last executing test programs: 37.436105055s ago: executing program 0 (id=1367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000000a0a0102000000080b00000000000000000001007300003100000100"], 0x20}}, 0x0) 37.344820573s ago: executing program 0 (id=1368): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a5000000950000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0xfffffffe, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x8, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket(0xa, 0x1, 0x0) setresuid(0xee01, 0x0, 0x0) prlimit64(0x0, 0xa, &(0x7f00000002c0)={0x0, 0x2}, 0x0) setreuid(0x0, 0x0) setresuid(0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) 35.980599488s ago: executing program 0 (id=1370): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x2, 0x1, 0x4, 0x8}, {0x2, 0x2, 0xf, 0x7}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x729, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x0) kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002e0000000000feffffff672fb7617a70e78bb3048a6101ae6531d77f733fc0dcaf8f9d2200633275518b8e22bc0f8470a18e05b1cf9195a5aaacc4bb0e334e7bcec5c8d53e1a395db2c9176cb1aba611cd55ed461028a1ceb1bf669944efb26646f1906089e7102b0cf60030e36c5d58c94fbdf39e13359f8bcb5c9a5202a233c175"], 0x40}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000002d5a8a73ad138c3a52d7282e141be700", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r10, &(0x7f0000000300)="2e000300010000", 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 33.83459125s ago: executing program 0 (id=1374): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1507, &(0x7f0000001b00)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122000000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 30.646812399s ago: executing program 0 (id=1382): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x9, 0xd6, 0x7fffffff}) sendmsg$nl_netfilter(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc000004}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, 0x3, 0xa, 0x801, 0x70bd2c, 0x25dfdbfe, {0xa, 0x0, 0x3}, [@typed={0x14, 0xf1, 0x0, 0x0, @ipv6=@private1}, @typed={0x4, 0x9f}, @typed={0x5, 0x7a, 0x0, 0x0, @str='\x00'}, @generic="85f064e26ed6070ad37b2336e3d5d7dbab396d41bd4bdb3c39e5b8cadc4b50f016c976f22c2491e2ccb9efd0d07368b03198a60b8609db43590bda275105cb73ec0c50c9e58bcd371987d190ae8e9ee3eb1e3f34826a5c017fcfbee0eba67e647305270ac2a5a0db704c2bcd13ed1ce394d0d22661a3e1d9566c17a309bc3f601105cfde97c1f805e5ebf33991b8dd59e3a7798f6a57a5c084e9ac7dfb7bdb4884102214fa01"]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113900000000000400"/32], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 29.123706488s ago: executing program 0 (id=1387): timer_settime(0x0, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000001a80)=[{{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, &(0x7f0000001500)=[{&(0x7f0000000200)=""/13}, {&(0x7f0000000fc0)=""/221}, {&(0x7f00000010c0)=""/70}, {&(0x7f0000001140)=""/213}, {&(0x7f0000001240)=""/32}, {&(0x7f0000001280)=""/229}, {&(0x7f0000001380)}, {&(0x7f00000013c0)=""/64}, {&(0x7f0000001440)=""/162}], 0x0, &(0x7f00000015c0)=""/177}}, {{&(0x7f0000001680)=@qipcrtr, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001700)=""/240}, {&(0x7f0000001800)=""/162}, {&(0x7f00000018c0)=""/85}, {&(0x7f0000001940)=""/92}], 0x0, &(0x7f0000001a00)=""/88}}], 0x4000059, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f00000004c0)=0x30, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) 19.75849983s ago: executing program 2 (id=1406): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x2, 0x2, 0xf, 0x7}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x729, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x0) kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002e0000000000feffffff672fb7617a70e78bb3048a6101ae6531d77f733fc0dcaf8f9d2200633275518b8e22bc0f8470a18e05b1cf9195a5aaacc4bb0e334e7bcec5c8d53e1a395db2c9176cb1aba611cd55ed461028a1ceb1bf669944efb26646f1906089e7102b0cf60030e36c5d58c94fbdf39e13359f8bcb5c9a5202a233c175"], 0x40}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000002d5a8a73ad138c3a52d7282e141be700", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r10, &(0x7f0000000300)="2e000300010000", 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 18.417119563s ago: executing program 2 (id=1409): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000580)=[{0x0}, {0x0}, {&(0x7f00000002c0)="c27d037369597e0a4e", 0x9}], 0x3, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000580)={0x0, 0xc0, 0x2c0, 0x0}) 17.829314263s ago: executing program 2 (id=1410): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020}, 0x2020) poll(&(0x7f0000000600)=[{r0, 0x282}], 0x1, 0x3) 17.672919296s ago: executing program 2 (id=1411): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, &(0x7f00000006c0), 0x24, 0x2, 0x0) bind$can_raw(r0, &(0x7f00000002c0), 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780), 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 17.62950328s ago: executing program 1 (id=1412): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x8, &(0x7f0000000200), 0x4) 17.171409789s ago: executing program 1 (id=1414): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0xd0) listen(r3, 0x2) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r6, &(0x7f000000e3c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0xeb7, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x40000000000, {0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r8, r6) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x1c, 0x0, 0x801, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 16.067765692s ago: executing program 1 (id=1416): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 15.97684524s ago: executing program 2 (id=1417): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000b23dfb3c236ff169002020207b1af8ff00000000bfa100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 14.829741417s ago: executing program 2 (id=1418): timer_settime(0x0, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000001a80)=[{{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, &(0x7f0000001500)=[{&(0x7f0000000200)=""/13}, {&(0x7f0000000fc0)=""/221}, {&(0x7f00000010c0)=""/70}, {&(0x7f0000001140)=""/213}, {&(0x7f0000001240)=""/32}, {&(0x7f0000001280)=""/229}, {&(0x7f0000001380)}, {&(0x7f00000013c0)=""/64}, {&(0x7f0000001440)=""/162}], 0x0, &(0x7f00000015c0)=""/177}}, {{&(0x7f0000001680)=@qipcrtr, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001700)=""/240}, {&(0x7f0000001800)=""/162}, {&(0x7f00000018c0)=""/85}, {&(0x7f0000001940)=""/92}], 0x0, &(0x7f0000001a00)=""/88}}], 0x4000059, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f00000004c0)=0x30, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) 12.638561772s ago: executing program 1 (id=1422): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) 7.612493017s ago: executing program 1 (id=1433): openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x9) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c2400", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r3], 0x0) 5.187550542s ago: executing program 3 (id=1437): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x1d, 0x2, 0x6) clock_gettime(0x0, &(0x7f0000000200)) r2 = openat$rdma_cm(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x1400}, {r2, 0x1104}, {r0, 0x3a0}, {r2, 0x40}], 0x4, 0x0, 0x0, 0x0) 4.960788571s ago: executing program 3 (id=1438): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000b23dfb3c236ff169002020207b1af8ff00000000bfa100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 3.804536789s ago: executing program 3 (id=1440): r0 = socket(0x1d, 0x2, 0x6) ppoll(&(0x7f0000000280)=[{r0, 0x1400}], 0x1, &(0x7f0000000100), 0x0, 0x0) 3.750605524s ago: executing program 4 (id=1441): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x2f) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000a, 0x13, r0, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000180)={0x13a, 0x7, 0x1, {{0x12d, '\x03\x00\x00\xf2\xe6$\xaa\x00=R\x11e3Q\x9a\xee\b\xb2Y\x1fus\xd3\xfa\x06\xb9\xef\f7\xf8@J\x10\xf6Y\xc6\xa1\xf0\xa0\x99>$V\f(t\a\xfe\x13\xcc>\xa7\x17\xe2=\xce\x1a&\xc2\x1f\xc4\xa8\xedG\x9fKt\xbb\rT\xa8\t\xa1\xa3\xae]e\xef\x1b`W%8\x1c\xe1\x89\x96\xcf\'(}\xde`\xf16;\xbd\xe6R\xdeB\xc8\xc1\x12&]\x86\xf4\xdd\xd4iP=a\xafMC1\x95\f\x03\x19\xd1\xffv\xf2\xc0\xa2Uv\xd09\xdc\x8fy\x87a\xf7$\xe3\xe8\xd8\xb6]O\x02x?\x1d\xab\xae#\xdcg0A\xd7i\x7f\x9a\x8f\xc5\xffc\x92V\xa1\x90X\xb6\xce~<\x9fV\x15\x9eW\xcc[\r\xd9H\xb6FV\xa0`zq\xd9U\r\xde\xa0\x98}jC\xf5\xee\x8cy\x1a\x8d\x89K\x89\xd5_\x14\xf0\xf1\xb8\xe5\xed\xbf\xd7\xf3\x0f\r\xdb@\x1d\'e\x11\x03\x00\x00\x00\x00\x00\x00\x00\x88`\xe4\x1a\xaa\x1d\xd0\x88LR\x84\x0e\x8a(\xd6N\xa1+\x99\x85v\xfe\xcbf\xc3\x9a\x1a\xc2C\xfd*QG\xfe\x9fl\xab\x87q\x10\x88\x91(RE\xb4\x12\xa1%\x84\xfb\xfe\xc057e0\x94~-\"\xedJX+('}, 0x9}}, 0x13a) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r1, &(0x7f0000001ac0)={0x2020}, 0x2020) 3.638506923s ago: executing program 3 (id=1442): r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000005ac0)=[{{0x0, 0x0, 0x0}, 0xfffffff7}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/39, 0x27}, {&(0x7f0000001740)=""/180, 0xb4}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000001940)=""/4112, 0x1010}, {&(0x7f00000002c0)=""/228, 0xe4}, {&(0x7f0000001540)=""/245, 0xf5}, {&(0x7f00000001c0)=""/253, 0xfd}], 0x7}, 0x7}], 0x2, 0x40000002, 0x0) 3.472120707s ago: executing program 4 (id=1443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000780)={0x14, 0x3, 0x8, 0x101}, 0x14}}, 0x0) 3.328349979s ago: executing program 4 (id=1444): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0xd0) listen(r3, 0x2) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r6, &(0x7f000000e3c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0xeb7, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x40000000000, {0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r8, r6) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x1c, 0x0, 0x801, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 2.236878962s ago: executing program 4 (id=1445): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r1, &(0x7f0000000040)='6', 0x12, 0x0, &(0x7f0000000200)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.163899767s ago: executing program 3 (id=1446): socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x4a4, &(0x7f0000000a40)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000540)='./bus\x00', 0x100000, &(0x7f0000000440)=ANY=[], 0x4, 0x0, 0x0) rmdir(&(0x7f0000001100)='./file1\x00') 2.042860328s ago: executing program 4 (id=1447): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000021c0)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x108}, 0x1, 0x0, 0x0, 0x4008000}, 0x4801) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x0, 0x0, "4102000000ff000000000006bbff0f00"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="188099000000000008000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) creat(0x0, 0xecf86c37d53049e9) execve(0x0, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffe43}}, 0x1006) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0xfffffffffffffdf7, 0x0}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) kexec_load(0x0, 0x1, &(0x7f00000012c0)=[{0x0}], 0x160000) kexec_load(0x0, 0x0, 0x0, 0x140000) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)={'veth1\x00'}) 471.801241ms ago: executing program 3 (id=1448): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 15.773359ms ago: executing program 1 (id=1449): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000b23dfb3c236ff169002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 0s ago: executing program 4 (id=1450): read$FUSE(0xffffffffffffffff, &(0x7f000000a400)={0x2020}, 0x2020) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000600)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = dup(r2) ioctl$PPPIOCCONNECT(r3, 0x40047435, &(0x7f00000002c0)=0x2) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000009140), 0x4, 0x0) kernel console output (not intermixed with test programs): length: 249 > 3 [ 759.825527][ T3658] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 760.927976][ T9034] loop0: detected capacity change from 0 to 4096 [ 761.104139][ T9034] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 761.848493][ T3658] Bluetooth: hci4: command tx timeout [ 761.892255][ T9054] loop1: detected capacity change from 0 to 128 [ 762.107031][ T3652] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 762.117201][ T3652] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 762.128406][ T3652] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 762.142376][ T3652] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 762.151110][ T3652] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 762.158818][ T3652] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 762.415614][ T5207] EXT4-fs (loop0): unmounting filesystem. [ 762.757920][ T102] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.928836][ T3658] Bluetooth: hci4: command tx timeout [ 763.991835][ T9039] chnl_net:caif_netlink_parms(): no params data found [ 764.124586][ T102] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.248515][ T3652] Bluetooth: hci0: command tx timeout [ 764.381835][ T102] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.879719][ T102] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.008268][ T3652] Bluetooth: hci4: command tx timeout [ 766.514259][ T3652] Bluetooth: hci0: command tx timeout [ 768.108273][ T3658] Bluetooth: hci4: command tx timeout [ 768.568259][ T3652] Bluetooth: hci0: command tx timeout [ 768.924804][ T9039] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.965736][ T9039] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.002425][ T9039] device bridge_slave_0 entered promiscuous mode [ 769.131729][ T9039] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.141742][ T9039] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.179389][ T9039] device bridge_slave_1 entered promiscuous mode [ 769.236009][ T9103] loop1: detected capacity change from 0 to 512 [ 769.280924][ T9103] EXT4-fs: Ignoring removed mblk_io_submit option [ 769.351173][ T9103] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 769.472485][ T9103] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 769.488644][ T9103] System zones: 1-12 [ 769.513619][ T9103] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.1036: corrupted in-inode xattr [ 769.516925][ T9055] chnl_net:caif_netlink_parms(): no params data found [ 769.560231][ T9103] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1036: couldn't read orphan inode 15 (err -117) [ 769.570373][ T9039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.619579][ T9039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.678610][ T9103] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 770.016313][ T7951] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 770.177523][ T9112] fuse: Bad value for 'fd' [ 770.225955][ T9116] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.1036: Unrecognised inode hash code 4 [ 770.272215][ T7951] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 770.446699][ T7951] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 770.549667][ T9116] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1036: Corrupt directory, running e2fsck is recommended [ 770.585443][ T7951] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 770.695570][ T7951] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 770.819719][ T7951] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 770.965194][ T7951] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 771.008602][ T9103] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.1036: Unrecognised inode hash code 4 [ 771.100919][ T7951] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 771.204182][ T9103] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1036: Corrupt directory, running e2fsck is recommended [ 771.230547][ T7951] hid-generic 0000:0000:0000.000E: item fetching failed at offset 8/43 [ 771.325450][ T9103] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.1036: corrupted in-inode xattr [ 771.547242][ T9118] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.1036: Unrecognised inode hash code 4 [ 771.632724][ T7951] hid-generic: probe of 0000:0000:0000.000E failed with error -22 [ 771.742096][ T9118] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1036: Corrupt directory, running e2fsck is recommended [ 771.759399][ T3652] Bluetooth: hci0: command tx timeout [ 771.778301][ T9118] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.1036: Unrecognised inode hash code 4 [ 771.791543][ T9118] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1036: Corrupt directory, running e2fsck is recommended [ 771.880546][ T9119] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.1036: Unrecognised inode hash code 4 [ 771.983208][ T9119] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1036: Corrupt directory, running e2fsck is recommended [ 772.111394][ T9039] team0: Port device team_slave_0 added [ 772.362817][ T7021] EXT4-fs (loop1): unmounting filesystem. [ 772.437865][ T9039] team0: Port device team_slave_1 added [ 772.449787][ T9055] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.457181][ T9055] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.496674][ T9055] device bridge_slave_0 entered promiscuous mode [ 772.732110][ T9055] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.748463][ T9055] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.766016][ T9055] device bridge_slave_1 entered promiscuous mode [ 772.794268][ T27] audit: type=1326 audit(1729081898.596:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.0.