fs (loop3): Ignoring removed oldalloc option [ 382.292845][ T8205] loop4: detected capacity change from 0 to 2048 [ 382.351986][ T8202] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.918: Parent and EA inode have the same ino 15 [ 382.459260][ T8202] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 382.512256][ T8205] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 382.551809][ T8205] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038 (0x7fffffff) [ 382.562213][ T8202] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.918: Parent and EA inode have the same ino 15 [ 382.622659][ T8202] EXT4-fs (loop3): 1 orphan inode deleted [ 382.628508][ T8202] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 383.140523][ T8218] loop0: detected capacity change from 0 to 256 [ 383.211975][ T8218] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 383.294329][ T8223] loop4: detected capacity change from 0 to 2048 [ 383.472558][ T8223] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 383.520672][ T8223] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038 (0x7fffffff) [ 384.030608][ T3644] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 384.036569][ T8248] loop0: detected capacity change from 0 to 256 [ 384.380471][ T3644] usb 4-1: Using ep0 maxpacket: 32 [ 384.398878][ T26] audit: type=1804 audit(1722458345.233:9): pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.935" name="/newroot/62/file0/bus" dev="loop0" ino=1048697 res=1 errno=0 [ 384.501497][ T3644] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.535863][ T3644] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.575492][ T3644] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 384.584935][ T3644] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.619269][ T3644] usb 4-1: config 0 descriptor?? [ 384.677098][ T8245] loop1: detected capacity change from 0 to 40427 [ 384.753143][ T8245] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 384.775252][ T8245] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 384.803991][ T8245] F2FS-fs (loop1): invalid crc value [ 384.955517][ T8256] loop4: detected capacity change from 0 to 40427 [ 385.030006][ T8256] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 385.096376][ T8256] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 385.162810][ T8264] loop3: detected capacity change from 0 to 40427 [ 385.174281][ T8245] F2FS-fs (loop1): Found nat_bits in checkpoint [ 385.263263][ T8245] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 385.273446][ T8245] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 385.307446][ T8245] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.409941][ T8245] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.424795][ T8271] loop2: detected capacity change from 0 to 512 [ 385.433995][ T8256] F2FS-fs (loop4): Found nat_bits in checkpoint [ 385.447272][ T26] audit: type=1326 audit(1722458346.283:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8268 comm="syz.0.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7749b83b9 code=0x7ffc0000 [ 385.517575][ T26] audit: type=1326 audit(1722458346.283:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8268 comm="syz.0.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7749b83b9 code=0x7ffc0000 [ 385.548059][ T8271] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 385.608025][ T26] audit: type=1326 audit(1722458346.333:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8268 comm="syz.0.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fa7749b83b9 code=0x7ffc0000 [ 385.631104][ T26] audit: type=1326 audit(1722458346.333:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8268 comm="syz.0.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7749b83b9 code=0x7ffc0000 [ 385.656814][ T26] audit: type=1326 audit(1722458346.333:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8268 comm="syz.0.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7749b83b9 code=0x7ffc0000 [ 385.661255][ T8256] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 385.704384][ T8271] EXT4-fs (loop2): 1 truncate cleaned up [ 385.717832][ T8271] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 385.745769][ T8256] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 385.884990][ T8282] syz.4.938[8282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 385.885083][ T8282] syz.4.938[8282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 385.930290][ T6781] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /83/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 386.169307][ T6781] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 386.280594][ T8235] loop3: detected capacity change from 0 to 256 [ 386.581475][ T6781] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /83/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 386.647108][ T8235] FAT-fs (loop3): Unrecognized mount option "tÓ½UTC" or missing value [ 386.667424][ T6781] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 386.736965][ T6781] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /83/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 386.872693][ T6781] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 386.943665][ T6781] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /83/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 387.024374][ T6781] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 387.153207][ T6781] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /83/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 387.241259][ T6781] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 387.360498][ T3615] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 387.630479][ T3615] usb 1-1: Using ep0 maxpacket: 32 [ 387.770672][ T3615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 387.791179][ T3615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 387.810486][ T3616] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 387.828617][ T3615] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 387.850784][ T3615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.886946][ T3615] usb 1-1: config 0 descriptor?? [ 387.932113][ T8284] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 387.984264][ T3615] hub 1-1:0.0: USB hub found [ 388.060900][ T3616] usb 2-1: Using ep0 maxpacket: 32 [ 388.190941][ T3616] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 