last executing test programs: 46.678140195s ago: executing program 2 (id=2787): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000003140)="30d5316e5a9f82afc05e78e1b262faca0f4e8a434c2bc7787c31161515847a9b", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000006180)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 46.178331711s ago: executing program 2 (id=2793): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@i_version}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) llistxattr(&(0x7f00000004c0)='./file1\x00', 0x0, 0x0) 45.293266415s ago: executing program 2 (id=2801): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000200), 0xc, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x3, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 42.532306162s ago: executing program 2 (id=2819): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@int=0x10000000, 0x4) sendto$inet6(r0, &(0x7f0000000580)="03", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 30.330639324s ago: executing program 4 (id=2878): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x3, 0x2, 0x101}, 0x14}}, 0x0) r2 = dup2(r1, r0) syz_genetlink_get_family_id$fou(&(0x7f0000000b40), r2) 29.760689361s ago: executing program 0 (id=2881): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000140)=0x10) 29.552921092s ago: executing program 4 (id=2882): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/config', 0x0, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/39, 0x27) getdents(r1, 0x0, 0x58) 29.298633069s ago: executing program 0 (id=2884): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x30, r0, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x4}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}]}]}, 0x30}}, 0x0) 28.96093591s ago: executing program 4 (id=2886): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setgroups(0x0, 0x0) getgroups(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x200000, &(0x7f0000000440)={[{}]}, 0x0, 0x25b, &(0x7f0000000580)="$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") 28.791715151s ago: executing program 0 (id=2887): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0/file0', [{0x20, '/\xf4'}, {0x20, 'Q\x84\xf6ui\xfa\xf5\x16i\x859o\xe5\x13\xd5gV\x04\x00\x98\xb0\bQ+\xe2G\xa1\x1e\x01\xa9\xd6w\xdf\xa6\x9d\xcc<\x86\xfd\x18\x99\x19\xed\xc2\xdc\xf4\xbdV\xfeF)T\xb6\xc6\v`\xbf\xec2\xf5\x12R\xa1\x18\x9a<\x8fx\xf4\xcc\x18\xfc\xdb\x0e\xe7\xde^\x88vN\xe0\xe4P\x1dj\xd6&7\x7f\xe82\x92w\x12\t\xff\x19$\x93\xd5\xa4\xe2}\x9aA9p\xffk0\x8c\xc3\xae[n1\xb4\xd7\xe6\xa4\xc2\x86M\x83\x1d\xd7\x84\xa4\x85n(\xd3\x95\x82\xe0\xff\x89=\xe6\xceM\x12'}, {0x20, '/dev/nullb0\x00'}, {0x20, '\x9e\xc8\xb2\x17\xa1;\x85\x1e\xa3'}, {0x20, '+{[{#'}, {0x20, '\t\x00\x00\x00\x00\x00\x00\x00\xb2%}\x88\xd0\xfd\xa3\xf7i\x00!\x00J\xd1\xa7\xb1\xb1\xae\x1b\xb4\xf2\x985\xe6M5Px\xbe\x00'/47}, {}, {0x20, '\xfe]\xe9a<$\x01)\xa3\x03D%\x06\xf9}iv\xfc\xe0\xc7s\xc1\xa5c\xa4\xfd\xb8\xea\xe5\x9a\x82w\xc6\\]\x8cB\xfb\xea\xbd\xe3\x8c@\x8aqX\xcd\xf5?\xe6\xa2z\xbdPF_\x01K5\xbf\xc0\x83=\xa9]S\xe2`\x02j;\xce\x8a\x9fY\xdc\x90L\x1f\x9cS\x83\xb4\xc3\xfb\xe9$\x80\xbd\x85\x8bu-a\x9a\xb3\xb0{\xed\xcc\xdd\xeeG\xeb\x98\xb2\xfa\xc8\xa1\x04\xd5N\x9f\xda\x95\xf8\x8c\x92v\xf3\xf6I\xeb6\xe9`\xcbt\x0f`\xb3dl\x0f\x8e\x93\x10\x97n@\xc4\xcb\xc6\x80\x17O\x8dM#x\xe2\xe9T\xda\x1d\xe6\xb1\x1b\x06\x89\x94Q\xcb\x8f\x92N\xade\xf9l\xca\x81\xd3\xd1\x84`6\xed\x98\x9a\x90:\x13\xdb\x8f\x87\xd6\xe8w\xfdb\x17}\x14*z\x98\xb3\x96\x9dW\xa7\x81\x0e\x11Q3\xc2\xbfx\x94\xbb\x13\x9b\xd2\xec/\xfac^\xa2\x8e8\xbeM\x11\xcb\x89P\xba\xd9E}\xe4\xa7M~?\xbdiMh\xce\xb2\b\x9d\xf0\xbd\xc5\xa7=A\xc9\xf6\x9c\\\x9c\xf0\xaa=\xb7\x83\x80\x10.%\t\xed\xb6\xacP\"\a\xc6\x8a\xf6GB\xd2a\x83\xa4\xa4\x1bRO\x1a\xe2N\xe6\xc8\xf2Cm\xb0\xe7\xeb\xcf\xc3\xba\xbd\xf4\xde\x8aZ@\xcd\xc9\xcbLJi8\x04q+\xf9x\xeas\xb2\xa1D\xd5\xc7\xfa\x919\x93_\xc7/:R2\xc5\xc0\xb4\"\x85\xe8THI$\xe5\xac\xb7\x13\xb2\xa5\x93\xbf\x83g5.\xb9\xd0\x89\xef\x8f\r\xa2\xfe\x90\x1b\xc8['}]}, 0x263) ioctl$BLKRRPART(r1, 0x125f, 0x0) 28.37127042s ago: executing program 4 (id=2890): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@noblock_validity}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@norecovery}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8001}}, {@orlov}, {@nogrpid}, {@nobh}, {@nomblk_io_submit}]}, 0x1, 0x57c, &(0x7f0000003300)="$eJzs3U1rVNcbAPDnThLf/38jiLRdlICLWqwTk/TFQkG7LK1UaPd2SK5BMnEkMxGTCuqibropUiilQukH6L5L6b74KYRWkCKhXXSTcid3dEwyeXPqjN7fD66eM/cm55w59zl57twZJoDCGsn+KUW8GhHfJBEH2/YNRr5zZOW4pUfXJrMtieXlz/5MIskfax2f5P/vzyuvRMSvX0UcL61tt76wOFOpVtO5vD7amL08Wl9YPHFxtjKdTqeXxicmTr0zMf7+e+92baxvnvv7+0/vfnTq66NL3/384NDtJM7EgXxf+ziewY32ykiM5M/JUJxZdeBYFxrrJ0mvO8CODORxPhTZGnAwBvKoB15+1yNiGSioRPxDQbXygNa1fZeug18YDz9cuQBaO/7BlddGYk/z2mjfUvLUlVF2vTvchfazNn75487tbItNXoe43oX2AFpu3IyIk4ODa9e/JF//du5k88XjzK6Ox6xuo2h/f6CX7mb5z1vr5T+lx/lPrJP/7F8ndndi8/gvPehCMx1l+d8H6+a/j29aDQ/ktf81c76h5MLFanoyIv4fEcdiaHdW3+h+zqml+8ud9rXnf9mWtd/KBfN+PBjc/fTPTFUalWcZc7uHNyNee5L/JrFm/d/TzHVXz3/2fJzbYhtH0juvd9q3+fjbdT8DXv4p4o115//JHa1k4/uTo83zYbR1Vqz1160j9zq1v73xd182//s2Hv9w0n6/tr79Nn7c80/aad9Oz/9dyefNciuzuFppNObGInYln6x9fPzJz7bqreOz8R87uvH6t975vzcivtji+G8dvtXx0H6Y/6ltzf/2C/c//vKHTu1vbf7fbpaO5Y9sZf3bagef5bkDAAAAAACAflOKiAORlMqPy6VSubzy/o7Dsa9UrdUbxy/U5i9NRfOzssMxVGrd6T7Y9n6Isfz9sK36+Kr6REQciohvB/Y26+XJWnWq14MHAAAAAAAAAAAAAAAAAACAPrG/w+f/M78P9Lp3wH/OV35DcW0a/934piegL/n7D8Ul/qG4xD8Ul/iH4hL/UFziH4pL/ENxNeP/3m+97gYAAAAAAAAAAAAAAAAAAAAAAAAAAAC8LM6dPZtty0uPrk1m9akrC/MztSsnptL6THl2frI8WZu7XJ6u1aaraXmyNrvZ76vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQcxkVAAAAAAAAAAAAAAAAAAAAvFjqC4szlWo1nVPoWDgdfdGNHReSzWb5dH4y7KiJwd4P8LkVkkiiD7rxXAo9XpgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA//8BzzPN") r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast1, 0x5}}, {{0xa, 0x3, 0x80, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) 28.052279433s ago: executing program 0 (id=2891): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 27.773552008s ago: executing program 4 (id=2893): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) 27.620384117s ago: executing program 0 (id=2895): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setreuid(0xee01, 0x0) 27.240551414s ago: executing program 0 (id=2898): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x7a, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x17, 0x0, "d86ac46a073843d9f8060941f3d77262614c3cd1ba8b023fc00414f10c2b7974289520ce79fef70f5a2483620aef97999c7e0f07caa2360fa1374ae1dea4978f54b437d900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000003640)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0xf, 0x0, "55c03a88cd9efb99f0c17f9c4c74dcd723feb91a01ba2010116a8f4b6ee6f91b3075b06618b54643483981f2b9a46786fa1ba67bc97a02d6b0b4d20c606a80f0ab44c1c34686f5515a56b38147f0a9da"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 26.180057678s ago: executing program 4 (id=2901): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x2, 0xd59f80, 0x196f, 0x100, 0x19ef, 0x2800, 0x5, 0x2800, 0x2, 0x3, 0xbb6, 0x16, 0x10, {0x81, 0xfffffff8}, 0xd0, 0x9}}) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, 0x0) 24.804206233s ago: executing program 2 (id=2820): r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000240)=@nl=@proc}) open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) io_uring_enter(r0, 0x7ba2, 0x0, 0x0, 0x0, 0xffffffffffffff80) 24.208504185s ago: executing program 2 (id=2906): r0 = gettid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x7fffffe, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00', {}, {}, 0x0, 0xff03}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) tkill(r0, 0x11) rt_sigaction(0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) 3.023935728s ago: executing program 1 (id=2947): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0xb, &(0x7f0000000500)=ANY=[], 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x40095505, 0x0) 3.00416453s ago: executing program 3 (id=2948): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x54}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.810059861s ago: executing program 3 (id=2949): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 2.080443275s ago: executing program 1 (id=2950): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000980)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 1.738489313s ago: executing program 3 (id=2951): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={[{@stats}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x100800001) 1.608758038s ago: executing program 1 (id=2952): r0 = fanotify_init(0x20, 0x8000) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x641, 0x800101b, r1, 0x0) fanotify_mark(r0, 0x1, 0x48001023, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 1.169179746s ago: executing program 3 (id=2953): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x61a895d}, &(0x7f00000000c0)=0x8) 1.134876774s ago: executing program 1 (id=2954): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000800)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0b585d5463a40298459e6ebb94bf2bf363c3a6d0a6c38b5", 0x2f5}, {&(0x7f0000000bc0)="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", 0x25a}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf", 0x2d}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) 711.075158ms ago: executing program 3 (id=2955): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000000)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @local}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000200)={0x1, 0x0, 0x1, 0x5, @vifc_lcl_addr=@loopback, @rand_addr=0x64010302}, 0x10) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast1, @multicast2, 0x0, "b200a06a95c980a6154dfb1e5c22cc42e3c374637bf5d25333abb4ddbe47fa66"}, 0x3c) 478.986594ms ago: executing program 1 (id=2956): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r1, &(0x7f0000000240)=0x3, 0x6) 4.527565ms ago: executing program 1 (id=2957): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4c, 0x0) 0s ago: executing program 3 (id=2958): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x1, 0x0, @private1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x6ff9, @private2}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) kernel console output (not intermixed with test programs): 18011][T10829] FAT-fs (loop3): Directory bread(block 69) failed [ 598.325089][T10829] FAT-fs (loop3): Directory bread(block 70) failed [ 598.331924][T10829] FAT-fs (loop3): Directory bread(block 71) failed [ 598.338925][T10829] FAT-fs (loop3): Directory bread(block 72) failed [ 598.345796][T10829] FAT-fs (loop3): Directory bread(block 73) failed [ 598.723921][ T29] audit: type=1326 audit(1729463869.673:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10843 comm="syz.4.2141" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe36e17dff9 code=0x0 [ 599.154075][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 599.210752][T10711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.314222][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 599.327642][ T25] usb 3-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66 [ 599.337328][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.393039][ T25] usb 3-1: config 0 descriptor?? [ 599.441430][ T25] usb 3-1: invalid MIDI EP [ 599.446814][ T25] usb 3-1: snd-bcd2000: error during probing [ 599.454923][ T25] snd-bcd2000 3-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 599.712253][T10711] veth0_vlan: entered promiscuous mode [ 599.807127][T10711] veth1_vlan: entered promiscuous mode [ 600.063278][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2146'. [ 600.074627][T10859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2146'. [ 600.155164][T10711] veth0_macvtap: entered promiscuous mode [ 600.232512][T10711] veth1_macvtap: entered promiscuous mode [ 600.303548][ T25] usb 3-1: USB disconnect, device number 11 [ 600.403226][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.418350][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.433322][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.445106][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.455454][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.466894][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.477493][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.488266][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.498484][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.509215][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.523213][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.538841][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.550037][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.561709][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.571857][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.583287][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.597383][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.608463][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.633634][T10711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.655898][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.666719][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.676853][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.687568][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.697772][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.711267][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.725664][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.741379][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.752560][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.763354][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.775666][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.788715][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.799213][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.809941][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.820055][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.834734][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.849657][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.861447][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.876796][T10711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.966283][T10711] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.975742][T10711] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.984896][T10711] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.994019][T10711] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.247833][T10884] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 602.261313][T10884] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 602.275917][T10884] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 602.286670][T10884] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 602.351421][T10884] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 