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf877dff9 code=0x7ffc0000 [ 772.876983][ T27] audit: type=1326 audit(1729081898.676:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.0.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf877dff9 code=0x7ffc0000 [ 773.102193][ T9039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.140823][ T27] audit: type=1326 audit(1729081898.686:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.0.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf877dff9 code=0x7ffc0000 [ 773.211796][ T9039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 773.703054][ T27] audit: type=1326 audit(1729081898.686:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.0.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf877dff9 code=0x7ffc0000 [ 773.768220][ T9039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.838216][ T27] audit: type=1326 audit(1729081898.696:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.0.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cf877dff9 code=0x7ffc0000 [ 773.880343][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 773.932259][ T9055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.998084][ T27] audit: type=1326 audit(1729081898.696:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.0.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf877dff9 code=0x7ffc0000 [ 774.022300][ T27] audit: type=1326 audit(1729081898.696:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.0.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cf877dff9 code=0x7ffc0000 [ 774.045049][ T27] audit: type=1326 audit(1729081898.696:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.0.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf877dff9 code=0x7ffc0000 [ 774.132674][ T9039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.158097][ T9039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.185433][ T27] audit: type=1326 audit(1729081898.696:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.0.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cf877dff9 code=0x7ffc0000 [ 774.238257][ T27] audit: type=1326 audit(1729081898.696:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.0.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf877dff9 code=0x7ffc0000 [ 774.260977][ T9039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.285301][ T9055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.482571][ T9055] team0: Port device team_slave_0 added [ 774.642340][ T9039] device hsr_slave_0 entered promiscuous mode [ 774.670482][ T9039] device hsr_slave_1 entered promiscuous mode [ 774.691350][ T9149] loop4: detected capacity change from 0 to 512 [ 774.697944][ T9039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 774.717453][ T9149] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 774.726384][ T9039] Cannot create hsr debugfs directory [ 774.799111][ T9055] team0: Port device team_slave_1 added [ 775.741139][ T9055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.769050][ T9055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.886152][ T9055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.912020][ T9055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.928360][ T9055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.209512][ T9055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.797629][ T9055] device hsr_slave_0 entered promiscuous mode [ 776.827680][ T9055] device hsr_slave_1 entered promiscuous mode [ 776.858380][ T9055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 776.890199][ T9055] Cannot create hsr debugfs directory [ 777.078242][ T3688] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 777.378480][ T3688] usb 5-1: no configurations [ 777.400153][ T3688] usb 5-1: can't read configurations, error -22 [ 777.588217][ T3688] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 777.878850][ T3688] usb 5-1: no configurations [ 777.883539][ T3688] usb 5-1: can't read configurations, error -22 [ 777.911176][ T3688] usb usb5-port1: attempt power cycle [ 779.127993][ T9039] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.188309][ T3688] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 779.330324][ T9039] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.400127][ T102] device hsr_slave_0 left promiscuous mode [ 779.414974][ T102] device hsr_slave_1 left promiscuous mode [ 779.422970][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 779.437569][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 779.460032][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 779.467487][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 779.482630][ T102] device bridge_slave_1 left promiscuous mode [ 779.493163][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.506735][ T102] device bridge_slave_0 left promiscuous mode [ 779.517085][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.794373][ T102] device veth1_macvtap left promiscuous mode [ 784.808385][ T3688] usb 5-1: device descriptor read/8, error -110 [ 784.814796][ T102] device veth0_macvtap left promiscuous mode [ 784.827416][ T9202] loop1: detected capacity change from 0 to 512 [ 784.828418][ T102] device veth1_vlan left promiscuous mode [ 784.849994][ T102] device veth0_vlan left promiscuous mode [ 784.857836][ T9202] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 785.156439][ T9205] fuse: Bad value for 'fd' [ 785.408009][ T3688] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 785.478432][ T3688] usb 5-1: device descriptor read/8, error -32 [ 785.602778][ T3688] usb usb5-port1: unable to enumerate USB device [ 786.405861][ T3652] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 786.420788][ T3652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 786.456566][ T3652] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 786.466624][ T3652] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 786.474911][ T3652] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 786.482335][ T3652] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 786.847259][ T102] team0 (unregistering): Port device team_slave_1 removed [ 786.925763][ T102] team0 (unregistering): Port device team_slave_0 removed [ 786.970878][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.069610][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 788.357838][ T102] bond0 (unregistering): Released all slaves [ 788.455446][ T9039] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.875131][ T9211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1052'. [ 788.875597][ T3658] Bluetooth: hci1: command tx timeout [ 789.177329][ T9039] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.546181][ T27] kauditd_printk_skb: 38 callbacks suppressed [ 790.546198][ T27] audit: type=1326 audit(1729081916.346:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414937dff9 code=0x7ffc0000 [ 790.603262][ T27] audit: type=1326 audit(1729081916.346:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414937dff9 code=0x7ffc0000 [ 790.715967][ T27] audit: type=1326 audit(1729081916.346:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f414937dff9 code=0x7ffc0000 [ 790.717335][ T9216] chnl_net:caif_netlink_parms(): no params data found [ 790.747986][ T27] audit: type=1326 audit(1729081916.346:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414937dff9 code=0x7ffc0000 [ 790.884303][ T27] audit: type=1326 audit(1729081916.346:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414937dff9 code=0x7ffc0000 [ 790.955348][ T27] audit: type=1326 audit(1729081916.346:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f414937dff9 code=0x7ffc0000 [ 790.978336][ T3658] Bluetooth: hci1: command tx timeout [ 790.986856][ T27] audit: type=1326 audit(1729081916.346:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414937dff9 code=0x7ffc0000 [ 791.403586][ T27] audit: type=1326 audit(1729081916.346:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414937dff9 code=0x7ffc0000 [ 791.429308][ T27] audit: type=1326 audit(1729081916.346:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f414937dff9 code=0x7ffc0000 [ 791.519643][ T27] audit: type=1326 audit(1729081916.346:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414937dff9 code=0x7ffc0000 [ 791.914887][ T9216] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.923575][ T9216] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.942383][ T9216] device bridge_slave_0 entered promiscuous mode [ 791.991712][ T9216] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.008831][ T9216] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.046576][ T9216] device bridge_slave_1 entered promiscuous mode [ 792.098339][ T3731] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 792.339468][ T9216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.375202][ T9216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.443394][ T9055] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 792.497040][ T9216] team0: Port device team_slave_0 added [ 792.509425][ T3731] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 792.514834][ T9216] team0: Port device team_slave_1 added [ 792.524113][ T3731] usb 1-1: can't read configurations, error -61 [ 792.530618][ T9055] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 792.545488][ T9055] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 792.593798][ T9055] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 792.634561][ T9216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 792.642170][ T9216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 792.671924][ T9216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.678397][ T3731] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 792.684962][ T9216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.697110][ T9216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 792.723779][ T9216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.827088][ T9039] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 792.841295][ T9216] device hsr_slave_0 entered promiscuous mode [ 792.849064][ T9216] device hsr_slave_1 entered promiscuous mode [ 792.855715][ T9216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 792.864767][ T9216] Cannot create hsr debugfs directory [ 792.882435][ T9039] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 792.922990][ T9039] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 792.942612][ T9039] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 793.048765][ T3658] Bluetooth: hci1: command tx timeout [ 793.098471][ T3731] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 793.106106][ T3731] usb 1-1: can't read configurations, error -61 [ 793.128768][ T3731] usb usb1-port1: attempt power cycle [ 793.214448][ T9055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.278825][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 793.297257][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 793.402315][ T9055] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.461584][ T9039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.473001][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 793.505241][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 793.517362][ T4837] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.524581][ T4837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.539944][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 793.541531][ T3731] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 793.556124][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 793.574120][ T4837] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.581333][ T4837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.742279][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 793.755291][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 793.777393][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 793.895553][ T9216] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.929729][ T3731] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 793.948004][ T3731] usb 1-1: can't read configurations, error -71 [ 794.003461][ T9039] 8021q: adding VLAN 0 to HW filter on device team0 [ 794.061618][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 794.080409][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 794.129864][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 794.157696][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 794.191854][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 794.402583][ T9216] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.895237][ T102] device hsr_slave_0 left promiscuous mode [ 795.132643][ T3658] Bluetooth: hci1: command tx timeout [ 795.155453][ T102] device hsr_slave_1 left promiscuous mode [ 795.233180][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 795.272788][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 795.324491][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 795.338386][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 795.349822][ T102] device bridge_slave_1 left promiscuous mode [ 795.357305][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.370343][ T102] device bridge_slave_0 left promiscuous mode [ 795.380917][ T9316] loop0: detected capacity change from 0 to 512 [ 795.408426][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.447514][ T9316] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 795.477321][ T102] device veth1_macvtap left promiscuous mode [ 795.491824][ T102] device veth0_macvtap left promiscuous mode [ 795.497993][ T102] device veth1_vlan left promiscuous mode [ 795.506563][ T102] device veth0_vlan left promiscuous mode [ 798.072981][ T102] team0 (unregistering): Port device team_slave_1 removed [ 798.161854][ T102] team0 (unregistering): Port device team_slave_0 removed [ 798.216867][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.282245][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.383704][ T5207] EXT4-fs (loop0): unmounting filesystem. [ 798.517879][ T9352] loop0: detected capacity change from 0 to 1024 [ 798.558968][ T9352] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 798.657316][ T5207] EXT4-fs (loop0): unmounting filesystem. [ 798.990268][ T102] bond0 (unregistering): Released all slaves [ 799.075240][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 799.084569][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 799.123105][ T9216] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.242184][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 799.265695][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 799.290576][ T4837] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.297717][ T4837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 799.308044][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 799.318627][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 799.327492][ T4837] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.334718][ T4837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 799.346657][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 799.501826][ T9216] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.633589][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 799.653924][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 799.852298][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 800.018403][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 800.117245][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 800.194336][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 800.203532][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 800.235399][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 800.265440][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 800.322570][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 800.332687][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 800.380494][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 800.429621][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 