388.216932][ T3615] hub 1-1:0.0: 2 ports detected [ 388.330464][ T3616] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 388.350493][ T3616] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 388.364184][ T3644] usbhid 4-1:0.0: can't add hid device: -71 [ 388.370181][ T3644] usbhid: probe of 4-1:0.0 failed with error -71 [ 388.389262][ T3616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.398661][ T3644] usb 4-1: USB disconnect, device number 13 [ 388.420789][ T3616] usb 2-1: config 0 descriptor?? [ 388.440899][ T8287] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 388.450977][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.481485][ T3616] hub 2-1:0.0: USB hub found [ 388.529485][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.566132][ T8300] chnl_net:caif_netlink_parms(): no params data found [ 388.591781][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.621080][ T21] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 388.663391][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.685563][ T8300] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.692926][ T8300] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.700615][ T3616] hub 2-1:0.0: 2 ports detected [ 388.706323][ T8300] device bridge_slave_0 entered promiscuous mode [ 388.715362][ T8300] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.732952][ T8300] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.742801][ T8300] device bridge_slave_1 entered promiscuous mode [ 388.838821][ T8300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.852664][ T8300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.862078][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 388.905920][ T8300] team0: Port device team_slave_0 added [ 388.918278][ T8300] team0: Port device team_slave_1 added [ 388.942052][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 388.982064][ T8300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.989554][ T8300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.017309][ T8300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.034318][ T8300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.048549][ T8300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.075282][ T21] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 389.096392][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.114993][ T21] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 389.125003][ T21] usb 5-1: config 1 has no interface number 1 [ 389.131850][ T8300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.143309][ T21] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 389.159232][ T21] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 389.192466][ T21] usb 5-1: config 1 interface 2 has no altsetting 0 [ 389.258454][ T8300] device hsr_slave_0 entered promiscuous mode [ 389.268837][ T8300] device hsr_slave_1 entered promiscuous mode [ 389.287499][ T8300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.299416][ T8300] Cannot create hsr debugfs directory [ 389.350979][ T21] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 389.361365][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.380437][ T21] usb 5-1: Product: syz [ 389.391230][ T21] usb 5-1: Manufacturer: syz [ 389.395957][ T21] usb 5-1: SerialNumber: syz [ 389.786738][ T3615] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 389.794843][ T21] usb 5-1: USB disconnect, device number 12 [ 389.844874][ T5078] udevd[5078]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 389.970332][ T8300] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 389.983178][ T8300] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 389.988522][ T3808] usb 1-1: USB disconnect, device number 6 [ 389.998616][ T8300] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 390.010628][ T3809] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 390.027835][ T8300] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 390.129964][ T8300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.145644][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 390.155842][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 390.186660][ T8300] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.216787][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 390.230794][ T3615] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 390.231106][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 390.244050][ T3615] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 390.268577][ T21] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.277507][ T21] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.298415][ T8355] loop4: detected capacity change from 0 to 256 [ 390.305424][ T3615] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 390.327213][ T3615] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 390.337102][ T3615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.339998][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 390.353430][ T3615] usb 4-1: config 0 descriptor?? [ 390.362275][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 390.371318][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 390.380192][ T3644] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.387374][ T3644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.400747][ T8325] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 390.409178][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 390.429488][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 390.521249][ T8300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 390.577677][ T8300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 390.594959][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 390.607591][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 390.618144][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 390.627094][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 390.636247][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 390.644911][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 390.657580][ T26] audit: type=1804 audit(1722458351.493:15): pid=8361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.958" name="/newroot/108/file0/bus" dev="loop4" ino=1048699 res=1 errno=0 [ 390.670682][ T3803] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 390.691193][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 