602.365189][T10884] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 602.379757][T10884] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 602.392769][T10884] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 602.440168][T10884] geneve2: entered promiscuous mode [ 602.446040][T10884] geneve2: entered allmulticast mode [ 603.254062][ T5245] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 603.452857][ T5245] usb 2-1: Using ep0 maxpacket: 8 [ 603.494188][ T5245] usb 2-1: config 0 has an invalid interface number: 6 but max is 2 [ 603.505747][ T5245] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 603.515477][ T5245] usb 2-1: config 0 has an invalid interface number: 49 but max is 2 [ 603.523909][ T5245] usb 2-1: config 0 has no interface number 0 [ 603.530240][ T5245] usb 2-1: config 0 has no interface number 1 [ 603.537162][ T5245] usb 2-1: config 0 has no interface number 2 [ 603.543552][ T5245] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 603.553256][ T5245] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.606972][ T5245] usb 2-1: config 0 descriptor?? [ 603.829607][ T5245] qcserial 2-1:0.6: Qualcomm USB modem converter detected [ 604.032405][ T5245] qcserial 2-1:0.49: Qualcomm USB modem converter detected [ 604.247411][ T5245] usb 2-1: USB disconnect, device number 6 [ 604.255227][ T5245] qcserial 2-1:0.6: device disconnected [ 604.264362][ T5245] qcserial 2-1:0.49: device disconnected [ 604.411284][T10914] loop3: detected capacity change from 0 to 1024 [ 604.470414][T10914] EXT4-fs: Ignoring removed orlov option [ 604.476682][T10914] EXT4-fs: Ignoring removed nobh option [ 604.643379][T10914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 605.009930][ T6586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.754488][ T5245] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 605.926428][ T5245] usb 3-1: Using ep0 maxpacket: 8 [ 605.975839][ T5245] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 605.986023][ T5245] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.036486][ T5245] usb 3-1: config 0 descriptor?? [ 606.321200][ T3322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.329452][ T3322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.553255][ T4228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.565216][ T4228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.578490][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 606.805444][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.816901][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.827276][ T10] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 606.837059][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.907667][ T10] usb 5-1: config 0 descriptor?? [ 607.133415][ T5245] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 607.144951][ T5245] asix 3-1:0.0: probe with driver asix failed with error -71 [ 607.189637][ T5245] usb 3-1: USB disconnect, device number 12 [ 607.337276][ T10] hid-multitouch 0003:1FD2:6007.0011: unknown main item tag 0x0 [ 607.404025][ T10] hid-multitouch 0003:1FD2:6007.0011: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 607.557589][T10960] batadv_slave_1: entered promiscuous mode [ 607.627256][ T10] usb 5-1: USB disconnect, device number 14 [ 607.628530][T10958] batadv_slave_1: left promiscuous mode [ 607.710326][T10956] loop3: detected capacity change from 0 to 2048 [ 607.881556][T10964] netlink: 296 bytes leftover after parsing attributes in process `syz.0.2184'. [ 608.060179][T10956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.592384][ T6586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.754073][ T1589] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 612.974165][ T1589] usb 4-1: Using ep0 maxpacket: 8 [ 613.017552][ T1589] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 613.029955][ T1589] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 613.041153][ T1589] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 613.051385][ T1589] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 613.061814][ T1589] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 613.075567][ T1589] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 613.085851][ T1589] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.496241][ T1589] usb 4-1: usb_control_msg returned -32 [ 613.502269][ T1589] usbtmc 4-1:16.0: can't read capabilities [ 615.347499][T11087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2238'. [ 615.723581][ T10] usb 4-1: USB disconnect, device number 16 [ 616.237918][T11097] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2242'. [ 616.247684][T11097] bond0: option primary_reselect: invalid value (36) [ 617.980786][T11114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2250'. [ 618.211114][T11101] Process accounting resumed [ 618.217899][T11112] loop3: detected capacity change from 0 to 2048 [ 619.584646][T11116] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 619.598527][T11107] delete_channel: no stack [ 620.531302][T11136] loop3: detected capacity change from 0 to 128 [ 621.088011][T11143] ------------[ cut here ]------------ [ 621.094712][T11143] refcount_t: underflow; use-after-free. [ 621.106307][T11143] WARNING: CPU: 0 PID: 11143 at lib/refcount.c:28 refcount_warn_saturate+0x2cb/0x370 [ 621.121103][T11143] Modules linked in: [ 621.126579][T11143] CPU: 0 UID: 0 PID: 11143 Comm: syz.3.2263 Not tainted 6.12.0-rc3-syzkaller-00454-gdb87114dcf13 #0 [ 621.137753][T11143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 621.148230][T11143] RIP: 0010:refcount_warn_saturate+0x2cb/0x370 [ 621.154880][T11143] Code: f6 91 e8 a8 ca 25 fc c6 00 00 c6 05 12 2d ce 0b 01 90 49 c7 86 80 0c 00 00 00 00 00 00 48 c7 c7 0d cb 16 91 e8 c6 3e 32 fb 90 <0f> 0b 90 90 e9 c4 fe ff ff 8b 3a e8 35 d7 25 fc f6 c3 01 0f 85 83 [ 621.175086][T11143] RSP: 0018:ffff88806c64b8d8 EFLAGS: 00010287 [ 621.181475][T11143] RAX: ffffffff815a6d11 RBX: 0000000000000000 RCX: 0000000000040000 [ 621.189871][T11143] RDX: ffffc9000b663000 RSI: 00000000000012ed RDI: 00000000000012ee [ 621.202195][T11143] RBP: ffff88806c64b8f0 R08: ffffffff815a6cef R09: 0000000000000000 [ 621.211784][T11143] R10: ffff88806be4b520 R11: 0000000000000004 R12: 0000000000000000 [ 621.223880][T11143] R13: ffff888115052bf8 R14: ffff888115052bf8 R15: 0000000000000003 [ 621.233372][T11143] FS: 00007fbfd93016c0(0000) GS:ffff88813fc00000(0000) knlGS:0000000000000000 [ 621.242898][T11143] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 621.249877][T11143] CR2: 0000001b2f71eff8 CR3: 000000006c5b0000 CR4: 00000000003526f0 [ 621.258297][T11143] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 621.266628][T11143] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 621.275011][T11143] Call Trace: [ 621.278483][T11143] [ 621.281630][T11143] ? show_trace_log_lvl+0x268/0x3d0 [ 621.287312][T11143] ? sk_skb_reason_drop+0x154/0x480 [ 621.292846][T11143] ? show_regs+0xb4/0xe0 [ 621.297667][T11143] ? __warn+0x2c7/0x780 [ 621.306051][T11143] ? refcount_warn_saturate+0x2cb/0x370 [ 621.311933][T11143] ? report_bug+0x929/0xbd0 [ 621.325150][T11143] ? refcount_warn_saturate+0x2cb/0x370 [ 621.331035][T11143] ? handle_bug+0x6a/0x90 [ 621.335851][T11143] ? exc_invalid_op+0x1f/0x50 [ 621.340838][T11143] ? asm_exc_invalid_op+0x1f/0x30 [ 621.346373][T11143] ? __warn_printk+0x43f/0x470 [ 621.351433][T11143] ? __warn_printk+0x461/0x470 [ 621.356694][T11143] ? refcount_warn_saturate+0x2cb/0x370 [ 621.362553][T11143] ? refcount_warn_saturate+0x2ca/0x370 [ 621.368518][T11143] sk_skb_reason_drop+0x154/0x480 [ 621.373952][T11143] j1939_session_put+0x2a0/0x620 [ 621.379217][T11143] j1939_sk_sendmsg+0x1f2d/0x2740 [ 621.384760][T11143] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 621.390451][T11143] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 621.397322][T11143] __sock_sendmsg+0x30f/0x380 [ 621.402331][T11143] ____sys_sendmsg+0x877/0xb60 [ 621.411431][T11143] ___sys_sendmsg+0x28d/0x3c0 [ 621.421846][T11143] ? kmsan_get_metadata+0x13e/0x1c0 [ 621.428505][T11143] ? __rcu_read_unlock+0x7b/0xe0 [ 621.433892][T11143] ? __fget_files+0x4f5/0x5c0 [ 621.438906][T11143] ? kmsan_get_metadata+0x13e/0x1c0 [ 621.444547][T11143] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 621.450649][T11143] __x64_sys_sendmsg+0x300/0x4a0 [ 621.456075][T11143] x64_sys_call+0x2da0/0x3ba0 [ 621.461074][T11143] do_syscall_64+0xcd/0x1e0 [ 621.465983][T11143] ? clear_bhb_loop+0x25/0x80 [ 621.470946][T11143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.477359][T11143] RIP: 0033:0x7fbfd857dff9 [ 621.482033][T11143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.502077][T11143] RSP: 002b:00007fbfd9301038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 621.516866][T11143] RAX: ffffffffffffffda RBX: 00007fbfd8735f80 RCX: 00007fbfd857dff9 [ 621.530576][T11143] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 621.540024][T11143] RBP: 00007fbfd85f0296 R08: 0000000000000000 R09: 0000000000000000 [ 621.548438][T11143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.556773][T11143] R13: 0000000000000000 R14: 00007fbfd8735f80 R15: 00007ffc27e0caa8 [ 621.565303][T11143] [ 621.568521][T11143] ---[ end trace 0000000000000000 ]--- [ 622.424168][ T1589] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 622.604043][ T1589] usb 3-1: Using ep0 maxpacket: 16 [ 622.656644][ T1589] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 622.666472][ T1589] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.674950][ T1589] usb 3-1: Product: syz [ 622.679354][ T1589] usb 3-1: Manufacturer: syz [ 622.684367][ T1589] usb 3-1: SerialNumber: syz [ 622.691409][ T25] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 622.709593][ T1589] usb 3-1: config 0 descriptor?? [ 623.723242][ T4891] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 623.733861][ T1589] peak_usb 3-1:0.0: PEAK-System PCAN-Chip USB v92 fw v159.0.0 (1 channels) [ 623.745538][ T1589] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 623.754276][ T1589] peak_usb 3-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 623.769276][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 624.724927][T11172] netlink: 'syz.2.2277': attribute type 21 has an invalid length. [ 624.726294][ T1589] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 624.732973][T11172] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.2277'. [ 624.750980][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.762489][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.772642][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 624.789220][ T25] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 624.804754][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.347355][ T25] usb 1-1: config 0 descriptor?? [ 625.353985][ T1589] usb 3-1: USB disconnect, device number 13 [ 625.447209][ T4891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.458833][ T4891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.469254][ T4891] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 625.478940][ T4891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.568526][ T4891] usb 4-1: config 0 descriptor?? [ 625.894396][ T4891] usb 4-1: can't set config #0, error -71 [ 625.916823][ T4891] usb 4-1: USB disconnect, device number 17 [ 625.934721][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 625.941351][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 625.953579][ T25] usb 1-1: USB disconnect, device number 12 [ 626.096777][ T51] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 626.156866][ T51] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 626.168286][ T51] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 626.285636][ T51] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 626.293828][T11185] loop3: detected capacity change from 0 to 512 [ 626.316886][T11183] ebt_among: src integrity fail: 300 [ 626.364632][ T51] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 626.410899][ T51] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 626.635785][T11185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.654834][T11185] ext4 filesystem being mounted at /375/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 626.924433][T11185] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.2282: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 627.090543][T11185] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2282: bg 0: block 18: invalid block bitmap [ 627.165382][T11185] Quota error (device loop3): write_blk: dquota write failed [ 627.173487][T11185] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 627.185270][T11185] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.2282: Failed to acquire dquot type 1 [ 627.587180][T11178] chnl_net:caif_netlink_parms(): no params data found [ 627.599496][ T8] kernel write not supported for file /snd/seq (pid: 8 comm: kworker/0:0) [ 627.892139][ T6586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.605090][T11224] netlink: 'syz.3.2297': attribute type 4 has an invalid length. [ 628.645800][ T5198] Bluetooth: hci10: command tx timeout [ 629.112363][T11233] veth1_macvtap: entered allmulticast mode [ 629.127390][T11178] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.135338][T11178] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.143285][T11178] bridge_slave_0: entered allmulticast mode [ 629.153081][T11178] bridge_slave_0: entered promiscuous mode [ 629.269580][T11178] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.277464][T11178] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.286108][T11178] bridge_slave_1: entered allmulticast mode [ 629.298897][T11178] bridge_slave_1: entered promiscuous mode [ 629.521528][T11240] rdma_op ffff88806c656180 conn xmit_rdma 0000000000000000 [ 629.677216][T11178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.702130][T11178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.896642][T11178] team0: Port device team_slave_0 added [ 629.957614][T11178] team0: Port device team_slave_1 added [ 630.067744][T11178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.075182][T11178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.101918][T11178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.190384][T11178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.198839][T11178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.224932][ C1] vkms_vblank_simulate: vblank timer overrun [ 630.232258][T11178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.653008][T11178] hsr_slave_0: entered promiscuous mode [ 630.685532][T11178] hsr_slave_1: entered promiscuous mode [ 630.705090][ T5197] Bluetooth: hci1: command 0x0406 tx timeout [ 630.711335][ T5197] Bluetooth: hci10: command tx timeout [ 630.729061][T11178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 630.741084][T11178] Cannot create hsr debugfs directory [ 