800.451688][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 800.660944][ T9039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 800.725728][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 801.017483][ T7] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 801.041105][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 801.063034][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 801.444689][ T9216] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 801.478542][ T7] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 801.496393][ T7] usb 2-1: can't read configurations, error -61 [ 801.609680][ T9216] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 801.670412][ T7] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 801.731621][ T9216] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 802.010922][ T9216] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 802.140163][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 802.148422][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 802.239444][ T9055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 802.266606][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 802.296912][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 802.449198][ T7] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 802.456831][ T7] usb 2-1: can't read configurations, error -71 [ 802.538609][ T7] usb usb2-port1: attempt power cycle [ 802.553258][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 802.581221][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 802.610695][ T9055] device veth0_vlan entered promiscuous mode [ 802.632808][ T9055] device veth1_vlan entered promiscuous mode [ 802.678938][ T9055] device veth0_macvtap entered promiscuous mode [ 802.707711][ T9055] device veth1_macvtap entered promiscuous mode [ 802.773027][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 802.803075][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.817263][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 802.835424][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.846062][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 802.864189][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.876565][ T9055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 802.903055][ T9039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 802.920616][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 802.932213][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 802.949928][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 802.957534][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 802.966523][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 802.986515][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 802.998018][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 803.018926][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 803.027845][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 803.049315][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 803.109870][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 803.140863][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.168596][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 803.202385][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.224375][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 803.257602][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.275397][ T9055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 803.293520][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 803.317846][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 803.489107][ T9039] device veth0_vlan entered promiscuous mode [ 803.517459][ T9055] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.527181][ T9055] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.536167][ T9055] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.547999][ T9055] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.912797][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 804.018785][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 804.156380][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 804.179106][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 804.233720][ T9039] device veth1_vlan entered promiscuous mode [ 804.393243][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 804.449173][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 804.469649][ T9413] loop1: detected capacity change from 0 to 32768 [ 804.546040][ T9425] loop0: detected capacity change from 0 to 256 [ 804.606657][ T9039] device veth0_macvtap entered promiscuous mode [ 804.631749][ T9413] XFS (loop1): Mounting V5 Filesystem [ 804.645513][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 804.687044][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 804.704174][ T9216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.729673][ T9039] device veth1_macvtap entered promiscuous mode [ 804.791363][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 804.805883][ T9413] XFS (loop1): Ending clean mount [ 804.812834][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 804.937322][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.951144][ T4999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.960840][ T4999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.977846][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.987992][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.993523][ T9013] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 [ 805.003252][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.020334][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.031144][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.031560][ T9013] XFS (loop1): Unmount and run xfs_repair [ 805.041419][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.067032][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.074684][ T9013] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 805.097132][ T9039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.102435][ T9013] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 805.105913][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 805.125826][ T9013] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 805.130503][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 805.144955][ T9013] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 805.152125][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 805.155983][ T9013] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 805.167236][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 805.173329][ T9013] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 805.187717][ T9013] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 805.197677][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 805.198975][ T9013] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 805.216034][ T9013] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 805.218006][ T9216] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.226075][ T9413] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74 [ 805.259769][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.313704][ T9413] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1acd/0x2210 (fs/xfs/libxfs/xfs_defer.c:573). Shutting down filesystem. [ 805.315200][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.330996][ T9413] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 805.352932][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.365753][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.376409][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.386964][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.398282][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.411196][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.427834][ T9039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.431290][ T7021] XFS (loop1): Unmounting Filesystem [ 805.545394][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 805.565894][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 805.576281][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 805.585722][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 805.594844][ T4837] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.601990][ T4837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.613496][ T9039] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.625723][ T9039] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.637211][ T9039] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.650905][ T9039] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.718332][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 805.778518][ T3654] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 805.808998][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 805.819067][ T4837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.837032][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 805.838364][ T4837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.854500][ T4378] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.861666][ T4378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.890813][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 805.991090][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 806.006924][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 806.358421][ T3654] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 806.366040][ T3654] usb 1-1: can't read configurations, error -61 [ 806.560845][ T3654] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 807.298263][ T3654] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 807.317712][ T3654] usb 1-1: can't read configurations, error -61 [ 807.324473][ T3654] usb usb1-port1: attempt power cycle [ 807.738326][ T3654] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 809.779167][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 809.801932][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 809.847342][ T9216] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 810.003494][ T9463] loop1: detected capacity change from 0 to 512 [ 810.015782][ T9216] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 810.086970][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 810.111914][ T9463] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 810.131190][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 810.186067][ T9463] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038 (0x7fffffff) [ 810.201043][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 810.223763][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 810.235924][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 810.249907][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 810.264620][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 811.685367][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 811.693574][ T7021] EXT4-fs (loop1): unmounting filesystem. [ 811.988658][ T9481] capability: warning: `syz.1.1086' uses deprecated v2 capabilities in a way that may be insecure [ 812.038653][ T9479] loop2: detected capacity change from 0 to 512 [ 812.046931][ T102] device hsr_slave_0 left promiscuous mode [ 812.088027][ T102] device hsr_slave_1 left promiscuous mode [ 812.112988][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 812.138069][ T9479] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 812.193965][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 812.235521][ T9479] ext4 filesystem being mounted at /3/bus supports timestamps until 2038 (0x7fffffff) [ 812.247327][ T9486] loop1: detected capacity change from 0 to 256 [ 812.262339][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 812.331246][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 812.403706][ T102] device bridge_slave_1 left promiscuous mode [ 812.424196][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.443166][ T102] device bridge_slave_0 left promiscuous mode [ 812.451796][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.484981][ T9055] EXT4-fs (loop2): unmounting filesystem. [ 812.493170][ T102] device veth1_macvtap left promiscuous mode [ 812.499438][ T102] device veth0_macvtap left promiscuous mode [ 812.967410][ T9493] loop2: detected capacity change from 0 to 32768 [ 812.990281][ T9493] XFS (loop2): Mounting V5 Filesystem [ 813.030650][ T9493] XFS (loop2): Starting recovery (logdev: internal) [ 813.064487][ T3654] usb 1-1: unable to read config index 0 descriptor/start: -110 [ 813.073007][ T3654] usb 1-1: can't read configurations, error -110 [ 813.106226][ T9493] XFS (loop2): Ending recovery (logdev: internal) [ 813.228324][ T3654] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 813.303358][ T3654] usb 1-1: device descriptor read/8, error -32 [ 813.321840][ T9055] XFS (loop2): Unmounting Filesystem [ 813.430528][ T3654] usb usb1-port1: unable to enumerate USB device [ 813.466254][ T102] team0 (unregistering): Port device team_slave_1 removed [ 813.510806][ T102] team0 (unregistering): Port device team_slave_0 removed [ 813.564549][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 813.609951][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 813.853493][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.107123][ T102] bond0 (unregistering): Released all slaves [ 814.229262][ T3834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.237537][ T3834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.237943][ T9216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 814.261768][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 814.271827][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 814.293409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 814.348854][ T4837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.357185][ T4837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.418887][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 814.710639][ T27] kauditd_printk_skb: 26 callbacks suppressed [ 814.710656][ T27] audit: type=1326 audit(1729081940.516:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.3.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdd97dff9 code=0x7ffc0000 [ 814.835047][ T27] audit: type=1326 audit(1729081940.546:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.3.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f7bdd97dff9 code=0x7ffc0000 [ 814.876316][ T27] audit: type=1326 audit(1729081940.546:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.3.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdd97dff9 code=0x7ffc0000 [ 814.979767][ T27] audit: type=1326 audit(1729081940.546:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.3.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f7bdd97dff9 code=0x7ffc0000 [ 815.029118][ T27] audit: type=1326 audit(1729081940.546:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.3.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdd97dff9 code=0x7ffc0000 [ 815.181322][ T27] audit: type=1326 audit(1729081940.546:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.3.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7bdd97dff9 code=0x7ffc0000 [ 815.205345][ T27] audit: type=1326 audit(1729081940.546:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.3.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdd97dff9 code=0x7ffc0000 [ 815.258286][ T27] audit: type=1326 audit(1729081940.546:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.3.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7bdd97dff9 code=0x7ffc0000 [ 815.281427][ T27] audit: type=1326 audit(1729081940.546:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.3.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdd97dff9 code=0x7ffc0000 [ 815.309794][ T27] audit: type=1326 audit(1729081940.546:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.3.