390.699833][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 390.723907][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 390.757624][ T21] usb 2-1: USB disconnect, device number 15 [ 390.802498][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 390.810964][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 390.883914][ T3615] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 390.894554][ T144] device team0 left promiscuous mode [ 390.899883][ T144] device team_slave_0 left promiscuous mode [ 390.908138][ T144] device team_slave_1 left promiscuous mode [ 390.909654][ T3615] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 390.924564][ T144] device veth0 left promiscuous mode [ 390.953228][ T144] device hsr_slave_0 left promiscuous mode [ 390.970834][ T144] device hsr_slave_1 left promiscuous mode [ 390.979536][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.980092][ T3615] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 391.002047][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.021621][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.029681][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.067791][ T3809] usb 4-1: USB disconnect, device number 14 [ 391.074827][ T144] device bridge_slave_1 left promiscuous mode [ 391.092901][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.132223][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.157011][ T144] device veth1_macvtap left promiscuous mode [ 391.209063][ T144] device veth0_macvtap left promiscuous mode [ 391.229874][ T144] device veth1_vlan left promiscuous mode [ 391.256491][ T144] device veth0_vlan left promiscuous mode [ 391.352393][ T8379] loop4: detected capacity change from 0 to 64 [ 391.435924][ T8365] loop0: detected capacity change from 0 to 32768 [ 391.530982][ T8365] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.959 (8365) [ 391.586802][ T8365] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 391.635272][ T8365] BTRFS info (device loop0): setting nodatacow, compression disabled [ 391.693237][ T8365] BTRFS info (device loop0): enabling auto defrag [ 391.733596][ T8365] BTRFS info (device loop0): max_inline at 0 [ 391.766303][ T8365] BTRFS info (device loop0): using free space tree [ 391.781393][ T8365] BTRFS info (device loop0): has skinny extents [ 391.978235][ T26] audit: type=1804 audit(1722458352.813:16): pid=8365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.959" name="/newroot/67/file1/bus" dev="loop0" ino=263 res=1 errno=0 [ 392.224817][ T144] team0 (unregistering): Port device team_slave_1 removed [ 392.532160][ T144] team0 (unregistering): Port device team_slave_0 removed [ 392.565648][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.586052][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.670737][ T3809] Bluetooth: hci1: command 0x041b tx timeout [ 392.755976][ T144] bond0 (unregistering): Released all slaves [ 393.100978][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 393.108486][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 393.164969][ T8300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.224208][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 393.251390][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 393.298929][ T8300] device veth0_vlan entered promiscuous mode [ 393.361027][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 393.371242][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 393.395583][ T8300] device veth1_vlan entered promiscuous mode [ 393.418201][ T8447] loop1: detected capacity change from 0 to 1024 [ 393.437472][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 393.446129][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 393.465409][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 393.517708][ T8447] hfsplus: unable to parse mount options [ 393.555364][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 393.564805][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 393.581699][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 393.604107][ T8300] device veth0_macvtap entered promiscuous mode [ 393.626937][ T8300] device veth1_macvtap entered promiscuous mode [ 393.711477][ T8300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.864870][ T8300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.949309][ T8300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.042163][ T8300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.140501][ T8300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.166077][ T8300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.180275][ T8300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.200024][ T8300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.241924][ T8300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.293293][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 394.303991][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 394.318943][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 394.329392][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 394.367365][ T8300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.392395][ T8453] loop1: detected capacity change from 0 to 2048 [ 394.399204][ T8300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.436022][ T8300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.447062][ T8300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.458322][ T8300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.479382][ T8300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.505022][ T8300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.530497][ T8300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.566291][ T8300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.617457][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 394.648292][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 394.681180][ T8453] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=385, location=385 [ 394.705895][ T8453] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 394.716482][ T8300] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.740821][ T8300] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.749550][ T8300] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.760488][ T3799] Bluetooth: hci1: command 0x040f tx timeout [ 394.814442][ T8300] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.920008][ T8453] loop1: detected capacity change from 0 to 1024 [ 395.038311][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.041399][ T8453] hfsplus: unable to parse mount options [ 395.059439][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.186632][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 395.202317][ T6038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.216248][ T6038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.274024][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 396.482118][ T8491] device hsr0 entered promiscuous mode [ 396.522833][ T8491] device hsr0 left promiscuous mode [ 396.840592][ T3799] Bluetooth: hci1: command 0x0419 tx timeout [ 398.160288][ T8511] loop3: detected capacity change from 0 to 256 [ 398.328647][ T8511] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 398.404665][ T8511] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 399.307135][ T8515] loop3: detected capacity change from 0 to 512 [ 399.401877][ T8515] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 399.429998][ T8515] UDF-fs: Scanning with blocksize 512 failed [ 399.470816][ T8515] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 399.490673][ T8515] UDF-fs: Scanning with blocksize 1024 failed [ 399.527032][ T8515] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 399.560504][ T8515] UDF-fs: Scanning with blocksize 2048 failed [ 399.608321][ T8515] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 399.771370][ T8515] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 401.076893][ T8529] device hsr0 entered promiscuous mode [ 401.146921][ T8529] device hsr0 left promiscuous mode [ 401.640575][ T3809] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 401.731722][ T21] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 402.064185][ T3809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.080505][ T3809] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 402.151057][ T21] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 402.221530][ T21] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 402.232500][ T21] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 402.244094][ T21] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 402.342215][ T3809] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 402.381928][ T21] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 402.399979][ T3809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.410572][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 402.418620][ T21] usb 3-1: SerialNumber: syz [ 402.440715][ T3809] usb 2-1: config 0 descriptor?? [ 402.502069][ T8546] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 402.511074][ T8546] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 402.552123][ T21] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 402.766053][ T8554] chnl_net:caif_netlink_parms(): no params data found [ 402.815149][ T21] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 402.850670][ T21] usb 3-1: USB disconnect, device number 15 [ 403.006487][ T3809] usb 2-1: Direct firmware load for ar3k/AthrBT_0xfa9ee0f1.dfu failed with error -2 [ 403.020592][ T3809] usb 2-1: Falling back to sysfs fallback for: ar3k/AthrBT_0xfa9ee0f1.dfu [ 403.070627][ T3803] Bluetooth: hci1: command 0x0405 tx timeout [ 403.132285][ T8554] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.139364][ T8554] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.184235][ T8554] device bridge_slave_0 entered promiscuous mode [ 403.223801][ T8554] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.236104][ T8554] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.261709][ T8554] device bridge_slave_1 entered promiscuous mode [ 403.367002][ T8554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.416079][ T8554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.638043][ T8554] team0: Port device team_slave_0 added [ 403.658901][ T8554] team0: Port device team_slave_1 added [ 403.767055][ T8554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.810417][ T8554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.895805][ T8554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.928662][ T8554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.950593][ T3615] Bluetooth: hci3: command 0x0409 tx timeout [ 403.957010][ T8554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.030422][ T8554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.110620][ T3800] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 404.163175][ T8554] device hsr_slave_0 entered promiscuous mode [ 404.188338][ T8554] device hsr_slave_1 entered promiscuous mode [ 404.248547][ T8554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 404.258748][ T8554] Cannot create hsr debugfs directory [ 404.380457][ T3800] usb 4-1: Using ep0 maxpacket: 16 [ 404.458857][ T8554] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.537372][ T3800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 404.552803][ T8554] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.559956][ T3800] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 404.589320][ T3800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.638157][ T3800] usb 4-1: config 0 descriptor?? [ 404.638189][ T8554] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.789926][ T8554] team0: Port device netdevsim0 removed [ 404.799320][ T8554] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.084872][ T8554] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 405.103598][ T8554] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 405.119905][ T8554] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 405.126000][ T8595] udc-core: couldn't find an available UDC or it's busy [ 405.133984][ T8595] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 405.145484][ T8554] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 405.181533][ T3800] hid (null): unknown global tag 0x83 [ 405.187058][ T3800] hid (null): unknown global tag 0xc [ 405.199085][ T3800] hid (null): global environment stack underflow [ 405.218028][ T3800] hid-generic 0003:0158:0100.0006: unexpected long global item [ 405.251293][ T3800] hid-generic: probe of 0003:0158:0100.0006 failed with error -22 [ 405.372563][ T8554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.422524][ T3800] usb 4-1: USB disconnect, device number 15 [ 405.491492][ T8554] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.498859][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 405.514454][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 405.585398][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 405.597874][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 405.615313][ T3783] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.622557][ T3783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.638034][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 405.647021][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 405.661874][ T3783] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.668978][ T3783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.683283][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 405.695395][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 405.740068][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 405.751617][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 405.763177][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 405.772513][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 405.784156][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 405.806170][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 405.815363][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 405.840098][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 405.855267][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 405.869231][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 405.899643][ T8554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 406.030854][ T3787] Bluetooth: hci3: command 0x041b tx timeout [ 406.266799][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 406.295441][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 406.328977][ T8554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.797889][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 406.812695][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 406.905019][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 406.931993][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 406.952391][ T8554] device veth0_vlan entered promiscuous mode [ 406.968367][ T8554] device veth1_vlan entered promiscuous mode [ 407.074889][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 407.091469][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 407.099697][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 407.193147][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 407.213485][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 407.231232][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 407.251784][ T8554] device veth0_macvtap entered promiscuous mode [ 407.270180][ T8554] device veth1_macvtap entered promiscuous mode [ 407.328408][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.359881][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.380114][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.410403][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.422192][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.443982][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.457968][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.477748][ T8650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1045'. [ 407.489254][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.490476][ T3802] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 407.507174][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.507196][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.508575][ T8554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.565327][ T3787] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 407.575084][ T3787] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 407.616152][ T3787] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 407.633787][ T3787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 407.667187][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.709587][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.746007][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.790814][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.820570][ T3802] usb 4-1: Using ep0 maxpacket: 16 [ 407.855754][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.950570][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.983830][ T3802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.004370][ T3802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.018285][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.048643][ T3802] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 408.070505][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.090441][ T3802] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 408.099963][ T3802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.109045][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.140530][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.198966][ T3615] Bluetooth: hci3: command 0x040f tx timeout [ 408.221204][ T3802] usb 4-1: config 0 descriptor?? [ 408.241869][ T8554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.718500][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 408.994902][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 409.021147][ T8669] netlink: 'syz.1.1049': attribute type 4 has an invalid length. [ 409.075978][ T8554] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.112019][ T8554] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.147067][ T8554] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.167525][ T8554] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.231542][ T3802] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 409.238806][ T3802] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 409.268485][ T3802] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 409.342983][ T3802] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 409.389537][ T3802] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 409.429862][ T8647] udc-core: couldn't find an available UDC or it's busy [ 409.438300][ T3802] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 409.452393][ T8647] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 409.494287][ T3802] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 409.538442][ T3802] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 409.572911][ T3802] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 