last executing test programs: 3m29.897551147s ago: executing program 0 (id=1829): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r4, 0x2, 0x1, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 3m28.753225651s ago: executing program 0 (id=1833): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c}, 0x90) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001080)={0x1, 0x0, [{0x1000, 0xc1, &(0x7f0000000c40)=""/193}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000040)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000100), 0x2) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000001180)=""/4100, 0x1004}], 0x1, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffc000/0x4000)=nil, 0x1002, 0xb, 0x8012, 0xffffffffffffffff, 0x83000000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) fcntl$setlease(r6, 0x11, 0x0) 3m26.018421255s ago: executing program 0 (id=1835): syz_emit_ethernet(0x62, &(0x7f0000000600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @loopback, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) 2m45.277588361s ago: executing program 0 (id=1835): syz_emit_ethernet(0x62, &(0x7f0000000600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @loopback, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) 1m53.446996676s ago: executing program 0 (id=1835): syz_emit_ethernet(0x62, &(0x7f0000000600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @loopback, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) 1m0.546503202s ago: executing program 0 (id=1835): syz_emit_ethernet(0x62, &(0x7f0000000600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @loopback, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) 39.552832049s ago: executing program 4 (id=2281): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x40}, [@NDA_VLAN={0x6, 0x5, 0x1}]}, 0x24}}, 0x0) getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32, @ANYBLOB="0000000000000000b705000008000b000000000000000000"], &(0x7f0000000140)='GPL\x00', 0x25e9, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xb43e, 0x8428}, 0x10, 0x2e70c, 0xffffffffffffffff, 0x3, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000800)=[{0x4, 0x1, 0x9, 0xa}, {0x3, 0x1, 0x9, 0xc}, {0x4, 0x4, 0x0, 0x2}], 0x10, 0x8000}, 0x90) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) getpid() syz_pidfd_open(0x0, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_pidfd_open(0x0, 0x0) ioctl$HCIINQUIRY(r2, 0x400448cb, 0x0) prctl$PR_SET_IO_FLUSHER(0x34, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000280)=0x7fff) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000180)={r4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000004c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x3, r3, 0x5}) socket$inet6(0xa, 0x3, 0x7) 33.965444961s ago: executing program 3 (id=2301): r0 = socket$inet6(0xa, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) dup2(r0, r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) getpgrp(0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000071000100000000010000000007000000", @ANYRES32=r7, @ANYBLOB="0c00018008000100000001"], 0x24}}, 0x0) 32.033730292s ago: executing program 3 (id=2305): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1250000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 31.819307247s ago: executing program 3 (id=2307): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000e00)=ANY=[@ANYBLOB], 0x69, 0x0) 31.651873017s ago: executing program 3 (id=2308): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="d73c0000faffffffffff0600000008000300", @ANYRES32=r3, @ANYBLOB="08000500060000001400040067656e6576653000"], 0x5c}}, 0x0) 29.11122409s ago: executing program 3 (id=2317): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000032f44910c0090102a40a010203010902120001000000000904000000"], 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='comm\x00') writev(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)='X', 0x1}], 0x1) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e6d0d02"], 0x70) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000100)=0x1) rmdir(&(0x7f00000000c0)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000), 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000500)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) poll(&(0x7f0000000080)=[{r2}, {r2}], 0x2, 0x24b) write$uinput_user_dev(r2, &(0x7f00000021c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) read$FUSE(r1, &(0x7f00000103c0)={0x2020}, 0x2020) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x2}, 0x8) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000140)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000840)='z', 0x1, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000280)="aa", 0x1, 0x0, 0x0, 0x0) 26.80810792s ago: executing program 3 (id=2325): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x40}, [@NDA_VLAN={0x6, 0x5, 0x1}]}, 0x24}}, 0x0) getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32, @ANYBLOB="0000000000000000b705000008000b000000000000000000"], &(0x7f0000000140)='GPL\x00', 0x25e9, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xb43e, 0x8428}, 0x10, 0x2e70c, 0xffffffffffffffff, 0x3, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000800)=[{0x4, 0x1, 0x9, 0xa}, {0x3, 0x1, 0x9, 0xc}, {0x4, 0x4, 0x0, 0x2}], 0x10, 0x8000}, 0x90) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) getpid() syz_pidfd_open(0x0, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_pidfd_open(0x0, 0x0) ioctl$HCIINQUIRY(r2, 0x400448cb, 0x0) prctl$PR_SET_IO_FLUSHER(0x34, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000280)=0x7fff) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000180)={r4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000004c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x3, r3, 0x5}) socket$inet6(0xa, 0x3, 0x7) 9.392757829s ago: executing program 2 (id=2366): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="480000001400010000000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000100ff01000000000000000000000000000108000800020400fc000000000000000000000000000000821d855337cba6f3f17a9facdd3ea53212b47ff009ddd9d9748e9145097b204b743ae403cbb963db249c133a8aa8961be23c7b7b45fc770b39395f2c73b4f85e8949fd8542fbbc4c6cc1e99fa6b290169abc8d"], 0x48}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000000)=""/106, 0x6a, 0x0, &(0x7f0000000140)=""/217, 0xd9}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x18, 0x3, &(0x7f0000001640)=@framed, &(0x7f00000012c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001440)={0x5}, 0x10}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r3, 0x20, &(0x7f0000000440)={&(0x7f0000000280)=""/136, 0x88, 0x0, &(0x7f0000000cc0)=""/197, 0xc5}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10, 0x4b4}, 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000001a0000003100000008000000f56f00000000000900000000050000000000000f02000000384d0000002e5f5f2e615f00b3ef7c07323e3f"], 0x0, 0x3c}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x12}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x26, 0x26, 0x2}, {0x0, [0x61, 0x5f, 0x61, 0x5f, 0x5f, 0x2e, 0x61]}}, 0x0, 0x42, 0x0, 0x1}, 0x79) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x6e, "5e4a9e3d09dd420055e80569fdd55959c77804c7258846f9d6b0b2aff63dd55e540760026ac1639f1b5672aeccd172489222f597072e815f0c08b0e6f791230057200d9a069d7071fc036ec4d3d3c758b833d0b86bf1786ef475d03516889ad1519aa0660aaceac3ef84922a005e"}, &(0x7f0000000240)=0x76) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000002c0)={r7}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000952fd1d6f55d17118e32e67da95828e156df7b1c76444f87e13160d8b0b20eeb4c9ce36539b43f21957c55bc4475b62017ad10cf769a318190df1128f7363cec66a63661bded17e700"/97], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe, 0x1}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r8, &(0x7f0000008f80)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000280)=""/123, 0x7b}, {&(0x7f0000000ac0)=""/241, 0xf1}, {&(0x7f0000000300)=""/118, 0x76}, {&(0x7f0000000540)=""/77, 0x4d}, {&(0x7f0000000bc0)=""/111, 0x6f}], 0x6}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 7.719959825s ago: executing program 2 (id=2370): r0 = socket$inet6(0xa, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000000)=0x655e, 0x4) dup2(r0, r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) getpgrp(0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000071000100000000010000000007000000", @ANYRES32=r7, @ANYBLOB="0c00018008000100000001"], 0x24}}, 0x0) 7.032693186s ago: executing program 2 (id=2372): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="d73c0000faffffffffff0600000008000300", @ANYRES32=r3, @ANYBLOB="08000500060000001400040067656e657665300000000000000000000800"], 0x5c}}, 0x0) 6.752880343s ago: executing program 2 (id=2373): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f00000000c0)={[{@noextent_cache}, {@fastboot}, {@noinline_dentry}, {@nolazytime}]}, 0x1, 0x551d, &(0x7f000000ab00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 6.551564196s ago: executing program 1 (id=2374): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000533fa0), &(0x7f0000bbdffc)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0b000000000000000000010000000900010073797a300000000040000000030a05020000000000000000010000000900030073797a320000000014000480080002400000004008000140000000000900010073797a300000000050000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a30"], 0xc4}}, 0x0) 6.264216923s ago: executing program 4 (id=2314): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000880)={@mcast1}, 0x20) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') openat$mice(0xffffff9c, 0x0, 