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f7bdd97dff9 code=0x7ffc0000 [ 815.966712][ T9519] loop3: detected capacity change from 0 to 512 [ 816.491352][ T9519] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 816.510422][ T9519] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 817.357832][ T9039] EXT4-fs (loop3): unmounting filesystem. [ 818.225820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 818.258996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 818.362224][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 818.373696][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 818.385181][ T9216] device veth0_vlan entered promiscuous mode [ 818.400293][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 818.409477][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 818.433588][ T9216] device veth1_vlan entered promiscuous mode [ 818.529368][ T3652] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 818.540265][ T3652] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 818.548441][ T3652] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 818.557726][ T3652] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 818.566102][ T3652] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 818.573870][ T3652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 818.668415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 818.686060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 818.936759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 818.952217][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 819.242733][ T9555] overlayfs: failed to resolve './file1': -2 [ 819.268130][ T9216] device veth0_macvtap entered promiscuous mode [ 819.354838][ T9216] device veth1_macvtap entered promiscuous mode [ 819.660243][ T9543] loop3: detected capacity change from 0 to 32768 [ 819.857954][ T3985] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.878247][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 819.886793][ T9543] XFS (loop3): Mounting V5 Filesystem [ 819.887810][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 819.955276][ T9565] loop1: detected capacity change from 0 to 512 [ 820.000391][ T3985] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.022900][ T9216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.034348][ T9216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.044967][ T9216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.053627][ T9543] XFS (loop3): Ending clean mount [ 820.073276][ T9216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.087783][ T9216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.100139][ T9216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.110306][ T9216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.125658][ T9565] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 820.145132][ T9565] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038 (0x7fffffff) [ 820.147208][ T9216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.169484][ T9216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 820.178368][ T9568] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.185932][ T9568] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.388293][ T9039] XFS (loop3): Unmounting Filesystem [ 820.400887][ T9570] device bridge_slave_1 left promiscuous mode [ 820.407839][ T9570] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.460207][ T9570] device bridge_slave_0 left promiscuous mode [ 820.466630][ T9570] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.648431][ T3658] Bluetooth: hci2: command tx timeout [ 820.685094][ T9572] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1104'. [ 820.805891][ T3985] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.824009][ T27] kauditd_printk_skb: 31 callbacks suppressed [ 820.824028][ T27] audit: type=1326 audit(1729081946.626:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.3.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdd97dff9 code=0x7ffc0000 [ 820.857582][ T9216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.880814][ T9216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.890918][ T27] audit: type=1326 audit(1729081946.626:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.3.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7bdd97c990 code=0x7ffc0000 [ 820.891071][ T27] audit: type=1326 audit(1729081946.626:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.3.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7bdd97c990 code=0x7ffc0000 [ 820.891239][ T27] audit: type=1326 audit(1729081946.626:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.3.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdd97dff9 code=0x7ffc0000 [ 820.891345][ T27] audit: type=1326 audit(1729081946.636:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.3.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdd97dff9 code=0x7ffc0000 [ 820.891481][ T27] audit: type=1326 audit(1729081946.636:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.3.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f7bdd97dff9 code=0x7ffc0000 [ 820.891629][ T27] audit: type=1326 audit(1729081946.636:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.3.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdd97dff9 code=0x7ffc0000 [ 820.891766][ T27] audit: type=1326 audit(1729081946.636:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.3.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdd97dff9 code=0x7ffc0000 [ 820.891901][ T27] audit: type=1326 audit(1729081946.636:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.3.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f7bdd97dff9 code=0x7ffc0000 [ 820.892042][ T27] audit: type=1326 audit(1729081946.636:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.3.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdd97dff9 code=0x7ffc0000 [ 821.100103][ T9216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 821.111110][ T9216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.121158][ T9216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 821.133865][ T9216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.143832][ T9216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 821.171811][ T9216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.199493][ T9216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 821.217085][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 821.240279][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 821.261033][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 821.274640][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 821.352889][ T3985] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.374854][ T9216] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.384379][ T9216] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.393532][ T9216] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.402484][ T9216] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.921407][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.973859][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.076623][ T3802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.099832][ T3802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.127041][ T2530] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 822.219112][ T2530] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 822.535748][ T7021] EXT4-fs (loop1): unmounting filesystem. [ 822.547886][ T9545] chnl_net:caif_netlink_parms(): no params data found [ 822.728794][ T3658] Bluetooth: hci2: command tx timeout [ 824.005445][ T9545] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.048504][ T9545] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.077383][ T9545] device bridge_slave_0 entered promiscuous mode [ 824.280207][ T9545] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.309982][ T9545] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.353926][ T9545] device bridge_slave_1 entered promiscuous mode [ 824.858352][ T3658] Bluetooth: hci2: command tx timeout [ 824.958078][ T9591] loop1: detected capacity change from 0 to 32768 [ 825.601683][ T9591] XFS (loop1): Mounting V5 Filesystem [ 825.739347][ T9545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.819668][ T9591] XFS (loop1): Ending clean mount [ 825.921672][ T9643] loop3: detected capacity change from 0 to 512 [ 825.936075][ T7021] XFS (loop1): Unmounting Filesystem [ 825.945089][ T9545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.260151][ T9643] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 826.270964][ T9643] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff) [ 826.572357][ T9545] team0: Port device team_slave_0 added [ 826.645255][ T9545] team0: Port device team_slave_1 added [ 826.894765][ T3652] Bluetooth: hci2: command tx timeout [ 827.327975][ T9545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.353296][ T9545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.474317][ T9545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.775170][ T9545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.798065][ T9545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.915470][ T9545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.276753][ T3985] device hsr_slave_0 left promiscuous mode [ 828.297803][ T3985] device hsr_slave_1 left promiscuous mode [ 828.336178][ T3985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 828.348228][ T3985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 828.393740][ T3985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 828.408520][ T3985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 828.437908][ T3985] device bridge_slave_1 left promiscuous mode [ 828.457940][ T3985] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.474603][ T9039] EXT4-fs (loop3): unmounting filesystem. [ 828.476924][ T9662] loop1: detected capacity change from 0 to 32768 [ 828.496794][ T3985] device bridge_slave_0 left promiscuous mode [ 828.550674][ T3985] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.622897][ T9681] loop3: detected capacity change from 0 to 2048 [ 828.626112][ T9662] XFS (loop1): Mounting V5 Filesystem [ 828.654361][ T3985] device veth1_macvtap left promiscuous mode [ 828.666822][ T3985] device veth0_macvtap left promiscuous mode [ 828.673028][ T9681] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 828.688278][ T3985] device veth1_vlan left promiscuous mode [ 828.698502][ T3985] device veth0_vlan left promiscuous mode [ 828.741668][ T9681] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 828.808049][ T9662] XFS (loop1): Ending clean mount [ 828.879688][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 828.879705][ T27] audit: type=1804 audit(1729081954.686:1092): pid=9662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1119" name="/newroot/132/file0/bus" dev="loop1" ino=1289 res=1 errno=0 [ 829.085412][ T7021] XFS (loop1): Unmounting Filesystem [ 829.401625][ T9681] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 3584 lbcount: 4096 extent 56+4096 [ 831.122289][ T27] audit: type=1326 audit(1729081956.926:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9702 comm="syz.1.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414937dff9 code=0x7ffc0000 [ 831.198590][ T27] audit: type=1326 audit(1729081956.956:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9702 comm="syz.1.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414937dff9 code=0x7ffc0000 [ 831.254472][ T27] audit: type=1326 audit(1729081956.996:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9702 comm="syz.1.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f414937dff9 code=0x7ffc0000 [ 831.279612][ T27] audit: type=1326 audit(1729081956.996:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9702 comm="syz.1.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414937dff9 code=0x7ffc0000 [ 831.303789][ T27] audit: type=1326 audit(1729081956.996:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9702 comm="syz.1.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f414937dff9 code=0x7ffc0000 [ 831.331724][ T27] audit: type=1326 audit(1729081956.996:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9702 comm="syz.1.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414937dff9 code=0x7ffc0000 [ 831.355633][ T27] audit: type=1326 audit(1729081956.996:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9702 comm="syz.1.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f414937dff9 code=0x7ffc0000 [ 831.378765][ T27] audit: type=1326 audit(1729081956.996:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9702 comm="syz.1.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414937dff9 code=0x7ffc0000 [ 831.403570][ T27] audit: type=1326 audit(1729081956.996:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9702 comm="syz.1.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f414937dff9 code=0x7ffc0000 [ 834.383669][ T3985] team0 (unregistering): Port device team_slave_1 removed [ 834.432511][ T3985] team0 (unregistering): Port device team_slave_0 removed [ 834.487150][ T3985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 834.542232][ T3985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 834.713253][ T3730] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 835.060455][ T3985] bond0 (unregistering): Released all slaves [ 835.137465][ T9545] device hsr_slave_0 entered promiscuous mode [ 835.144470][ T9545] device hsr_slave_1 entered promiscuous mode [ 835.151350][ T3730] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 835.159882][ T3730] usb 3-1: can't read configurations, error -61 [ 835.160581][ T9545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 835.174193][ T9545] Cannot create hsr debugfs directory [ 835.368513][ T3730] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 836.098546][ T3730] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 836.148210][ T3730] usb 3-1: can't read configurations, error -61 [ 836.154735][ T3730] usb usb3-port1: attempt power cycle [ 836.638179][ T3730] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 836.928439][ T3730] usb 3-1: device not accepting address 19, error -71 [ 838.217334][ T9764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1139'. [ 838.978242][ T9013] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 839.395162][ T9545] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 839.432347][ T9545] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 839.443815][ T9545] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 839.459193][ T9545] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 839.548624][ T9013] usb 4-1: config 0 has no interfaces? [ 839.557328][ T9013] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 839.604197][ T9013] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.619444][ T9545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.647468][ T9013] usb 4-1: config 0 descriptor?? [ 839.666032][ T9545] 8021q: adding VLAN 0 to HW filter on device team0 [ 839.722096][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 839.811408][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 839.826749][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 839.859156][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 839.883492][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.890678][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.971668][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 840.025068][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 840.060460][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.067674][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 840.115551][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 840.185668][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 840.219266][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 840.258491][ T3393] usb 4-1: USB disconnect, device number 20 [ 840.269163][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 840.291412][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 840.320738][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 840.383967][ T9545] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 840.445082][ T9545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 840.487215][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 840.518673][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 840.579697][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 840.639266][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 840.679151][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 840.698934][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 840.769971][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 840.854426][ T27] kauditd_printk_skb: 34 callbacks suppressed [ 840.854445][ T27] audit: type=1326 audit(1729081966.656:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9800 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3b17dff9 code=0x7ffc0000 [ 840.930866][ T27] audit: type=1326 audit(1729081966.656:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9800 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3b17dff9 code=0x7ffc0000 [ 841.024204][ T27] audit: type=1326 audit(1729081966.706:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9800 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a3b17dff9 code=0x7ffc0000 [ 841.158580][ T27] audit: type=1326 audit(1729081966.706:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9800 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3b17dff9 code=0x7ffc0000 [ 841.334417][ T27] audit: type=1326 audit(1729081966.706:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9800 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3b17dff9 code=0x7ffc0000 [ 841.358432][ T9013] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 841.625061][ T27] audit: type=1326 audit(1729081966.716:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9800 