last executing test programs: 11.812763375s ago: executing program 4 (id=286): r0 = syz_usbip_server_init(0x1) write$usbip_server(r0, &(0x7f0000000000)=@ret_unlink, 0x30) r1 = syz_open_dev$sndpcmc(&(0x7f0000000440), 0x3, 0x280000) mmap$snddsp(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x5, 0x11, r1, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000480), 0x8000, 0x0) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x6a, 0x3c, 0x95, 0x40, 0xcf3, 0x20ff, 0x1070, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x38, 0xc9}}]}}]}}, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r7, 0x2, 0x7, @dev}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@ll={0x11, 0x18, r7, 0x1, 0x7, 0x6, @multicast}, {&(0x7f00000000c0)=""/110, 0x6e}, &(0x7f00000001c0), 0x70}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) waitid$P_PIDFD(0x3, r3, 0x0, 0x8, 0x0) 8.232830697s ago: executing program 4 (id=291): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xf) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) 7.606924518s ago: executing program 4 (id=294): r0 = open_tree(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2008002, &(0x7f0000000240), 0x1, 0x546, &(0x7f0000000fc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xf) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getegid() recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000950000000000000077b21a51b30b7236fb416e1535"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 7.602607139s ago: executing program 1 (id=295): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) 7.221200869s ago: executing program 3 (id=296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000b05000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x27c97000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r6}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d352c6d6f64653d3078303030303030304930303030303030696f636861727365743d6d616363656e746575726f2c6d61703d61636f726e2c686964652c6e6f6a6f6c6965742c6d61703d6f66662c6d726d616c2c636865636b3d72656c617865642c757466382c63727566748ca720ad6851ab3b2c0068486e1cce52f5b1e5e41f0b1bfd3596b0470518bd04293772e8c1efc177f474ace49eb1da5d8985a87f2ebc9535519700"/200], 0x3, 0x3e2, &(0x7f0000000840)="$eJzs3M9u3EQcwPFx/sASpAqpok3THKaUQzh0aztko1UPyHhnN9N6bWvGWyUnFJGkipoURItEcyKXABI8RK88BM/CC1Q8Ash/tiTZJFvyb0P1/UjVzNo/z/zGXc1oHY0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQTthyXc8RkY57y/J4Ycsk3RPO99v75EBxQr9COPk/UauJ6fLQ9PV/T39cNnKz/HRT1PKiJnY+vPHRg+sTY/3rT0joUjx/ufN0dWtr/btRJ3Lh/jzyaEfF2ia6G3SU1DaRzUbDvb/UtrKtI2VXbKa6MjQqyBIj58LPpNdszktVX0l6cacVRKp/cPGe77oN+bCeqsDYJL7/sG7DJR1FOu4UMfnpPGYx/yI+0pnMVNCVcmNza31+WOp5kPc2Qf6wIN/1fc/zfa+x0FxYdN2JgQPuIWIgYvRfWozWOc/gwOn9Xa3/AAAAAADg3eUUz9jz3/+TxXN4R7R1pNxRpwUAAAAAAM5R8Zf/m3kxmdemhcPvfwAAAAAA3jU/D91jZ9P3nT/+EsZMOrvp8qfOdpDHBdvj5XXjh1vM2jPOtaqRomhMVJ9CNevcKoNu9aNfV8XGsDycc0hA/CpmypiZtbJc658pe5lq60jVwyR64IkguDaWqeXs+2ebP4hi+L/E3WuO2NjcWq9//c3WWpHLbt7K7na1gWJgH8UJubx4s+/x6BFPFg9iqn6nyn7d/eMfKy8f+w997onbZcztqbKcOjj+Wt6nVz9u9FUW3hlHvidmy5jZubt5cXfuiCz8YVn4+7M41b14iyzmh2Uxf8YsAGBUNvatQrXq2MH1f2DdPcUsdzmr+564U8bcmSkm1omZI2Z0d9iM7p5xdft94B0Ix62xeb+/HVpVX+UXvDq2Xxv5Tn4Lx19sfytuPH+5c29ze/XJ+pP1Z74/33A/d90FX0wWw6gK1h4AwBGUee1MZT85xuj0K6/Z9IJsSUmThI+k0a2OkjrOlAmXgrijZGqSLAmTKK881i1lpe2laWIy2U6MTBOrl4s3v8jq1S9WdYM406FNIxVYJcMkzoIwky1tQ5n2voy0XVKmuNimKtRtHQaZTmJpk54JVV1Kq9S+QN1ScabbOq/GMjW6G5gV+TiJel0lW8qGRqdZUjbY70vH7cR0i2bro77ZAABcEW/eYHeBlVGPEQAAHHTqVfq9C0oIAAAAAAAAAAAAAAAAAAAAAAAMuIz9f5db+eJqpPF0tbrDP569wfGrMJz/feWD6j/kXFseFyMf1wVVRjgpAbgU/wQAAP//S0ucQg==") r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) 5.128870301s ago: executing program 2 (id=300): r0 = syz_open_procfs(0x0, 0x0) getdents64(r0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, r5}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 3.991346224s ago: executing program 4 (id=301): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f0000002640)=ANY=[@ANYBLOB="60fcd7000000d70280"], 0x0, 0x0, 0x0}, 0x0) 3.883300672s ago: executing program 3 (id=302): setregid(0xee01, 0x0) r0 = gettid() r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = getgid() setresgid(0x0, 0x0, r2) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) prlimit64(r0, 0x0, 0x0, 0x0) 3.585714817s ago: executing program 1 (id=304): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000001c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="e9", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000300), 0x19ffe) 3.53851719s ago: executing program 2 (id=305): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r0, &(0x7f0000000000)=[@t={0x81, 0x6, 0x0, 0x0, @generic}], 0x8) 3.329740638s ago: executing program 2 (id=306): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000080), 0x4) 3.211658917s ago: executing program 3 (id=308): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000004000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2060409, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@pcr={'pcr', 0x3d, 0x16}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\\['}}]}}) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x4004551e, &(0x7f0000000380)={0x0, 0x0, "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"}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2b}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r7, 0x29, 0x3e, 0x0, &(0x7f0000000040)) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="3100030007"], 0xd) socket$inet_udplite(0x2, 0x2, 0x88) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x2010, r8, 0xc69eb000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000009a00)={0x0, 0x0, &(0x7f00000099c0)={&(0x7f0000009940)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100009b26a33621eb0a1c0020010000000003000000060001000a00"/54], 0x3c}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) 2.472865197s ago: executing program 2 (id=309): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2a08000, &(0x7f0000000140)={[{@mblk_io_submit}, {@resuid={'resuid', 0x3d, 0xee00}}]}, 0xfc, 0x474, &(0x7f00000003c0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000008c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="48000000f6cd301c74a98168dd392acaaa79bdab5916545a58af281fc0be35be6e8d5e4b2c469f79973a3b33685dc0ed05720a0fe6ef9ba5372190da0f2dbcbdb2a71eedc4800c185fa687ff6dc9541a456d6387b44eb2babd9012fb7cced181b42cbd7f085ce1ced5c9e09e3975967af60558b4c96f90d9f853afd825ecf0285c6cbc2c8402c67dd88defaa01b968cb17fbe58e0714dac64d46d701b9e9405c81fdff", @ANYRES16=0x0, @ANYBLOB="22002dbd7000fddbdf2502000000140002007465616d3000000000000000000000000900030073797a30000000000900030073797a320000000005000400"], 0x48}}, 0x20004004) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000001340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@const={0xf}, @union={0x0, 0x0, 0x0, 0x5, 0x0, 0x1}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x34, 0x0, 0x0, 0x5}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) fchdir(0xffffffffffffffff) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.471064457s ago: executing program 1 (id=310): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES64=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000180)={[0xfffffffffffffffd]}, 0x0, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) timerfd_create(0x0, 0xc0000) unshare(0x22020600) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r2, 0x7ffffffffffffffb, 0x0) writev(r2, &(0x7f0000000740)=[{&(0x7f0000000100)="64c580872e", 0x5}], 0x1) syz_open_dev$usbfs(&(0x7f0000000280), 0x9, 0xc00) msgget$private(0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.971367968s ago: executing program 1 (id=313): syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.879099946s ago: executing program 2 (id=314): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) dup2(r2, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r3}, &(0x7f0000000080)=0x8) 1.783405294s ago: executing program 0 (id=315): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{&(0x7f0000000440)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000680)=""/168, 0xa8}], 0x1}}], 0x1, 0x0, 0x0) 1.562984972s ago: executing program 3 (id=316): unshare(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x320, 0xffffffff, 0x0, 0x0, 0x108, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xe0, 0x108, 0x0, {0x100000000000000}, [@common=@set={{0x40}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'vxcan1\x00', 'pim6reg1\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x200c8000, &(0x7f0000000280)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffffbe, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x0, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000400)={0x0, {{0x2, 0x0, @multicast2}}, 0x1}, 0x90) socket$inet_udplite(0x2, 0x2, 0x88) getpid() bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00'}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000011c0), 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002780)={0x0, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000002600)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) 1.500716747s ago: executing program 0 (id=317): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x891a, 0x0) 1.444774801s ago: executing program 0 (id=318): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000002200)="c0ad27f445e63ff2a01471046193", 0xe}], 0x1}}], 0x1, 0x0) 1.352197299s ago: executing program 0 (id=319): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f00000002c0)={[{@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@rodir}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xffff}}, {@shortname_mixed}, {@utf8}, {@fat=@check_strict}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}]}, 0x25, 0x34c, &(0x7f0000001740)="$eJzs3T9oJGUUAPC3mU12EziTQji0Wu0EOS4RC21MOE44TKEni/8aFy7nn+wqZHEhFtlLo1gqNoJWdldoebVYiNhZ2HqCnIqN1x3c4cjuTHY3mcn9EbOn3u9XhJf3fW++byZDdhKSt6+uxua52Th/9eqVqNcrUV09tRrXKrEUM5FE5kIAAP8n19I0/kgzw8RTN5v90ULMZtHcVHYHAByF4ev/a8fGidrd3A0AMA2Fn//LPVuaffvItgUAHKHC6//D+4YP/Jq/OvqbAADgv+v5l15+Zm094myjUY/ovN9r9prx5Hh87Xy8Ee3YiJOxGDcisgeF7Glh8PHpM+unTzYGflmK5qCi14zo9HvN7ElhLRnW12I5FmMpr09H9cmgfnlY34iIC/3h+tGp9JqzsZCv/+NCbMRKLMb9hfqIM+unVxr5AZqdvfp+xG7U905isP8TsRjfzww/OReD2uxYg8zOcqNxKl3fV9+7WBvOAwAAAAAAAAAAAAAAAAAAAACAo3BiPvLuOY2lUf+btNPvvXc2n9Aojg/7+2TDeX+g3aw/UFrb687zQXKwP9D+/jy9ZjVm7uqZAwAAAAAAAAAAAAAAAAAAwL9Hd3suWu32xlZ3+93NcTDX7k9k3vr2i6/n4+CcN5NxJqrZ4fbNyXMxUZXEqDwdlafJvjl5kETkkyvRunhptOPJObXRWRTKB0GtMFTJ99Rqt4899POnZVV/jjNJjIbqpUtU8vUnhjr3Zamy/dw8qHS3V24x53KapoeV73xSrIp6RLXwhfsngm+uvP7AY93jj3cr1c3WV3nTh0ceXXzh8sef/7bZakd+adrtua3ujfRvr5VM3D+V/DpXSu6E8mB3nNnd6m63kh9+f/HBD787MDkpv3/Sycw7h6/15cHMXBYMtnk7ZzpbcvOXB69cH929d34xj3+22rq089OvexfzVlUT3yQ06gAAAAAAAAAAAAAAAAAAgKmY+F/xO/DEc0e3IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYvvH7/08Eu4XM7QTX+1Ecqm1sdQ9dfH6qpwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD3srwAAAP//JT9zjQ==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) 825.572352ms ago: executing program 2 (id=320): syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000480)='./file0\x00', 0x18090, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES32, @ANYRES8, @ANYRES16=0x0, @ANYRES64], 0x8, 0x2ee, &(0x7f00000004c0)="$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") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socket$packet(0x11, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0) r7 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) close_range(r4, 0xffffffffffffffff, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r8, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r9, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x16) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000002580)=""/107}) 537.144505ms ago: executing program 0 (id=322): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000004c0001800d0001"], 0x60}}, 0x0) 527.587807ms ago: executing program 1 (id=323): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000012c0)={'filter\x00', 0x104, 0x4, 0x3d0, 0x100, 0x200, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x404a2810}, 0xc, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000040)={[{0x8, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x100, 0x0, 0x40, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0xfd}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0], &(0x7f0000000200), 0x1}) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0xd) sched_rr_get_interval(0x0, &(0x7f0000000340)) syz_open_dev$vim2m(&(0x7f0000000200), 0x401, 0x2) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2276, 0xfffffffffffffffe) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="042c1107000000000000000000ff7f0000000000"], 0x14) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c870630022005600068104000800001002040000fb540600110802002000116d02000002010202000080"], 0x2b) syz_emit_vhci(0x0, 0xac) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_buf(r6, 0x0, 0x15, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x3, 0x512, [0x0, 0x20000500, 0x20000666, 0x200009e2], 0x0, &(0x7f0000000100), &(0x7f0000001b80)=ANY=[@ANYBLOB="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"]}, 0x593) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x88040) 513.905717ms ago: executing program 4 (id=324): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 435.035164ms ago: executing program 3 (id=325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="05a300000000000000000d000000040003"], 0x1c}}, 0x0) 312.094324ms ago: executing program 4 (id=326): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) symlink(&(0x7f0000000200)='.