631.841993][T11178] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.869837][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 632.097356][ T10] usb 2-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=80.b1 [ 632.106984][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.115338][ T10] usb 2-1: Product: syz [ 632.119725][ T10] usb 2-1: Manufacturer: syz [ 632.124776][ T10] usb 2-1: SerialNumber: syz [ 632.207243][ T10] usb 2-1: config 0 descriptor?? [ 632.223510][ T10] usb 2-1: Found UVC 0.00 device syz (1bcf:0b40) [ 632.230552][ T10] usb 2-1: Forcing UVC version to 1.0a [ 632.236472][ T10] usb 2-1: No valid video chain found. [ 632.276986][T11269] block nbd2: shutting down sockets [ 632.297401][T11178] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.600894][T11178] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.737860][T11178] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.798756][ T5198] Bluetooth: hci10: command tx timeout [ 632.895339][ T10] usb 2-1: USB disconnect, device number 7 [ 633.271662][ T29] audit: type=1326 audit(1729463904.223:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11285 comm="syz.3.2323" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfd857dff9 code=0x0 [ 633.792964][T11178] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 633.852560][T11178] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 633.887313][T11178] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 633.925061][T11178] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 634.376288][T11178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.455621][T11178] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.585000][T11178] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 634.595967][T11178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 634.651082][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.658821][ T3322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.684494][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.692121][ T3322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.955911][ T5198] Bluetooth: hci10: command tx timeout [ 636.379923][T11178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.418394][T11320] input: syz0 as /devices/virtual/input/input23 [ 638.172991][T11178] veth0_vlan: entered promiscuous mode [ 638.253724][T11178] veth1_vlan: entered promiscuous mode [ 638.569532][T11178] veth0_macvtap: entered promiscuous mode [ 638.651255][T11178] veth1_macvtap: entered promiscuous mode [ 638.841051][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.851976][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.862242][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.877056][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.887567][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.898265][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.909064][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.927367][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.946704][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.958549][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.968678][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.979405][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.992224][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.003100][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.015632][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.035521][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.046753][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.057584][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.067826][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.078582][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.093588][T11178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.168725][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.179567][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.189699][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.200408][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.210585][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.225232][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.240207][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.251980][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.262127][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.273380][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.283535][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.294463][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.304578][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.315265][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.329118][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.340976][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.359284][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.371163][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.381264][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.392002][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.407705][T11178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.628986][T11178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.642476][T11178] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.656847][T11178] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.668411][T11178] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.969414][ T51] Bluetooth: hci7: command 0x0406 tx timeout [ 642.437548][ T3322] tipc: Subscription rejected, illegal request [ 643.407359][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880689bc600: rx timeout, send abort [ 643.645016][ T25] IPVS: starting estimator thread 0... [ 643.680065][T11399] tipc: Started in network mode [ 643.685586][T11399] tipc: Node identity ac1414aa, cluster identity 4711 [ 643.695281][T11399] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 643.702527][T11399] tipc: Enabled bearer , priority 10 [ 643.774302][T11401] IPVS: using max 240 ests per chain, 12000 per kthread [ 643.823896][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 643.915982][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880689bc600: abort rx timeout. Force session deactivation [ 643.963910][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 644.103892][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 644.243901][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 644.396044][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 644.533870][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 644.673851][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 644.814718][ T8] tipc: Node number set to 2886997162 [ 644.953852][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 645.233952][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 645.253447][T11431] tap0: tun_chr_ioctl cmd 1074025678 [ 645.259458][T11431] tap0: group set to 0 [ 645.652973][ T29] audit: type=1326 audit(1729463916.603:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.0.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf9b7dff9 code=0x7ffc0000 [ 645.782330][ T29] audit: type=1326 audit(1729463916.653:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.0.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4cf9b7dff9 code=0x7ffc0000 [ 645.808475][ T29] audit: type=1326 audit(1729463916.653:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.0.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf9b7dff9 code=0x7ffc0000 [ 645.833572][ T29] audit: type=1326 audit(1729463916.663:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.0.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4cf9b7dff9 code=0x7ffc0000 [ 645.858389][ T29] audit: type=1326 audit(1729463916.673:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.0.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf9b7dff9 code=0x7ffc0000 [ 645.884321][ T29] audit: type=1326 audit(1729463916.673:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.0.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf9b7dff9 code=0x7ffc0000 [ 645.912613][ T29] audit: type=1326 audit(1729463916.673:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.0.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4cf9b7dff9 code=0x7ffc0000 [ 645.936326][ T29] audit: type=1326 audit(1729463916.673:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.0.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf9b7dff9 code=0x7ffc0000 [ 645.959029][ T29] audit: type=1326 audit(1729463916.683:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.0.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f4cf9b7dff9 code=0x7ffc0000 [ 645.985541][ T29] audit: type=1326 audit(1729463916.683:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.0.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf9b7dff9 code=0x7ffc0000 [ 646.240366][ T1062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.249271][ T1062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.565926][ T3322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.574901][ T3322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.034197][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 647.204775][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 647.231504][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.283608][ T8] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 647.293317][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.301822][ T8] usb 3-1: Product: syz [ 647.306345][ T8] usb 3-1: Manufacturer: syz [ 647.315163][ T8] usb 3-1: SerialNumber: syz [ 647.405420][ T8] usb 3-1: config 0 descriptor?? [ 647.432668][T11461] binder: 11460:11461 ioctl c0046209 100000000000000 returned -22 [ 647.438976][ T8] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 648.516091][ T8] gspca_sunplus: reg_w_riv err -71 [ 648.521703][ T8] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 648.576263][ T8] usb 3-1: USB disconnect, device number 14 [ 648.863936][ C0] net_ratelimit: 3 callbacks suppressed [ 648.864013][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 649.120114][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 649.525040][T11489] binder: 11488:11489 ioctl c0306201 20001a80 returned -14 [ 649.905047][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 650.943842][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 651.983859][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 652.094682][T11531] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 652.101546][T11531] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 653.023881][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 654.063946][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 654.737094][T11557] netlink: 'syz.0.2426': attribute type 8 has an invalid length. [ 655.103845][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 655.262197][ T29] audit: type=1326 audit(1729463926.213:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11562 comm="syz.1.2430" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f667177dff9 code=0x0 [ 655.285092][ T29] audit: type=1326 audit(1729463926.213:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11562 comm="syz.1.2430" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f667177dff9 code=0x0 [ 656.146918][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 656.431815][ T5195] Bluetooth: hci5: command 0x0406 tx timeout [ 656.442231][ T5195] Bluetooth: hci8: command 0x0405 tx timeout [ 657.183845][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 658.223827][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 658.826097][T11596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2444'. [ 659.149465][T11600] tipc: Started in network mode [ 659.155656][T11600] tipc: Node identity ac1414aa, cluster identity 4711 [ 659.164423][T11600] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 659.171561][T11600] tipc: Enabled bearer , priority 10 [ 659.244627][ T8] IPVS: starting estimator thread 0... [ 659.263848][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 659.296742][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 659.337752][T11601] IPVS: using max 240 ests per chain, 12000 per kthread [ 659.433879][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 659.573839][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 659.716994][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 659.853854][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 660.009155][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 660.148357][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 660.284851][ T8] tipc: Node number set to 2886997162 [ 660.303881][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 664.383834][ C0] net_ratelimit: 9 callbacks suppressed [ 664.383914][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 664.490759][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 665.423845][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 665.503865][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 665.670350][T11661] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2475'. [ 665.699074][T11661] veth0_macvtap: left promiscuous mode [ 665.713867][T11661] macvtap0: entered promiscuous mode [ 665.730738][T11661] macvtap0: refused to change device tx_queue_len [ 666.475383][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 666.543844][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 667.503834][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 667.583848][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 667.776900][T11691] vlan2: entered promiscuous mode [ 667.782190][T11691] veth0_virt_wifi: entered promiscuous mode [ 667.874475][T11691] veth0_virt_wifi: left promiscuous mode [ 668.543852][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 668.626018][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 669.599756][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 669.663844][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 670.623855][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 670.703848][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 671.663867][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 671.743857][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 672.703857][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 672.784412][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 673.645473][ T4891] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 673.744936][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 673.823849][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 673.864296][ T4891] usb 1-1: config 0 has an invalid interface number: 65 but max is 0 [ 673.872794][ T4891] usb 1-1: config 0 has no interface number 0 [ 673.984720][ T4891] usb 1-1: New USB device found, idVendor=050d, idProduct=0128, bcdDevice=bc.ae [ 673.994551][ T4891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.002863][ T4891] usb 1-1: Product: syz [ 674.007385][ T4891] usb 1-1: Manufacturer: syz [ 674.012214][ T4891] usb 1-1: SerialNumber: syz [ 674.129939][ T4891] usb 1-1: config 0 descriptor?? [ 674.373365][ T4891] ax88179_178a 1-1:0.65: probe with driver ax88179_178a failed with error -22 [ 674.453006][T11773] input: syz1 as /devices/virtual/input/input25 [ 674.793888][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 674.863833][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 675.604209][ T4891] usb 1-1: USB disconnect, device number 13 [ 675.823844][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 675.903848][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 676.863896][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 676.953840][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 677.903917][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 677.925133][ T4891] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 677.983840][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 678.161592][ T4891] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 678.171307][ T4891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.179696][ T4891] usb 2-1: Product: syz [ 678.184405][ T4891] usb 2-1: Manufacturer: syz [ 678.189235][ T4891] usb 2-1: SerialNumber: syz [ 678.289126][ T4891] usb 2-1: config 0 descriptor?? [ 678.599766][ T5197] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 678.672957][ T5195] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 678.682909][ T5195] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 678.943848][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 678.961705][ T5195] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 678.985231][ T5195] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 679.023886][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 679.089071][ T5195] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 679.350617][ T4891] usb 2-1: Firmware: major: 4, minor: 19, hardware type: UNKNOWN (38) [ 679.674965][ T4891] usb 2-1: failed to fetch extended address, random address set [ 679.688450][ T4891] usb 2-1: atusb_probe: initialization failed, error = -524 [ 679.698195][ T4891] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 679.737529][ T4891] usb 2-1: USB disconnect, device number 8 [ 679.983843][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 680.010118][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.064048][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 680.341031][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.484832][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.544708][ T5198] Bluetooth: hci12: Opcode 0x1003 failed: -110 [ 680.624337][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.986999][T11804] chnl_net:caif_netlink_parms(): no params data found [ 681.023892][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 681.069568][ T13] bridge_slave_1: left allmulticast mode [ 681.075798][ T13] bridge_slave_1: left promiscuous mode [ 681.082377][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.108290][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 681.194773][ T13] bridge_slave_0: left allmulticast mode [ 681.200738][ T13] bridge_slave_0: left promiscuous mode [ 681.216372][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.272058][ T5198] Bluetooth: hci11: command tx timeout [ 681.426754][ T1589] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 681.611324][ T1589] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 681.623990][ T1589] usb 4-1: config 1 has no interface number 0 [ 681.634520][ T1589] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.647042][ T1589] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 681.656500][ T1589] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 681.741410][ T29] audit: type=1326 audit(1729463952.673:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11836 comm="syz.0.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf9b7dff9 code=0x7ffc0000 [ 681.764912][ T29] audit: type=1326 audit(1729463952.673:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11836 comm="syz.0.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf9b7dff9 code=0x7ffc0000 [ 681.787323][ C1] vkms_vblank_simulate: vblank timer overrun [ 681.794143][ T29] audit: type=1326 audit(1729463952.673:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11836 comm="syz.0.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f4cf9b7dff9 code=0x7ffc0000 [ 681.816549][ C1] vkms_vblank_simulate: vblank timer overrun [ 681.825801][ T29] audit: type=1326 audit(1729463952.683:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11836 comm="syz.0.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf9b7dff9 code=0x7ffc0000 [ 681.852475][ T29] audit: type=1326 audit(1729463952.683:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11836 comm="syz.0.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf9b7dff9 code=0x7ffc0000 [ 681.895248][ T1589] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 681.905056][ T1589] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.913313][ T1589] usb 4-1: Product: syz [ 681.917915][ T1589] usb 4-1: Manufacturer: syz [ 681.925633][ T1589] usb 4-1: SerialNumber: syz [ 681.992945][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.063855][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 682.129490][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.144547][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 682.179845][ T13] bond0 (unregistering): Released all slaves [ 682.655299][ T13] tipc: Disabling bearer [ 682.660838][ T13] tipc: Left network mode [ 683.103843][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 683.376132][ T5198] Bluetooth: hci11: command tx timeout [ 683.548677][ T13] hsr_slave_0: left promiscuous mode [ 683.635218][ T13] hsr_slave_1: left promiscuous mode [ 683.714867][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 683.722893][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.827774][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.835985][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.009484][ T13] veth1_macvtap: left promiscuous mode [ 684.015733][ T13] veth0_macvtap: left promiscuous mode [ 684.021620][ T13] veth1_vlan: left promiscuous mode [ 684.027401][ T13] veth0_vlan: left promiscuous mode [ 684.047506][ T1589] cdc_ncm 4-1:1.1: bind() failure [ 684.063118][ T1589] usb 4-1: USB disconnect, device number 18 [ 684.153819][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 685.183889][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 685.407620][ T8] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 685.436507][ T5198] Bluetooth: hci11: command tx timeout [ 685.659086][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.670869][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.681148][ T8] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 685.690607][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.768895][ T8] usb 4-1: config 0 descriptor?? [ 685.794102][ T13] team0 (unregistering): Port device team_slave_1 removed [ 685.839542][ T13] team0 (unregistering): Port device team_slave_0 removed [ 686.225648][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 686.393506][ T8] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 686.414848][ T8] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0012/input/input26 [ 686.547633][T11804] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.555544][T11804] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.563469][T11804] bridge_slave_0: entered allmulticast mode [ 686.572768][T11804] bridge_slave_0: entered promiscuous mode [ 686.620586][ T13] IPVS: stop unused estimator thread 0... [ 686.662971][T11804] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.671059][T11804] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.679227][T11804] bridge_slave_1: entered allmulticast mode [ 686.681614][ T8] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 686.688546][T11804] bridge_slave_1: entered promiscuous mode [ 686.710050][ T8] usb 4-1: USB disconnect, device number 19 [ 687.263847][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 687.367780][T11804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.389160][T11804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.505135][ T5198] Bluetooth: hci11: command tx timeout [ 687.944250][T10526] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.142050][ T8156] bridge0: port 3(syz_tun) entered disabled state [ 688.236113][T11872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2565'. [ 688.303852][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 689.157130][ T8156] syz_tun (unregistering): left allmulticast mode [ 689.164032][ T8156] syz_tun (unregistering): left promiscuous mode [ 689.170874][ T8156] bridge0: port 3(syz_tun) entered disabled state [ 689.343845][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 689.552057][T11804] team0: Port device team_slave_0 added [ 689.936180][ T9728] bridge0: port 3(syz_tun) entered disabled state [ 689.978717][ T9728] syz_tun (unregistering): left allmulticast mode [ 689.985995][ T9728] syz_tun (unregistering): left promiscuous mode [ 689.992781][ T9728] bridge0: port 3(syz_tun) entered disabled state [ 690.383865][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 690.400753][T11804] team0: Port device team_slave_1 added [ 690.557856][T11885] geneve0: entered promiscuous mode [ 690.563336][T11885] geneve0: entered allmulticast mode [ 690.952014][T11804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.960101][T11804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.986275][ C1] vkms_vblank_simulate: vblank timer overrun [ 690.992845][T11804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.332076][T11804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.340289][T11804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.366453][ C1] vkms_vblank_simulate: vblank timer overrun [ 691.380113][T11804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.423881][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 692.125281][ T9404] bond0: (slave syz_tun): Releasing backup interface [ 692.352970][ T3358] bridge_slave_1: left allmulticast mode [ 692.359080][ T3358] bridge_slave_1: left promiscuous mode [ 692.372423][ T3358] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.473833][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 692.505072][ T3358] bridge_slave_0: left allmulticast mode [ 692.510986][ T3358] bridge_slave_0: left promiscuous mode [ 692.517751][ T3358] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.541211][ T3358] bridge_slave_1: left allmulticast mode [ 692.547274][ T3358] bridge_slave_1: left promiscuous mode [ 692.554113][ T3358] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.605052][ T3358] bridge_slave_0: left allmulticast mode [ 692.611186][ T3358] bridge_slave_0: left promiscuous mode [ 692.617955][ T3358] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.726140][ T3358] bridge_slave_1: left promiscuous mode [ 692.732719][ T3358] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.797396][ T3358] bridge_slave_0: left allmulticast mode [ 692.803342][ T3358] bridge_slave_0: left promiscuous mode [ 692.812052][ T3358] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.919927][ T3358] bridge_slave_1: left allmulticast mode [ 692.927062][ T3358] bridge_slave_1: left promiscuous mode [ 692.934019][ T3358] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.004689][ T3358] bridge_slave_0: left allmulticast mode [ 693.010664][ T3358] bridge_slave_0: left promiscuous mode [ 693.017361][ T3358] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.067000][ T3358] bridge_slave_1: left allmulticast mode [ 693.074268][ T3358] bridge_slave_1: left promiscuous mode [ 693.080760][ T3358] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.126291][ T3358] bridge_slave_0: left allmulticast mode [ 693.132200][ T3358] bridge_slave_0: left promiscuous mode [ 693.139391][ T3358] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.503848][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 694.545351][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 695.583836][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 695.704033][ T3358] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 696.283086][ T3358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 696.311562][ T3358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.329218][ T3358] bond0 (unregistering): Released all slaves [ 696.355998][ T3358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 696.384119][ T3358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.430710][ T3358] bond0 (unregistering): Released all slaves [ 696.491991][ T3358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 696.607224][ T3358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.633847][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 696.662019][ T3358] bond0 (unregistering): Released all slaves [ 696.729479][ T3358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 696.755090][ T3358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.791499][ T3358] bond0 (unregistering): Released all slaves [ 696.822925][ T3358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 696.860057][ T3358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.913325][ T3358] bond0 (unregistering): Released all slaves [ 697.598370][T11969] loop0: detected capacity change from 0 to 4096 [ 697.629669][T11804] hsr_slave_0: entered promiscuous mode [ 697.647893][T11804] hsr_slave_1: entered promiscuous mode [ 697.673826][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 697.725781][T11804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 697.733879][T11804] Cannot create hsr debugfs directory [ 697.775557][T11975] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 697.905416][ T5198] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 698.703855][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 699.410176][T11998] loop0: detected capacity change from 0 to 64 [ 699.755724][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 700.422623][T11804] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 700.506092][T11804] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 700.565354][T12011] sctp: [Deprecated]: syz.4.2618 (pid 12011) Use of int in max_burst socket option deprecated. [ 700.565354][T12011] Use struct sctp_assoc_value instead [ 700.717868][T11804] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 700.783839][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 700.886352][ T5195] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 700.896407][ T5195] CPU: 1 UID: 0 PID: 5195 Comm: kworker/u9:3 Tainted: G W 6.12.0-rc3-syzkaller-00454-gdb87114dcf13 #0 [ 700.909086][ T5195] Tainted: [W]=WARN [ 700.913065][ T5195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 700.923350][ T5195] Workqueue: hci5 hci_rx_work [ 700.928367][ T5195] Call Trace: [ 700.931815][ T5195] [ 700.934914][ T5195] dump_stack_lvl+0x216/0x2d0 [ 700.939876][ T5195] dump_stack+0x1e/0x30 [ 700.944302][ T5195] sysfs_create_dir_ns+0x45f/0x4c0 [ 700.949718][ T5195] kobject_add_internal+0xfe7/0x1900 [ 700.955339][ T5195] kobject_add+0x28c/0x3c0 [ 700.960072][ T5195] ? kmsan_get_metadata+0x13e/0x1c0 [ 700.965542][ T5195] device_add+0xa90/0x1ba0 [ 700.970238][ T5195] hci_conn_add_sysfs+0x161/0x2c0 [ 700.975553][ T5195] le_conn_complete_evt+0x1ae1/0x1fa0 [ 700.981213][ T5195] hci_le_conn_complete_evt+0x15a/0x210 [ 700.987100][ T5195] hci_le_meta_evt+0x600/0x850 [ 700.992111][ T5195] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 700.998511][ T5195] hci_event_packet+0x11df/0x1c20 [ 701.003852][ T5195] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 701.009448][ T5195] hci_rx_work+0x9d1/0x11f0 [ 701.014262][ T5195] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 701.020335][ T5195] ? __pfx_hci_rx_work+0x10/0x10 [ 701.025573][ T5195] ? __pfx_hci_rx_work+0x10/0x10 [ 701.030801][ T5195] process_scheduled_works+0xae0/0x1c40 [ 701.036670][ T5195] worker_thread+0xea7/0x14f0 [ 701.041645][ T5195] kthread+0x3e2/0x540 [ 701.045998][ T5195] ? __pfx_worker_thread+0x10/0x10 [ 701.051396][ T5195] ? __pfx_kthread+0x10/0x10 [ 701.056275][ T5195] ret_from_fork+0x6d/0x90 [ 701.060953][ T5195] ? __pfx_kthread+0x10/0x10 [ 701.065836][ T5195] ret_from_fork_asm+0x1a/0x30 [ 701.070901][ T5195] [ 701.074130][ C1] vkms_vblank_simulate: vblank timer overrun [ 701.087263][ T5195] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 701.104392][ T5195] Bluetooth: hci5: failed to register connection device [ 701.286712][T11804] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 701.761136][ T8] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 701.823889][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 702.072448][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 702.083052][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 702.192387][ T8] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 702.203923][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 702.213442][ T8] usb 5-1: SerialNumber: syz [ 702.320345][ T3358] hsr_slave_0: left promiscuous mode [ 702.492243][ T8] usb 5-1: 0:2 : does not exist [ 702.521781][ T3358] hsr_slave_1: left promiscuous mode [ 702.554266][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.562089][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.571417][ T8] usb 5-1: USB disconnect, device number 15 [ 702.630806][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.638782][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.730491][ T3358] hsr_slave_0: left promiscuous mode [ 702.746743][ T3358] hsr_slave_1: left promiscuous mode [ 702.776354][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.785008][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.823380][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.833410][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.865654][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 702.922158][ T3358] hsr_slave_0: left promiscuous mode [ 702.940592][ T3358] hsr_slave_1: left promiscuous mode [ 702.963372][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.974505][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 703.011424][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 703.021944][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.050509][T12049] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 703.091898][ T3358] hsr_slave_0: left promiscuous mode [ 703.147858][ T3358] hsr_slave_1: left promiscuous mode [ 703.172622][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 703.180619][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 703.213312][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 703.226074][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.306403][ T3358] hsr_slave_0: left promiscuous mode [ 703.364500][ T3358] hsr_slave_1: left promiscuous mode [ 703.395059][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 703.402803][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 703.450322][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 703.460134][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.556509][ T3358] veth1_macvtap: left promiscuous mode [ 703.562278][ T3358] veth0_macvtap: left promiscuous mode [ 703.568983][ T3358] veth1_vlan: left promiscuous mode [ 703.574705][ T3358] veth0_vlan: left promiscuous mode [ 703.582320][ T3358] veth1_macvtap: left promiscuous mode [ 703.588249][ T3358] veth0_macvtap: left promiscuous mode [ 703.594539][ T3358] veth1_vlan: left promiscuous mode [ 703.600083][ T3358] veth0_vlan: left promiscuous mode [ 703.625891][ T3358] veth1_macvtap: left promiscuous mode [ 703.634114][ T3358] veth0_macvtap: left promiscuous mode [ 703.640010][ T3358] veth1_vlan: left promiscuous mode [ 703.646600][ T3358] veth0_vlan: left promiscuous mode [ 703.673458][ T3358] veth1_macvtap: left promiscuous mode [ 703.679521][ T3358] veth0_macvtap: left promiscuous mode [ 703.685615][ T3358] veth1_vlan: left promiscuous mode [ 703.691187][ T3358] veth0_vlan: left promiscuous mode [ 703.728814][ T3358] veth1_macvtap: left promiscuous mode [ 703.737116][ T3358] veth0_macvtap: left promiscuous mode [ 703.743009][ T3358] veth1_vlan: left promiscuous mode [ 703.749689][ T3358] veth0_vlan: left promiscuous mode [ 703.903828][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 704.944488][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 705.757634][ T3358] team0 (unregistering): Port device team_slave_1 removed [ 705.797996][ T3358] team0 (unregistering): Port device team_slave_0 removed [ 705.993834][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 706.359870][ T3358] team0 (unregistering): Port device team_slave_1 removed [ 706.421798][ T3358] team0 (unregistering): Port device team_slave_0 removed [ 706.962179][ T3358] team0 (unregistering): Port device team_slave_1 removed [ 706.996917][ T3358] team0 (unregistering): Port device team_slave_0 removed [ 707.024765][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 707.264356][ T5195] Bluetooth: hci5: command 0x0406 tx timeout [ 707.590292][ T3358] team0 (unregistering): Port device team_slave_1 removed [ 707.668802][ T3358] team0 (unregistering): Port device team_slave_0 removed [ 708.063835][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 708.225218][ T3358] team0 (unregistering): Port device team_slave_1 removed [ 708.263968][ T3358] team0 (unregistering): Port device team_slave_0 removed [ 709.039482][T12073] loop4: detected capacity change from 0 to 1024 [ 709.103826][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 709.157469][T12073] hfsplus: bad catalog entry type [ 709.500091][T11804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.507155][ T13] hfsplus: b-tree write err: -5, ino 4 [ 709.613185][T11804] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.681422][ T3993] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.689176][ T3993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.705471][ T3993] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.713113][ T3993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.763967][ T29] audit: type=1326 audit(1729463980.713:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12076 comm="syz.1.2645" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f667177dff9 code=0x0 [ 709.785881][ C1] vkms_vblank_simulate: vblank timer overrun [ 709.799354][T11804] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 709.810689][T11804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 710.144049][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 710.207009][T12085] loop4: detected capacity change from 0 to 512 [ 710.254154][ T25] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 710.292400][T12085] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 710.370757][T12085] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.2643: iget: bad i_size value: -67835469387268086 [ 710.445960][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 710.479650][T12085] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.2643: couldn't read orphan inode 15 (err -117) [ 710.527930][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 710.539566][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 710.565677][ T25] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 710.565733][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 710.581526][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.617957][T12085] EXT4-fs (loop4): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 710.631096][T12085] ext2 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 710.666449][T12085] EXT4-fs error (device loop4): ext4_add_entry:2437: inode #2: comm syz.4.2643: Directory hole found for htree leaf block 0 [ 710.677334][T12090] loop0: detected capacity change from 0 to 1024 [ 710.747047][ T25] usb 4-1: config 0 descriptor?? [ 710.786410][T12085] EXT4-fs error (device loop4): ext4_add_entry:2437: inode #2: comm syz.4.2643: Directory hole found for htree leaf block 0 [ 710.957604][T12090] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 711.183949][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 711.229632][T11804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.242106][T12084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.285183][T12084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.328381][ T25] hid (null): bogus close delimiter [ 711.383382][T11178] EXT4-fs (loop4): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 711.453078][ T25] hid-generic 0003:0158:0100.0013: unknown main item tag 0x0 [ 711.460984][ T25] hid-generic 0003:0158:0100.0013: unknown main item tag 0x0 [ 711.469054][ T25] hid-generic 0003:0158:0100.0013: bogus close delimiter [ 711.476458][ T25] hid-generic 0003:0158:0100.0013: item 0 0 2 10 parsing failed [ 711.593579][ T25] hid-generic 0003:0158:0100.0013: probe with driver hid-generic failed with error -22 [ 711.638867][ T25] usb 4-1: USB disconnect, device number 20 [ 711.759003][T11804] veth0_vlan: entered promiscuous mode [ 711.844133][T11804] veth1_vlan: entered promiscuous mode [ 711.870903][T12104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2652'. [ 712.136224][T11804] veth0_macvtap: entered promiscuous mode [ 712.168239][T11804] veth1_macvtap: entered promiscuous mode [ 712.219249][T11804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.230069][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 712.243051][T11804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.255173][T11804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.266350][T11804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.283863][T11804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.294615][T11804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.304738][T11804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.315575][T11804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.325695][T11804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.338819][T11804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.355191][T11804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.382678][T11804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.393553][T11804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.406554][T11804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.420187][T11804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.430323][T11804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.443550][T11804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.455254][T11804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.466340][T11804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.480642][T11804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.491398][T11804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.506015][T11804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.537902][T11804] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.550399][T11804] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.560065][T11804] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.570525][T11804] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.656765][ T5195] Bluetooth: hci9: command 0x0406 tx timeout [ 712.841763][ T29] audit: type=1326 audit(1729463983.793:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12118 comm="syz.0.2658" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cf9b7dff9 code=0x0 [ 712.935231][ T29] audit: type=1326 audit(1729463983.853:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12113 comm="syz.4.2657" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b5297dff9 code=0x0 [ 713.263811][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 714.303835][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 714.420128][T12148] raw_sendmsg: syz.3.2666 forgot to set AF_INET. Fix it! [ 714.694878][T12153] loop4: detected capacity change from 0 to 64 [ 715.343830][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 715.835496][T12158] loop0: detected capacity change from 0 to 4096 [ 715.869679][T12158] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 716.282446][T12158] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 716.383824][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 716.521507][ T29] audit: type=1800 audit(1729463987.483:69): pid=12158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2671" name="bus" dev="loop0" ino=24 res=0 errno=0 [ 716.906294][T10711] ntfs3(loop0): ino=1a, ntfs_sync_fs failed, -22. [ 717.268548][ T4228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.276871][ T4228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.402501][ T4228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.410910][ T4228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.423874][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 717.956440][T12217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2692'. [ 717.969398][T12217] bond0: option resend_igmp: invalid value (7540) [ 717.980792][T12217] bond0: option resend_igmp: allowed values 0 - 255 [ 718.463861][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 719.021852][T12238] netlink: 1252 bytes leftover after parsing attributes in process `syz.2.2702'. [ 719.267731][T12241] input: syz1 as /devices/virtual/input/input27 [ 719.409591][T12246] netlink: 'syz.3.2706': attribute type 11 has an invalid length. [ 719.418814][T12246] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2706'. [ 719.504636][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 719.697593][ T1087] Bluetooth: hci1: Frame reassembly failed (-84) [ 