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f4a3b17dff9 code=0x7ffc0000 [ 841.688177][ T27] audit: type=1326 audit(1729081966.716:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9800 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3b17dff9 code=0x7ffc0000 [ 841.722928][ T27] audit: type=1326 audit(1729081966.716:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9800 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3b17dff9 code=0x7ffc0000 [ 841.971092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 842.015560][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 842.025913][ T27] audit: type=1326 audit(1729081966.716:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9800 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f4a3b17dff9 code=0x7ffc0000 [ 842.048773][ T9013] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 842.054163][ T9545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 842.066085][ T27] audit: type=1326 audit(1729081966.716:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9800 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3b17dff9 code=0x7ffc0000 [ 842.097213][ T9013] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 842.118200][ T9013] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 842.133476][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 842.143085][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 842.151694][ T9013] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.214936][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 842.240063][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 842.291437][ T9545] device veth0_vlan entered promiscuous mode [ 842.300443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 842.311276][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 842.360919][ T9545] device veth1_vlan entered promiscuous mode [ 842.437013][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 842.472927][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 842.495692][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 842.555386][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 842.580713][ T9545] device veth0_macvtap entered promiscuous mode [ 842.610902][ T9545] device veth1_macvtap entered promiscuous mode [ 842.685754][ T9545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.736256][ T9545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.765096][ T9545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.815435][ T9545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.978248][ T9545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.995887][ T9545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.809970][ T9013] usb 4-1: string descriptor 0 read error: -71 [ 843.816993][ T9013] usb 4-1: USB disconnect, device number 21 [ 844.301910][ T9545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.382246][ T9545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.565897][ T9545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 844.597099][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 844.647878][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 844.705610][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 844.858684][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 844.874761][ T9845] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1154'. [ 844.995906][ T9545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.051400][ T9545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.118256][ T9545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.148141][ T9545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.175392][ T9545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.236938][ T9545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.302152][ T9545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.345773][ T9545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.384548][ T9545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 845.409686][ T9545] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.435158][ T9545] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.466140][ T9545] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.493549][ T9545] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.580184][ T9856] device syz_tun entered promiscuous mode [ 845.627201][ T9856] device syz_tun left promiscuous mode [ 845.719208][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 845.739111][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 846.166307][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.230710][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.242637][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 846.326505][ T3834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.369697][ T3834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.579427][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 847.266802][ T9013] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 848.350699][ T9013] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 848.358788][ T9013] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 848.367288][ T9013] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 848.375188][ T9013] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 848.382935][ T9013] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 849.383102][ T9013] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 850.619134][ T9013] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 850.653820][ T9013] hid-generic 0000:0000:0000.000F: item fetching failed at offset 8/43 [ 850.694382][ T9013] hid-generic: probe of 0000:0000:0000.000F failed with error -22 [ 852.506055][ T9915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1166'. [ 852.766184][ T9919] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 853.138194][ T3720] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 853.403597][ T9927] fuse: Bad value for 'fd' [ 853.530292][ T3720] usb 3-1: Using ep0 maxpacket: 8 [ 853.668624][ T3720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.765705][ T3720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.068257][ T3720] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 854.331170][ T4999] tipc: Subscription rejected, illegal request [ 854.598759][ T3720] usb 3-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 854.737209][ T3720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.917154][ T3720] usb 3-1: Product: syz [ 855.106554][ T3720] usb 3-1: Manufacturer: syz [ 855.126634][ T3720] usb 3-1: SerialNumber: syz [ 855.193921][ T9942] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.201453][ T9942] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.217084][ T3720] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input6 [ 855.301060][ T9942] device bridge_slave_1 left promiscuous mode [ 855.311082][ T9942] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.349998][ T9942] device bridge_slave_0 left promiscuous mode [ 855.395808][ T9942] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.428401][ T3078] bcm5974 3-1:1.0: could not read from device [ 855.517197][ T3720] usb 3-1: USB disconnect, device number 21 [ 855.524092][ T3078] bcm5974 3-1:1.0: could not read from device [ 855.539484][ T3078] bcm5974 3-1:1.0: could not read from device [ 855.601315][ T9944] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1171'. [ 855.622189][ T9960] loop4: detected capacity change from 0 to 512 [ 855.656923][ T9960] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 855.685129][ T9955] udevd[9955]: Error opening device "/dev/input/event4": No such file or directory [ 855.715847][ T9955] udevd[9955]: Unable to EVIOCGABS device "/dev/input/event4" [ 855.859969][ T9955] udevd[9955]: Unable to EVIOCGABS device "/dev/input/event4" [ 855.943924][ T9955] udevd[9955]: Unable to EVIOCGABS device "/dev/input/event4" [ 856.108141][ T9965] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 856.403293][ T9955] udevd[9955]: Unable to EVIOCGABS device "/dev/input/event4" [ 856.933447][ T9973] kAFS: unable to lookup cell '' [ 856.970761][ T14] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 856.976814][ T9973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1177'. [ 857.878918][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 858.038524][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 858.067919][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 858.312029][ T9983] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 858.428742][ T14] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 858.478935][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.559048][ T14] usb 1-1: Product: syz [ 858.598291][ T9983] usb 5-1: Using ep0 maxpacket: 16 [ 858.746940][ T14] usb 1-1: Manufacturer: syz [ 858.752129][ T14] usb 1-1: SerialNumber: syz [ 858.893288][ T9983] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 858.902760][ T9983] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 858.914213][ T9983] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 859.043230][T10003] fuse: Bad value for 'fd' [ 859.169341][ T9983] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 859.236397][ T9983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.349494][ T9983] usb 5-1: Product: syz [ 859.400782][ T9983] usb 5-1: Manufacturer: syz [ 859.480445][ T9983] usb 5-1: SerialNumber: syz [ 859.768735][ T14] usb 1-1: cannot find UAC_HEADER [ 859.959280][ T14] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 860.024959][ T14] usb 1-1: USB disconnect, device number 30 [ 860.045254][ T9959] udevd[9959]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 860.298469][ T9983] usb 5-1: 0:2 : does not exist [ 861.422354][ T9983] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 862.100793][ T9983] usb 5-1: USB disconnect, device number 20 [ 862.547747][T10032] loop4: detected capacity change from 0 to 256 [ 862.711156][T10032] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 864.370157][T10055] fuse: Bad value for 'fd' [ 865.378367][ T9983] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 865.838533][ T9983] usb 3-1: Using ep0 maxpacket: 32 [ 865.999777][ T9983] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 866.713045][ T9983] usb 3-1: config 0 has no interface number 0 [ 866.889200][ T9983] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 866.903947][ T9983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.933777][ T9983] usb 3-1: Product: syz [ 866.947003][ T9983] usb 3-1: Manufacturer: syz [ 866.961347][ T9983] usb 3-1: SerialNumber: syz [ 866.999735][ T9983] usb 3-1: config 0 descriptor?? [ 867.632523][T10080] kAFS: unable to lookup cell '' [ 867.819327][T10082] loop0: detected capacity change from 0 to 256 [ 867.878014][T10082] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 868.312753][ T3688] usb 3-1: USB disconnect, device number 22 [ 868.325301][ T3688] f81534a_ctrl 3-1:0.88: failed to set register 0x116: -19 [ 868.335745][ T3688] f81534a_ctrl 3-1:0.88: failed to enable ports: -19 [ 868.528206][ T9983] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 868.757853][ T27] kauditd_printk_skb: 59 callbacks suppressed [ 868.757869][ T27] audit: type=1326 audit(1729081994.556:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10095 comm="syz.4.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea44d7dff9 code=0x7ffc0000 [ 868.787565][ T3731] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 868.797304][ T27] audit: type=1326 audit(1729081994.556:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10095 comm="syz.4.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7fea44d7dff9 code=0x7ffc0000 [ 868.848711][ T27] audit: type=1326 audit(1729081994.566:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10095 comm="syz.4.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea44d7dff9 code=0x7ffc0000 [ 868.871135][ C0] vkms_vblank_simulate: vblank timer overrun [ 868.891059][ T27] audit: type=1326 audit(1729081994.566:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10095 comm="syz.4.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea44d7dff9 code=0x7ffc0000 [ 868.922475][ T27] audit: type=1326 audit(1729081994.566:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10095 comm="syz.4.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea44d7dff9 code=0x7ffc0000 [ 868.962072][ T27] audit: type=1326 audit(1729081994.566:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10095 comm="syz.4.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fea44d7dff9 code=0x7ffc0000 [ 868.984510][ C0] vkms_vblank_simulate: vblank timer overrun [ 868.988587][ T9983] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 869.001858][ T27] audit: type=1326 audit(1729081994.566:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10095 comm="syz.4.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea44d7dff9 code=0x7ffc0000 [ 869.025006][ T9983] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 869.041999][ T27] audit: type=1326 audit(1729081994.566:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10095 comm="syz.4.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea44d7dff9 code=0x7ffc0000 [ 869.068586][ T9983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.072410][ T27] audit: type=1326 audit(1729081994.566:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10095 comm="syz.4.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea44d7dff9 code=0x7ffc0000 [ 869.099086][ C0] vkms_vblank_simulate: vblank timer overrun [ 869.106849][ T9983] usb 1-1: config 0 descriptor?? [ 869.111344][ T27] audit: type=1326 audit(1729081994.566:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10095 comm="syz.4.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fea44d7dff9 code=0x7ffc0000 [ 869.134098][ C0] vkms_vblank_simulate: vblank timer overrun [ 869.155961][ T9983] go7007: probe of 1-1:0.0 failed with error -12 [ 869.208378][ T3731] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 869.231739][ T3731] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 869.248328][ T3731] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 869.253094][T10103] fuse: Unknown parameter 'use00000000000000000000' [ 869.267993][ T3731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.321447][ T3731] usb 2-1: invalid MIDI out EP 0 [ 869.382222][ T9983] usb 1-1: USB disconnect, device number 31 [ 869.424172][ T9957] udevd[9957]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 869.452956][ T3731] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 869.577427][ T3731] usb 2-1: USB disconnect, device number 21 [ 869.658313][ T3654] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 869.908564][ T3654] usb 3-1: Using ep0 maxpacket: 32 [ 870.020736][T10114] kAFS: unable to lookup cell '' [ 870.042136][ T3654] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 314 [ 870.218576][ T3654] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 870.227679][ T3654] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.297042][T10117] loop0: detected capacity change from 0 to 256 [ 870.308545][ T3654] usb 3-1: Product: syz [ 870.312770][ T3654] usb 3-1: Manufacturer: syz [ 870.337489][ T3654] usb 3-1: SerialNumber: syz [ 870.369033][T10103] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 870.909779][T10120] device syz_tun entered promiscuous mode [ 870.918519][T10117] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 871.261022][ T3654] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 871.541514][ T7274] Bluetooth: hci5: Frame reassembly failed (-84) [ 871.588140][ C1] usblp0: nonzero write bulk status received: -71 [ 871.933537][T10139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.001682][T10139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.178200][ T3654] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 872.428204][ T3654] usb 1-1: Using ep0 maxpacket: 32 [ 872.548987][ T3654] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.565055][ T3654] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 872.574732][ T3654] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 872.589974][ T3654] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.607551][ T3654] usb 1-1: config 0 descriptor?? [ 872.768436][ T9396] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 872.895186][T10154] kAFS: unable to lookup cell '' [ 872.920373][T10138] QAT: Invalid ioctl 1074034178 [ 872.948284][ T3654] usb 1-1: string descriptor 0 read error: -71 [ 872.969922][ T3654] usb 1-1: USB disconnect, device number 32 [ 873.129225][ T9396] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 873.147604][ T9396] usb 4-1: config 0 has no interface number 0 [ 873.171010][ T9396] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 873.190365][ T9396] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 873.232447][ T9983] usb 3-1: USB disconnect, device