\x00', &(0x7f0000000040)='./file0\x00') mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0xa, 0x4d032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="85000000b90000019500000000004aef0000d00518bec3d264a3212b4193745b1f96c4fe70b16a7c15189db39b254fa26182e889357d1142298c1ead636b60d3dd8a87303b75dba40022cfb6ba16aabb90d8c0052537024a3cdfee5df58c5c64ddf16c94ff6fc3492c663c70e0c5a5df552a8265752ceb514087cfc6c7bb8aed917c022ddf0e023814ed102e66ec6333d76774bb44d76b52f9485908"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa2802, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@nfs_export_off}], [{@smackfsroot={'smackfsroot', 0x3d, '^,&]['}}, {@dont_hash}, {@audit}, {@subj_role={'subj_role', 0x3d, ']h'}}, {@obj_type={'obj_type', 0x3d, 'nl80211\x00'}}, {@fowner_lt}, {@smackfshat={'smackfshat', 0x3d, 'workdir'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') timer_create(0x0, &(0x7f00000002c0)={0x0, 0x2f}, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='br_fdb_external_learn_add\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0x2e}], 0x1, 0x0, 0x0, 0x5865}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x5008, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27}, 0x48) mmap(&(0x7f0000fa3000/0x2000)=nil, 0x2000, 0x7, 0x13, r5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x14}}, 0x0) syz_io_uring_setup(0x2c5c, &(0x7f0000000140)={0x0, 0x0, 0x1, 0xfffffffe}, &(0x7f00000001c0), &(0x7f0000000200)) socket(0x0, 0x0, 0x0) 197.377563ms ago: executing program 3 (id=327): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14967e, 0x0) mmap(&(0x7f0000904000/0x2000)=nil, 0x2000, 0x0, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0xfffe) 128.817009ms ago: executing program 0 (id=328): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040e04ff1020"], 0x7) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$unix(r0, &(0x7f0000000280)={&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000380)="e5eb574db2921443df1aee5f2678786b6ee34a3e185733986329708dac26b8b7f2853e1537c13c6fba6867aace07b94b611438ce3128bc2c677372446347ead44bb75eddf45096101e8cccab44c18588270426eaa2ed58e71f3aee4341082c048f776d862a87b319c232ffe35b25", 0x6e}, {&(0x7f0000000a00)="4743728a1bce0e054722ed3ce1b3fcdb12d752271685daee0aed91290075fed654b6977febf53acf8d0813dccf4f9e339becedf5ba5c84747f412df2939e8df9d6b4b6bf3875a2d7090b502e7442a4edcc12e6bdc753640b8a912bb2e32109497500cceccde8f04153141eb42f44e37ad1d32a30bd4566022b49972e55183db7b71f87757a0522e56b7546a51e0d1f3d74ecd6c90511a5c01230370e1d7a8b67c801ec4eaa240e2420fa2cdf039b7f93cd7b9b73857e07057a8d35400bdb24b6d475fbdbd45ce3653c1877c97accf38dfb5cfd4523fdfd21b813979395e9c25ee094141cde60f67adb7d997e50221e", 0xef}, {&(0x7f0000000400)="ad1690ac7991cfafb1fb915f99427016ada1435bc6171af52c4509fc90c1c1c1f2e8a475c7ef69cd66050ea31d3c35f499733dcedd26988644c981f5a9a3238f50c5e941becbae5c750f860cb715a38a2f1bbfa26f9dd57974929c6745", 0x5d}, {&(0x7f0000000b00)="4538f66c6f66b08ebb82694406364997b7838d372d4ac9350ee77bbc7d5fa0cf1e632e2458ee14ee1b5d4eefde45c793bd448b8bfb237d94d88be22c63240e84705a8b26c2264b1a76e33e507548fb28898beb9f0f296aadee95cdf713c80777f0951463bc4f7def997cb3696d743b34c4fdf337f6b902d22d6fcfcbcda72a2ec22e74566789b21d33ddff3c6d3d23464248a587e6a68b7d14fb0603ceadb62d47a731214011693ba411f6bc9102adea7505492810a3015d5bd8b349511f80854d6edeb3152f7ec5", 0xc8}, {&(0x7f0000000c00)="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", 0xfe}, {&(0x7f0000000d00)="ff26947b6121cbc1195147f58e3ffff1e25901f7d61618a2f2944ef940c796b141cf69af30c74b00c9c9e88bc21b296e6bc80c7824c2eb986230a76bed30ddd5cd0c4531cbf81195ef7f97cafdde96431b184e9f65f7d6cdf5db85eea3d94053a2550da80ffc9de68ebfbd7b24e004061db66267fe394c1734a2426c3750f76502c60460d0471a11add5f4da3d23d26fd931021efc3a153f94ae5bee1fb22f2c1a87d9126573880c9a74cfca7cdb8d3537e059e73892e2d6f3bafe7ef9f2b8a0dcabd106aaf00d3e7db6b7db25e4afeb319109370c2f63f6", 0xd8}, {&(0x7f0000000e00)="74dc02a25f67750bb386fbe76874b1a7c4595a298959730e9f389055898fc34fa512cf111aea8b9341465132790a315e5da66e32817f2a5556a9d678334acb6f7bd38e7c6d2e06a0433f7b9dff487e1262f546ca655ef7fdb05662e98b1232058c9db8d8ba7019b2817d6debfc3b648e0243a1792ff44d9193a0a9ac27c56d445cfdfc33f4e715a941ba0ac8b2085788b69c92bb30273c69f592194b8a508003888274ea20b5e8c494a51c0aac0fee93e0e973db939486f0ba17a0207fb34b8ec973f07e29fc86ae557f034087f61c4c268a55184f44282398e06edbaf44d1cf2ed9da5521074e19a8f191fbd6", 0xed}, {&(0x7f0000000f00)="c969a7dfdb190e605a7e4cff0db9e3613e475054d5250a564de0db5c61c2f023366002e6e0a2c258f103654b920230470796103169132247735cb695fb99f35ff36dd366f55932f1f8c388ab6c9b0ecc5fe02e7ab50547dcf893dd6db30648c433cdbdaef64f5800b08b99c6e5f81f419f946bd835fc0d9a79a223a12feb1ec720354a2e271aed62107d01be1a886c9b2c69f779795588c9f2b56b6ac5790c63d39bfdee154ee90d7f57d3adba475751c97d3344fd0091ec9abddd1a1454380cc6a4abe256e9c160e85691b56dddb65a8110c748a99fd9b7bbb3293510ff4a158c", 0xe1}], 0x8, 0x0, 0x0, 0x40}, 0x44810) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}], 0x1}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x14}]}}}]}, 0x3c}}, 0x0) 0s ago: executing program 1 (id=329): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x45}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ae685c0b163ef93d95c7e307963117b5a705fd4a74bc49e24a9ae8c22842f85899c62ca3a6ff691f1df44c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd25}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="38003300c0000000e7ffffffffff080211000000505050505050"], 0x54}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r8, 0x402c542d, &(0x7f0000000140)={0x1000200, 0x0, 0x80000000, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x10000001}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0xb}) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x1d, 0x20, 0x0}) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000002840)) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000040)=0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0x3f0, 0x0, 0x200, 0x200, 0x0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x118}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@local}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) read(r1, &(0x7f0000000280)=""/234, 0xea) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000000080)='bridge0\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.176' (ED25519) to the list of known hosts. [ 60.005620][ T3627] cgroup: Unknown subsys name 'net' [ 60.151852][ T3627] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.646934][ T3627] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.899149][ T3639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.907569][ T3639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.915259][ T3639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.923689][ T3639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.931585][ T3639] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.939064][ T3639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.963061][ T3639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.971685][ T3639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.979799][ T3639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.988319][ T3639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.006384][ T3646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.014078][ T3646] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.022323][ T3646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.030507][ T3646] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.037919][ T3646] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 63.045565][ T3646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.054092][ T3646] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.061523][ T3646] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.108034][ T3653] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.116429][ T3649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.123685][ T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.130933][ T3653] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.131685][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 63.146071][ T3649] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.146414][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.153297][ T3649] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 63.162589][ T3639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.174715][ T3654] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.175365][ T3639] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 63.189496][ T3639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.460595][ T3638] chnl_net:caif_netlink_parms(): no params data found [ 63.527016][ T3643] chnl_net:caif_netlink_parms(): no params data found [ 63.679586][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.688072][ T3638] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.696890][ T3638] device bridge_slave_0 entered promiscuous mode [ 63.709174][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.716560][ T3638] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.724498][ T3638] device bridge_slave_1 entered promiscuous mode [ 63.787707][ T3638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.801706][ T3638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.811441][ T3643] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.818758][ T3643] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.827157][ T3643] device bridge_slave_0 entered promiscuous mode [ 63.834462][ T3642] chnl_net:caif_netlink_parms(): no params data found [ 63.847627][ T3645] chnl_net:caif_netlink_parms(): no params data found [ 63.864535][ T3643] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.871898][ T3643] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.880330][ T3643] device bridge_slave_1 entered promiscuous mode [ 63.940023][ T3638] team0: Port device team_slave_0 added [ 63.974422][ T3638] team0: Port device team_slave_1 added [ 63.982028][ T3643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.019434][ T3643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.028822][ T3650] chnl_net:caif_netlink_parms(): no params data found [ 64.089939][ T3638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.097181][ T3638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.123645][ T3638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.152774][ T3643] team0: Port device team_slave_0 added [ 64.159067][ T3645] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.166370][ T3645] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.174257][ T3645] device bridge_slave_0 entered promiscuous mode [ 64.183505][ T3645] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.190719][ T3645] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.199066][ T3645] device bridge_slave_1 entered promiscuous mode [ 64.206571][ T3642] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.213657][ T3642] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.221793][ T3642] device bridge_slave_0 entered promiscuous mode [ 64.229930][ T3638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.237125][ T3638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.263131][ T3638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.284742][ T3643] team0: Port device team_slave_1 added [ 64.299629][ T3642] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.306905][ T3642] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.314711][ T3642] device bridge_slave_1 entered promiscuous mode [ 64.382136][ T3645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.393442][ T3642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.414397][ T3643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.421654][ T3643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.447914][ T3643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.461193][ T3645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.488572][ T3642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.514557][ T3643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.521627][ T3643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.548334][ T3643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.573342][ T3638] device hsr_slave_0 entered promiscuous mode [ 64.580232][ T3638] device hsr_slave_1 entered promiscuous mode [ 64.627522][ T3642] team0: Port device team_slave_0 added [ 64.635294][ T3645] team0: Port device team_slave_0 added [ 64.643485][ T3650] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.651184][ T3650] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.659550][ T3650] device bridge_slave_0 entered promiscuous mode [ 64.677226][ T3642] team0: Port device team_slave_1 added [ 64.686514][ T3643] device hsr_slave_0 entered promiscuous mode [ 64.693523][ T3643] device hsr_slave_1 entered promiscuous mode [ 64.700695][ T3643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.708599][ T3643] Cannot create hsr debugfs directory [ 64.728991][ T3645] team0: Port device team_slave_1 added [ 64.743051][ T3650] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.750345][ T3650] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.759215][ T3650] device bridge_slave_1 entered promiscuous mode [ 64.815883][ T3642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.822873][ T3642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.849622][ T3642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.883936][ T3642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.891238][ T3642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.917410][ T3642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.929391][ T3645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.936689][ T3645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.962756][ T3645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.979850][ T3650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.002011][ T3645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.009228][ T3645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.035319][ T3645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.036589][ T47] Bluetooth: hci0: command tx timeout [ 65.057996][ T3650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.164591][ T3645] device hsr_slave_0 entered promiscuous mode [ 65.171588][ T3645] device hsr_slave_1 entered promiscuous mode [ 65.178541][ T47] Bluetooth: hci1: command tx timeout [ 65.184240][ T3645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.191945][ T3645] Cannot create hsr debugfs directory [ 65.200526][ T3650] team0: Port device team_slave_0 added [ 65.209749][ T3642] device hsr_slave_0 entered promiscuous mode [ 65.217081][ T3642] device hsr_slave_1 entered promiscuous mode [ 65.223681][ T3642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.231362][ T3642] Cannot create hsr debugfs directory [ 65.253092][ T3650] team0: Port device team_slave_1 added [ 65.266193][ T47] Bluetooth: hci2: command tx timeout [ 65.269428][ T3639] Bluetooth: hci4: command tx timeout [ 65.272360][ T3646] Bluetooth: hci3: command tx timeout [ 65.342494][ T3650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.349862][ T3650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.376491][ T3650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.392742][ T3650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.400097][ T3650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.427049][ T3650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.565226][ T3650] device hsr_slave_0 entered promiscuous mode [ 65.572615][ T3650] device hsr_slave_1 entered promiscuous mode [ 65.580206][ T3650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.588218][ T3650] Cannot create hsr debugfs directory [ 65.629463][ T3638] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.667665][ T3638] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.680399][ T3638] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.712264][ T3638] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.806282][ T3643] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.827358][ T3643] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.842404][ T3643] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.852260][ T3643] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.894943][ T3645] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.905095][ T3645] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.920283][ T3645] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.931516][ T3645] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.059355][ T3638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.076112][ T3642] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.092377][ T3642] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.104944][ T3642] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.123371][ T3643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.141411][ T3642] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.160098][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.171032][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.182829][ T3638] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.217498][ T1163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.226518][ T1163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.235117][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.242422][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.251369][ T1163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.260977][ T1163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.269509][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.276624][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.284787][ T1163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.292769][ T1163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.314548][ T3643] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.334943][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.343378][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.352591][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.365702][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.374618][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.384525][ T3650] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.395006][ T3650] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.409341][ T3650] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.429635][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.439458][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.448542][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.459396][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.468278][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.477769][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.484853][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.506608][ T3650] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.529623][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.538940][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.547912][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.556892][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.565384][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.578165][ T3645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.589482][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.606791][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.623726][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.632359][ T3682] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.639496][ T3682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.692791][ T3645] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.708152][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.722968][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.732251][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.746885][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.754831][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.769855][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.781232][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.790374][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.833384][ T3643] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.844239][ T3643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.861546][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.871396][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.880346][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.894454][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.901647][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.916086][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.924726][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.940383][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.951783][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.960539][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.967764][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.975807][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.984490][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.993045][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.002283][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.010493][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.069660][ T3642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.088812][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.098482][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.105931][ T3646] Bluetooth: hci0: command tx timeout [ 67.107678][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.121312][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.128990][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.157952][ T3638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.192997][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.202029][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.217362][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.232028][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.241903][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.257327][ T3646] Bluetooth: hci1: command tx timeout [ 67.263215][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.279032][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.296469][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.304366][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.321963][ T3642] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.331624][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.338963][ T3646] Bluetooth: hci4: command tx timeout [ 67.345744][ T47] Bluetooth: hci3: command tx timeout [ 67.346259][ T3646] Bluetooth: hci2: command tx timeout [ 67.363855][ T3650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.389665][ T3650] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.403884][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.412347][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.420819][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.429632][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.438324][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.445462][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.454851][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.489579][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.507154][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.526354][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.533528][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.542385][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.551835][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.560900][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.568074][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.589309][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.597552][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.607670][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.620519][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.629454][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.638457][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.645625][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.658409][ T3643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.681712][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.706804][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.716367][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.762865][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.778703][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.791984][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.803651][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.816833][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.825798][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.844388][ T3650] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.860444][ T3650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.885861][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.894653][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.903723][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.912754][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.921883][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.930455][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.939289][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.948524][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.957595][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.966687][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.975300][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.983563][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.005940][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.014289][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.038108][ T3638] device veth0_vlan entered promiscuous mode [ 68.050354][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.061833][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.071212][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.079709][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.087575][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.096810][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.105830][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.114443][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.131300][ T3645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.161035][ T3643] device veth0_vlan entered promiscuous mode [ 68.177434][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.186617][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.195678][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.204067][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.214213][ T3638] device veth1_vlan entered promiscuous mode [ 68.230216][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.245916][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.254240][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.263950][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.309666][ T3643] device veth1_vlan entered promiscuous mode [ 68.356619][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.373426][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.383230][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.399220][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.411975][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.424610][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.451123][ T3645] device veth0_vlan entered promiscuous mode [ 68.463854][ T3638] device veth0_macvtap entered promiscuous mode [ 68.493607][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.502941][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.511730][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.521192][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.536183][ T3645] device veth1_vlan entered promiscuous mode [ 68.554481][ T3650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.562625][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.570771][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.586310][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.593820][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.633287][ T3643] device veth0_macvtap entered promiscuous mode [ 68.673238][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.684604][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.697822][ T3638] device veth1_macvtap entered promiscuous mode [ 68.719623][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.729643][ T3643] device veth1_macvtap entered promiscuous mode [ 68.767300][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.776697][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.784189][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.798512][ T3638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.811950][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.823454][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.836362][ T3643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.848964][ T3642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.862826][ T3638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.872076][ T3645] device veth0_macvtap entered promiscuous mode [ 68.890351][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.900269][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.910156][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.919742][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.929439][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.939252][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.948542][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.957956][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.968279][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.978534][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.996265][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.009234][ T3643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.021840][ T3638] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.030981][ T3638] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.040955][ T3638] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.049859][ T3638] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.063363][ T3645] device veth1_macvtap entered promiscuous mode [ 69.073484][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.082327][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.093208][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.107037][ T3643] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.127190][ T3643] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.139500][ T3643] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.150599][ T3643] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.176641][ T3646] Bluetooth: hci0: command tx timeout [ 69.196886][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.212945][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.312410][ T3642] device veth0_vlan entered promiscuous mode [ 69.321098][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.330355][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.348092][ T3646] Bluetooth: hci1: command tx timeout [ 69.355971][ T3645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.367188][ T3645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.377255][ T3645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.388051][ T3645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.399313][ T3645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.415837][ T3646] Bluetooth: hci3: command tx timeout [ 69.421285][ T3646] Bluetooth: hci2: command tx timeout [ 69.427011][ T3641] Bluetooth: hci4: command tx timeout [ 69.432544][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.440515][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.449570][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.458934][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.467999][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.503281][ T3642] device veth1_vlan entered promiscuous mode [ 69.513509][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.522696][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.531406][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.539860][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.548839][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.564741][ T3645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.575969][ T3645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.586742][ T3645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.598666][ T3645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.610954][ T3645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.621868][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.630400][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.649446][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.659701][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.668630][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.684702][ T3645] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.703470][ T3645] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.712777][ T3645] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.721941][ T3645] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.745983][ T3642] device veth0_macvtap entered promiscuous mode [ 69.767546][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.776326][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.785318][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.799957][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.810252][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.822536][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.831064][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.843517][ T3650] device veth0_vlan entered promiscuous mode [ 69.854994][ T3642] device veth1_macvtap entered promiscuous mode [ 69.911341][ T3650] device veth1_vlan entered promiscuous mode [ 69.939722][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.957121][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.968240][ T3718] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.980811][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.999402][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.020328][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.039307][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.045728][ T3718] loop1: detected capacity change from 0 to 1764 [ 70.082475][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.098049][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.111086][ T3632] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 70.120450][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.132859][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.154949][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.166394][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.181135][ T3642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.208262][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.215583][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.225009][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.232029][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.247615][ T3718] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4091629214 (65466067424 ns) > initial count (185248 ns). Using initial count to start timer. [ 70.266375][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.274460][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.283822][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.297251][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.314803][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.325751][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.343596][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.344254][ T3718] loop1: detected capacity change from 0 to 1024 [ 70.353899][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.372525][ T3718] ======================================================= [ 70.372525][ T3718] WARNING: The mand mount option has been deprecated and [ 70.372525][ T3718] and is ignored by this kernel. Remove the mand [ 70.372525][ T3718] option from the mount to silence this warning. [ 70.372525][ T3718] ======================================================= [ 70.375715][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.421890][ T3642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.440462][ T3650] device veth0_macvtap entered promiscuous mode [ 70.472460][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.490098][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.500357][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.524309][ T3642] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.544308][ T3642] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.554163][ T3642] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.555333][ T3718] EXT4-fs: Mount option(s) incompatible with ext2 [ 70.569079][ T3642] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.591801][ T3650] device veth1_macvtap entered promiscuous mode [ 70.686071][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.713063][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.730013][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.743617][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.762458][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.762696][ T3718] capability: warning: `syz.1.2' uses 32-bit capabilities (legacy support in use) [ 70.774892][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.796071][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.806929][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.817559][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.828207][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.843152][ T3650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.867581][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.877051][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.888067][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.907317][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.918502][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.931964][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.944048][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.955052][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.966317][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.984487][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.995225][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.026965][ T3650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.047283][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.053384][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.055219][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.077641][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.097350][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.107468][ T3650] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.118243][ T3650] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.132244][ T3650] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.141617][ T3650] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.213029][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.233086][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.256567][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.258786][ T3646] Bluetooth: hci0: command tx timeout [ 71.265095][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.277194][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.421171][ T3646] Bluetooth: hci1: command tx timeout [ 71.430651][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.478370][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.488054][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.497989][ T3646] Bluetooth: hci2: command tx timeout [ 71.503463][ T3646] Bluetooth: hci3: command tx timeout [ 71.505354][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.509538][ T47] Bluetooth: hci4: command tx timeout [ 71.536228][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.541642][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.554136][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.594488][ T3741] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 71.626103][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.634133][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.396991][ T3768] Cannot find set identified by id 0 to match [ 73.487600][ T3776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 73.575051][ C1] eth0: bad gso: type: 1, size: 1408 [ 74.063983][ T3791] netem: unknown loss type 0 [ 74.103746][ T3791] netem: change failed [ 74.152306][ T3797] loop3: detected capacity change from 0 to 512 [ 74.214831][ T3766] loop1: detected capacity change from 0 to 32768 [ 74.239400][ T3797] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.280045][ T3766] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.16 (3766) [ 74.374942][ T3797] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 74.473179][ T3797] EXT4-fs (loop3): 1 truncate cleaned up [ 74.483128][ T3797] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 75.432130][ T3812] capability: warning: `syz.3.29' uses deprecated v2 capabilities in a way that may be insecure [ 75.458415][ T3766] BTRFS error (device loop1): open_ctree failed [ 75.975870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.984126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.992406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 76.000654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 76.008914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 76.040052][ T3643] EXT4-fs (loop3): unmounting filesystem. [ 76.076002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 76.084446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 76.092829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 76.101694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 76.110382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 79.001885][ T3836] loop3: detected capacity change from 0 to 2048 [ 79.097467][ T3836] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.487483][ T3846] device veth1_macvtap left promiscuous mode [ 79.537053][ T3848] device veth1_macvtap entered promiscuous mode [ 79.853410][ T3643] UDF-fs: error (device loop3): udf_read_inode: (ino 1440) failed !bh [ 79.891658][ T3643] UDF-fs: error (device loop3): udf_read_inode: (ino 1440) failed !bh [ 80.025624][ T3715] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.291062][ T3715] usb 3-1: Using ep0 maxpacket: 16 [ 80.429118][ T3859] loop1: detected capacity change from 0 to 8192 [ 80.467095][ T101] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.531517][ T3859] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 80.555492][ T3859] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 80.571126][ T101] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.589193][ T3859] loop1: unable to read partition table [ 80.598366][ T3859] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 80.606760][ T3715] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 80.653757][ T3715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.678775][ T3091] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 80.690384][ T3715] usb 3-1: Product: syz [ 80.694584][ T3715] usb 3-1: Manufacturer: syz [ 80.699905][ T3715] usb 3-1: SerialNumber: syz [ 80.705657][ T3091] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 80.719983][ T101] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.725894][ T3091] loop1: unable to read partition table [ 80.781085][ T3715] usb 3-1: config 0 descriptor?? [ 80.788805][ T3864] loop0: detected capacity change from 0 to 736 [ 80.833336][ T3715] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 80.837737][ T101] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.855275][ T3715] usb 3-1: Detected FT232H [ 81.029465][ T3869] overlayfs: unrecognized mount option "appraise_type=imasig" or missing value [ 81.061970][ T3864] Symlink component flag not implemented [ 81.070130][ T3684] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.085035][ T3864] Symlink component flag not implemented (121) [ 81.356416][ T3684] usb 5-1: too many configurations: 237, using maximum allowed: 8 [ 81.430562][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.438743][ T3684] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.450281][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.460574][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.469593][ T3641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.477130][ T3715] ftdi_sio 3-1:0.0: GPIO initialisation failed: -32 [ 81.484184][ T3641] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.492051][ T3641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.500700][ T152] cfg80211: failed to load regulatory.db [ 81.511900][ T3684] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 81.547522][ T3715] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 81.595804][ T3684] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.638410][ T3684] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 81.767269][ T3684] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.789269][ T3684] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 81.897106][ T3887] cgroup: Name too long [ 81.905904][ T3684] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.931764][ T3684] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 82.036046][ T3684] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.055513][ T3684] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 82.155722][ T152] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.165797][ T3684] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.194145][ T3684] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 82.366358][ T3684] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.405561][ T152] usb 1-1: Using ep0 maxpacket: 8 [ 82.421560][ T3904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.435943][ T3684] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 82.466031][ T3904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.556568][ T3684] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.572802][ T3684] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 82.636571][ T3876] chnl_net:caif_netlink_parms(): no params data found [ 82.706100][ T152] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 82.732283][ T152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.741723][ T152] usb 1-1: Product: syz [ 82.746291][ T152] usb 1-1: Manufacturer: syz [ 82.751202][ T152] usb 1-1: SerialNumber: syz [ 82.756585][ T3684] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3 [ 82.797295][ T3684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.806751][ T152] usb 1-1: config 0 descriptor?? [ 82.828545][ T3684] usb 5-1: Product: syz [ 82.841352][ T3684] usb 5-1: Manufacturer: syz [ 82.853472][ T3684] usb 5-1: SerialNumber: syz [ 82.863594][ T152] gspca_main: se401-2.14.0 probing 047d:5003 [ 82.897698][ T3684] usb 5-1: config 0 descriptor?? [ 82.948570][ T3684] ir_toy 5-1:0.0: required endpoints not found [ 83.076784][ T3876] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.093438][ T3876] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.114400][ T3876] device bridge_slave_0 entered promiscuous mode [ 83.185672][ T3876] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.198657][ T3876] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.219790][ T3876] device bridge_slave_1 entered promiscuous mode [ 83.220284][ T3679] usb 5-1: USB disconnect, device number 2 [ 83.295565][ T152] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 83.305138][ T152] se401: probe of 1-1:0.0 failed with error -71 [ 83.357903][ T152] usb 1-1: USB disconnect, device number 2 [ 83.424679][ T3876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.460808][ T101] device hsr_slave_0 left promiscuous mode [ 83.482562][ T101] device hsr_slave_1 left promiscuous mode [ 83.507429][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.516687][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.533472][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.545901][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.562615][ T101] device bridge_slave_1 left promiscuous mode [ 83.575568][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.585023][ T3641] Bluetooth: hci1: command tx timeout [ 83.613960][ T101] device bridge_slave_0 left promiscuous mode [ 83.626623][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.761895][ T26] usb 3-1: USB disconnect, device number 2 [ 83.806121][ T26] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 83.898368][ T3920] loop4: detected capacity change from 0 to 128 [ 83.930381][ T26] ftdi_sio 3-1:0.0: device disconnected [ 83.995374][ T101] device veth1_macvtap left promiscuous mode [ 84.022467][ T101] device veth0_macvtap left promiscuous mode [ 84.066321][ T101] device veth1_vlan left promiscuous mode [ 84.107966][ T101] device veth0_vlan left promiscuous mode [ 84.548589][ T3937] misc userio: The device must be registered before sending interrupts [ 84.565769][ T26] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 84.817967][ T3941] Illegal XDP return value 2077503529 on prog (id 14) dev N/A, expect packet loss! [ 84.956959][ T26] usb 5-1: config 250 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 85.045873][ T26] usb 5-1: language id specifier not provided by device, defaulting to English [ 85.077036][ T3929] loop2: detected capacity change from 0 to 32768 [ 85.205958][ T26] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 85.206436][ T3929] XFS (loop2): Mounting V5 Filesystem [ 85.232176][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.245606][ T26] usb 5-1: Product: syz [ 85.249810][ T26] usb 5-1: Manufacturer: é°ï»¥å‚–ᅅ㞴岼먊ߧᚨ筨鴴ã®î¡ˆë ƒèˆŠé™Œç¬Ù¶å¯¥æ·´é§–켧ἲ㯩譅㯂֫凑ᶜ鎣䟒ᣇ邛྽ⰨꢅŦꂙ섾倞ࡢᅗ힋䒺⿰挱 [ 85.275832][ T26] usb 5-1: SerialNumber: syz [ 85.328066][ T26] usbhid 5-1:250.0: couldn't find an input interrupt endpoint [ 85.372062][ T3929] XFS (loop2): Ending clean mount [ 85.387482][ T3935] loop0: detected capacity change from 0 to 32768 [ 85.394925][ T3935] XFS: attr2 mount option is deprecated. [ 85.400699][ T3935] XFS: ikeep mount option is deprecated. [ 85.406423][ T3935] XFS: noikeep mount option is deprecated. [ 85.421758][ T3929] XFS (loop2): Quotacheck needed: Please wait. [ 85.515021][ T3929] XFS (loop2): Quotacheck: Done. [ 85.522553][ T3935] XFS (loop0): Mounting V5 Filesystem [ 85.655903][ T3641] Bluetooth: hci1: command tx timeout [ 85.669053][ T101] team0 (unregistering): Port device team_slave_1 removed [ 85.802046][ T101] team0 (unregistering): Port device team_slave_0 removed [ 85.828287][ T3935] XFS (loop0): Ending clean mount [ 85.856497][ T3935] XFS (loop0): Quotacheck needed: Please wait. [ 85.890832][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.274647][ T3929] syz.2.59 (3929) used greatest stack depth: 19288 bytes left [ 86.358147][ T3935] XFS (loop0): Quotacheck: Done. [ 86.539275][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.610719][ T3642] XFS (loop0): Unmounting Filesystem [ 86.629566][ T3645] XFS (loop2): Unmounting Filesystem [ 87.209646][ T101] bond0 (unregistering): Released all slaves [ 87.317101][ T3876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.343897][ T3928] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.360897][ T3679] usb 5-1: USB disconnect, device number 3 [ 87.546636][ T3876] team0: Port device team_slave_0 added [ 87.579135][ T3876] team0: Port device team_slave_1 added [ 87.684184][ T3988] loop2: detected capacity change from 0 to 256 [ 87.735797][ T47] Bluetooth: hci1: command tx timeout [ 87.832848][ T3876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.433026][ T3876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.459298][ C0] vkms_vblank_simulate: vblank timer overrun [ 88.678755][ T3876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.941164][ T3876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.963236][ T3876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.072609][ T3876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.188905][ T4015] loop4: detected capacity change from 0 to 128 [ 89.231616][ T4015] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 89.286707][ T3876] device hsr_slave_0 entered promiscuous mode [ 89.316720][ T3876] device hsr_slave_1 entered promiscuous mode [ 89.363848][ T3876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.367266][ T4009] loop1: detected capacity change from 0 to 8192 [ 89.392096][ T3876] Cannot create hsr debugfs directory [ 89.433321][ T4009] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 89.446912][ T3684] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 89.455610][ T4009] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 89.497892][ T4009] REISERFS (device loop1): using ordered data mode [ 89.504449][ T4009] reiserfs: using flush barriers [ 89.634215][ T4009] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 89.730293][ T4009] REISERFS (device loop1): checking transaction log (loop1) [ 90.720736][ T47] Bluetooth: hci1: command tx timeout [ 90.776162][ T3684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.962635][ T3684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.084536][ T4009] REISERFS (device loop1): Using r5 hash to sort names [ 91.116989][ T4009] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 91.156890][ T3684] usb 3-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 91.205892][ T4009] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 91.251543][ T3684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.322506][ T3684] usb 3-1: config 0 descriptor?? [ 91.399656][ T4032] loop0: detected capacity change from 0 to 256 [ 91.495178][ T4032] exfat: Deprecated parameter 'utf8' [ 91.563999][ T4032] exfat: Deprecated parameter 'namecase' [ 91.580050][ T4009] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 91.637238][ T4009] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 91.666499][ T4032] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x16b5df41, utbl_chksum : 0xe619d30d) [ 91.696372][ T4009] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 91.872967][ T3684] wacom 0003:056A:0003.0001: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 91.909483][ T3684] wacom 0003:056A:0003.0001: hidraw0: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.2-1/input0 [ 91.928647][ T3684] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0003.0001/input/input5 [ 92.116264][ T4044] sctp: [Deprecated]: syz.0.91 (pid 4044) Use of int in maxseg socket option. [ 92.116264][ T4044] Use struct sctp_assoc_value instead [ 92.140209][ T3715] usb 3-1: USB disconnect, device number 3 [ 92.651693][ T4056] loop0: detected capacity change from 0 to 2048 [ 92.714378][ T4056] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18881, location=18881 [ 92.924913][ T3876] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.979953][ T3876] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.982732][ T4069] loop1: detected capacity change from 0 to 2048 [ 93.030379][ T3876] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.102726][ T3876] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.106535][ T4069] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 93.344870][ T4079] loop4: detected capacity change from 0 to 512 [ 94.068259][ T4079] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.99: inode #1: comm syz.4.99: iget: illegal inode # [ 94.223818][ T4079] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.99: error while reading EA inode 1 err=-117 [ 94.275712][ T3876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.292743][ T4079] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 94.350628][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.361474][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.381613][ T4079] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.99: inode #1: comm syz.4.99: iget: illegal inode # [ 94.421410][ T3876] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.471890][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.500329][ T4079] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.99: error while reading EA inode 1 err=-117 [ 94.520502][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.536018][ T3682] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.543270][ T3682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.588865][ T4079] EXT4-fs (loop4): 1 orphan inode deleted [ 94.605653][ T4079] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 94.651838][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.660917][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.680515][ T4076] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.99: invalid indirect mapped block 234881024 (level 0) [ 94.703021][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.741311][ T3715] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.748482][ T3715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.781365][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.800375][ T4076] EXT4-fs error (device loop4): ext4_find_dest_de:2113: inode #2: block 13: comm syz.4.99: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 94.812145][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.846565][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.856116][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.888329][ T3876] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.920996][ T3876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.953631][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.975314][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.991802][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.000934][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.009551][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.019301][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.028868][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.056191][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 95.074878][ T3650] EXT4-fs (loop4): unmounting filesystem. [ 95.157152][ T3638] EXT4-fs (loop1): unmounting filesystem. [ 95.371656][ T4095] loop2: detected capacity change from 0 to 128 [ 95.449634][ T4102] loop0: detected capacity change from 0 to 512 [ 95.499314][ T3632] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 95.534265][ T4102] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 95.573857][ T4110] loop2: detected capacity change from 0 to 512 [ 95.617680][ T4102] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038 (0x7fffffff) [ 95.646240][ T4110] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz.2.105: bad orphan inode 100663296 [ 95.662978][ T4110] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 95.672026][ T4110] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038 (0x7fffffff) [ 95.725554][ T4102] netlink: 24 bytes leftover after parsing attributes in process `syz.0.106'. [ 95.787294][ T4102] sch_tbf: burst 88 is lower than device macvtap0 mtu (1514) ! [ 95.875318][ T4118] loop4: detected capacity change from 0 to 512 [ 95.910819][ T4118] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 96.049372][ T4118] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.107: iget: bad i_size value: -67835469387268086 [ 96.089264][ T3642] EXT4-fs (loop0): unmounting filesystem. [ 96.098131][ T4118] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.107: couldn't read orphan inode 15 (err -117) [ 96.134780][ T4118] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 96.172132][ T4118] ext2 filesystem being mounted at /20/file0 supports timestamps until 2038 (0x7fffffff) [ 96.254117][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.285228][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.353891][ T3876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.359219][ T4118] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.107: Directory hole found for htree leaf block 0 [ 96.439876][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.459289][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.708263][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.762447][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.843224][ T3876] device veth0_vlan entered promiscuous mode [ 96.896992][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.927406][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.991121][ T3876] device veth1_vlan entered promiscuous mode [ 97.243324][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.260715][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 97.294026][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.321660][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.376463][ T3876] device veth0_macvtap entered promiscuous mode [ 97.418011][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.450518][ T3876] device veth1_macvtap entered promiscuous mode [ 97.542308][ T3876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.585760][ T3876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.633634][ T3876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.644856][ T3876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.663144][ T3876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.704697][ T3876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.720182][ T3876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.731483][ T3876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.796395][ T3876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.864996][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.887696][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.918583][ T3876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.956422][ T3876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.025059][ T3876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.084885][ T3876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.116785][ T4135] loop0: detected capacity change from 0 to 32768 [ 98.153362][ T4135] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 scanned by syz.0.109 (4135) [ 98.174041][ T3876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.209834][ T3876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.266887][ T3876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.286465][ T4135] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 98.361138][ T4135] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 98.371105][ T3876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.388843][ T4135] BTRFS info (device loop0): using free space tree [ 98.416742][ T3876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.434153][ T3645] EXT4-fs (loop2): unmounting filesystem. [ 98.448449][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.467907][ T3650] EXT4-fs (loop4): unmounting filesystem. [ 98.472579][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.498675][ T3876] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.535768][ T3876] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.544651][ T3876] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.554014][ T3876] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.388839][ T3815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.435508][ T3815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.453213][ T4135] BTRFS info (device loop0): enabling ssd optimizations [ 99.497382][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.533151][ T3815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.543550][ T4184] loop4: detected capacity change from 0 to 2048 [ 99.557032][ T4186] loop1: detected capacity change from 0 to 8 [ 99.607464][ T3815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.639909][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.736911][ T4184] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.115: bad orphan inode 8192 [ 99.824240][ T4184] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 99.838881][ T4186] overlayfs: failed to resolve './file0': -2 [ 100.093666][ T4198] loop3: detected capacity change from 0 to 256 [ 100.194829][ T27] audit: type=1804 audit(1722960050.117:2): pid=4135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.109" name="/newroot/28/file0/file1" dev="loop0" ino=261 res=1 errno=0 [ 101.007938][ T3650] EXT4-fs (loop4): unmounting filesystem. [ 101.070112][ T3642] BTRFS info (device