0x400) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000040)) write$sequencer(0xffffffffffffffff, &(0x7f0000000040)=[@l={0x92, 0x0, 0xd0}], 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() setns(0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x0, 0x0) 6.145708129s ago: executing program 1 (id=2376): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call]}, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x3, 0xc, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) 5.643338933s ago: executing program 4 (id=2378): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) epoll_create(0x7ff) 5.356471787s ago: executing program 1 (id=2379): socket$tipc(0x1e, 0x0, 0x0) socket$tipc(0x1e, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x41}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140), 0x10, 0x0}, 0x0) unshare(0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'ip6_vti0\x00', {0x2, 0x0, @empty}}) syz_80211_inject_frame(0x0, 0x0, 0x4e0) 4.404504115s ago: executing program 1 (id=2381): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000580)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x58, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@srh={0x32, 0x4, 0x4, 0x2, 0x0, 0x0, 0x7, [@empty, @mcast2]}]}}}}}}}, 0x0) close(0xffffffffffffffff) syz_emit_ethernet(0x57, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x21, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x1, "122b472e41e24b"}]}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) write$uinput_user_dev(r1, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000580)=""/104, 0x68}], 0x1) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 4.077186045s ago: executing program 2 (id=2382): r0 = syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=0xffffffffffffffff], 0x1, 0x553b, &(0x7f000000ac00)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYRES32=r0], 0x0, 0x3fffffff, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x90) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRES64=r0], 0x0, 0x5514, &(0x7f0000005d80)="$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") sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0}, 0x90) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r10, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20242, 0x0) ioctl$FS_IOC_RESVSP(r11, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8001}) r12 = creat(&(0x7f0000000000)='./bus\x00', 0x46) read$FUSE(r10, &(0x7f0000000a00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r12, &(0x7f0000000200)={0x78, 0x0, r13, {0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}}}, 0x78) 2.151564216s ago: executing program 4 (id=2388): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x1b00}}, 0x20}, 0x1, 0x8100}, 0x0) 2.089978167s ago: executing program 5 (id=2389): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000880)={@mcast1}, 0x20) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') openat$mice(0xffffff9c, 0x0, 0x400) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000040)) write$sequencer(0xffffffffffffffff, &(0x7f0000000040)=[@l={0x92, 0x0, 0xd0}], 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() setns(0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x0, 0x0) 1.997682732s ago: executing program 2 (id=2390): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call]}, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x3, 0xc, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) 1.308829843s ago: executing program 1 (id=2392): socket$tipc(0x1e, 0x0, 0x0) socket$tipc(0x1e, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x41}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140), 0x10, 0x0}, 0x0) unshare(0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'ip6_vti0\x00', {0x2, 0x0, @empty}}) syz_80211_inject_frame(0x0, 0x0, 0x4e0) 1.307301914s ago: executing program 5 (id=2393): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000640)={&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001280)='\\', 0xffffffe3}], 0x1}, 0x24004044) 1.071424447s ago: executing program 5 (id=2394): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="480000001400010000000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000100ff01000000000000000000000000000108000800020400fc000000000000000000000000000000821d855337cba6f3f17a9facdd3ea53212b47ff009ddd9d9748e9145097b204b743ae403cbb963db249c133a8aa8961be23c7b7b45fc770b39395f2c73b4f85e8949fd8542fbbc4c6cc1e99fa6b290169abc8d"], 0x48}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000000)=""/106, 0x6a, 0x0, &(0x7f0000000140)=""/217, 0xd9}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x18, 0x3, &(0x7f0000001640)=@framed, &(0x7f00000012c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001440)={0x5}, 0x10}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r3, 0x20, &(0x7f0000000440)={&(0x7f0000000280)=""/136, 0x88, 0x0, &(0x7f0000000cc0)=""/197, 0xc5}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10, 0x4b4}, 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000001a0000003100000008000000f56f00000000000900000000050000000000000f02000000384d0000002e5f5f2e615f00b3ef7c07323e3f"], 0x0, 0x3c}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x12}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x26, 0x26, 0x2}, {0x0, [0x61, 0x5f, 0x61, 0x5f, 0x5f, 0x2e, 0x61]}}, 0x0, 0x42, 0x0, 0x1}, 0x79) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x6e, "5e4a9e3d09dd420055e80569fdd55959c77804c7258846f9d6b0b2aff63dd55e540760026ac1639f1b5672aeccd172489222f597072e815f0c08b0e6f791230057200d9a069d7071fc036ec4d3d3c758b833d0b86bf1786ef475d03516889ad1519aa0660aaceac3ef84922a005e"}, &(0x7f0000000240)=0x76) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000002c0)={r7}, 0x8) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000952fd1d6f55d17118e32e67da95828e156df7b1c76444f87e13160d8b0b20eeb4c9ce36539b43f21957c55bc4475b62017ad10cf769a318190df1128f7363cec66a63661bded17e700"/97], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe, 0x1}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r9, &(0x7f0000008f80)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000280)=""/123, 0x7b}, {&(0x7f0000000ac0)=""/241, 0xf1}, {&(0x7f0000000300)=""/118, 0x76}, {&(0x7f0000000540)=""/77, 0x4d}, {&(0x7f0000000bc0)=""/111, 0x6f}], 0x6}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r10, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r11, 0x0, 0x40000004, 0xc) socket$inet6(0xa, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x348, 0x11, 0x148, 0x0, 0x10, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2e0, 0x348, 0x1c, {}, [@common=@set={{0x40}, {{0x0, [0x5, 0x0, 0x0, 0x6]}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98, 0x2202}, {0x28}}}}, 0x4f8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 513.880253ms ago: executing program 4 (id=2395): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 453.838155ms ago: executing program 5 (id=2396): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x2df) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0x0, 0x0, 0x0) 309.019982ms ago: executing program 1 (id=2397): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000032f44910c0090102a40a010203010902120001000000000904000000"], 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='comm\x00') writev(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)='X', 0x1}], 0x1) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e6d0d02"], 0x70) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000100)=0x1) rmdir(&(0x7f00000000c0)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xffffffd7}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000), 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000500)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) poll(&(0x7f0000000080)=[{r3}, {r3}], 0x2, 0x24b) write$uinput_user_dev(r3, &(0x7f00000021c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) read$FUSE(r2, &(0x7f00000103c0)={0x2020}, 0x2020) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x2}, 0x8) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000140)) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000840)='z', 0x1, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000280)="aa", 0x1, 0x0, 0x0, 0x0) 125.907359ms ago: executing program 5 (id=2398): r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='sysf\xa3\x19%C4\x0f\x86\x7ft3\x8b\x80|\xf2\f\n;*\xb40\xcf \xef\xce\xa1r\xb2\xa06\xcax\xb9\x81\x06\xa7H{~\xa1\xd9\xbf', 0x0, r1) 65.862858ms ago: executing program 4 (id=2399): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) epoll_create(0x7ff) 0s ago: executing program 5 (id=2400): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000533fa0), &(0x7f0000bbdffc)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0b000000000000000000010000000900010073797a300000000040000000030a05020000000000000000010000000900030073797a320000000014000480080002400000004008000140000000000900010073797a300000000050000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a30"], 0xc4}}, 0x0) kernel console output (not intermixed with test programs): 1/22 14:59 (1000) [ 696.364460][T11856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.379102][T11856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.422422][T11856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.481085][T11804] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 696.536481][T11856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.554915][T11856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.593109][T11856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.832728][ T8] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 696.973050][T11856] hsr_slave_0: entered promiscuous mode [ 