number 23 [ 873.259586][ T9983] usblp0: removed [ 873.363620][ T9396] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 873.392338][ T9396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.408995][T10161] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1226'. [ 873.414278][ T9396] usb 4-1: Product: syz [ 873.446364][ T9396] usb 4-1: Manufacturer: syz [ 873.470787][ T9396] usb 4-1: SerialNumber: syz [ 873.508304][ T9396] usb 4-1: config 0 descriptor?? [ 873.548693][T10148] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 873.570802][ T9396] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 873.608463][ T3658] Bluetooth: hci5: command 0x1003 tx timeout [ 873.617163][ T3652] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 873.617684][ T9396] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 874.034907][T10148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.611043][T10148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.871816][ T3731] usb 4-1: USB disconnect, device number 22 [ 874.898893][ T3731] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 874.931223][ T3731] cyberjack 4-1:0.69: device disconnected [ 874.950644][T10170] loop0: detected capacity change from 0 to 512 [ 875.020459][T10170] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 875.042857][T10170] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038 (0x7fffffff) [ 875.192949][T10175] loop1: detected capacity change from 0 to 256 [ 875.262721][T10175] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 875.291697][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.317614][ T9545] EXT4-fs (loop0): unmounting filesystem. [ 877.968673][T10202] kAFS: unable to lookup cell '' [ 879.808350][ T9396] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 879.891408][T10220] loop1: detected capacity change from 0 to 256 [ 879.993347][T10220] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 880.068228][ T9396] usb 5-1: Using ep0 maxpacket: 8 [ 880.248356][ T9396] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 880.256633][ T9396] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 880.327034][ T9396] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 880.416369][ T9396] usb 5-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 880.424844][T10224] loop2: detected capacity change from 0 to 512 [ 880.448353][ T9396] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 880.461772][ T9396] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 880.475835][ T9396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.519002][ T9396] usbtmc 5-1:16.0: bulk endpoints not found [ 880.539953][T10224] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 880.586176][T10224] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038 (0x7fffffff) [ 880.811659][T10234] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1243'. [ 882.027519][ T9055] EXT4-fs (loop2): unmounting filesystem. [ 882.488544][ T3659] Bluetooth: hci4: command 0x0406 tx timeout [ 883.189167][ T9396] usb 5-1: USB disconnect, device number 21 [ 883.503376][T10266] loop4: detected capacity change from 0 to 512 [ 883.543993][T10266] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 883.800268][T10267] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 885.709209][T10285] loop1: detected capacity change from 0 to 256 [ 885.778827][T10285] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 886.298201][T10290] loop1: detected capacity change from 0 to 512 [ 886.373813][T10290] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 886.414496][T10290] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038 (0x7fffffff) [ 887.251581][ T7021] EXT4-fs (loop1): unmounting filesystem. [ 887.608203][ T3659] Bluetooth: hci0: command 0x0406 tx timeout [ 889.812872][T10313] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.820458][T10313] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.129884][T10313] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1262'. [ 890.333844][ T3730] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 890.358756][T10320] device bridge_slave_1 left promiscuous mode [ 890.385663][T10320] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.436932][T10320] device bridge_slave_0 left promiscuous mode [ 890.468453][T10320] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.769287][ T3730] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 890.811887][ T3730] usb 3-1: config 0 has no interface number 0 [ 890.980487][ T3730] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 891.139493][ T3730] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 891.356753][T10327] fuse: Unknown parameter 'fd0x0000000000000003' [ 891.374771][ T3730] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 891.397750][ T3730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.422757][ T3730] usb 3-1: Product: syz [ 891.436539][ T3730] usb 3-1: Manufacturer: syz [ 891.454528][ T3730] usb 3-1: SerialNumber: syz [ 891.504518][ T3730] usb 3-1: config 0 descriptor?? [ 891.536205][T10319] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 891.549404][ T3730] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 891.564748][ T3730] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 891.569512][T10332] loop4: detected capacity change from 0 to 128 [ 891.613803][T10330] loop3: detected capacity change from 0 to 256 [ 891.636444][T10330] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 891.878451][ T3730] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 892.169677][T10318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.278404][ T3730] usb 2-1: Using ep0 maxpacket: 32 [ 892.329782][T10318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.448496][ T3730] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 314 [ 892.663340][T10338] loop0: detected capacity change from 0 to 512 [ 892.678629][ T3730] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 892.701125][ T3730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.715464][ T3730] usb 2-1: Product: syz [ 892.725654][ T3730] usb 2-1: Manufacturer: syz [ 892.740358][ T3730] usb 2-1: SerialNumber: syz [ 892.747959][ T26] usb 3-1: USB disconnect, device number 24 [ 892.829193][T10338] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 892.838653][T10328] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 892.861088][ T26] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 892.885105][T10338] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038 (0x7fffffff) [ 892.906398][ T26] cyberjack 3-1:0.69: device disconnected [ 893.687584][ T9545] EXT4-fs (loop0): unmounting filesystem. [ 893.739962][ T3730] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 893.968159][ C0] usblp0: nonzero write bulk status received: -71 [ 894.890398][T10364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.000107][T10372] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1276'. [ 895.020483][T10364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.098170][ T9396] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 895.348264][ T9396] usb 1-1: Using ep0 maxpacket: 16 [ 895.468462][ T9396] usb 1-1: config 253 has an invalid interface number: 157 but max is 3 [ 895.485721][ T9396] usb 1-1: config 253 contains an unexpected descriptor of type 0x2, skipping [ 895.495306][ T9396] usb 1-1: config 253 has an invalid interface number: 213 but max is 3 [ 895.522251][ T9396] usb 1-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 895.550488][ T9396] usb 1-1: config 253 has 2 interfaces, different from the descriptor's value: 4 [ 895.574344][ T9396] usb 1-1: config 253 has no interface number 0 [ 895.595633][ T9396] usb 1-1: config 253 has no interface number 1 [ 895.618439][ T9396] usb 1-1: config 253 interface 157 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 895.632197][T10386] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1279'. [ 895.653901][ T9396] usb 1-1: config 253 interface 157 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 895.686044][ T9396] usb 1-1: config 253 interface 157 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 895.714587][ T9396] usb 1-1: config 253 interface 213 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 895.745513][ T9396] usb 1-1: config 253 interface 157 has no altsetting 0 [ 895.761456][ T9396] usb 1-1: config 253 interface 213 has no altsetting 0 [ 895.938377][ T9396] usb 1-1: New USB device found, idVendor=0b05, idProduct=1791, bcdDevice= 4.57 [ 895.963619][ T9396] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.983847][ T9396] usb 1-1: Product: syz [ 895.998016][ T9396] usb 1-1: Manufacturer: syz [ 896.010141][ T9396] usb 1-1: SerialNumber: syz [ 896.215061][ T3654] usb 2-1: USB disconnect, device number 22 [ 896.249202][ T3654] usblp0: removed [ 896.389721][T10359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.413937][T10389] loop1: detected capacity change from 0 to 256 [ 896.424919][T10359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.492736][T10389] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 896.511134][ T9396] r8712u: register rtl8712_netdev_ops to netdev_ops [ 896.522668][ T9396] usb 1-1: r8712u: USB_SPEED_HIGH with 4 endpoints [ 896.588353][ T9396] usb 1-1: r8712u: Boot from EFUSE: Autoload Failed [ 896.603717][ T9396] usb 1-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 896.613513][ T9396] usb 1-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 896.748759][ T9396] usb 1-1: Found UVC 0.00 device syz (0b05:1791) [ 896.756384][ T9396] usb 1-1: No valid video chain found. [ 896.815942][ T9396] r8712u: register rtl8712_netdev_ops to netdev_ops [ 896.859197][ T9396] usb 1-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 896.909785][ T27] kauditd_printk_skb: 63 callbacks suppressed [ 896.909810][ T27] audit: type=1326 audit(1729082022.716:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdd97dff9 code=0x7ffc0000 [ 896.938348][ C0] vkms_vblank_simulate: vblank timer overrun [ 897.013952][ T27] audit: type=1326 audit(1729082022.786:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdd97dff9 code=0x7ffc0000 [ 897.036420][ C0] vkms_vblank_simulate: vblank timer overrun [ 897.043915][ T9396] usb 1-1: r8712u: Boot from EFUSE: Autoload Failed [ 897.052928][ T9396] usb 1-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 897.061712][ T9396] usb 1-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 897.111390][ T9396] usb 1-1: USB disconnect, device number 33 [ 897.128722][T10394] loop1: detected capacity change from 0 to 512 [ 897.155701][ T27] audit: type=1326 audit(1729082022.786:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7bdd97dff9 code=0x7ffc0000 [ 897.232597][ T27] audit: type=1326 audit(1729082022.786:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdd97dff9 code=0x7ffc0000 [ 897.255056][ C0] vkms_vblank_simulate: vblank timer overrun [ 897.266361][ T27] audit: type=1326 audit(1729082022.786:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdd97dff9 code=0x7ffc0000 [ 897.288810][ C0] vkms_vblank_simulate: vblank timer overrun [ 897.298386][ T27] audit: type=1326 audit(1729082022.806:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f7bdd97dff9 code=0x7ffc0000 [ 897.320743][ C0] vkms_vblank_simulate: vblank timer overrun [ 897.328772][ T27] audit: type=1326 audit(1729082022.806:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdd97dff9 code=0x7ffc0000 [ 897.334365][T10394] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 897.351229][ C0] vkms_vblank_simulate: vblank timer overrun [ 897.352055][ T27] audit: type=1326 audit(1729082022.806:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdd97dff9 code=0x7ffc0000 [ 897.457509][ T27] audit: type=1326 audit(1729082022.816:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f7bdd97dff9 code=0x7ffc0000 [ 897.460871][T10394] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038 (0x7fffffff) [ 897.496997][ T27] audit: type=1326 audit(1729082022.816:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdd97dff9 code=0x7ffc0000 [ 897.519734][ C0] vkms_vblank_simulate: vblank timer overrun [ 898.402127][ T7021] EXT4-fs (loop1): unmounting filesystem. [ 898.469384][T10412] kAFS: unable to lookup cell '' [ 898.491723][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1285'. [ 900.725321][T10433] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1293'. [ 900.858389][ T3731] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 901.458216][ T3731] usb 4-1: Using ep0 maxpacket: 8 [ 902.363159][ T27] kauditd_printk_skb: 28 callbacks suppressed [ 902.363174][ T27] audit: type=1326 audit(1729082028.166:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10441 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35d097dff9 code=0x7ffc0000 [ 902.418344][ T3731] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 902.532041][ T27] audit: type=1326 audit(1729082028.176:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10441 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f35d097dff9 code=0x7ffc0000 [ 902.592970][ T27] audit: type=1326 audit(1729082028.176:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10441 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35d097dff9 code=0x7ffc0000 [ 902.652793][ T27] audit: type=1326 audit(1729082028.176:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10441 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35d097dff9 code=0x7ffc0000 [ 902.718704][ T3731] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 902.740574][ T3731] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 902.767128][ T27] audit: type=1326 audit(1729082028.286:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10441 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f35d097dff9 code=0x7ffc0000 [ 902.820347][ T3731] usb 4-1: Product: syz [ 902.824565][ T3731] usb 4-1: Manufacturer: syz [ 902.861504][ T3731] usb 4-1: SerialNumber: syz [ 902.915209][ T27] audit: type=1326 audit(1729082028.286:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10441 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35d097dff9 code=0x7ffc0000 [ 902.916409][T10458] kAFS: unable to lookup cell '' [ 902.974648][ T27] audit: type=1326 audit(1729082028.286:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10441 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35d097dff9 code=0x7ffc0000 [ 902.999776][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1299'. [ 903.034799][ T27] audit: type=1326 audit(1729082028.286:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10441 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f35d097dff9 code=0x7ffc0000 [ 903.058204][ T3730] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 903.058981][ T27] audit: type=1326 audit(1729082028.286:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10441 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35d097dff9 code=0x7ffc0000 [ 903.088617][ T27] audit: type=1326 audit(1729082028.286:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10441 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35d097dff9 code=0x7ffc0000 [ 903.168384][ T3731] usb 4-1: Handspring Visor / Palm OS: port 0, is for unknown use [ 903.183182][ T3731] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 903.211724][ T3731] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 903.338133][ T3730] usb 2-1: Using ep0 maxpacket: 32 [ 903.398481][ T3731] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 903.412736][ T3731] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 903.437887][ T3731] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 903.478434][ T3730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.521517][ T3730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.535172][ T3731] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 903.558252][ T3730] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 903.591988][ T3731] usb 4-1: USB disconnect, device number 23 [ 903.598514][ T3730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.610355][ T3731] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 903.638992][ T3730] usb 2-1: config 0 descriptor?? [ 903.651669][ T3731] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 903.669209][ T3731] visor 4-1:1.0: device disconnected [ 904.048497][ T3730] usbhid 2-1:0.0: can't add hid device: -71 [ 904.055558][ T3730] usbhid: probe of 2-1:0.0 failed with error -71 [ 904.130904][ T3730] usb 2-1: USB disconnect, device number 23 [ 904.738534][T10474] fuse: Bad value for 'group_id' [ 904.856723][T10477] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1303'. [ 905.039902][ T3654] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 905.288129][ T3654] usb 1-1: Using ep0 maxpacket: 32 [ 905.413941][ T3654] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 905.448218][ T8318] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 