loop0): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 101.089153][ T4198] loop3: detected capacity change from 0 to 1024 [ 101.189631][ T4198] hfsplus: invalid catalog max_key_len 0 [ 101.201377][ T4198] hfsplus: failed to load catalog file [ 101.241102][ T3641] Bluetooth: hci4: unexpected subevent 0x01 length: 78 > 18 [ 101.249087][ T3641] Bluetooth: hci4: Invalid handle: 0x4100 > 0x0eff [ 101.284339][ T4213] loop4: detected capacity change from 0 to 1024 [ 101.354985][ T4213] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.775897][ T27] audit: type=1326 audit(1722960051.697:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4220 comm="syz.3.121" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7561779f9 code=0x0 [ 101.962653][ T4226] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 102.040117][ T4226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.052739][ T4204] loop2: detected capacity change from 0 to 32768 [ 103.117524][ T4233] loop3: detected capacity change from 0 to 512 [ 103.152971][ T4235] Zero length message leads to an empty skb [ 103.173359][ T4208] loop1: detected capacity change from 0 to 40427 [ 103.192799][ T4233] EXT4-fs: Ignoring removed nobh option [ 103.247450][ T4233] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 103.248880][ T4208] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 103.310068][ T4233] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 103.333722][ T4208] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 103.409577][ T4208] F2FS-fs (loop1): invalid crc value [ 103.418141][ T4233] EXT4-fs (loop3): 1 truncate cleaned up [ 103.475706][ T4233] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 103.530960][ T4208] F2FS-fs (loop1): Found nat_bits in checkpoint [ 103.667703][ T4208] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 103.684599][ T4208] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 103.693358][ T3876] EXT4-fs (loop3): unmounting filesystem. [ 103.694045][ T4251] loop0: detected capacity change from 0 to 2048 [ 103.771729][ T4254] loop4: detected capacity change from 0 to 256 [ 103.826528][ T4251] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.842990][ T27] audit: type=1800 audit(1722960053.767:4): pid=4208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.118" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 104.168388][ T4263] loop3: detected capacity change from 0 to 1024 [ 104.197100][ T3638] syz-executor: attempt to access beyond end of device [ 104.197100][ T3638] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 104.395215][ T4270] loop2: detected capacity change from 0 to 16 [ 104.448138][ T4270] erofs: (device loop2): mounted with root inode @ nid 36. [ 104.528644][ T4270] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 104.576346][ T4270] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 104.703542][ T4278] loop4: detected capacity change from 0 to 128 [ 104.965690][ T4288] loop2: detected capacity change from 0 to 164 [ 109.360966][ T4297] process 'syz.4.139' launched './file1' with NULL argv: empty string added [ 109.599213][ T4307] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 109.890861][ T27] audit: type=1326 audit(1722960059.817:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3a5779f9 code=0x7ffc0000 [ 109.932557][ T4317] loop4: detected capacity change from 0 to 256 [ 109.976133][ T27] audit: type=1326 audit(1722960059.847:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3a5779f9 code=0x7ffc0000 [ 110.089996][ T27] audit: type=1326 audit(1722960059.847:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7f3a5779f9 code=0x7ffc0000 [ 110.165516][ T27] audit: type=1326 audit(1722960059.847:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7f3a577a33 code=0x7ffc0000 [ 110.250518][ T27] audit: type=1326 audit(1722960059.847:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7f3a5764df code=0x7ffc0000 [ 110.305503][ T27] audit: type=1326 audit(1722960059.847:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7f3a577a87 code=0x7ffc0000 [ 110.365499][ T26] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 110.376080][ T27] audit: type=1326 audit(1722960059.857:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f3a576390 code=0x7ffc0000 [ 110.450021][ T27] audit: type=1326 audit(1722960059.857:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f3a5775fb code=0x7ffc0000 [ 110.505629][ T3679] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.565903][ T27] audit: type=1326 audit(1722960059.887:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7f3a57668a code=0x7ffc0000 [ 110.817664][ T3679] usb 4-1: Using ep0 maxpacket: 8 [ 110.835974][ T26] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.871555][ T27] audit: type=1326 audit(1722960059.887:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7f3a57668a code=0x7ffc0000 [ 110.959382][ T3679] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 111.018290][ T3679] usb 4-1: config 179 has no interface number 0 [ 111.126182][ T26] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.147073][ T3679] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 111.203047][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.386773][ T26] usb 5-1: Product: syz [ 111.393874][ T26] usb 5-1: Manufacturer: syz [ 111.398985][ T3679] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 111.410788][ T26] usb 5-1: SerialNumber: syz [ 111.416336][ T3679] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 111.429012][ T3679] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 111.442652][ T3679] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 111.452495][ T3679] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.467048][ T26] cdc_ether 5-1:1.0: skipping garbage [ 111.472478][ T26] usb 5-1: bad CDC descriptors [ 111.478672][ T4327] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 111.524990][ T4299] loop2: detected capacity change from 0 to 40427 [ 111.566097][ T4299] F2FS-fs (loop2): invalid crc value [ 111.631207][ T4299] F2FS-fs (loop2): Found nat_bits in checkpoint [ 111.765595][ T3679] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input8 [ 111.853479][ T4317] FAT-fs (loop4): error, clusters badly computed (2 != 1) [ 111.943102][ T4299] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 111.981441][ T4299] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 112.004061][ T3679] usb 4-1: USB disconnect, device number 2 [ 112.015923][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 112.024688][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 112.042690][ T3679] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 112.280421][ T3645] syz-executor: attempt to access beyond end of device [ 112.280421][ T3645] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 112.751275][ T4361] loop3: detected capacity change from 0 to 128 [ 112.809149][ T4361] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 112.909145][ T4360] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff) [ 112.951561][ T4360] FAT-fs (loop3): Filesystem has been set read-only [ 113.081401][ T4317] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 198) [ 113.206846][ T3684] usb 5-1: USB disconnect, device number 4 [ 113.639732][ T4375] loop4: detected capacity change from 0 to 512 [ 113.677254][ T4375] journal_path: Lookup failure for './file0' [ 113.700047][ T4375] EXT4-fs: error: could not find journal device path [ 113.790390][ T4368] loop2: detected capacity change from 0 to 32768 [ 113.837693][ T4368] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop2 scanned by syz.2.150 (4368) [ 113.891509][ T4368] BTRFS info (device loop2): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 113.902840][ T4377] loop1: detected capacity change from 0 to 1024 [ 113.910135][ T4377] EXT4-fs: Ignoring removed i_version option [ 113.953517][ T4368] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 113.959071][ T4377] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 113.981838][ T4368] BTRFS info (device loop2): using free space tree [ 114.021248][ T4377] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 114.144282][ T4368] BTRFS info (device loop2): enabling ssd optimizations [ 114.163951][ T3638] EXT4-fs (loop1): unmounting filesystem. [ 114.252189][ T4386] loop3: detected capacity change from 0 to 1024 [ 114.384901][ T3632] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 114.464462][ T4386] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (490519854976 ns) > initial count (268435456 ns). Using initial count to start timer. [ 114.544419][ T3645] BTRFS info (device loop2): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 114.962754][ T4418] Bluetooth: MGMT ver 1.22 [ 115.900290][ T4423] overlayfs: failed to resolve './file1': -2 [ 115.932889][ T4427] loop1: detected capacity change from 0 to 512 [ 116.088430][ T4427] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.167: inode #1: comm syz.1.167: iget: illegal inode # [ 116.233756][ T4427] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.167: error while reading EA inode 1 err=-117 [ 116.263906][ T4427] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.167: inode #1: comm syz.1.167: iget: illegal inode # [ 116.300857][ T4427] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.167: error while reading EA inode 1 err=-117 [ 116.352799][ T4427] EXT4-fs (loop1): 1 orphan inode deleted [ 116.391023][ T4427] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 116.512305][ T4445] loop0: detected capacity change from 0 to 512 [ 116.589443][ T4445] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.854859][ T4427] EXT4-fs error (device loop1): ext4_lookup:1856: inode #15: comm syz.1.167: unexpected EA_INODE flag [ 117.045255][ T3638] EXT4-fs (loop1): unmounting filesystem. [ 117.257760][ T4445] EXT4-fs (loop0): orphan cleanup on readonly fs [ 117.287238][ T4445] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.172: bg 0: block 248: padding at end of block bitmap is not set [ 117.310721][ T4445] __quota_error: 67 callbacks suppressed [ 117.310736][ T4445] Quota error (device loop0): write_blk: dquota write failed [ 117.328191][ T4445] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 117.340066][ T4445] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.172: Failed to acquire dquot type 1 [ 117.358878][ T4445] EXT4-fs (loop0): 1 truncate cleaned up [ 117.367948][ T4445] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 117.420413][ T4445] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 117.463447][ T4445] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 117.501673][ T3642] EXT4-fs (loop0): unmounting filesystem. [ 117.662503][ T4453] ip6gretap0 speed is unknown, defaulting to 1000 [ 117.671211][ T4453] ip6gretap0 speed is unknown, defaulting to 1000 [ 117.681373][ T4453] ip6gretap0 speed is unknown, defaulting to 1000 [ 117.790978][ T4453] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 117.840992][ T4465] loop0: detected capacity change from 0 to 64 [ 117.855277][ T4460] netlink: 32 bytes leftover after parsing attributes in process `syz.3.178'. [ 117.942922][ T4453] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 118.140170][ T4470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.181'. [ 118.169614][ T4453] ip6gretap0 speed is unknown, defaulting to 1000 [ 118.197229][ T4453] ip6gretap0 speed is unknown, defaulting to 1000 [ 118.217234][ T4453] ip6gretap0 speed is unknown, defaulting to 1000 [ 118.253168][ T4453] ip6gretap0 speed is unknown, defaulting to 1000 [ 118.279991][ T4453] ip6gretap0 speed is unknown, defaulting to 1000 [ 118.343894][ T4475] loop0: detected capacity change from 0 to 2048 [ 118.486352][ T4479] loop3: detected capacity change from 0 to 256 [ 118.517338][ T4475] loop0: p1 < > p2 p3 < p5 > p4 [ 118.532608][ T4475] loop0: partition table partially beyond EOD, truncated [ 118.550931][ T4475] loop0: p1 start 4278190080 is beyond EOD, truncated [ 118.732520][ T4486] loop1: detected capacity change from 0 to 128 [ 118.869771][ T4486] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 119.661102][ T4487] FAT-fs (loop1): FAT read failed (blocknr 128) [ 119.767838][ T4475] loop0: p2 start 16908800 is beyond EOD, truncated [ 120.077134][ T4475] loop0: p4 start 11326 is beyond EOD, truncated [ 120.084449][ T4479] FAT-fs (loop3): Directory bread(block 64) failed [ 120.142599][ T4475] loop0: p5 start 16908800 is beyond EOD, truncated [ 120.154024][ T4479] FAT-fs (loop3): Directory bread(block 65) failed [ 120.195729][ T4479] FAT-fs (loop3): Directory bread(block 66) failed [ 120.245646][ T4479] FAT-fs (loop3): Directory bread(block 67) failed [ 120.298607][ T4479] FAT-fs (loop3): Directory bread(block 68) failed [ 120.305281][ T4479] FAT-fs (loop3): Directory bread(block 69) failed [ 120.376934][ T4479] FAT-fs (loop3): Directory bread(block 70) failed [ 120.383557][ T4479] FAT-fs (loop3): Directory bread(block 71) failed [ 120.420678][ T4479] FAT-fs (loop3): Directory bread(block 72) failed [ 120.433156][ T4479] FAT-fs (loop3): Directory bread(block 73) failed [ 120.511455][ T3684] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 120.677656][ T3683] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 121.479629][ T4506] loop2: detected capacity change from 0 to 256 [ 121.615921][ T3684] usb 1-1: device descriptor read/all, error -71 [ 121.645523][ T3683] usb 5-1: Using ep0 maxpacket: 16 [ 121.755712][ T4512] netlink: 16 bytes leftover after parsing attributes in process `syz.3.193'. [ 121.769678][ T4511] raw_sendmsg: syz.0.194 forgot to set AF_INET. Fix it! [ 121.901141][ T4500] loop1: detected capacity change from 0 to 32768 [ 121.910369][ T4500] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.191 (4500) [ 121.926154][ T3683] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 121.935245][ T3683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.950640][ T3683] usb 5-1: Product: syz [ 121.957868][ T3683] usb 5-1: Manufacturer: syz [ 121.962594][ T3683] usb 5-1: SerialNumber: syz [ 121.973015][ T3683] r8152-cfgselector 5-1: config 0 descriptor?? [ 121.996460][ T4500] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.023192][ T4500] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 122.049066][ T4500] BTRFS info (device loop1): setting nodatacow, compression disabled [ 122.074072][ T4500] BTRFS info (device loop1): enabling auto defrag [ 122.081292][ T4500] BTRFS info (device loop1): max_inline at 0 [ 122.089239][ T4500] BTRFS info (device loop1): using free space tree [ 122.134756][ T4504] kvm: emulating exchange as write [ 122.295604][ T3684] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.434641][ T3638] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.456225][ T3683] r8152-cfgselector 5-1: Unknown version 0x0000 [ 122.463813][ T3683] r8152-cfgselector 5-1: bad CDC descriptors [ 122.518334][ T3683] r8152-cfgselector 5-1: Unknown version 0x0000 [ 122.545546][ T3684] usb 1-1: Using ep0 maxpacket: 8 [ 122.553778][ T3683] r8152-cfgselector 5-1: USB disconnect, device number 5 [ 122.737269][ T4546] loop3: detected capacity change from 0 to 512 [ 122.783796][ T4546] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.201: inode #1: comm syz.3.201: iget: illegal inode # [ 122.798936][ T4546] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.201: error while reading EA inode 1 err=-117 [ 122.812350][ T4546] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.201: inode #1: comm syz.3.201: iget: illegal inode # [ 122.829066][ T4546] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.201: error while reading EA inode 1 err=-117 [ 122.843783][ T4546] EXT4-fs (loop3): 1 orphan inode deleted [ 122.850100][ T3684] usb 1-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 122.859437][ T4546] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 122.868755][ T3684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.897554][ T3684] usb 1-1: Product: syz [ 122.901768][ T3684] usb 1-1: Manufacturer: syz [ 122.929148][ T3684] usb 1-1: SerialNumber: syz [ 122.941733][ T3684] usb 1-1: config 0 descriptor?? [ 123.001058][ T3684] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 123.008024][ T3876] EXT4-fs (loop3): unmounting filesystem. [ 123.301686][ T4569] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.194'. [ 123.324080][ T4511] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.194'. [ 123.497378][ T3684] pwc: Failed to set LED on/off time (-71) [ 123.516429][ T3684] pwc: send_video_command error -71 [ 123.521678][ T3684] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 123.564308][ T3684] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 123.619019][ T3684] usb 1-1: USB disconnect, device number 4 [ 123.633134][ T4578] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 123.717115][ T4578] overlayfs: failed to set xattr on upper [ 123.753458][ T4578] overlayfs: ...falling back to index=off,metacopy=off. [ 123.848113][ T4584] loop3: detected capacity change from 0 to 2048 [ 124.008281][ T4589] loop1: detected capacity change from 0 to 256 [ 124.652039][ T4589] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 124.680148][ T4586] loop2: detected capacity change from 0 to 512 [ 124.710390][ T4586] EXT4-fs: Ignoring removed bh option [ 124.750919][ T4586] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 124.911965][ T4586] EXT4-fs (loop2): 1 orphan inode deleted [ 124.935086][ T4586] EXT4-fs (loop2): 1 truncate cleaned up [ 124.980288][ T4586] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 125.058098][ T3632] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 125.752603][ T4586] EXT4-fs error (device loop2): ext4_check_all_de:655: inode #12: block 7: comm syz.2.216: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=124 fake=0 [ 125.866450][ T4586] EXT4-fs (loop2): Remounting filesystem read-only [ 125.998315][ T3645] EXT4-fs (loop2): unmounting filesystem. [ 126.131769][ T47] Bluetooth: hci5: sending frame failed (-49) [ 126.139472][ T3641] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 126.173939][ T4615] device bond1 entered promiscuous mode [ 126.180016][ T4615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.392094][ T4625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.230'. [ 127.645461][ T3684] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 127.665703][ T3685] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 127.963324][ T27] audit: type=1326 audit(1722960077.886:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4650 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d771779f9 code=0x7fc00000 [ 127.995999][ T27] audit: type=1326 audit(1722960077.916:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4650 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0d771779f9 code=0x7fc00000 [ 128.055626][ T3684] usb 5-1: Using ep0 maxpacket: 16 [ 128.079139][ T3685] usb 3-1: Using ep0 maxpacket: 32 [ 128.267037][ T3684] usb 5-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 128.279584][ T3684] usb 5-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 128.294344][ T3684] usb 5-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 128.311625][ T3685] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 128.330993][ T3684] usb 5-1: config 0 interface 0 has no altsetting 0 [ 128.497544][ T3684] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 128.543778][ T3684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.605002][ T3684] usb 5-1: Product: syz [ 128.632719][ T3684] usb 5-1: Manufacturer: syz [ 128.660522][ T3684] usb 5-1: SerialNumber: syz [ 128.695447][ T27] audit: type=1326 audit(1722960078.616:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4650 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d771779f9 code=0x7fc00000 [ 128.727823][ T3685] usb 3-1: New USB device found, idVendor=062a, idProduct=5110, bcdDevice= 0.40 [ 128.838310][ T3684] usb 5-1: config 0 descriptor?? [ 128.856884][ T3685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.864930][ T3685] usb 3-1: SerialNumber: syz [ 128.878856][ T3684] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 129.131393][ T3685] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 130.005037][ T3685] usb 5-1: USB disconnect, device number 6 [ 130.048023][ T152] usb 3-1: USB disconnect, device number 4 [ 130.322898][ T4684] netlink: 'syz.3.251': attribute type 27 has an invalid length. [ 130.702665][ T4691] loop2: detected capacity change from 0 to 512 [ 130.740743][ T4691] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 130.757302][ T4691] UDF-fs: Scanning with blocksize 512 failed [ 130.773656][ T4691] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 130.784127][ T4693] loop4: detected capacity change from 0 to 512 [ 130.806041][ T4691] UDF-fs: Scanning with blocksize 1024 failed [ 130.822195][ T4691] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 130.831798][ T4691] UDF-fs: Scanning with blocksize 2048 failed [ 130.854589][ T4691] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 130.900593][ T4693] EXT4-fs (loop4): 1 orphan inode deleted [ 130.914285][ T4693] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 130.935278][ T4691] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.965040][ T4693] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038 (0x7fffffff) [ 131.219811][ T4684] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.228692][ T4684] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.516734][ T4689] loop1: detected capacity change from 0 to 32768 [ 131.532671][ T4689] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 131.542938][ T4689] XFS (loop1): Mounting V5 Filesystem [ 131.583134][ T4699] loop2: detected capacity change from 0 to 8192 [ 131.634675][ T4689] XFS (loop1): Ending clean mount [ 131.680888][ T4699] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 131.690712][ T4689] XFS (loop1): Quotacheck needed: Please wait. [ 131.704337][ T4699] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 131.720979][ T4699] REISERFS (device loop2): using ordered data mode [ 131.732540][ T4699] reiserfs: using flush barriers [ 131.752367][ T4699] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 131.774486][ T4689] XFS (loop1): Quotacheck: Done. [ 131.828853][ T4699] REISERFS (device loop2): checking transaction log (loop2) [ 131.851034][ T4699] REISERFS (device loop2): Using r5 hash to sort names [ 131.937033][ T4699] reiserfs: enabling write barrier flush mode [ 131.945937][ T3638] XFS (loop1): Unmounting Filesystem [ 131.958408][ T4699] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 132.106185][ T3650] EXT4-fs (loop4): unmounting filesystem. [ 132.439156][ T4684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.480913][ T4684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.565631][ T3684] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 132.698846][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.705281][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.841466][ T4721] xt_socket: unknown flags 0x8 [ 132.855095][ T4721] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 132.955662][ T3684] usb 5-1: Using ep0 maxpacket: 16 [ 133.065545][ T3687] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 133.076019][ T3684] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 133.091741][ T3684] usb 5-1: config 0 has no interface number 0 [ 133.265910][ T3684] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=10.5a [ 133.299159][ T3684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.330954][ T3684] usb 5-1: Product: syz [ 133.346921][ T3684] usb 5-1: Manufacturer: syz [ 133.362590][ T3684] usb 5-1: SerialNumber: syz [ 133.424009][ T3684] usb 5-1: config 0 descriptor?? [ 133.445810][ T3687] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.467576][ T3687] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 133.613830][ T3687] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 133.631612][ T3687] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 133.795702][ T3687] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 133.820012][ C1] eth0: bad gso: type: 1, size: 1408 [ 133.845554][ T3687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.868991][ T3687] usb 2-1: Product: syz [ 133.873230][ T3687] usb 2-1: Manufacturer: syz [ 133.880836][ T3687] usb 2-1: SerialNumber: syz [ 133.896508][ T3687] usb 2-1: config 0 descriptor?? [ 133.907701][ T3684] usb 5-1: USB disconnect, device number 7 [ 133.922193][ T4723] loop2: detected capacity change from 0 to 512 [ 133.944462][ T3687] garmin_gps 2-1:0.0: Garmin GPS usb/tty converter detected [ 133.967123][ T3687] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 133.988882][ T3687] garmin_gps: probe of ttyUSB0 failed with error -8 [ 133.993825][ T4723] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 134.015841][ T4723] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 134.027629][ T4723] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 134.077427][ T4723] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 134.090758][ T4723] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e119, mo2=0000] [ 134.099479][ T4723] EXT4-fs (loop2): failed to initialize system zone (-117) [ 134.107235][ T4723] EXT4-fs (loop2): mount failed [ 134.172397][ T3682] usb 2-1: USB disconnect, device number 2 [ 134.182302][ T3682] garmin_gps 2-1:0.0: device disconnected [ 134.453241][ T4684] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.463060][ T4684] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.472244][ T4684] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.484556][ T4684] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.019100][ T4738] o2cb: This node has not been configured. [ 135.025329][ T4738] o2cb: Cluster check failed. Fix errors before retrying. [ 135.032682][ T4738] (syz.2.266,4738,1):user_dlm_register:674 ERROR: status = -22 [ 135.040393][ T4738] (syz.2.266,4738,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 135.915190][ T4747] loop3: detected capacity change from 0 to 512 [ 135.989189][ T4730] loop4: detected capacity change from 0 to 32768 [ 136.047237][ T4747] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 136.057500][ T4757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.274'. [ 136.067879][ T4730] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.265 (4730) [ 136.083745][ T4759] loop0: detected capacity change from 0 to 4096 [ 136.085664][ T4747] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038 (0x7fffffff) [ 136.128861][ T4730] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 136.139849][ T4730] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 136.149235][ T4730] BTRFS info (device loop4): using free space tree [ 136.162463][ T4761] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.255486][ T3739] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 136.302692][ T4771] loop1: detected capacity change from 0 to 1024 [ 136.370271][ T4730] BTRFS info (device loop4): enabling ssd optimizations [ 136.513203][ T4771] hfsplus: b-tree write err: -5, ino 3 [ 136.520788][ T3650] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 136.565711][ T3739] usb 3-1: Using ep0 maxpacket: 8 [ 136.594660][ T4785] hfsplus: b-tree write err: -5, ino 3 [ 136.696165][ T3739] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.763666][ T3739] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 136.823244][ T3739] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 136.926781][ T4293] hfsplus: b-tree write err: -5, ino 3 [ 137.025024][ T3876] EXT4-fs (loop3): unmounting filesystem. [ 137.076388][ T3739] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.105490][ T3739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.113568][ T3739] usb 3-1: Product: syz [ 137.145609][ T3739] usb 3-1: Manufacturer: syz [ 137.150268][ T3739] usb 3-1: SerialNumber: syz [ 137.518804][ T47] Bluetooth: hci0: unexpected event 0x31 length: 23 > 6 [ 137.558875][ T3739] cdc_ncm 3-1:1.0: skipping garbage [ 137.589691][ T3739] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 137.615794][ T3739] cdc_ncm 3-1:1.0: bind() failure [ 137.675651][ T3739] usb 3-1: USB disconnect, device number 5 [ 137.686587][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 137.722951][ T4816] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 137.729853][ T4816] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 137.751028][ T4816] vhci_hcd vhci_hcd.0: Device attached [ 137.941016][ T4808] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 137.970250][ T4808] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 138.035875][ T22] usb 17-1: new low-speed USB device number 2 using vhci_hcd [ 138.065695][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.082623][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.094559][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 138.113231][ T7] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 138.122611][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.133508][ T7] usb 4-1: config 0 descriptor?? [ 138.175686][ T3682] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 138.268438][ T4801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.282'. [ 139.018542][ T4827] loop2: detected capacity change from 0 to 128 [ 139.285392][ C0] sched: RT throttling activated [ 140.275684][ T47] Bluetooth: hci0: command tx timeout [ 140.277722][ T7] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 140.295996][ T7] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 140.306267][ T7] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 140.983704][ T7] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 141.012229][ T7] usb 4-1: USB disconnect, device number 3 [ 141.152259][ T4830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.289'. [ 141.194195][ T4817] vhci_hcd: connection reset by peer [ 141.225562][ T3682] usb 5-1: string descriptor 0 read error: -71 [ 141.231788][ T3682] usb 5-1: New USB device found, idVendor=0cf3, idProduct=20ff, bcdDevice=10.70 [ 141.285887][ T4229] vhci_hcd: stop threads [ 141.291237][ T4229] vhci_hcd: release socket [ 141.340526][ T4229] vhci_hcd: disconnect device [ 141.341087][ T3682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.400619][ T3682] usb 5-1: config 0 descriptor?? [ 141.435652][ T3682] usb 5-1: can't set config #0, error -71 [ 141.449928][ T3682] usb 5-1: USB disconnect, device number 8 [ 141.455951][ T27] audit: type=1326 audit(1722960091.376:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bc3779f9 code=0x7ffc0000 [ 141.590177][ T47] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 141.599256][ T47] Bluetooth: hci4: Injecting HCI hardware error event [ 141.613015][ T3641] Bluetooth: hci4: hardware error 0x00 [ 141.714012][ T27] audit: type=1326 audit(1722960091.376:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bc3779f9 code=0x7ffc0000 [ 141.741640][ T27] audit: type=1326 audit(1722960091.426:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe1bc3779f9 code=0x7ffc0000 [ 141.767006][ T27] audit: type=1326 audit(1722960091.426:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe1bc377a33 code=0x7ffc0000 [ 142.167479][ T27] audit: type=1326 audit(1722960091.446:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe1bc3764df code=0x7ffc0000 [ 