719.717956][T12252] Bluetooth: hci1: Frame reassembly failed (-84) [ 719.748884][ T5198] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 719.951443][T12256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2712'. [ 719.960858][T12256] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2712'. [ 719.985263][T12256] gtp0: entered promiscuous mode [ 719.990458][T12256] gtp0: entered allmulticast mode [ 720.543831][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 721.354501][T12282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2723'. [ 721.365047][T12282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2723'. [ 721.374516][T12282] nbd: socks must be embedded in a SOCK_ITEM attr [ 721.381487][ T5245] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 721.571407][ T5245] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.582126][ T5245] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 721.591535][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 721.600685][ T5245] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.619829][ T5245] usb 5-1: config 0 descriptor?? [ 721.726331][T12291] input: syz1 as /devices/virtual/input/input28 [ 721.744375][ T51] Bluetooth: hci1: command 0xfc11 tx timeout [ 721.744468][ T5195] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 721.777952][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 721.839358][ T5245] usb 5-1: USB disconnect, device number 16 [ 722.004281][ T8] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 722.014697][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.061309][ T8] usb 1-1: config 0 descriptor?? [ 722.095771][ T8] cp210x 1-1:0.0: cp210x converter detected [ 722.112936][T12296] x_tables: duplicate underflow at hook 4 [ 722.623837][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 722.647514][ T8] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 722.668871][T12288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.831404][T12288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.924418][ T8] usb 1-1: cp210x converter now attached to ttyUSB0 [ 723.109721][ T1589] usb 1-1: USB disconnect, device number 14 [ 723.150395][ T1589] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 723.206370][ T1589] cp210x 1-1:0.0: device disconnected [ 723.526377][T12316] loop2: detected capacity change from 0 to 2048 [ 723.585728][T12325] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 723.663856][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 723.924068][T12325] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 723.935366][T12325] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 724.030255][T12325] Remounting filesystem read-only [ 724.065370][T11804] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 724.479878][T12339] loop4: detected capacity change from 0 to 1764 [ 724.704193][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 724.877421][ T8] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 725.034423][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 725.073037][ T8] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 725.082968][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.091360][ T8] usb 4-1: Product: syz [ 725.095822][ T8] usb 4-1: Manufacturer: syz [ 725.100661][ T8] usb 4-1: SerialNumber: syz [ 725.139118][ T8] usb 4-1: config 0 descriptor?? [ 725.424546][ T8] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 725.744005][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 725.838733][ T8] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 725.884298][ T8] usb 4-1: USB disconnect, device number 21 [ 725.911159][T12353] loop2: detected capacity change from 0 to 4096 [ 725.917645][T12355] loop4: detected capacity change from 0 to 1024 [ 725.940609][T12355] hfsplus: inconsistency in B*Tree (31,16,0,1,0) [ 725.949412][T12355] hfsplus: failed to load root directory [ 726.351227][T12353] ntfs3(loop2): failed to convert "0000" to iso8859-4 [ 726.783829][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 727.762075][T12388] syzkaller1: entered promiscuous mode [ 727.768382][T12388] syzkaller1: entered allmulticast mode [ 727.833805][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 727.946233][T12375] loop2: detected capacity change from 0 to 4096 [ 727.977860][T12375] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 728.106755][T12381] loop4: detected capacity change from 0 to 4096 [ 728.121321][T12375] ntfs3(loop2): Failed to load $Extend (-22). [ 728.127824][T12375] ntfs3(loop2): Failed to initialize $Extend. [ 728.225942][T12395] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 728.347883][T12381] NILFS (loop4): error -2 reading inode: ino=536871488 [ 728.384824][ T1589] page_pool_release_retry() stalled pool shutdown: id 77, 1 inflight 60 sec [ 728.498398][T12394] loop0: detected capacity change from 0 to 2048 [ 728.761687][T12403] netlink: 'syz.4.2778': attribute type 10 has an invalid length. [ 728.863827][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 728.894275][T12394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 729.070861][T12394] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 729.104138][T12394] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 729.117237][T12394] EXT4-fs (loop0): This should not happen!! Data will be lost [ 729.117237][T12394] [ 729.127321][T12394] EXT4-fs (loop0): Total free blocks count 0 [ 729.135215][T12394] EXT4-fs (loop0): Free/Dirty block details [ 729.142636][T12394] EXT4-fs (loop0): free_blocks=2415919104 [ 729.149542][T12394] EXT4-fs (loop0): dirty_blocks=16 [ 729.154967][T12394] EXT4-fs (loop0): Block reservation details [ 729.161174][T12394] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 729.224543][T12413] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 13 with max blocks 1 with error 28 [ 729.903818][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 730.645478][T12442] loop2: detected capacity change from 0 to 1024 [ 730.655281][T12442] EXT4-fs: Ignoring removed i_version option [ 730.855480][T12442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.944090][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 731.405656][T11804] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 731.465719][T11804] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 731.532780][T11804] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 731.551020][T12462] loop4: detected capacity change from 0 to 64 [ 731.695799][T11804] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 731.721495][T11804] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 731.751221][T11804] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 731.789724][T11804] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 731.831275][T11804] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 731.860154][T11804] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 731.915871][T11804] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 731.924274][ T1589] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 731.993794][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 732.114120][ T1589] usb 4-1: Using ep0 maxpacket: 16 [ 732.162415][ T1589] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.173917][ T1589] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.184061][ T1589] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 732.197393][ T1589] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 732.209843][ T1589] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.215255][T12470] loop4: detected capacity change from 0 to 64 [ 732.242706][ T1589] usb 4-1: config 0 descriptor?? [ 732.263187][T12469] loop0: detected capacity change from 0 to 128 [ 732.316691][T12469] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 732.764477][ T1589] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 732.772206][ T1589] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 732.780060][ T1589] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 732.787769][ T1589] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 732.795486][ T1589] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 732.810814][ T1589] HID 045e:07da: Invalid code 65791 type 1 [ 732.858476][ T1589] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0014/input/input29 [ 732.877412][ T1589] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 733.005541][ T1589] usb 4-1: USB disconnect, device number 22 [ 733.023878][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 733.685945][T11804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.710199][ T3529] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.924720][ T3529] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.064009][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 734.093242][ T3529] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.140450][ T8] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 734.324809][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 734.336802][ T8] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 734.345816][ T8] usb 4-1: config 0 has no interface number 0 [ 734.410025][ T3529] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.443557][ T8] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 734.454850][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.463116][ T8] usb 4-1: Product: syz [ 734.468771][ T8] usb 4-1: Manufacturer: syz [ 734.474022][ T8] usb 4-1: SerialNumber: syz [ 734.537144][ T8] usb 4-1: config 0 descriptor?? [ 734.558992][ T8] smsc95xx v2.0.0 [ 734.895986][ T3529] bridge_slave_1: left allmulticast mode [ 734.903949][ T3529] bridge_slave_1: left promiscuous mode [ 734.910732][ T3529] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.031494][ T3529] bridge_slave_0: left allmulticast mode [ 735.037548][ T3529] bridge_slave_0: left promiscuous mode [ 735.044496][ T3529] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.104146][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 735.736920][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 735.748615][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 735.759576][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 735.771506][ T8] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 735.793447][ T8] usb 4-1: USB disconnect, device number 23 [ 735.841552][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 735.851257][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 735.861041][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 736.002680][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 736.014572][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 736.024527][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 736.146876][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 736.160736][ T3529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.178921][ T3529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.204531][ T3529] bond0 (unregistering): Released all slaves [ 737.183820][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 737.246653][ T3529] hsr_slave_0: left promiscuous mode [ 737.278244][ T3529] hsr_slave_1: left promiscuous mode [ 737.327609][ T3529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.336878][ T3529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.375074][ T3529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.382928][ T3529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.447745][ T3529] veth1_macvtap: left promiscuous mode [ 737.453498][ T3529] veth0_macvtap: left promiscuous mode [ 737.459645][ T3529] veth1_vlan: left promiscuous mode [ 737.465411][ T3529] veth0_vlan: left promiscuous mode [ 738.144656][ T51] Bluetooth: hci0: command tx timeout [ 738.223805][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 738.466801][ T3529] team0 (unregistering): Port device team_slave_1 removed [ 738.577813][ T3529] team0 (unregistering): Port device team_slave_0 removed [ 738.914144][T12515] chnl_net:caif_netlink_parms(): no params data found [ 739.201349][T12553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2840'. [ 739.263818][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 740.056057][T12515] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.064076][T12515] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.071772][T12515] bridge_slave_0: entered allmulticast mode [ 740.081011][T12515] bridge_slave_0: entered promiscuous mode [ 740.184183][T12515] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.194225][T12515] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.203129][T12515] bridge_slave_1: entered allmulticast mode [ 740.212082][T12515] bridge_slave_1: entered promiscuous mode [ 740.235023][ T51] Bluetooth: hci0: command tx timeout [ 740.303817][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 740.363421][T12515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.385846][T12515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.465892][ T4891] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 740.500952][T12515] team0: Port device team_slave_0 added [ 740.522678][T12515] team0: Port device team_slave_1 added [ 740.559786][ T1589] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 740.647056][ T4891] usb 5-1: Using ep0 maxpacket: 16 [ 740.659464][ T4891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.671514][ T4891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.681674][ T4891] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 740.695026][ T4891] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 740.706189][ T4891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.720366][ T4891] usb 5-1: config 0 descriptor?? [ 740.731539][T12515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.734333][ T1589] usb 4-1: Using ep0 maxpacket: 8 [ 740.738781][T12515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.770264][T12515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.777071][ T1589] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 740.790432][ T1589] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.799045][ T1589] usb 4-1: Product: syz [ 740.805262][ T1589] usb 4-1: Manufacturer: syz [ 740.810090][ T1589] usb 4-1: SerialNumber: syz [ 740.825700][T12515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.832997][T12515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.859691][T12515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.896079][ T1589] usb 4-1: config 0 descriptor?? [ 740.934116][ T1589] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 740.943553][ T1589] dvb-usb: bulk message failed: -22 (2/0) [ 740.950072][ T1589] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 740.967141][ T1589] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 740.978532][ T1589] usb 4-1: media controller created [ 741.045455][ T1589] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 741.145347][ T1589] dvb-usb: bulk