905.658354][ T3654] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 905.667453][ T3654] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.678165][ T8318] usb 2-1: device descriptor read/64, error -71 [ 905.745845][ T3654] usb 1-1: Product: syz [ 905.761015][ T3654] usb 1-1: Manufacturer: syz [ 905.793678][ T3654] usb 1-1: SerialNumber: syz [ 905.948431][ T8318] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 907.888605][ T8318] usb 2-1: device descriptor read/64, error -71 [ 908.079045][ T8318] usb usb2-port1: attempt power cycle [ 909.200454][T10503] kAFS: unable to lookup cell '' [ 909.228413][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 909.276830][T10500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.623391][T10500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.207473][ T3654] usb 1-1: USB disconnect, device number 34 [ 912.738197][T10531] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1320'. [ 913.147789][T10555] fuse: Bad value for 'fd' [ 913.258489][ T3658] Bluetooth: hci1: command 0x0406 tx timeout [ 914.225077][ T3658] Bluetooth: hci1: unexpected event for opcode 0x080c [ 916.750719][ T3730] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 917.948800][ T3730] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 918.260880][ T3658] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 918.269835][ T3658] Bluetooth: hci1: Injecting HCI hardware error event [ 918.291215][ T3652] Bluetooth: hci1: hardware error 0x00 [ 919.048219][ T3730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.516341][ T3730] usb 3-1: config 0 descriptor?? [ 919.593269][T10591] fuse: Bad value for 'fd' [ 920.203122][T10595] loop1: detected capacity change from 0 to 256 [ 920.219180][ T3730] usb 3-1: can't set config #0, error -71 [ 920.239700][ T3730] usb 3-1: USB disconnect, device number 25 [ 920.406692][T10600] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.414254][T10600] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.681436][T10601] device bridge_slave_1 left promiscuous mode [ 921.705998][T10601] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.766228][T10601] device bridge_slave_0 left promiscuous mode [ 921.859259][T10601] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.336555][T10615] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1338'. [ 922.348001][ T3652] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 924.023995][ T8318] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 924.501781][ T8318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 924.537402][ T8318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.584131][ T8318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 924.624159][ T8318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 924.639968][ T8318] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 924.662223][ T8318] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 924.682047][ T8318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.749803][ T8318] usb 1-1: config 0 descriptor?? [ 925.013821][T10643] fuse: Bad value for 'fd' [ 925.678184][ T4370] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 925.953642][ T8318] ntrig 0003:1B96:000A.0010: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 925.968280][ T4370] usb 4-1: Using ep0 maxpacket: 16 [ 926.098327][ T4370] usb 4-1: config 7 has an invalid interface number: 247 but max is 0 [ 926.111463][ T4370] usb 4-1: config 7 has no interface number 0 [ 926.123381][ T4370] usb 4-1: config 7 interface 247 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 926.240958][ T8318] usb 1-1: USB disconnect, device number 35 [ 926.299150][ T9396] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 926.338392][ T4370] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 926.417740][ T4370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.570158][ T4370] usb 4-1: Product: syz [ 926.574547][ T4370] usb 4-1: Manufacturer: syz [ 926.579889][ T4370] usb 4-1: SerialNumber: syz [ 926.628359][ T9396] usb 3-1: Using ep0 maxpacket: 32 [ 927.484502][ T4370] ni6501 4-1:7.247: driver 'ni6501' failed to auto-configure device. [ 927.648273][ T9396] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.661895][ T4370] usb 4-1: USB disconnect, device number 24 [ 927.760719][ T9396] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 928.778180][ T4370] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 929.228374][ T9396] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 929.237464][ T9396] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 929.248624][ T9396] usb 3-1: Product: syz [ 929.598711][ T4370] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 929.617194][ T4370] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 929.681658][ T4370] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 929.692338][ T4370] usb 4-1: config 0 has no interface number 0 [ 929.698743][ T4370] usb 4-1: config 0 interface 29 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 929.708973][ T4370] usb 4-1: config 0 interface 29 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 929.735463][ T4370] usb 4-1: config 0 interface 29 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 930.009972][ T9396] usb 3-1: can't set config #4, error -71 [ 930.017071][ T9396] usb 3-1: USB disconnect, device number 26 [ 930.068664][T10670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1359'. [ 930.078699][ T4370] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0115, bcdDevice=cb.61 [ 930.088568][T10670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 930.112575][ T4370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.139688][T10670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 930.377718][ T4370] usb 4-1: Product: syz [ 930.382839][ T4370] usb 4-1: Manufacturer: syz [ 930.394258][ T4370] usb 4-1: SerialNumber: syz [ 930.492017][T10685] fuse: Bad value for 'fd' [ 931.113937][T10670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 931.128937][ T4370] usb 4-1: config 0 descriptor?? [ 931.140866][T10670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 931.168493][ T4370] usb 4-1: can't set config #0, error -71 [ 931.199635][ T4370] usb 4-1: USB disconnect, device number 25 [ 932.345288][T10701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1367'. [ 936.027247][T10726] loop0: detected capacity change from 0 to 256 [ 936.768949][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.950963][T10739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1378'. [ 937.104831][T10741] fuse: Bad value for 'fd' [ 939.118278][ T9013] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 940.523735][ T9013] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 940.544233][ T9013] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 940.571181][ T9013] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 940.778289][ T9013] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 940.787468][ T9013] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 940.865466][ T9013] usb 5-1: Product: syz [ 940.878193][ T9013] usb 5-1: Manufacturer: syz [ 940.883047][ T9013] usb 5-1: SerialNumber: syz [ 940.891655][ T9013] usb 5-1: config 0 descriptor?? [ 941.879086][ T9013] usb 5-1: can't set config #0, error -71 [ 942.014895][ T9013] usb 5-1: USB disconnect, device number 22 [ 943.928337][ T3659] Bluetooth: hci2: command 0x0406 tx timeout [ 943.931589][T10789] loop2: detected capacity change from 0 to 512 [ 944.456930][T10789] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 944.466629][T10789] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038 (0x7fffffff) [ 945.060180][ T9055] EXT4-fs (loop2): unmounting filesystem. [ 947.353600][T10829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1396'. [ 948.235475][T10835] device bridge0 entered promiscuous mode [ 952.385487][ T3652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 952.413341][ T3652] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 952.422444][ T3652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 952.431878][ T3652] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 952.439756][ T3652] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 952.455131][ T3652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 953.835216][T10874] chnl_net:caif_netlink_parms(): no params data found [ 953.968196][ T9396] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 954.883705][ T9396] usb 2-1: Using ep0 maxpacket: 32 [ 954.899623][ T3652] Bluetooth: hci5: command tx timeout [ 955.020406][ T9396] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 955.035389][ T9396] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.056286][ T9396] usb 2-1: config 0 descriptor?? [ 955.099842][ T9396] gspca_main: sunplus-2.14.0 probing 041e:400b [ 955.140006][T10874] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.228434][T10874] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.253959][T10874] device bridge_slave_0 entered promiscuous mode [ 955.317341][T10874] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.329628][T10874] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.353602][T10874] device bridge_slave_1 entered promiscuous mode [ 955.494622][T10874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.523713][T10874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 955.659117][T10874] team0: Port device team_slave_0 added [ 955.708919][T10874] team0: Port device team_slave_1 added [ 955.883402][T10874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 955.911011][T10874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 956.068928][T10874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 956.217919][ T9396] gspca_sunplus: reg_w_riv err -71 [ 956.226812][ T9396] sunplus: probe of 2-1:0.0 failed with error -71 [ 956.318383][ T9396] usb 2-1: USB disconnect, device number 27 [ 956.407542][T10874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.419827][T10874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 956.830392][T10874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.968810][ T3652] Bluetooth: hci5: command tx timeout [ 957.050078][T10874] device hsr_slave_0 entered promiscuous mode [ 957.085331][T10874] device hsr_slave_1 entered promiscuous mode [ 957.123664][T10874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 957.200871][T10874] Cannot create hsr debugfs directory [ 957.740336][T10874] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.930667][T10874] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.288666][T10874] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.061377][ T3652] Bluetooth: hci5: command tx timeout [ 959.234398][T10874] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.607544][T10946] loop4: detected capacity change from 0 to 512 [ 960.632163][T10946] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 960.698390][T10874] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 960.973228][T10874] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 961.004241][T10874] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 961.076633][T10949] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 961.138397][ T3652] Bluetooth: hci5: command tx timeout [ 961.278114][T10874] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 961.748449][T10874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.789106][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 961.809488][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 962.083839][T10874] 8021q: adding VLAN 0 to HW filter on device team0 [ 962.176124][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 962.254356][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 962.504291][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.511430][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 962.725150][ T4364] device hsr_slave_0 left promiscuous mode [ 962.735911][ T4364] device hsr_slave_1 left promiscuous mode [ 962.752994][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 962.768176][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 962.776135][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 962.795478][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 962.894995][ T4364] device veth1_macvtap left promiscuous mode [ 962.902800][ T4364] device veth0_macvtap left promiscuous mode [ 962.912741][ T4364] device veth1_vlan left promiscuous mode [ 962.922843][ T4364] device veth0_vlan left promiscuous mode [ 963.068501][ T3393] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 963.455120][ T3393] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 963.481849][ T3393] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 963.600048][ T3393] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 963.615432][ T3393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 963.624209][ T3393] usb 2-1: SerialNumber: syz [ 964.566858][ T3393] usb 2-1: 0:2 : does not exist [ 964.629637][ T3393] usb 2-1: USB disconnect, device number 28 [ 966.643884][ T3652] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 966.653669][ T3652] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 966.661914][ T3652] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 966.669822][ T3652] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 966.678166][ T3652] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 966.685494][ T3652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 966.822418][T10996] fuse: Unknown parameter 'group_i00000000000000000000' [ 967.665507][T11000] loop3: detected capacity change from 0 to 512 [ 967.681509][T11000] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 967.773949][ T4364] team0 (unregistering): Port device team_slave_1 removed [ 968.067872][T11006] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 968.160381][ T4364] team0 (unregistering): Port device team_slave_0 removed [ 968.247963][ T4364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 968.420426][ T4364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 968.730034][ T3659] Bluetooth: hci2: command tx timeout [ 969.548265][ T4364] bond0 (unregistering): Released all slaves [ 969.604247][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 969.658154][ T26] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 969.912056][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 969.925034][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 969.934650][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.939882][ C0] [ 969.941771][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.944034][ C0] ================================ [ 969.944041][ C0] WARNING: inconsistent lock state [ 969.944048][ C0] 6.1.112-syzkaller #0 Not tainted [ 969.944060][ C0] -------------------------------- [ 969.952548][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 969.956331][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 969.962467][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 969.966536][ C0] ksoftirqd/0/15 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 969.984847][T10874] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 969.986349][ C0] ffff888068db31e0 [ 969.995526][T10874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 970.000449][ C0] (&pch->downl){+.?.