142.578591][ T27] audit: type=1326 audit(1722960091.606:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe1bc377a87 code=0x7ffc0000 [ 142.737637][ T27] audit: type=1326 audit(1722960091.626:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1bc376390 code=0x7ffc0000 [ 142.865054][ T27] audit: type=1326 audit(1722960091.636:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe1bc37668a code=0x7ffc0000 [ 142.961040][ T27] audit: type=1326 audit(1722960091.746:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bc3779f9 code=0x7ffc0000 [ 143.059544][ T27] audit: type=1326 audit(1722960091.746:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bc3779f9 code=0x7ffc0000 [ 143.181573][ T4853] loop4: detected capacity change from 0 to 512 [ 143.335093][ T22] vhci_hcd: vhci_device speed not set [ 143.416878][ T4853] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 143.562882][ T4853] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038 (0x7fffffff) [ 144.153500][ T4860] loop3: detected capacity change from 0 to 136 [ 144.326690][ T4860] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 145.345695][ T3641] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 145.402299][ T3650] EXT4-fs (loop4): unmounting filesystem. [ 146.156463][ T3715] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 146.992559][ T4894] loop2: detected capacity change from 0 to 512 [ 146.999892][ T4894] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.058263][ T4894] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.309: invalid block [ 147.084300][ T4894] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.309: invalid indirect mapped block 10 (level 1) [ 147.099580][ T3715] usb 5-1: Using ep0 maxpacket: 32 [ 147.108336][ T4898] netlink: 40 bytes leftover after parsing attributes in process `syz.3.308'. [ 147.120677][ T4897] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 147.123912][ T4894] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.309: invalid indirect mapped block 8 (level 1) [ 147.146742][ T4894] EXT4-fs (loop2): 1 truncate cleaned up [ 147.152666][ T4894] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 147.183023][ T27] kauditd_printk_skb: 42 callbacks suppressed [ 147.183039][ T27] audit: type=1326 audit(1722960097.106:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4896 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d771779f9 code=0x7ffc0000 [ 147.265763][ T3715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.308240][ T3715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.336286][ T27] audit: type=1326 audit(1722960097.156:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4896 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f0d771779f9 code=0x7ffc0000 [ 147.378925][ T3715] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 147.419397][ T3715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.452117][ T3715] usb 5-1: config 0 descriptor?? [ 147.458254][ T27] audit: type=1326 audit(1722960097.156:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4896 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d771779f9 code=0x7ffc0000 [ 147.489674][ T27] audit: type=1326 audit(1722960097.156:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4896 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0d771779f9 code=0x7ffc0000 [ 147.527298][ T27] audit: type=1326 audit(1722960097.156:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4896 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d771779f9 code=0x7ffc0000 [ 147.557101][ T3715] hub 5-1:0.0: USB hub found [ 147.578903][ T27] audit: type=1326 audit(1722960097.166:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4896 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f0d771779f9 code=0x7ffc0000 [ 147.583831][ T3645] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2932: inode #18: comm syz-executor: corrupted xattr block 33 [ 147.627751][ T27] audit: type=1326 audit(1722960097.166:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4896 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d771779f9 code=0x7ffc0000 [ 147.663696][ T3645] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117) [ 147.683772][ T3645] EXT4-fs error (device loop2): ext4_lookup:1856: inode #16: comm syz-executor: iget: bogus i_mode (6355) [ 147.707928][ T27] audit: type=1326 audit(1722960097.166:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4896 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f0d771779f9 code=0x7ffc0000 [ 147.709436][ T3645] EXT4-fs error (device loop2): ext4_lookup:1856: inode #16: comm syz-executor: iget: bogus i_mode (6355) [ 147.730294][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.766274][ T27] audit: type=1326 audit(1722960097.166:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4896 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d771779f9 code=0x7ffc0000 [ 147.829296][ T27] audit: type=1326 audit(1722960097.166:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4896 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d771779f9 code=0x7ffc0000 [ 147.899302][ T3715] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 148.103864][ T3645] EXT4-fs (loop2): unmounting filesystem. [ 148.171681][ T4916] Cannot find set identified by id 0 to match [ 148.206538][ T3715] usbhid 5-1:0.0: can't add hid device: -71 [ 148.215048][ T3715] usbhid: probe of 5-1:0.0 failed with error -71 [ 148.303385][ T3715] usb 5-1: USB disconnect, device number 9 [ 148.511445][ T3727] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.853603][ T3727] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.037616][ T3727] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.075212][ T4923] netlink: 56 bytes leftover after parsing attributes in process `syz.0.322'. [ 149.202595][ T3727] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.632894][ T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.645313][ T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.654930][ T47] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.664444][ T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.673951][ T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 149.682563][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.730379][ T4941] ip6gretap0 speed is unknown, defaulting to 1000 [ 150.231895][ T22] ip6gretap0 speed is unknown, defaulting to 1000 [ 150.259209][ T22] ================================================================== [ 150.267313][ T22] BUG: KASAN: use-after-free in siw_query_port+0x342/0x430 [ 150.274521][ T22] Read of size 4 at addr ffff888074cb40e0 by task kworker/1:0/22 [ 150.282238][ T22] [ 150.284572][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Not tainted 6.1.103-syzkaller #0 [ 150.292555][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 150.302611][ T22] Workqueue: infiniband ib_cache_event_task [ 150.308561][ T22] Call Trace: [ 150.311854][ T22] [ 150.314782][ T22] dump_stack_lvl+0x1e3/0x2cb [ 150.319473][ T22] ? nf_tcp_handle_invalid+0x642/0x642 [ 150.324943][ T22] ? panic+0x764/0x764 [ 150.329010][ T22] ? _printk+0xd1/0x111 [ 150.333164][ T22] ? __virt_addr_valid+0x17f/0x530 [ 150.338277][ T22] ? __virt_addr_valid+0x17f/0x530 [ 150.343396][ T22] print_report+0x15f/0x4f0 [ 150.347895][ T22] ? __virt_addr_valid+0x17f/0x530 [ 150.353009][ T22] ? __virt_addr_valid+0x17f/0x530 [ 150.358128][ T22] ? __virt_addr_valid+0x45b/0x530 [ 150.363244][ T22] ? __phys_addr+0xb6/0x170 [ 150.367756][ T22] ? siw_query_port+0x342/0x430 [ 150.372607][ T22] kasan_report+0x136/0x160 [ 150.377109][ T22] ? siw_query_port+0x342/0x430 [ 150.381958][ T22] siw_query_port+0x342/0x430 [ 150.386632][ T22] ? ib_query_port+0x344/0x7c0 [ 150.391398][ T22] ib_cache_update+0x1a8/0xaf0 [ 150.396194][ T22] ? ib_cache_setup_one+0x5a0/0x5a0 [ 150.401394][ T22] ? read_lock_is_recursive+0x10/0x10 [ 150.406773][ T22] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 150.412765][ T22] ? print_irqtrace_events+0x210/0x210 [ 150.418227][ T22] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 150.424119][ T22] ib_cache_event_task+0xef/0x1e0 [ 150.429148][ T22] ? process_one_work+0x7a9/0x11d0 [ 150.434262][ T22] process_one_work+0x8a9/0x11d0 [ 150.439212][ T22] ? worker_detach_from_pool+0x260/0x260 [ 150.444854][ T22] ? _raw_spin_lock_irqsave+0x120/0x120 [ 150.450390][ T22] ? kthread_data+0x4e/0xc0 [ 150.454895][ T22] ? wq_worker_running+0x97/0x190 [ 150.459924][ T22] worker_thread+0xa47/0x1200 [ 150.464610][ T22] kthread+0x28d/0x320 [ 150.468671][ T22] ? worker_clr_flags+0x190/0x190 [ 150.473692][ T22] ? kthread_blkcg+0xd0/0xd0 [ 150.478289][ T22] ret_from_fork+0x1f/0x30 [ 150.482704][ T22] [ 150.485717][ T22] [ 150.488030][ T22] Allocated by task 3645: [ 150.492364][ T22] kasan_set_track+0x4b/0x70 [ 150.496954][ T22] __kasan_kmalloc+0x97/0xb0 [ 150.501536][ T22] __kmalloc_node+0xb3/0x230 [ 150.506227][ T22] kvmalloc_node+0x6e/0x180 [ 150.510730][ T22] alloc_netdev_mqs+0x85/0xeb0 [ 150.515496][ T22] rtnl_create_link+0x2e9/0xa30 [ 150.520350][ T22] rtnl_newlink+0x1403/0x2050 [ 150.525032][ T22] rtnetlink_rcv_msg+0x818/0xff0 [ 150.529979][ T22] netlink_rcv_skb+0x1cd/0x410 [ 150.534746][ T22] netlink_unicast+0x7d8/0x970 [ 150.539531][ T22] netlink_sendmsg+0xa26/0xd60 [ 150.544299][ T22] __sys_sendto+0x480/0x600 [ 150.548807][ T22] __x64_sys_sendto+0xda/0xf0 [ 150.553488][ T22] do_syscall_64+0x3b/0xb0 [ 150.557911][ T22] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.563823][ T22] [ 150.566140][ T22] Freed by task 3727: [ 150.570111][ T22] kasan_set_track+0x4b/0x70 [ 150.574716][ T22] kasan_save_free_info+0x27/0x40 [ 150.579741][ T22] ____kasan_slab_free+0xd6/0x120 [ 150.584762][ T22] __kmem_cache_free+0x25c/0x3c0 [ 150.589696][ T22] device_release+0x91/0x1c0 [ 150.594283][ T22] kobject_put+0x224/0x460 [ 150.598701][ T22] netdev_run_todo+0xe56/0xf40 [ 150.603484][ T22] ip6gre_exit_batch_net+0x41a/0x460 [ 150.608768][ T22] cleanup_net+0x763/0xb60 [ 150.613183][ T22] process_one_work+0x8a9/0x11d0 [ 150.618127][ T22] worker_thread+0xa47/0x1200 [ 150.622797][ T22] kthread+0x28d/0x320 [ 150.626857][ T22] ret_from_fork+0x1f/0x30 [ 150.631283][ T22] [ 150.633598][ T22] The buggy address belongs to the object at ffff888074cb4000 [ 150.633598][ T22] which belongs to the cache kmalloc-cg-4k of size 4096 [ 150.647906][ T22] The buggy address is located 224 bytes inside of [ 150.647906][ T22] 4096-byte region [ffff888074cb4000, ffff888074cb5000) [ 150.661256][ T22] [ 150.663574][ T22] The buggy address belongs to the physical page: [ 150.669996][ T22] page:ffffea0001d32c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x74cb0 [ 150.680157][ T22] head:ffffea0001d32c00 order:3 compound_mapcount:0 compound_pincount:0 [ 150.688466][ T22] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 150.696452][ T22] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801284c280 [ 150.705026][ T22] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 150.713618][ T22] page dumped because: kasan: bad access detected [ 150.720029][ T22] page_owner tracks the page as allocated [ 150.725731][ T22] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3638, tgid 3638 (syz-executor), ts 63481747640, free_ts 39442282828 [ 150.747080][ T22] post_alloc_hook+0x18d/0x1b0 [ 150.751834][ T22] get_page_from_freelist+0x322e/0x33b0 [ 150.757369][ T22] __alloc_pages+0x28d/0x770 [ 150.761951][ T22] alloc_slab_page+0x6a/0x150 [ 150.766623][ T22] new_slab+0x84/0x2d0 [ 150.770689][ T22] ___slab_alloc+0xc20/0x1270 [ 150.775362][ T22] __kmem_cache_alloc_node+0x19f/0x260 [ 150.780821][ T22] kmalloc_trace+0x26/0xe0 [ 150.785229][ T22] ipv6_add_dev+0x5a7/0x1180 [ 150.789823][ T22] addrconf_notify+0x7a6/0xf60 [ 150.794576][ T22] raw_notifier_call_chain+0xd0/0x170 [ 150.799942][ T22] call_netdevice_notifiers+0x145/0x1b0 [ 150.805494][ T22] register_netdevice+0x12f2/0x1720 [ 150.810701][ T22] rtnl_newlink+0x14e3/0x2050 [ 150.815372][ T22] rtnetlink_rcv_msg+0x818/0xff0 [ 150.820326][ T22] netlink_rcv_skb+0x1cd/0x410 [ 150.825103][ T22] page last free stack trace: [ 150.829764][ T22] free_unref_page_prepare+0xf63/0x1120 [ 150.835301][ T22] free_unref_page+0x33/0x3e0 [ 150.839971][ T22] __unfreeze_partials+0x1b7/0x210 [ 150.845083][ T22] put_cpu_partial+0x17b/0x250 [ 150.849844][ T22] qlist_free_all+0x76/0xe0 [ 150.854339][ T22] kasan_quarantine_reduce+0x156/0x170 [ 150.859794][ T22] __kasan_slab_alloc+0x1f/0x70 [ 150.864634][ T22] slab_post_alloc_hook+0x52/0x3a0 [ 150.869740][ T22] kmem_cache_alloc+0x10c/0x2d0 [ 150.874588][ T22] getname_flags+0xb8/0x4f0 [ 150.879090][ T22] __x64_sys_newfstatat+0x130/0x1e0 [ 150.884286][ T22] do_syscall_64+0x3b/0xb0 [ 150.888695][ T22] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.894605][ T22] [ 150.896924][ T22] Memory state around the buggy address: [ 150.902546][ T22] ffff888074cb3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 150.910605][ T22] ffff888074cb4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 150.918673][ T22] >ffff888074cb4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 150.926726][ T22] ^ [ 150.933910][ T22] ffff888074cb4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 150.941976][ T22] ffff888074cb4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 150.950043][ T22] ================================================================== [ 150.958179][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.181496][ T22] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 151.188846][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Not tainted 6.1.103-syzkaller #0 [ 151.196819][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 151.206985][ T22] Workqueue: infiniband ib_cache_event_task [ 151.212885][ T22] Call Trace: [ 151.216161][ T22] [ 151.219091][ T22] dump_stack_lvl+0x1e3/0x2cb [ 151.223775][ T22] ? nf_tcp_handle_invalid+0x642/0x642 [ 151.229237][ T22] ? panic+0x764/0x764 [ 151.233301][ T22] ? preempt_schedule_common+0xa6/0xd0 [ 151.238769][ T22] ? vscnprintf+0x59/0x80 [ 151.243098][ T22] panic+0x318/0x764 [ 151.246988][ T22] ? check_panic_on_warn+0x1d/0xa0 [ 151.252099][ T22] ? memcpy_page_flushcache+0xfc/0xfc [ 151.257471][ T22] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 151.263452][ T22] ? _raw_spin_unlock+0x40/0x40 [ 151.268302][ T22] ? print_report+0x4a3/0x4f0 [ 151.272980][ T22] check_panic_on_warn+0x7e/0xa0 [ 151.277917][ T22] ? siw_query_port+0x342/0x430 [ 151.282765][ T22] end_report+0x66/0x110 [ 151.287008][ T22] kasan_report+0x143/0x160 [ 151.291508][ T22] ? siw_query_port+0x342/0x430 [ 151.296359][ T22] siw_query_port+0x342/0x430 [ 151.301041][ T22] ? ib_query_port+0x344/0x7c0 [ 151.305808][ T22] ib_cache_update+0x1a8/0xaf0 [ 151.310578][ T22] ? ib_cache_setup_one+0x5a0/0x5a0 [ 151.315777][ T22] ? read_lock_is_recursive+0x10/0x10 [ 151.321156][ T22] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 151.327142][ T22] ? print_irqtrace_events+0x210/0x210 [ 151.332604][ T22] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 151.338496][ T22] ib_cache_event_task+0xef/0x1e0 [ 151.343518][ T22] ? process_one_work+0x7a9/0x11d0 [ 151.348644][ T22] process_one_work+0x8a9/0x11d0 [ 151.353587][ T22] ? worker_detach_from_pool+0x260/0x260 [ 151.359223][ T22] ? _raw_spin_lock_irqsave+0x120/0x120 [ 151.364764][ T22] ? kthread_data+0x4e/0xc0 [ 151.369275][ T22] ? wq_worker_running+0x97/0x190 [ 151.374304][ T22] worker_thread+0xa47/0x1200 [ 151.379003][ T22] kthread+0x28d/0x320 [ 151.383065][ T22] ? worker_clr_flags+0x190/0x190 [ 151.388095][ T22] ? kthread_blkcg+0xd0/0xd0 [ 151.392684][ T22] ret_from_fork+0x1f/0x30 [ 151.397111][ T22] [ 151.400484][ T22] Kernel Offset: disabled [ 151.404807][ T22] Rebooting in 86400 seconds..