409.614770][ T3802] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 409.694384][ T3802] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0007/input/input12 [ 409.768763][ T3802] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 409.840326][ T3802] usb 4-1: USB disconnect, device number 16 [ 410.270512][ T3808] Bluetooth: hci3: command 0x0419 tx timeout [ 410.291564][ T4376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.403842][ T4376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.449658][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 410.460891][ T3988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.469330][ T3988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.588858][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 410.745356][ T8700] loop1: detected capacity change from 0 to 512 [ 410.752350][ T3644] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 410.970922][ T8700] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 410.986063][ T3644] usb 4-1: device descriptor read/64, error -71 [ 411.017098][ T8700] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038 (0x7fffffff) [ 411.292261][ T3644] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 411.500873][ T3644] usb 4-1: device descriptor read/64, error -71 [ 411.970941][ T3644] usb usb4-port1: attempt power cycle [ 412.860596][ T3644] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 413.002154][ T3644] usb 4-1: device descriptor read/8, error -71 [ 413.276980][ T26] audit: type=1326 audit(1722458374.113:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8746 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f9b4a3b9 code=0x7ffc0000 [ 413.299801][ T3644] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 413.413378][ T26] audit: type=1326 audit(1722458374.143:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8746 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f9b4a3b9 code=0x7ffc0000 [ 413.420592][ T3644] usb 4-1: device descriptor read/8, error -71 [ 413.599606][ T26] audit: type=1326 audit(1722458374.143:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8746 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f23f9b4a3b9 code=0x7ffc0000 [ 413.659270][ T3644] usb usb4-port1: unable to enumerate USB device [ 413.757692][ T26] audit: type=1326 audit(1722458374.143:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8746 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f9b4a3b9 code=0x7ffc0000 [ 413.976598][ T26] audit: type=1326 audit(1722458374.143:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8746 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f9b4a3b9 code=0x7ffc0000 [ 414.080898][ T26] audit: type=1326 audit(1722458374.153:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8746 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23f9b4a3b9 code=0x7ffc0000 [ 414.195302][ T26] audit: type=1326 audit(1722458374.153:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8746 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f9b4a3b9 code=0x7ffc0000 [ 414.302984][ T26] audit: type=1326 audit(1722458374.153:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8746 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f9b4a3b9 code=0x7ffc0000 [ 414.384279][ T26] audit: type=1326 audit(1722458374.163:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8746 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23f9b4a3b9 code=0x7ffc0000 [ 414.479445][ T26] audit: type=1326 audit(1722458374.163:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8746 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f9b4a3b9 code=0x7ffc0000 [ 414.810462][ T3615] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 415.071435][ T3799] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 415.094338][ T3799] Bluetooth: hci2: Injecting HCI hardware error event [ 415.111228][ T3573] Bluetooth: hci2: hardware error 0x00 [ 415.170746][ T3615] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 415.190415][ T3615] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 415.220432][ T3615] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 415.240464][ T3615] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 415.351178][ T3615] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 415.360247][ T3615] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 415.390786][ T3615] usb 5-1: SerialNumber: syz [ 415.440833][ T8774] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 415.458230][ T8774] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 415.501525][ T3615] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 415.723080][ T3615] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 415.745750][ T3615] usb 5-1: USB disconnect, device number 13 [ 415.784598][ T8798] loop0: detected capacity change from 0 to 1024 [ 415.852169][ T8798] hfsplus: unable to parse mount options [ 415.958776][ T8800] loop2: detected capacity change from 0 to 512 [ 415.995816][ T8798] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1091'. [ 416.061867][ T8798] device gretap0 entered promiscuous mode [ 416.116698][ T8803] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1091'. [ 416.127862][ T8800] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 416.136290][ T8803] 0ªX¹¦Dö»: renamed from gretap0 [ 416.149636][ T8800] ext4 filesystem being mounted at /30/bus supports timestamps until 2038 (0x7fffffff) [ 416.246006][ T8798] loop0: detected capacity change from 0 to 1024 [ 416.274047][ T8803] device 00ªX¹¦Dö» left promiscuous mode [ 416.397998][ T8798] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 416.397998][ T8798] [ 416.460600][ T8798] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 416.477922][ T8813] loop2: detected capacity change from 0 to 256 [ 416.513775][ T8813] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 416.649466][ T8798] ceph: No source [ 416.656538][ T8815] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 416.884090][ T8815] usb usb9: usbfs: process 8815 (syz.4.1097) did not claim interface 0 before use [ 416.964306][ T8822] loop0: detected capacity change from 0 to 764 [ 417.533539][ T8829] loop4: detected capacity change from 0 to 256 [ 417.598431][ T8834] loop2: detected capacity change from 0 to 512 [ 417.732055][ T8829] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 417.754317][ T8834] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 417.813105][ T8834] ext4 filesystem being mounted at /34/bus supports timestamps until 2038 (0x7fffffff) [ 418.094706][ T8847] loop0: detected capacity change from 0 to 512 [ 418.167783][ T8848] loop4: detected capacity change from 0 to 764 [ 418.519009][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 418.519045][ T26] audit: type=1326 audit(1722458379.353:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.4.1106" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2ce9013b9 code=0x0 [ 418.725289][ T8847] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (8768!