}-{2:2}, at: ppp_input+0x185/0xa00 [ 970.031924][ C0] {SOFTIRQ-ON-W} state was registered at: [ 970.037650][ C0] lock_acquire+0x1f8/0x5a0 [ 970.042270][ C0] _raw_spin_lock+0x2a/0x40 [ 970.046868][ C0] ppp_input+0x185/0xa00 [ 970.051196][ C0] pppoe_rcv_core+0x112/0x300 [ 970.055962][ C0] __release_sock+0x198/0x4b0 [ 970.060729][ C0] release_sock+0x5d/0x1c0 [ 970.065243][ C0] pppoe_sendmsg+0xd1/0x740 [ 970.069833][ C0] ____sys_sendmsg+0x5a5/0x8f0 [ 970.074673][ C0] __sys_sendmmsg+0x3ab/0x730 [ 970.079423][ C0] __x64_sys_sendmmsg+0x9c/0xb0 [ 970.084357][ C0] do_syscall_64+0x3b/0xb0 [ 970.088854][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 970.094850][ C0] irq event stamp: 2489066 [ 970.099272][ C0] hardirqs last enabled at (2489066): [] _raw_spin_unlock_irqrestore+0x8b/0x130 [ 970.109962][ C0] hardirqs last disabled at (2489065): [] _raw_spin_lock_irqsave+0xac/0x120 [ 970.120210][ C0] softirqs last enabled at (2489054): [] run_ksoftirqd+0xc6/0x120 [ 970.129669][ C0] softirqs last disabled at (2489061): [] run_ksoftirqd+0xc6/0x120 [ 970.139122][ C0] [ 970.139122][ C0] other info that might help us debug this: [ 970.147168][ C0] Possible unsafe locking scenario: [ 970.147168][ C0] [ 970.154609][ C0] CPU0 [ 970.157880][ C0] ---- [ 970.161155][ C0] lock(&pch->downl); [ 970.165227][ C0] [ 970.168688][ C0] lock(&pch->downl); [ 970.172948][ C0] [ 970.172948][ C0] *** DEADLOCK *** [ 970.172948][ C0] [ 970.181101][ C0] 1 lock held by ksoftirqd/0/15: [ 970.186064][ C0] #0: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: ppp_input+0x51/0xa00 [ 970.194955][ C0] [ 970.194955][ C0] stack backtrace: [ 970.200846][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.1.112-syzkaller #0 [ 970.208822][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 970.218879][ C0] Call Trace: [ 970.222153][ C0] [ 970.225077][ C0] dump_stack_lvl+0x1e3/0x2cb [ 970.229764][ C0] ? nf_tcp_handle_invalid+0x642/0x642 [ 970.235223][ C0] ? print_usage_bug+0x5fe/0x880 [ 970.240162][ C0] valid_state+0x136/0x1c0 [ 970.244573][ C0] mark_lock_irq+0xa8/0xba0 [ 970.249078][ C0] ? ret_from_fork+0x1f/0x30 [ 970.253696][ C0] ? stack_trace_save+0x113/0x1c0 [ 970.258725][ C0] ? save_trace+0xab0/0xab0 [ 970.263235][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 970.268378][ C0] ? lockdep_lock+0x11f/0x2a0 [ 970.273060][ C0] ? lockdep_lock+0x11f/0x2a0 [ 970.277743][ C0] ? save_trace+0x5a/0xab0 [ 970.282177][ C0] mark_lock+0x21c/0x340 [ 970.286477][ C0] __lock_acquire+0xb7f/0x1f80 [ 970.291261][ C0] lock_acquire+0x1f8/0x5a0 [ 970.295769][ C0] ? ppp_input+0x185/0xa00 [ 970.300187][ C0] ? read_lock_is_recursive+0x10/0x10 [ 970.305567][ C0] ? read_lock_is_recursive+0x10/0x10 [ 970.310943][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 970.316143][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 970.322061][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 970.327265][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 970.333164][ C0] _raw_spin_lock+0x2a/0x40 [ 970.337667][ C0] ? ppp_input+0x185/0xa00 [ 970.342086][ C0] ppp_input+0x185/0xa00 [ 970.346332][ C0] ? ppp_input+0x51/0xa00 [ 970.350666][ C0] ppp_sync_process+0x75/0x170 [ 970.355430][ C0] ? ppp_sync_wakeup+0x210/0x210 [ 970.360370][ C0] tasklet_action_common+0x3cb/0x4a0 [ 970.365671][ C0] ? trace_raw_output_softirq+0xd0/0xd0 [ 970.371216][ C0] ? print_irqtrace_events+0x210/0x210 [ 970.376681][ C0] handle_softirqs+0x2ee/0xa40 [ 970.381451][ C0] ? run_ksoftirqd+0xc6/0x120 [ 970.386125][ C0] ? do_softirq+0x240/0x240 [ 970.390630][ C0] ? run_ksoftirqd+0xa3/0x120 [ 970.395297][ C0] run_ksoftirqd+0xc6/0x120 [ 970.399798][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 970.404994][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 970.410185][ C0] smpboot_thread_fn+0x52c/0xa30 [ 970.415125][ C0] ? smpboot_thread_fn+0x4a/0xa30 [ 970.420153][ C0] kthread+0x28d/0x320 [ 970.424215][ C0] ? cpu_report_death+0x2b0/0x2b0 [ 970.429246][ C0] ? kthread_blkcg+0xd0/0xd0 [ 970.433848][ C0] ret_from_fork+0x1f/0x30 [ 970.438280][ C0] [ 970.738863][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 970.749719][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 970.760129][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 970.769445][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 970.778414][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 970.786844][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 970.799807][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 970.809673][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 970.832336][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 970.842390][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 970.898124][ T3659] Bluetooth: hci2: command tx timeout [ 970.990244][ T26] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 970.999547][ T9013] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 971.007871][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.009704][ T7274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 971.018228][ T26] usb 4-1: Product: syz [ 971.024172][ T7274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 971.027350][ T26] usb 4-1: Manufacturer: syz [ 971.041470][T10874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 971.043049][ T26] usb 4-1: SerialNumber: syz [ 971.064105][ T26] usb 4-1: config 0 descriptor?? [ 971.080230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 971.089524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 971.111284][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 971.120221][ T26] ch341 4-1:0.0: ch341-uart converter detected [ 971.123151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 971.140357][T10993] chnl_net:caif_netlink_parms(): no params data found [ 971.152105][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 971.159979][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 971.172780][T10874] device veth0_vlan entered promiscuous mode [ 971.206035][T10874] device veth1_vlan entered promiscuous mode [ 971.259755][T10993] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.266976][T10993] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.275033][T10993] device bridge_slave_0 entered promiscuous mode [ 971.288664][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 971.296864][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 971.305565][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 971.315046][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 971.327983][T10874] device veth0_macvtap entered promiscuous mode [ 971.335974][T10993] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.343555][T10993] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.348304][ T26] usb 4-1: failed to receive control message: -71 [ 971.352937][T10993] device bridge_slave_1 entered promiscuous mode [ 971.357754][ T26] ch341-uart: probe of ttyUSB0 failed with error -71 [ 971.376701][T10874] device veth1_macvtap entered promiscuous mode [ 971.385973][ T26] usb 4-1: USB disconnect, device number 26 [ 971.398582][ T26] ch341 4-1:0.0: device disconnected [ 971.406280][T10993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 971.425832][ T4364] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.441798][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.453624][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.463836][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.468518][ T9013] usb 5-1: unable to get BOS descriptor or descriptor too short [ 971.477081][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.494606][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.505521][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.516772][T10874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 971.525958][T10993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.544892][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 971.553599][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 971.562308][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 971.571154][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 971.579493][ T9013] usb 5-1: config 3 has an invalid interface number: 19 but max is 0 [ 971.587601][ T9013] usb 5-1: config 3 has an invalid interface number: 4 but max is 0 [ 971.595890][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.595914][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.595928][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.606880][ T9013] usb 5-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 971.636200][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.646108][ T9013] usb 5-1: config 3 has no interface number 0 [ 971.646498][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.652665][ T9013] usb 5-1: config 3 has no interface number 1 [ 971.666640][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.670192][ T9013] usb 5-1: config 3 interface 19 altsetting 9 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 971.682977][T10874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 971.692883][ T9013] usb 5-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30 [ 971.711283][ T9013] usb 5-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32 [ 971.721592][ T9013] usb 5-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 64 [ 971.723244][ T4364] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.731897][ T9013] usb 5-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175 [ 971.758207][ T9013] usb 5-1: config 3 interface 19 has no altsetting 0 [ 971.764966][ T9013] usb 5-1: config 3 interface 4 has no altsetting 0 [ 971.784179][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 971.793105][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 971.803853][T10874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.813150][T10874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.822278][T10874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.831196][T10874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.841923][T10993] team0: Port device team_slave_0 added [ 971.851812][ T4364] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.865723][T10993] team0: Port device team_slave_1 added [ 971.887775][T10993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.895173][T10993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.921729][T10993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.939444][T10993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 971.946449][T10993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.975052][T10993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 971.978476][ T9013] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=53.f5 [ 971.999097][ T4364] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.999290][ T9013] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.017580][ T9013] usb 5-1: Product: syz [ 972.023136][ T9013] usb 5-1: Manufacturer: syz [ 972.027742][ T9013] usb 5-1: SerialNumber: syz [ 972.084496][T10993] device hsr_slave_0 entered promiscuous mode [ 972.092507][T10993] device hsr_slave_1 entered promiscuous mode [ 972.099821][T10993] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 972.107408][T10993] Cannot create hsr debugfs directory [ 972.113615][T10874] ieee80211 phy57: Selected rate control algorithm 'minstrel_ht' [ 972.165529][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 972.166550][T10874] ieee80211 phy58: Selected rate control algorithm 'minstrel_ht' [ 972.182820][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 972.201997][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 972.235214][ T7274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 972.246624][ T7274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 972.276296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 972.379038][ T9013] pl2303 5-1:3.19: required endpoints missing [ 972.429379][ T9013] pl2303 5-1:3.4: required interrupt-in endpoint missing [ 972.452997][ T9013] usb 5-1: USB disconnect, device number 23 [ 972.968978][ T3659] Bluetooth: hci2: command tx timeout [ 972.996791][ T4364] device hsr_slave_0 left promiscuous mode [ 973.005620][ T4364] device hsr_slave_1 left promiscuous mode [ 973.012304][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 973.020043][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.027755][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 973.035685][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.046063][ T4364] device veth1_macvtap left promiscuous mode [ 973.052785][ T4364] device veth0_macvtap left promiscuous mode [ 973.059027][ T4364] device veth1_vlan left promiscuous mode [ 973.064923][ T4364] device veth0_vlan left promiscuous mode [ 973.352126][ T4364] team0 (unregistering): Port device team_slave_1 removed [ 973.377336][ T4364] team0 (unregistering): Port device team_slave_0 removed [ 973.387881][ T4364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 973.417838][ T4364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 973.470007][ T4364] bond0 (unregistering): Released all slaves [ 973.510013][T10993] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 973.523008][T10993] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 973.532170][T10993] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 973.540841][T10993] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 973.614113][T10993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 973.635450][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 973.643793][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 973.662739][T10993] 8021q: adding VLAN 0 to HW filter on device team0 [ 973.671787][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 973.682062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 973.690909][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.698062][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 973.706794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 973.725221][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 973.734087][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 973.742579][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.749724][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 973.763310][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 973.775060][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 973.786894][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 973.795869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 973.805093][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 973.821626][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 973.830745][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 973.852699][T10993] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 973.864969][T10993] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 973.876981][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 973.887342][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 973.896231][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 973.905748][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 973.914198][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 974.041191][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 974.048838][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 974.061383][T10993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 974.077530][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 974.086846][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 974.107853][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 974.116323][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 974.125141][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 974.133189][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 974.142855][T10993] device veth0_vlan entered promiscuous mode [ 974.152655][T10993] device veth1_vlan entered promiscuous mode [ 974.169308][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 974.177303][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 974.185786][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 974.194397][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 974.205153][T10993] device veth0_macvtap entered promiscuous mode [ 974.216055][T10993] device veth1_macvtap entered promiscuous mode [ 974.228816][T10993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.239589][T10993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.249536][T10993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.260117][T10993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.269989][T10993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.280422][T10993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.291414][T10993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 974.299039][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 974.307102][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 974.316042][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 974.325072][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 974.335479][T10993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.346515][T10993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.356533][T10993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.367240][T10993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.377257][T10993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.387908][T10993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.398784][T10993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 974.406428][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 974.416041][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 974.427722][T10993] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.437943][T10993] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.446845][T10993] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.455840][T10993] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.479478][T10993] ieee80211 phy59: Selected rate control algorithm 'minstrel_ht' [ 974.500662][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.501487][T10993] ieee80211 phy60: Selected rate control algorithm 'minstrel_ht' [ 974.514178][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.531515][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 974.541975][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.550104][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.557608][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 975.048340][ T3652] Bluetooth: hci2: command tx timeout