696.981209][T11856] hsr_slave_1: entered promiscuous mode [ 696.996617][T11856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 697.004357][T11856] Cannot create hsr debugfs directory [ 697.032533][ T63] bridge_slave_1: left allmulticast mode [ 697.046035][ T63] bridge_slave_1: left promiscuous mode [ 697.058562][ T8] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 697.062622][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.095405][ T8] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 697.109559][ T63] bridge_slave_0: left allmulticast mode [ 697.118218][ T8] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 697.135129][ T8] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 697.144017][ T8] usb 5-1: Manufacturer: syz [ 697.148636][ T63] bridge_slave_0: left promiscuous mode [ 697.148990][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.180912][ T63] bridge_slave_1: left allmulticast mode [ 697.188837][ T63] bridge_slave_1: left promiscuous mode [ 697.194273][ T8] usb 5-1: SerialNumber: syz [ 697.194790][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.237379][ T63] bridge_slave_0: left allmulticast mode [ 697.252922][ T63] bridge_slave_0: left promiscuous mode [ 697.276973][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.311372][ T63] bridge_slave_1: left allmulticast mode [ 697.317511][ T63] bridge_slave_1: left promiscuous mode [ 697.323397][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.341029][ T63] bridge_slave_0: left allmulticast mode [ 697.347314][ T63] bridge_slave_0: left promiscuous mode [ 697.353487][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.002799][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.018291][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.031733][ T63] bond0 (unregistering): Released all slaves [ 699.086713][T12005] Falling back ldisc for pty28. [ 699.184420][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.198902][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.214012][ T63] bond0 (unregistering): Released all slaves [ 699.384048][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.400753][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.419343][ T63] bond0 (unregistering): Released all slaves [ 699.514194][T12014] netlink: 'syz.1.1964': attribute type 10 has an invalid length. [ 699.679706][ T8] yealink 5-1:36.0: invalid payload size 0, expected 16 [ 699.712618][ T8] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:36.0/input/input99 [ 699.756321][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 699.763570][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 699.770728][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 699.777903][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 699.785674][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 699.792818][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 699.799964][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 699.807027][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 699.813912][ C0] yealink 5-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 699.880411][ T8] usb 5-1: USB disconnect, device number 21 [ 699.986914][T12025] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1967'. [ 700.275411][ T5304] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 700.307576][T12027] netlink: 'syz.4.1968': attribute type 1 has an invalid length. [ 700.475223][ T5304] usb 2-1: Using ep0 maxpacket: 32 [ 700.483912][T12027] bond2: entered promiscuous mode [ 700.496771][ T5304] usb 2-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 700.500750][T12027] bond2: entered allmulticast mode [ 700.517383][ T5304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.577849][ T5304] usb 2-1: config 0 descriptor?? [ 700.595913][ T5304] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 700.642930][T11812] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 700.806605][ T5304] gspca_sunplus: reg_w_riv err -71 [ 700.822224][ T5304] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 700.844118][ T5304] usb 2-1: USB disconnect, device number 18 [ 700.854724][T11812] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 700.887740][T11812] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 701.126922][T11812] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 701.302674][T11804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.047606][T12040] loop1: detected capacity change from 0 to 2048 [ 702.078602][T12040] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=18576, location=18576 [ 702.160916][T12040] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 702.334813][T11804] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.516178][ T63] hsr_slave_0: left promiscuous mode [ 702.533872][ T63] hsr_slave_1: left promiscuous mode [ 702.556607][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.564141][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.607085][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.614703][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.649895][ T63] hsr_slave_0: left promiscuous mode [ 702.668441][ T63] hsr_slave_1: left promiscuous mode [ 702.675315][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.705324][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.714183][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.733137][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.750860][ T63] hsr_slave_0: left promiscuous mode [ 702.758241][ T63] hsr_slave_1: left promiscuous mode [ 702.765008][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.772672][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.781665][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.791746][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.873962][ T63] veth1_macvtap: left promiscuous mode [ 702.879900][ T63] veth0_macvtap: left promiscuous mode [ 702.885803][ T63] veth1_vlan: left promiscuous mode [ 702.891869][ T63] veth0_vlan: left promiscuous mode [ 702.901346][ T63] veth1_macvtap: left promiscuous mode [ 702.909356][ T63] veth0_macvtap: left promiscuous mode [ 702.915390][ T63] veth1_vlan: left promiscuous mode [ 702.920848][ T63] veth0_vlan: left promiscuous mode [ 702.928804][ T63] veth1_macvtap: left promiscuous mode [ 702.934407][ T63] veth0_macvtap: left promiscuous mode [ 702.935425][ T5304] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 702.940760][ T63] veth1_vlan: left promiscuous mode [ 702.953125][ T63] veth0_vlan: left promiscuous mode [ 703.150832][ T5304] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 703.173746][ T5304] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 703.206153][ T5304] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 703.222132][ T5304] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 703.236245][ T5304] usb 2-1: Manufacturer: syz [ 703.245458][ T5304] usb 2-1: SerialNumber: syz [ 704.514766][ T63] team0 (unregistering): Port device team_slave_1 removed [ 704.595881][ T63] team0 (unregistering): Port device team_slave_0 removed [ 705.626626][T12050] Falling back ldisc for pty22. [ 706.071335][ T63] team0 (unregistering): Port device team_slave_1 removed [ 706.186129][ T63] team0 (unregistering): Port device team_slave_0 removed [ 707.809716][ T63] team0 (unregistering): Port device team_slave_1 removed [ 707.873356][ T63] team0 (unregistering): Port device team_slave_0 removed [ 708.563253][ T4854] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.570626][ T4854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.587590][ T4854] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.595146][ T4854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.801199][ T5304] yealink 2-1:36.0: invalid payload size 0, expected 16 [ 708.822681][ T5304] input: Yealink usb-p1k as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:36.0/input/input100 [ 708.878419][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 708.885635][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 708.892751][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 708.899784][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 708.906833][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 708.913926][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 708.921645][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 708.928781][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 708.935582][ C0] yealink 2-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 708.999979][T11807] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 709.009265][ T5304] usb 2-1: USB disconnect, device number 19 [ 709.037186][T11807] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 709.220047][T11807] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 709.311434][T11807] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 709.366504][T12063] loop1: detected capacity change from 0 to 1764 [ 709.384355][T12063] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 711.977826][ T29] audit: type=1326 audit(1720797960.916:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.1.1980" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1f7775bd9 code=0x0 [ 712.244761][T11812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.479008][T12074] loop4: detected capacity change from 0 to 2048 [ 712.497818][T12074] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=18576, location=18576 [ 712.549145][T11812] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.583113][T12074] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 712.617904][ T5304] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.625279][ T5304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.741818][ T5304] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.749219][ T5304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.393832][T11856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 713.452617][T11856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 713.455034][T12090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 713.530439][T11856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 713.560759][T11804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.572592][T11856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 713.598751][T11812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 713.709240][T11807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.787265][ T45] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 713.829165][T11807] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.883807][T10958] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.891186][T10958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.959947][ T781] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.967324][ T781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.018171][ T45] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 714.032319][ T45] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 714.077766][ T45] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 714.099598][ T45] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 714.124730][ T45] usb 5-1: Manufacturer: syz [ 714.135978][ T45] usb 5-1: SerialNumber: syz [ 714.330858][T11804] veth0_vlan: entered promiscuous mode [ 714.478858][T12092] sp0: Synchronizing with TNC [ 714.489371][T11804] veth1_vlan: entered promiscuous mode [ 714.710404][T11812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.823861][T11856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.041202][ T45] yealink 5-1:36.0: invalid payload size 0, expected 16 [ 715.063951][ T45] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:36.0/input/input101 [ 715.080199][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 715.087380][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 715.094684][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 715.101959][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 715.109120][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 715.116382][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 715.123557][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 715.130691][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 715.137493][ C1] yealink 5-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 715.140341][T11804] veth0_macvtap: entered promiscuous mode [ 715.343930][ T45] usb 5-1: USB disconnect, device number 22 [ 715.567130][T11804] veth1_macvtap: entered promiscuous mode [ 715.622715][T11856] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.872627][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.879982][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.008449][T11804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.065810][T11804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.075906][T11804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.087943][T11804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.138173][T11804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.153581][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.156475][T12115] loop4: detected capacity change from 0 to 1764 [ 716.160876][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.168569][T12115] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 716.247150][T11804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.295088][T11804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.322987][T11804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.383798][T11804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.427943][T11804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.595920][T11804] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.645260][T11804] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.654037][T11804] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.692490][T11804] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.296475][ T29] audit: type=1326 audit(1720797966.496:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12114 comm="syz.4.1992" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe72175bd9 code=0x0 [ 717.971250][T11807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.339884][T11812] veth0_vlan: entered promiscuous mode [ 718.493424][T12138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 718.519405][T11812] veth1_vlan: entered promiscuous mode [ 718.599004][T11807] veth0_vlan: entered promiscuous mode [ 718.613988][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.644572][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.737979][T11807] veth1_vlan: entered promiscuous mode [ 718.829541][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.843508][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.909848][T11812] veth0_macvtap: entered promiscuous mode [ 719.134650][T11856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 719.197908][T11812] veth1_macvtap: entered promiscuous mode [ 719.399284][T12154] loop4: detected capacity change from 0 to 64 [ 719.535684][T12154] MINIX-fs: mounting file system with errors, running fsck is recommended [ 719.675400][ T8] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 719.804552][T11812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.920854][T11812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.026599][ T8] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 720.053042][T11812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.153462][ T8] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 720.181778][T11812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.225022][T11812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.236010][T11812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.251537][T11812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.255712][ T8] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 720.284718][T11807] veth0_macvtap: entered promiscuous mode [ 720.305552][ T8] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 720.314079][ T8] usb 2-1: Manufacturer: syz [ 720.362750][T11812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.381962][ T8] usb 2-1: SerialNumber: syz [ 720.390757][T11812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.412200][T11812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.423306][T11812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.453902][T11812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.475432][T11812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.498547][T11812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.550577][T11807] veth1_macvtap: entered promiscuous mode [ 720.592456][T11812] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.616335][T11812] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.635904][T11812] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.648977][T11812] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.727404][T12153] sp0: Synchronizing with TNC [ 720.923258][T11807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.951994][T11807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.969874][T11807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.992481][T11807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.006695][T11807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.030844][T11807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.043637][T11807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.063425][T11807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.077917][T11807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.139062][ T5159] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 721.162801][ T8] yealink 2-1:36.0: invalid payload size 0, expected 16 [ 721.178750][T11807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.198834][ T8] input: Yealink usb-p1k as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:36.0/input/input102 [ 721.202086][T11807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.236097][T11807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.237448][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 721.253938][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 721.259100][T11807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.261014][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 721.277991][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 721.281267][T11807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.285225][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 721.302702][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 721.309790][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 721.316495][T11807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.316933][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 721.333799][ C0] yealink 2-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 721.334972][T11807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.341540][ C0] vkms_vblank_simulate: vblank timer overrun [ 721.368480][ T5159] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 721.380900][T11807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.389774][ T5159] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.413917][ T8] usb 2-1: USB disconnect, device number 20 [ 721.420179][ T5159] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.433933][T11807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.443197][ T5159] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 721.489604][ T5159] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 721.508011][ T5159] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 721.527687][ T5159] usb 3-1: Manufacturer: syz [ 721.545199][T11807] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.555988][ T5159] usb 3-1: config 0 descriptor?? [ 721.561371][T11807] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.582835][T11807] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.592829][T11807] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.682146][T11856] veth0_vlan: entered promiscuous mode [ 721.791554][T11856] veth1_vlan: entered promiscuous mode [ 721.927369][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.964477][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.043806][ T5159] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 722.078852][ T5159] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 722.123595][T12166] loop4: detected capacity change from 0 to 32768 [ 722.149472][ T5159] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 722.207802][T11856] veth0_macvtap: entered promiscuous mode [ 722.208719][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.261649][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.432238][T11856] veth1_macvtap: entered promiscuous mode [ 722.602885][ T3991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.648170][ T3991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.953911][T12177] find_entry called with index = 0 [ 722.961920][T12177] find_entry called with index = 0 [ 722.982163][T12179] find_entry called with index >= next_index [ 722.989505][T12179] find_entry called with index >= next_index [ 722.995725][T12179] find_entry called with index >= next_index [ 723.001796][T12179] find_entry called with index >= next_index [ 723.007973][T12179] find_entry called with index >= next_index [ 723.143361][T12177] find_entry called with index >= next_index [ 723.150068][T12177] find_entry called with index >= next_index [ 723.206892][T12177] find_entry called with index >= next_index [ 723.213462][T12177] find_entry called with index >= next_index [ 723.879015][T11856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.899825][T11856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.923901][T11856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.956511][ T5304] usb 3-1: reset high-speed USB device number 20 using dummy_hcd [ 723.988813][T11856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.046761][T11856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.065123][T11856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.095677][T11856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.115366][T11856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.135615][T11856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.180903][T11856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.203613][T11856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.248312][T11856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.307459][T11856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.325061][T11856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.326621][T12188] loop0: detected capacity change from 0 to 7 [ 724.345031][T11856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.365059][T11856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.389829][T11856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.446138][T11856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.475044][T11856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.515023][T11856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.544605][T11856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.594888][T11856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.644719][T11856] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.675280][T11856] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.684513][T11856] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.729565][T11856] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.751879][ T5325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.785023][ T5325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.867214][ T8] usb 3-1: USB disconnect, device number 20 [ 725.370405][T12201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.403954][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.443876][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.615194][ T5304] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 725.637475][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.670328][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.782553][T12186] loop1: detected capacity change from 0 to 32768 [ 725.813527][T12186] XFS: ikeep mount option is deprecated. [ 725.844248][ T5304] usb 6-1: config 36 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 725.859181][ T5304] usb 6-1: config 36 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 725.878517][ T5304] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 725.893671][ T5304] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 725.902902][ T5304] usb 6-1: Manufacturer: syz [ 725.924773][ T5304] usb 6-1: SerialNumber: syz [ 725.954131][T12186] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 726.105608][T12186] XFS (loop1): Ending clean mount [ 726.128506][T12186] XFS (loop1): Quotacheck needed: Please wait. [ 726.212170][T12204] sp0: Synchronizing with TNC [ 726.254729][T12186] XFS (loop1): Quotacheck: Done. [ 726.607364][ T5901] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 726.671551][ T8827] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.897112][ T5304] yealink 6-1:36.0: invalid payload size 0, expected 16 [ 726.928052][ T5304] input: Yealink usb-p1k as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:36.0/input/input103 [ 726.960000][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 726.967324][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 726.974669][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 726.981822][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 726.988926][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 726.996119][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 727.003165][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 727.010210][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 727.017002][ C0] yealink 6-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 727.022094][ T8827] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.079105][ T5304] usb 6-1: USB disconnect, device number 12 [ 727.533273][ T8827] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.243303][ T8827] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.444536][T12244] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 728.461921][T12244] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 728.593385][T12244] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 728.605348][T12244] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 728.653740][T12244] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 728.684178][T12244] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 728.779078][ T8783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 728.790256][ T8783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 728.806178][ T8783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 728.946929][ T8783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 728.956285][ T8783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 728.964175][ T8783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 728.978374][ T5110] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 728.990080][ T5110] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 728.998428][ T5110] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 729.014115][ T5110] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 729.023394][ T5110] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 729.031379][ T5110] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 729.480997][ T8827] bridge_slave_1: left allmulticast mode [ 729.495150][ T8827] bridge_slave_1: left promiscuous mode [ 729.525607][ T8827] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.601631][ T8827] bridge_slave_0: left allmulticast mode [ 729.627127][ T8827] bridge_slave_0: left promiscuous mode [ 729.647042][ T8827] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.081920][T12305] loop1: detected capacity change from 0 to 256 [ 731.145756][ T8783] Bluetooth: hci0: command tx timeout [ 731.234121][T12264] loop2: detected capacity change from 0 to 32768 [ 731.242279][T12264] XFS: ikeep mount option is deprecated. [ 731.280196][T12305] FAT-fs (loop1): Directory bread(block 64) failed [ 731.310528][T12264] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 731.318114][T12305] FAT-fs (loop1): Directory bread(block 65) failed [ 731.636704][T12305] FAT-fs (loop1): Directory bread(block 66) failed [ 731.654828][T12305] FAT-fs (loop1): Directory bread(block 67) failed [ 731.692038][T12305] FAT-fs (loop1): Directory bread(block 68) failed [ 731.745671][T12305] FAT-fs (loop1): Directory bread(block 69) failed [ 731.797627][T12305] FAT-fs (loop1): Directory bread(block 70) failed [ 731.831619][T12305] FAT-fs (loop1): Directory bread(block 71) failed [ 731.865434][T12305] FAT-fs (loop1): Directory bread(block 72) failed [ 731.903776][T12305] FAT-fs (loop1): Directory bread(block 73) failed [ 732.013440][T12264] XFS (loop2): Ending clean mount [ 732.091913][T12264] XFS (loop2): Quotacheck needed: Please wait. [ 732.099734][ T8827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.117009][ T8827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.142204][ T8827] bond0 (unregistering): Released all