=33349) [ 418.735725][ T8847] EXT4-fs (loop0): group descriptors corrupted! [ 418.961085][ T8855] loop0: detected capacity change from 0 to 764 [ 419.012519][ T8857] loop4: detected capacity change from 0 to 1024 [ 419.074659][ T8857] EXT4-fs (loop4): Ignoring removed nobh option [ 419.100544][ T8857] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 419.110981][ T8856] loop2: detected capacity change from 0 to 1024 [ 419.128179][ T8855] Symlink component flag not implemented [ 419.161152][ T8855] Symlink component flag not implemented [ 419.215826][ T8857] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nobh,resuid=0x0000000000000cff,max_batch_time=0x0000000000000100,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 419.322434][ T8856] hfsplus: extend alloc file! (8192,65536,366) [ 419.372883][ T8864] loop0: detected capacity change from 0 to 16 [ 419.410089][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1113'. [ 419.496853][ T8869] loop4: detected capacity change from 0 to 256 [ 419.516668][ T8864] erofs: (device loop0): mounted with root inode @ nid 36. [ 419.778229][ T8873] loop4: detected capacity change from 0 to 64 [ 420.372845][ T8899] ================================================================== [ 420.381678][ T8899] BUG: KASAN: use-after-free in rose_get_neigh+0x1b2/0x6e0 [ 420.388899][ T8899] Read of size 1 at addr ffff888062411030 by task syz.4.1128/8899 [ 420.396721][ T8899] [ 420.399061][ T8899] CPU: 1 PID: 8899 Comm: syz.4.1128 Not tainted 5.15.164-syzkaller #0 [ 420.407386][ T8899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 420.418492][ T8899] Call Trace: [ 420.421774][ T8899] [ 420.424700][ T8899] dump_stack_lvl+0x1e3/0x2d0 [ 420.429380][ T8899] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 420.435186][ T8899] ? _printk+0xd1/0x120 [ 420.439360][ T8899] ? __wake_up_klogd+0xcc/0x100 [ 420.444233][ T8899] ? panic+0x860/0x860 [ 420.448852][ T8899] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 420.454353][ T8899] print_address_description+0x63/0x3b0 [ 420.459914][ T8899] ? rose_get_neigh+0x1b2/0x6e0 [ 420.464777][ T8899] kasan_report+0x16b/0x1c0 [ 420.469302][ T8899] ? rose_get_neigh+0x1b2/0x6e0 [ 420.474283][ T8899] rose_get_neigh+0x1b2/0x6e0 [ 420.478995][ T8899] rose_connect+0x456/0x1150 [ 420.483955][ T8899] ? aa_sk_perm+0x8fc/0xa30 [ 420.488571][ T8899] ? rose_bind+0x740/0x740 [ 420.493008][ T8899] ? aa_af_perm+0x270/0x350 [ 420.497525][ T8899] ? __fget_files+0x413/0x480 [ 420.502219][ T8899] ? bpf_lsm_socket_connect+0x5/0x10 [ 420.507508][ T8899] ? security_socket_connect+0x7d/0xa0 [ 420.512970][ T8899] ? rose_bind+0x740/0x740 [ 420.517401][ T8899] __sys_connect+0x38b/0x410 [ 420.521998][ T8899] ? __sys_connect_file+0x170/0x170 [ 420.527659][ T8899] ? syscall_enter_from_user_mode+0x2e/0x240 [ 420.533655][ T8899] ? lockdep_hardirqs_on+0x94/0x130 [ 420.538881][ T8899] __x64_sys_connect+0x76/0x80 [ 420.543673][ T8899] do_syscall_64+0x3b/0xb0 [ 420.548396][ T8899] ? clear_bhb_loop+0x15/0x70 [ 420.553672][ T8899] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 420.559664][ T8899] RIP: 0033:0x7fe2ce9013b9 [ 420.564135][ T8899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.584701][ T8899] RSP: 002b:00007fe2ccd80048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 420.593401][ T8899] RAX: ffffffffffffffda RBX: 00007fe2cea8ff80 RCX: 00007fe2ce9013b9 [ 420.602788][ T8899] RDX: 0000000000000040 RSI: 0000000020000000 RDI: 0000000000000005 [ 420.611198][ T8899] RBP: 00007fe2ce96e8e6 R08: 0000000000000000 R09: 0000000000000000 [ 420.619897][ T8899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.629841][ T8899] R13: 000000000000000b R14: 00007fe2cea8ff80 R15: 00007ffdf0128488 [ 420.638192][ T8899] [ 420.641305][ T8899] [ 420.643807][ T8899] Allocated by task 4377: [ 420.648227][ T8899] ____kasan_kmalloc+0xba/0xf0 [ 420.653441][ T8899] kmem_cache_alloc_trace+0x143/0x290 [ 420.658917][ T8899] batadv_forw_packet_alloc+0x198/0x3a0 [ 420.664482][ T8899] batadv_iv_ogm_queue_add+0x6da/0xbe0 [ 420.670038][ T8899] batadv_iv_ogm_schedule+0xb7e/0x1000 [ 420.675506][ T8899] batadv_iv_send_outstanding_bat_ogm_packet+0x6fa/0x800 [ 420.682636][ T8899] process_one_work+0x8a1/0x10c0 [ 420.687594][ T8899] worker_thread+0xaca/0x1280 [ 420.692374][ T8899] kthread+0x3f6/0x4f0 [ 420.696452][ T8899] ret_from_fork+0x1f/0x30 [ 420.700971][ T8899] [ 420.703295][ T8899] Last potentially related work creation: [ 420.709015][ T8899] kasan_save_stack+0x36/0x60 [ 420.713707][ T8899] kasan_record_aux_stack+0xba/0x100 [ 420.719003][ T8899] insert_work+0x54/0x3e0 [ 420.723344][ T8899] __queue_work+0x963/0xd00 [ 420.727847][ T8899] call_timer_fn+0x16d/0x560 [ 420.732436][ T8899] __run_timers+0x6a8/0x890 [ 420.737037][ T8899] run_timer_softirq+0x63/0xf0 [ 420.741804][ T8899] handle_softirqs+0x3a7/0x930 [ 420.746653][ T8899] __irq_exit_rcu+0x157/0x240 [ 420.751428][ T8899] irq_exit_rcu+0x5/0x20 [ 420.755671][ T8899] sysvec_apic_timer_interrupt+0x91/0xb0 [ 420.761301][ T8899] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 420.767291][ T8899] [ 420.769701][ T8899] Second to last potentially related work creation: [ 420.776279][ T8899] kasan_save_stack+0x36/0x60 [ 420.780972][ T8899] kasan_record_aux_stack+0xba/0x100 [ 420.786257][ T8899] call_rcu+0x1c4/0xa70 [ 420.790500][ T8899] fib6_del+0x10e8/0x1570 [ 420.794831][ T8899] fib6_clean_node+0x2ed/0x5d0 [ 420.799595][ T8899] fib6_walk_continue+0x636/0x8c0 [ 420.804624][ T8899] fib6_walk+0x168/0x2b0 [ 420.808883][ T8899] __fib6_clean_all+0x2f8/0x480 [ 420.813836][ T8899] rt6_disable_ip+0x15d/0x6c0 [ 420.818533][ T8899] addrconf_ifdown+0x161/0x1bb0 [ 420.823411][ T8899] addrconf_notify+0x432/0xf30 [ 420.828189][ T8899] raw_notifier_call_chain+0xd0/0x170 [ 420.833572][ T8899] dev_close_many+0x37c/0x530 [ 420.838354][ T8899] unregister_netdevice_many+0x4b0/0x18f0 [ 420.844347][ T8899] default_device_exit_batch+0x390/0x3f0 [ 420.849987][ T8899] cleanup_net+0x763/0xb60 [ 420.854417][ T8899] process_one_work+0x8a1/0x10c0 [ 420.859372][ T8899] worker_thread+0xaca/0x1280 [ 420.864062][ T8899] kthread+0x3f6/0x4f0 [ 420.868132][ T8899] ret_from_fork+0x1f/0x30 [ 420.872557][ T8899] [ 420.874878][ T8899] The buggy address belongs to the object at ffff888062411000 [ 420.874878][ T8899] which belongs to the cache kmalloc-512 of size 512 [ 420.888933][ T8899] The buggy address is located 48 bytes inside of [ 420.888933][ T8899] 512-byte region [ffff888062411000, ffff888062411200) [ 420.902215][ T8899] The buggy address belongs to the page: [ 420.907867][ T8899] page:ffffea0001890400 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888062413800 pfn:0x62410 [ 420.919411][ T8899] head:ffffea0001890400 order:2 compound_mapcount:0 compound_pincount:0 [ 420.927737][ T8899] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 420.935741][ T8899] raw: 00fff00000010200 ffffea00018f8e08 ffffea000078f908 ffff888011c41c80 [ 420.944325][ T8899] raw: ffff888062413800 0000000000100006 00000001ffffffff 0000000000000000 [ 420.952900][ T8899] page dumped because: kasan: bad access detected [ 420.959590][ T8899] page_owner tracks the page as allocated [ 420.965427][ T8899] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3566, ts 53244488924, free_ts 11093903647 [ 420.984543][ T8899] get_page_from_freelist+0x322a/0x33c0 [ 420.990110][ T8899] __alloc_pages+0x272/0x700 [ 420.994734][ T8899] new_slab+0xbb/0x4b0 [ 420.998820][ T8899] ___slab_alloc+0x6f6/0xe10 [ 421.003429][ T8899] __kmalloc_node_track_caller+0x1f6/0x390 [ 421.009244][ T8899] __alloc_skb+0x12c/0x590 [ 421.013767][ T8899] rtmsg_ifa+0x1e7/0x3a0 [ 421.018010][ T8899] __inet_insert_ifa+0x9e4/0xc10 [ 421.022951][ T8899] inet_rtm_newaddr+0x8ca/0x1840 [ 421.027894][ T8899] rtnetlink_rcv_msg+0x993/0xee0 [ 421.032842][ T8899] netlink_rcv_skb+0x1cf/0x410 [ 421.037609][ T8899] netlink_unicast+0x7b6/0x980 [ 421.042426][ T8899] netlink_sendmsg+0xa30/0xd60 [ 421.047199][ T8899] __sys_sendto+0x564/0x720 [ 421.051801][ T8899] __x64_sys_sendto+0xda/0xf0 [ 421.056482][ T8899] do_syscall_64+0x3b/0xb0 [ 421.060959][ T8899] page last free stack trace: [ 421.065725][ T8899] free_unref_page_prepare+0xc34/0xcf0 [ 421.071200][ T8899] free_unref_page+0x95/0x2d0 [ 421.075986][ T8899] free_contig_range+0x95/0xf0 [ 421.080874][ T8899] destroy_args+0xfe/0x980 [ 421.085318][ T8899] debug_vm_pgtable+0x40d/0x470 [ 421.090182][ T8899] do_one_initcall+0x22b/0x7a0 [ 421.094951][ T8899] do_initcall_level+0x157/0x210 [ 421.099901][ T8899] do_initcalls+0x49/0x90 [ 421.104230][ T8899] kernel_init_freeable+0x425/0x5c0 [ 421.109432][ T8899] kernel_init+0x19/0x290 [ 421.113760][ T8899] ret_from_fork+0x1f/0x30 [ 421.118185][ T8899] [ 421.120503][ T8899] Memory state around the buggy address: [ 421.126129][ T8899] ffff888062410f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 421.134194][ T8899] ffff888062410f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 421.142812][ T8899] >ffff888062411000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 421.151406][ T8899] ^ [ 421.157049][ T8899] ffff888062411080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 421.165116][ T8899] ffff888062411100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 421.173274][ T8899] ================================================================== [ 421.181334][ T8899] Disabling lock debugging due to kernel taint [ 421.187616][ T8899] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 421.194811][ T8899] CPU: 1 PID: 8899 Comm: syz.4.1128 Tainted: G B 5.15.164-syzkaller #0 [ 421.204360][ T8899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 421.214419][ T8899] Call Trace: [ 421.217703][ T8899] [ 421.220636][ T8899] dump_stack_lvl+0x1e3/0x2d0 [ 421.225321][ T8899] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 421.230975][ T8899] ? panic+0x860/0x860 [ 421.235061][ T8899] ? rcu_is_watching+0x11/0xa0 [ 421.239845][ T8899] panic+0x318/0x860 [ 421.243754][ T8899] ? asm_common_interrupt+0x22/0x40 [ 421.248968][ T8899] ? check_panic_on_warn+0x1d/0xa0 [ 421.254086][ T8899] ? fb_is_primary_device+0xd0/0xd0 [ 421.259294][ T8899] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 421.265309][ T8899] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 421.271231][ T8899] ? _raw_spin_unlock+0x40/0x40 [ 421.276102][ T8899] check_panic_on_warn+0x7e/0xa0 [ 421.281055][ T8899] ? rose_get_neigh+0x1b2/0x6e0 [ 421.285913][ T8899] end_report+0x6d/0xf0 [ 421.290080][ T8899] kasan_report+0x18e/0x1c0 [ 421.294594][ T8899] ? rose_get_neigh+0x1b2/0x6e0 [ 421.299465][ T8899] rose_get_neigh+0x1b2/0x6e0 [ 421.304156][ T8899] rose_connect+0x456/0x1150 [ 421.308758][ T8899] ? aa_sk_perm+0x8fc/0xa30 [ 421.313354][ T8899] ? rose_bind+0x740/0x740 [ 421.317772][ T8899] ? aa_af_perm+0x270/0x350 [ 421.322277][ T8899] ? __fget_files+0x413/0x480 [ 421.326964][ T8899] ? bpf_lsm_socket_connect+0x5/0x10 [ 421.332249][ T8899] ? security_socket_connect+0x7d/0xa0 [ 421.337710][ T8899] ? rose_bind+0x740/0x740 [ 421.342391][ T8899] __sys_connect+0x38b/0x410 [ 421.347437][ T8899] ? __sys_connect_file+0x170/0x170 [ 421.352734][ T8899] ? syscall_enter_from_user_mode+0x2e/0x240 [ 421.358723][ T8899] ? lockdep_hardirqs_on+0x94/0x130 [ 421.363923][ T8899] __x64_sys_connect+0x76/0x80 [ 421.368693][ T8899] do_syscall_64+0x3b/0xb0 [ 421.373108][ T8899] ? clear_bhb_loop+0x15/0x70 [ 421.377787][ T8899] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 421.383681][ T8899] RIP: 0033:0x7fe2ce9013b9 [ 421.388100][ T8899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.407964][ T8899] RSP: 002b:00007fe2ccd80048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 421.416391][ T8899] RAX: ffffffffffffffda RBX: 00007fe2cea8ff80 RCX: 00007fe2ce9013b9 [ 421.424364][ T8899] RDX: 0000000000000040 RSI: 0000000020000000 RDI: 0000000000000005 [ 421.432335][ T8899] RBP: 00007fe2ce96e8e6 R08: 0000000000000000 R09: 0000000000000000 [ 421.440297][ T8899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.448249][ T8899] R13: 000000000000000b R14: 00007fe2cea8ff80 R15: 00007ffdf0128488 [ 421.456215][ T8899] [ 421.459534][ T8899] Kernel Offset: disabled [ 421.463918][ T8899] Rebooting in 86400 seconds..