message failed: -22 (1/0) [ 741.151628][ T1589] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 741.174462][ T1589] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 741.213850][ T1589] dvb-usb: schedule remote query interval to 50 msecs. [ 741.220933][ T1589] dvb-usb: bulk message failed: -22 (2/0) [ 741.228739][ T1589] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 741.272808][T12515] hsr_slave_0: entered promiscuous mode [ 741.282459][ T1589] dvb-usb: bulk message failed: -22 (1/0) [ 741.288843][ T1589] dvb-usb: error while querying for an remote control event. [ 741.299224][T12515] hsr_slave_1: entered promiscuous mode [ 741.343891][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 741.353879][ T1589] dvb-usb: bulk message failed: -22 (1/0) [ 741.359937][ T1589] dvb-usb: error while querying for an remote control event. [ 741.383863][ T4891] microsoft 0003:045E:07DA.0015: No inputs registered, leaving [ 741.438495][ T1589] dvb-usb: bulk message failed: -22 (1/0) [ 741.444713][ T1589] dvb-usb: error while querying for an remote control event. [ 741.484501][ T4891] microsoft 0003:045E:07DA.0015: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 741.498155][ T4891] microsoft 0003:045E:07DA.0015: no inputs found [ 741.506371][ T4891] microsoft 0003:045E:07DA.0015: could not initialize ff, continuing anyway [ 741.521648][ T1589] dvb-usb: bulk message failed: -22 (1/0) [ 741.527838][ T1589] dvb-usb: error while querying for an remote control event. [ 741.556570][ T5245] usb 4-1: USB disconnect, device number 24 [ 741.602945][ T4891] usb 5-1: USB disconnect, device number 17 [ 741.712204][T12587] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 741.722776][T12587] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 741.847057][ T5245] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 742.204321][ T4891] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 742.305138][ T51] Bluetooth: hci0: command tx timeout [ 742.381805][ T4891] usb 1-1: Using ep0 maxpacket: 8 [ 742.397413][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 742.459850][T12589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.620502][T12589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.735508][ T4891] usb 1-1: unable to get BOS descriptor or descriptor too short [ 742.755321][ T4891] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 742.764150][ T4891] usb 1-1: can't read configurations, error -71 [ 742.790535][T12515] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 742.829308][T12515] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 742.891813][T12515] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 742.940320][T12515] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 743.423821][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 743.849854][T12515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.911403][T12515] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.970125][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.977855][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.067997][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.075813][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.305589][ T4891] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 744.386703][ T51] Bluetooth: hci0: command tx timeout [ 744.463838][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 744.464430][ T4891] usb 4-1: Using ep0 maxpacket: 32 [ 744.548691][ T4891] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 744.558632][ T4891] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 744.568159][ T4891] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 744.577619][ T4891] usb 4-1: config 1 has no interface number 0 [ 744.584364][ T4891] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 744.597728][ T4891] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 744.612158][ T4891] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 744.621889][ T4891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.806609][ T4891] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 744.814010][ T5245] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 744.974785][ T5245] usb 2-1: Using ep0 maxpacket: 32 [ 744.989730][ T5245] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 744.998316][ T5245] usb 2-1: config 0 has no interface number 0 [ 745.006318][ T5245] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.020343][ T5245] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.031785][ T5245] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 745.041233][ T5245] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.073214][T12633] loop4: detected capacity change from 0 to 2048 [ 745.075088][ T5245] usb 2-1: config 0 descriptor?? [ 745.149854][ T5245] usb 2-1: can't set config #0, error -71 [ 745.164589][ T5245] usb 2-1: USB disconnect, device number 9 [ 745.234679][T12633] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 745.288266][T12515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 745.406375][ T4891] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 745.503856][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 745.690424][T12515] veth0_vlan: entered promiscuous mode [ 745.857324][T12515] veth1_vlan: entered promiscuous mode [ 745.861060][ T5245] usb 4-1: USB disconnect, device number 25 [ 745.871399][ T5245] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 746.149992][T12643] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2876'. [ 746.202276][T12515] veth0_macvtap: entered promiscuous mode [ 746.245889][T12515] veth1_macvtap: entered promiscuous mode [ 746.381651][T12515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.398120][T12515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.409741][T12515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.421144][T12515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.431282][T12515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.444133][T12515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.455764][T12515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.466920][T12515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.477525][T12515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.488450][T12515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.503041][T12515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 746.543841][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 746.720396][T12515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.731881][T12515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.744172][T12515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.757756][T12515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.768217][T12515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.779046][T12515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.789421][T12515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.800219][T12515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.810381][T12515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.821276][T12515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.835998][T12515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.868001][T12515] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.879493][T12515] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.888665][T12515] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.897896][T12515] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.419325][T12664] macvlan0: entered promiscuous mode [ 747.427251][T12664] macvlan0: entered allmulticast mode [ 747.434203][T12664] bond_slave_0: entered promiscuous mode [ 747.440177][T12664] bond_slave_1: entered promiscuous mode [ 747.446730][T12664] bond0: entered allmulticast mode [ 747.452062][T12664] bond_slave_0: entered allmulticast mode [ 747.460682][T12664] bond_slave_1: entered allmulticast mode [ 747.466870][T12664] bond0: entered promiscuous mode [ 747.480740][T12664] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 747.494936][T12664] team0: Port device macvlan0 added [ 747.583853][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 747.846589][T12671] loop4: detected capacity change from 0 to 128 [ 747.898528][T12671] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4580: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 747.912696][T12671] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 748.460588][T12683] loop4: detected capacity change from 0 to 1024 [ 748.480635][T12683] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 748.623863][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 749.663821][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 750.703791][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 751.163508][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.171806][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.243444][ T5195] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 751.260160][ T5195] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 751.268720][ T3358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.276854][ T3358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.286512][ T5195] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 751.299473][ T5195] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 751.310647][ T5195] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 751.319802][ T5195] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 751.561718][T12730] syz.3.2903 (12730): drop_caches: 4 [ 751.743839][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 752.784910][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 753.036612][T12726] chnl_net:caif_netlink_parms(): no params data found [ 753.443157][ T5195] Bluetooth: hci1: command tx timeout [ 753.823842][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 753.980164][T12726] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.989651][T12726] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.997591][T12726] bridge_slave_0: entered allmulticast mode [ 754.008811][T12726] bridge_slave_0: entered promiscuous mode [ 754.076457][T12726] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.084398][T12726] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.092240][T12726] bridge_slave_1: entered allmulticast mode [ 754.101362][T12726] bridge_slave_1: entered promiscuous mode [ 754.124508][T12756] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2912'. [ 754.403401][T12726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.455136][T12726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.575824][T12760] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2914'. [ 754.742079][T12726] team0: Port device team_slave_0 added [ 754.812356][T12726] team0: Port device team_slave_1 added [ 754.863805][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 755.045884][T12726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.054102][T12726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 755.080887][T12726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.102644][T12764] sit0: entered promiscuous mode [ 755.126776][T12764] netlink: 'syz.1.2915': attribute type 1 has an invalid length. [ 755.134819][T12764] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2915'. [ 755.177862][T12726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.186208][T12726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 755.215023][T12726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.535264][ T5195] Bluetooth: hci1: command tx timeout [ 755.597353][T12726] hsr_slave_0: entered promiscuous mode [ 755.736610][T12726] hsr_slave_1: entered promiscuous mode [ 755.777070][T12726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 755.785023][T12726] Cannot create hsr debugfs directory [ 755.903791][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 756.943855][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 757.594465][ T5195] Bluetooth: hci1: command tx timeout [ 757.993862][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 759.023823][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 759.311365][T12726] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.582004][T12726] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.681939][ T5195] Bluetooth: hci1: command tx timeout [ 759.820484][T12726] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.063804][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 760.168710][T12726] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.048132][T12726] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 761.104987][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 761.275416][T12726] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 761.369069][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 761.402051][T12726] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 761.412371][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 761.422003][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 761.447358][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 761.458139][T12726] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 761.468471][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 761.481188][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 762.143817][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 763.009421][T12785] chnl_net:caif_netlink_parms(): no params data found [ 763.183807][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 763.604594][ T51] Bluetooth: hci2: command tx timeout [ 764.223808][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 764.248663][T12726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.451011][T12726] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.591283][ T3529] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.599066][ T3529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.753215][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.760982][ T3529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.263811][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 765.384968][ T5195] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 765.397543][ T5195] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 765.418212][ T5195] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 765.434124][ T5195] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 765.445476][ T5195] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 765.455328][ T5195] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 765.684251][ T5195] Bluetooth: hci2: command tx timeout [ 766.303805][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 767.186338][T12785] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.194192][T12785] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.202044][T12785] bridge_slave_0: entered allmulticast mode [ 767.211382][T12785] bridge_slave_0: entered promiscuous mode [ 