slaves [ 732.241792][T12264] XFS (loop2): Quotacheck: Done. [ 732.473254][T12307] warning: `syz.5.2049' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 732.491516][T11804] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 732.719594][ T29] audit: type=1326 audit(1720797981.926:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz.1.2048" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1f7775bd9 code=0x0 [ 733.016801][T12327] loop4: detected capacity change from 0 to 1024 [ 733.044606][T12325] netlink: 'syz.5.2053': attribute type 1 has an invalid length. [ 733.180907][T12327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.225383][ T8783] Bluetooth: hci0: command tx timeout [ 733.400865][T12341] loop3: detected capacity change from 0 to 1024 [ 733.544064][ T6183] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.616738][T12341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 734.061763][ T8827] hsr_slave_0: left promiscuous mode [ 734.116448][ T29] audit: type=1326 audit(1720797983.276:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12356 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f7775bd9 code=0x7ffc0000 [ 734.138982][ C0] vkms_vblank_simulate: vblank timer overrun [ 734.881682][ T8827] hsr_slave_1: left promiscuous mode [ 734.898569][T12367] loop5: detected capacity change from 0 to 16 [ 734.909448][T11807] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.922643][ T29] audit: type=1326 audit(1720797983.286:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12356 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fd1f7775bd9 code=0x7ffc0000 [ 734.975168][ T8827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 734.975771][T12367] erofs: (device loop5): mounted with root inode @ nid 36. [ 734.982599][ T8827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.018817][ T8827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 735.055053][ T8827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.079169][ T29] audit: type=1326 audit(1720797983.286:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12356 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f7775bd9 code=0x7ffc0000 [ 735.197387][T12373] loop1: detected capacity change from 0 to 128 [ 735.266342][ T8827] veth1_macvtap: left promiscuous mode [ 735.282450][ T8827] veth0_macvtap: left promiscuous mode [ 735.293706][ T8827] veth1_vlan: left promiscuous mode [ 735.305855][ T8783] Bluetooth: hci0: command tx timeout [ 735.309470][ T8827] veth0_vlan: left promiscuous mode [ 735.314533][T12373] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 735.345357][T12373] FAT-fs (loop1): Filesystem has been set read-only [ 735.704814][ T5218] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 735.930849][ T5218] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 735.973549][ T5218] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 736.007324][ T5218] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 736.017441][ T5218] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 736.036981][ T5218] usb 4-1: Manufacturer: syz [ 736.041663][ T5218] usb 4-1: SerialNumber: syz [ 736.629197][T12371] loop2: detected capacity change from 0 to 32768 [ 736.652600][T12371] XFS: ikeep mount option is deprecated. [ 736.779276][T12371] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 736.794536][T12410] loop1: detected capacity change from 0 to 512 [ 736.794735][T12403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2077'. [ 736.873424][T12410] EXT4-fs error (device loop1): mb_free_blocks:1945: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 736.962144][T12410] EXT4-fs (loop1): Remounting filesystem read-only [ 736.994070][T12410] EXT4-fs (loop1): 1 truncate cleaned up [ 737.041138][T12410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 737.158888][T12371] XFS (loop2): Ending clean mount [ 737.170698][ T5901] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.177939][T12371] XFS (loop2): Quotacheck needed: Please wait. [ 737.320393][T12371] XFS (loop2): Quotacheck: Done. [ 737.391678][ T5110] Bluetooth: hci0: command tx timeout [ 737.543956][T11804] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 737.829780][ T8827] team0 (unregistering): Port device team_slave_1 removed [ 737.999167][T12428] loop4: detected capacity change from 0 to 1024 [ 738.028555][ T8827] team0 (unregistering): Port device team_slave_0 removed [ 738.042716][T12428] hfsplus: failed to load catalog file [ 738.307619][T12375] Falling back ldisc for pty26. [ 739.465077][ T5110] Bluetooth: hci0: command 0x0405 tx timeout [ 742.468406][T12465] loop4: detected capacity change from 0 to 4096 [ 742.509213][T12465] EXT4-fs: Ignoring removed i_version option [ 742.549105][T12465] EXT4-fs: Ignoring removed nomblk_io_submit option [ 742.638252][T12465] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.682409][T12470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2093'. [ 742.819800][T12465] EXT4-fs error (device loop4): ext4_empty_dir:3103: inode #12: block 80: comm syz.4.2092: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 742.839794][ C0] vkms_vblank_simulate: vblank timer overrun [ 742.961299][T12465] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #12: comm syz.4.2092: directory missing '..' [ 743.300381][ T6183] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.707247][T12253] chnl_net:caif_netlink_parms(): no params data found [ 744.039901][T12253] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.064168][T12253] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.074542][T12253] bridge_slave_0: entered allmulticast mode [ 744.092014][T12253] bridge_slave_0: entered promiscuous mode [ 744.122265][T12253] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.130089][T12253] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.148256][T12253] bridge_slave_1: entered allmulticast mode [ 744.175130][T12253] bridge_slave_1: entered promiscuous mode [ 744.347355][T12253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.390580][T12253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.549702][T12253] team0: Port device team_slave_0 added [ 744.589215][T12253] team0: Port device team_slave_1 added [ 744.706989][T12253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.725082][T12253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 744.761912][T12253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 744.795851][T12253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 744.804392][T12253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 744.847430][T12253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.065906][ T5110] Bluetooth: hci0: command 0x0405 tx timeout [ 745.089837][T12253] hsr_slave_0: entered promiscuous mode [ 745.107008][T12253] hsr_slave_1: entered promiscuous mode [ 745.328164][ T5218] yealink 4-1:36.0: invalid payload size 0, expected 16 [ 745.343003][ T5218] input: Yealink usb-p1k as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:36.0/input/input104 [ 745.356974][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -32 [ 745.364395][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -32 [ 745.371774][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -32 [ 745.378832][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -32 [ 745.385880][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -32 [ 745.392969][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -32 [ 745.400036][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -32 [ 745.407108][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -32 [ 745.413917][ C1] yealink 4-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 745.506392][T12379] netlink: 'syz.5.2069': attribute type 1 has an invalid length. [ 747.296912][ T5110] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 747.308947][ T5110] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 747.319554][ T5110] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 747.333568][ T5110] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 747.347505][ T5110] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 747.357806][ T5110] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 747.419486][ T8783] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 747.438066][ T8783] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 747.448115][ T8783] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 747.470030][ T8783] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 747.478514][ T8783] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 747.498703][ T8783] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 747.528283][ T5159] usb 4-1: USB disconnect, device number 18 [ 747.835127][T12523] netlink: 'syz.1.2107': attribute type 1 has an invalid length. [ 748.192464][T12528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2108'. [ 748.392863][ T8827] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.480554][T12509] loop2: detected capacity change from 0 to 32768 [ 748.554895][ T8827] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.691929][ T8827] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.900002][ T8827] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.292645][T12253] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 749.367389][T12253] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 749.407052][T12253] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 749.465799][ T5110] Bluetooth: hci4: command tx timeout [ 749.626347][ T5110] Bluetooth: hci6: command tx timeout [ 749.751258][T12253] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 750.379494][T12569] netlink: 'syz.4.2119': attribute type 1 has an invalid length. [ 