767.343833][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 767.489051][T12785] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.496868][T12785] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.504803][T12785] bridge_slave_1: entered allmulticast mode [ 767.513946][T12785] bridge_slave_1: entered promiscuous mode [ 767.744486][ T5195] Bluetooth: hci2: command tx timeout [ 768.064321][ T5195] Bluetooth: hci4: command tx timeout [ 768.186754][T12726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.393802][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 768.441708][T12785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.467420][T12785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.815474][T12785] team0: Port device team_slave_0 added [ 768.832893][T12785] team0: Port device team_slave_1 added [ 769.054705][T12828] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2936'. [ 769.066604][T12828] netlink: zone id is out of range [ 769.071908][T12828] netlink: zone id is out of range [ 769.076073][ T3358] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.080384][T12828] netlink: del zone limit has 4 unknown bytes [ 769.391363][ T3358] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.424631][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 769.457287][T12785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.465307][T12785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.495054][T12785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.646977][ T3358] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.755550][T12785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.762736][T12785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.799772][T12785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.854789][ T5195] Bluetooth: hci2: command tx timeout [ 770.115406][T12802] chnl_net:caif_netlink_parms(): no params data found [ 770.204316][ T5195] Bluetooth: hci4: command tx timeout [ 770.372630][ T3358] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.402864][T12726] veth0_vlan: entered promiscuous mode [ 770.441826][T12726] veth1_vlan: entered promiscuous mode [ 770.464010][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 770.568298][T12726] veth0_macvtap: entered promiscuous mode [ 770.591178][T12726] veth1_macvtap: entered promiscuous mode [ 770.867608][T12785] hsr_slave_0: entered promiscuous mode [ 770.912370][T12785] hsr_slave_1: entered promiscuous mode [ 770.925982][T12785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 770.934043][T12785] Cannot create hsr debugfs directory [ 770.975163][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.986068][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.996192][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.006960][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.020467][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.032105][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.044340][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.055075][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.065164][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.076184][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.086862][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.097630][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.117876][T12726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 771.265865][ T5245] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 771.391091][ T3358] bridge_slave_1: left allmulticast mode [ 771.398277][ T3358] bridge_slave_1: left promiscuous mode [ 771.405011][ T3358] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.502818][ T3358] bridge_slave_0: left allmulticast mode [ 771.508887][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 771.518582][ T3358] bridge_slave_0: left promiscuous mode [ 771.536453][ T3358] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.546581][ T5245] usb 2-1: Using ep0 maxpacket: 16 [ 771.572189][ T5245] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.583488][ T5245] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 771.596500][ T5245] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 771.607305][ T5245] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 771.617354][ T5245] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 771.641333][ T5245] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 771.650890][ T5245] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 771.659259][ T5245] usb 2-1: Manufacturer: syz [ 771.685062][ T5245] usb 2-1: config 0 descriptor?? [ 772.028280][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 772.148108][ T3358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 772.168178][ T3358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 772.184046][ T5245] rc_core: IR keymap rc-hauppauge not found [ 772.190253][ T5245] Registered IR keymap rc-empty [ 772.190485][ T3358] bond0 (unregistering): Released all slaves [ 772.196028][ T5245] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 772.219178][ T5245] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 772.227303][ T5195] Bluetooth: hci4: command tx timeout [ 772.244933][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.245420][ T5245] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 772.257547][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.269833][ T5245] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input32 [ 772.280658][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.305933][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.317184][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.329191][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.340585][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.354521][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.366781][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.378765][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.390085][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.402109][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.428217][T12726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 772.439359][ T5245] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 772.543786][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 772.558698][ T5245] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 772.585849][ T5245] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 772.616848][ T5245] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 772.655057][ T5245] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 772.675083][ T5245] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 772.704499][ T5245] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 772.727762][ T5245] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 772.766812][ T5245] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 772.789278][T12726] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.798598][T12726] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.805099][ T5245] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 772.809451][T12726] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.824752][T12726] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.897697][ T5245] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 772.907079][ T5245] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 772.921098][ T5245] usb 2-1: USB disconnect, device number 10 [ 773.074687][T12802] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.082483][T12802] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.090388][T12802] bridge_slave_0: entered allmulticast mode [ 773.099458][T12802] bridge_slave_0: entered promiscuous mode [ 773.140312][T12802] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.148267][T12802] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.156192][T12802] bridge_slave_1: entered allmulticast mode [ 773.167756][T12802] bridge_slave_1: entered promiscuous mode [ 773.583815][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 773.645697][ T3358] hsr_slave_0: left promiscuous mode [ 773.680177][ T3358] hsr_slave_1: left promiscuous mode [ 773.697321][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.705270][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.726455][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 773.734332][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.776570][ T3358] veth1_macvtap: left promiscuous mode [ 773.782343][ T3358] veth0_macvtap: left promiscuous mode [ 773.788354][ T3358] veth1_vlan: left promiscuous mode [ 773.794051][ T3358] veth0_vlan: left promiscuous mode [ 774.329198][ T5195] Bluetooth: hci4: command tx timeout [ 774.501016][ T3358] team0 (unregistering): Port device team_slave_1 removed [ 774.546395][ T3358] team0 (unregistering): Port device team_slave_0 removed [ 774.633816][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 774.999036][T12802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.283551][T12785] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.373290][T12802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.454537][T12785] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.663989][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 775.733857][T12785] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.811121][T12802] team0: Port device team_slave_0 added [ 775.916663][T12785] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.976638][T12802] team0: Port device team_slave_1 added [ 776.305269][T12887] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 776.340072][T12802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.347637][T12802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.374080][T12802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.448078][T12802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.455703][T12802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.482372][T12802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.505585][T12785] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 776.574777][T12785] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 776.635092][T12785] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 776.698377][T12896] ===================================================== [ 776.705861][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 776.715252][T12896] BUG: KMSAN: uninit-value in rxrpc_lookup_peer_rcu+0x2f8/0x300 [ 776.723113][T12896] rxrpc_lookup_peer_rcu+0x2f8/0x300 [ 776.728719][T12896] rxrpc_input_error+0x756/0x16e0 [ 776.734023][T12896] rxrpc_io_thread+0x13aa/0x5190 [ 776.739147][T12896] kthread+0x3e2/0x540 [ 776.743420][T12896] ret_from_fork+0x6d/0x90 [ 776.749307][T12896] ret_from_fork_asm+0x1a/0x30 [ 776.754704][T12896] [ 776.757123][T12896] Uninit was stored to memory at: [ 776.762443][T12896] rxrpc_input_error+0x499/0x16e0 [ 776.768039][T12896] rxrpc_io_thread+0x13aa/0x5190 [ 776.773160][T12896] kthread+0x3e2/0x540 [ 776.777875][T12896] ret_from_fork+0x6d/0x90 [ 776.782460][T12896] ret_from_fork_asm+0x1a/0x30 [ 776.787529][T12896] [ 776.789944][T12896] Uninit was created at: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 776.794534][T12896] kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 776.800634][T12896] kmalloc_reserve+0x13d/0x4a0 [ 776.805666][T12896] __alloc_skb+0x363/0x7b0 [ 776.810241][T12896] ipv6_local_error+0xd0/0xa10 [ 776.816525][T12896] __ip6_append_data+0x6f3/0x68e0 [ 776.821855][T12896] ip6_make_skb+0x5bd/0xd60 [ 776.826588][T12896] udpv6_sendmsg+0x3b5e/0x40c0 [ 776.831546][T12896] rxrpc_transmit_one+0xf68/0x2f20 [ 776.837023][T12896] rxrpc_input_call_event+0x18ba/0x2c10 [ 776.842779][T12896] rxrpc_io_thread+0xa5c/0x5190 [ 776.849156][T12896] kthread+0x3e2/0x540 [ 776.853765][T12896] ret_from_fork+0x6d/0x90 [ 776.858348][T12896] ret_from_fork_asm+0x1a/0x30 [ 776.863312][T12896] [ 776.865901][T12896] CPU: 0 UID: 0 PID: 12896 Comm: krxrpcio/0 Tainted: G W 6.12.0-rc3-syzkaller-00454-gdb87114dcf13 #0 [ 776.878451][T12896] Tainted: [W]=WARN [ 776.882360][T12896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 776.892629][T12896] ===================================================== [ 776.899849][T12896] Disabling lock debugging due to kernel taint [ 776.906281][T12896] Kernel panic - not syncing: kmsan.panic set ... [ 776.912836][T12896] CPU: 0 UID: 0 PID: 12896 Comm: krxrpcio/0 Tainted: G B W 6.12.0-rc3-syzkaller-00454-gdb87114dcf13 #0 [ 776.925301][T12896] Tainted: [B]=BAD_PAGE, [W]=WARN [ 776.930446][T12896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 776.940651][T12896] Call Trace: [ 776.944040][T12896] [ 776.947084][T12896] dump_stack_lvl+0x216/0x2d0 [ 776.951966][T12896] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 776.957964][T12896] dump_stack+0x1e/0x30 [ 776.962319][T12896] panic+0x4e2/0xcf0 [ 776.966419][T12896] ? kmsan_get_metadata+0xc1/0x1c0 [ 776.971726][T12896] kmsan_report+0x2c7/0x2d0 [ 776.976451][T12896] ? stack_depot_save+0x12/0x20 [ 776.981500][T12896] ? kmsan_internal_chain_origin+0x57/0xd0 [ 776.987527][T12896] ? kmsan_internal_memmove_metadata+0x17b/0x230 [ 776.994078][T12896] ? __msan_warning+0x95/0x120 [ 776.999046][T12896] ? rxrpc_lookup_peer_rcu+0x2f8/0x300 [ 777.004720][T12896] ? rxrpc_input_error+0x756/0x16e0 [ 777.010119][T12896] ? rxrpc_io_thread+0x13aa/0x5190 [ 777.015414][T12896] ? kthread+0x3e2/0x540 [ 777.019855][T12896] ? ret_from_fork+0x6d/0x90 [ 777.024625][T12896] ? ret_from_fork_asm+0x1a/0x30 [ 777.029784][T12896] ? kmsan_get_metadata+0x13e/0x1c0 [ 777.035172][T12896] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 777.041731][T12896] ? kmsan_get_metadata+0x13e/0x1c0 [ 777.047092][T12896] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 777.053643][T12896] ? kmsan_get_metadata+0x13e/0x1c0 [ 777.059015][T12896] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 777.065004][T12896] ? kmsan_get_metadata+0x13e/0x1c0 [ 777.070376][T12896] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 777.076389][T12896] __msan_warning+0x95/0x120 [ 777.081190][T12896] rxrpc_lookup_peer_rcu+0x2f8/0x300 [ 777.086709][T12896] rxrpc_input_error+0x756/0x16e0 [ 777.091947][T12896] ? kmsan_get_metadata+0x13e/0x1c0 [ 777.097327][T12896] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 777.103877][T12896] ? kmsan_get_metadata+0x13e/0x1c0 [ 777.109254][T12896] rxrpc_io_thread+0x13aa/0x5190 [ 777.114406][T12896] ? kmsan_get_metadata+0x13e/0x1c0 [ 777.119784][T12896] ? kmsan_get_metadata+0x13e/0x1c0 [ 777.125176][T12896] kthread+0x3e2/0x540 [ 777.129466][T12896] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 777.134953][T12896] ? __pfx_kthread+0x10/0x10 [ 777.139767][T12896] ret_from_fork+0x6d/0x90 [ 777.144374][T12896] ? __pfx_kthread+0x10/0x10 [ 777.149177][T12896] ret_from_fork_asm+0x1a/0x30 [ 777.154161][T12896] [ 777.157555][T12896] Kernel Offset: disabled [ 777.161955][T12896] Rebooting in 86400 seconds..