750.386635][T12574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2121'. [ 750.525474][T12513] chnl_net:caif_netlink_parms(): no params data found [ 750.994597][ T8827] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.545640][ T5110] Bluetooth: hci4: command tx timeout [ 751.706737][ T5110] Bluetooth: hci6: command 0x041b tx timeout [ 751.879684][ T8827] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.038764][T12510] chnl_net:caif_netlink_parms(): no params data found [ 752.221234][ T8827] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.532070][ T8827] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.590627][T12582] loop4: detected capacity change from 0 to 32768 [ 752.835457][T12513] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.842853][T12513] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.886210][T12513] bridge_slave_0: entered allmulticast mode [ 752.917289][T12513] bridge_slave_0: entered promiscuous mode [ 752.973798][T12513] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.016479][T12513] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.023774][T12513] bridge_slave_1: entered allmulticast mode [ 753.085048][T12513] bridge_slave_1: entered promiscuous mode [ 753.567221][T12513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.569987][T12624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2134'. [ 753.618380][T12625] netlink: 'syz.2.2133': attribute type 1 has an invalid length. [ 753.626538][ T8783] Bluetooth: hci4: command tx timeout [ 753.785242][ T8783] Bluetooth: hci6: command 0x041b tx timeout [ 753.804732][T12510] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.852978][T12510] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.879626][T12510] bridge_slave_0: entered allmulticast mode [ 753.917853][T12510] bridge_slave_0: entered promiscuous mode [ 753.947880][T12510] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.965240][T12510] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.973140][T12510] bridge_slave_1: entered allmulticast mode [ 754.007997][T12510] bridge_slave_1: entered promiscuous mode [ 754.022023][T12513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.331543][T12510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.383068][T12510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.472043][T12513] team0: Port device team_slave_0 added [ 754.522104][T12513] team0: Port device team_slave_1 added [ 754.572114][T12643] loop1: detected capacity change from 0 to 1764 [ 754.597203][T12643] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 755.090640][T12510] team0: Port device team_slave_0 added [ 755.729297][ T5110] Bluetooth: hci4: command tx timeout [ 755.781040][T12513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.805322][T12513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 755.875114][ T5110] Bluetooth: hci6: command 0x041b tx timeout [ 755.905101][T12513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.978622][T12652] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 60180 - 0 [ 756.013950][T12652] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 60180 - 0 [ 756.023085][T12652] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 60180 - 0 [ 756.032081][T12652] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 60180 - 0 [ 756.043608][T12652] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 52298 - 0 [ 756.054140][T12652] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 52298 - 0 [ 756.063094][T12652] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 52298 - 0 [ 756.108682][T12652] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 52298 - 0 [ 756.126318][T12652] geneve2: entered promiscuous mode [ 756.131566][T12652] geneve2: entered allmulticast mode [ 756.168174][ T8827] bridge_slave_1: left allmulticast mode [ 756.181218][ T8827] bridge_slave_1: left promiscuous mode [ 756.201573][ T8827] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.249111][ T8827] bridge_slave_0: left allmulticast mode [ 756.257638][ T8827] bridge_slave_0: left promiscuous mode [ 756.268034][ T8827] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.291679][ T8827] bridge_slave_1: left allmulticast mode [ 756.299553][ T8827] bridge_slave_1: left promiscuous mode [ 756.308934][ T8827] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.330802][ T8827] bridge_slave_0: left allmulticast mode [ 756.338773][ T8827] bridge_slave_0: left promiscuous mode [ 756.348742][ T8827] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.256451][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.271913][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 758.405225][ T5110] Bluetooth: hci6: command 0x041b tx timeout [ 759.020679][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2151'. [ 759.279009][ T8827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.293018][ T8827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.322529][ T8827] bond0 (unregistering): Released all slaves [ 759.474809][ T8827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.491654][ T8827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.504521][ T8827] bond0 (unregistering): Released all slaves [ 759.533333][T12510] team0: Port device team_slave_1 added [ 759.666282][T12513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.682102][T12513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.708205][ C0] vkms_vblank_simulate: vblank timer overrun [ 759.728096][T12513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.749512][T12665] netlink: 'syz.1.2146': attribute type 1 has an invalid length. [ 759.971862][T12510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.988154][T12510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.023854][T12510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.098395][T12697] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2155'. [ 760.144334][T12697] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2155'. [ 760.296173][T12706] loop1: detected capacity change from 0 to 1764 [ 760.314870][T12706] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 760.326306][T12510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 760.333299][T12510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.359425][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.410678][T12510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.824205][T12253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.152246][T12728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2163'. [ 762.180244][T12513] hsr_slave_0: entered promiscuous mode [ 762.188069][T12513] hsr_slave_1: entered promiscuous mode [ 762.198684][T12513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 762.222265][T12513] Cannot create hsr debugfs directory [ 762.541070][T12734] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 46483 - 0 [ 762.555472][T12734] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 46483 - 0 [ 762.564483][T12734] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 46483 - 0 [ 762.573737][T12734] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 46483 - 0 [ 762.585739][T12734] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 36672 - 0 [ 762.597419][T12734] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 36672 - 0 [ 762.606791][T12734] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 36672 - 0 [ 762.615916][T12734] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 36672 - 0 [ 762.631023][T12734] geneve2: entered promiscuous mode [ 762.643209][T12734] geneve2: entered allmulticast mode [ 762.865624][T12510] hsr_slave_0: entered promiscuous mode [ 762.873382][T12510] hsr_slave_1: entered promiscuous mode [ 762.880996][T12510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 762.891372][T12510] Cannot create hsr debugfs directory [ 763.135082][T12253] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.665695][ T8827] hsr_slave_0: left promiscuous mode [ 763.699722][ T8827] hsr_slave_1: left promiscuous mode [ 763.706487][ T8827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 763.723472][ T8827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.739472][ T8827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 763.756288][ T8827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.798112][T12754] loop1: detected capacity change from 0 to 1764 [ 763.835189][ T8827] hsr_slave_0: left promiscuous mode [ 763.836362][T12754] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 763.846648][ T8827] hsr_slave_1: left promiscuous mode [ 763.863622][ T8827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 763.883407][ T8827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.934711][ T8827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 763.952625][ T8827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.918535][ T8827] veth1_macvtap: left promiscuous mode [ 764.924230][ T8827] veth0_macvtap: left promiscuous mode [ 764.955420][ T8827] veth1_vlan: left promiscuous mode [ 764.971313][ T8827] veth0_vlan: left promiscuous mode [ 765.088035][ T8827] veth1_macvtap: left promiscuous mode [ 765.117782][ T8827] veth0_macvtap: left promiscuous mode [ 765.123768][ T8827] veth1_vlan: left promiscuous mode [ 765.154796][ T8827] veth0_vlan: left promiscuous mode [ 766.657252][T12774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2176'. [ 766.893690][T12748] Process accounting resumed [ 768.336695][ T8827] team0 (unregistering): Port device team_slave_1 removed [ 768.786406][ T8827] team0 (unregistering): Port device team_slave_0 removed [ 769.878428][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2191'. [ 771.122711][ T8827] team0 (unregistering): Port device team_slave_1 removed [ 771.200303][ T8827] team0 (unregistering): Port device team_slave_0 removed [ 772.066936][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.074292][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.277274][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.284578][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 772.908297][T12858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2205'. [ 774.969284][T12253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.203551][T12253] veth0_vlan: entered promiscuous mode [ 775.215750][T12513] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 775.236391][T12513] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 775.252230][T12513] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 775.271305][T12513] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 775.317830][T12253] veth1_vlan: entered promiscuous mode [ 775.554577][T12510] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 775.593849][T12510] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 775.632677][T12510] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 775.676401][T12510] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 775.782446][T12253] veth0_macvtap: entered promiscuous mode [ 776.008719][T12253] veth1_macvtap: entered promiscuous mode [ 776.084834][T12513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.151841][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.180893][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.191968][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.215817][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.244972][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.276111][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.307569][T12253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.443721][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.487506][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.512109][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.524023][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.543693][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.597776][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.639430][T12253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 776.674668][T12891] loop4: detected capacity change from 0 to 32768 [ 776.701736][T12513] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.727305][T12253] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.743714][T12253] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.756511][T12253] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.781113][T12253] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.131491][T12891] find_entry called with index >= next_index [ 777.137643][T12891] find_entry called with index >= next_index [ 777.143655][T12891] find_entry called with index >= next_index [ 777.149711][T12891] find_entry called with index >= next_index [ 777.155853][T12891] find_entry called with index >= next_index [ 777.356001][T12910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2219'. [ 777.394453][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.401745][ T5106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.429097][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.436416][ T5106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.893198][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.923328][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.976136][T12510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.143243][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.155926][T12922] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2220'. [ 778.202199][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.221620][T12510] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.308270][T12922] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2220'. [ 778.348619][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.355986][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.448247][ T781] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.455601][ T781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.853284][T12935] loop4: detected capacity change from 0 to 2048 [ 778.870167][T12935] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=18576, location=18576 [ 778.892663][T12935] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 779.303219][ T5326] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.410351][T12510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 779.649239][ T5326] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.902252][ T5326] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.963962][T12513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 780.127886][ T5326] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.355958][T12510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 780.529135][T12953] loop2: detected capacity change from 0 to 128 [ 780.682055][T12953] loop2: detected capacity change from 0 to 1024 [ 780.736365][T12953] hfsplus: unable to parse mount options [ 780.753288][ T5326] bridge_slave_1: left allmulticast mode [ 780.785708][ T5326] bridge_slave_1: left promiscuous mode [ 780.804604][ T5326] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.893930][ T5326] bridge_slave_0: left allmulticast mode [ 780.935060][ T5326] bridge_slave_0: left promiscuous mode [ 780.966921][ T5326] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.153619][T12965] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2232'. [ 781.653904][ T5110] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 781.668128][ T5110] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 781.692986][ T5110] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 781.718827][ T5110] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 781.733271][ T5110] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 781.775856][ T5110] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 782.052209][T12974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2234'. [ 782.355308][ T5326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.373494][ T5326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.386192][ T5326] bond0 (unregistering): Released all slaves [ 782.484807][T12510] veth0_vlan: entered promiscuous mode [ 782.700300][T12510] veth1_vlan: entered promiscuous mode [ 783.866640][ T8783] Bluetooth: hci0: command tx timeout [ 785.946308][ T8783] Bluetooth: hci0: command 0x041b tx timeout [ 788.025265][ T5110] Bluetooth: hci0: command 0x041b tx timeout [ 788.240010][ T5326] hsr_slave_0: left promiscuous mode [ 788.256009][ T5326] hsr_slave_1: left promiscuous mode [ 788.272041][ T5326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 788.305337][ T5326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 788.321599][ T5326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 788.338436][ T5326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 788.353269][T13001] loop2: detected capacity change from 0 to 1764 [ 788.368328][T13001] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 788.412818][ T5326] veth1_macvtap: left promiscuous mode [ 788.422739][ T5326] veth0_macvtap: left promiscuous mode [ 788.431296][ T5326] veth1_vlan: left promiscuous mode [ 788.448002][ T5326] veth0_vlan: left promiscuous mode [ 789.036786][ T29] audit: type=1326 audit(1720798038.106:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13000 comm="syz.2.2242" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3c9575bd9 code=0x0 [ 789.772096][T13014] loop2: detected capacity change from 0 to 2048 [ 789.809513][T13014] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=18576, location=18576 [ 789.854851][T13014] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 789.940131][T13019] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2246'. [ 790.108980][ T5110] Bluetooth: hci0: command 0x041b tx timeout [ 791.094608][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2248'. [ 791.580946][ T5326] team0 (unregistering): Port device team_slave_1 removed [ 791.648808][ T5326] team0 (unregistering): Port device team_slave_0 removed [ 792.195157][ T8783] Bluetooth: hci0: command 0x041b tx timeout [ 792.953558][T13044] loop4: detected capacity change from 0 to 1764 [ 792.973898][T13044] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 793.617561][ T29] audit: type=1326 audit(1720798042.656:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13043 comm="syz.4.2254" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe72175bd9 code=0x0 [ 793.932962][T12510] veth0_macvtap: entered promiscuous mode [ 793.986293][T12513] veth0_vlan: entered promiscuous mode [ 794.034757][T13049] loop1: detected capacity change from 0 to 512 [ 794.106180][T13049] EXT4-fs (loop1): blocks per group (71) and clusters per group (20800) inconsistent [ 794.117258][T12510] veth1_macvtap: entered promiscuous mode [ 794.276406][ T8783] Bluetooth: hci0: command 0x041b tx timeout [ 794.498977][T13052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 794.518213][T12513] veth1_vlan: entered promiscuous mode [ 794.602768][T12510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.653112][T12510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.663438][T12510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.684999][T12510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.700597][T12510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.711745][T12510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.753087][T12510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 794.778755][T12510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.822159][T12510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.863156][T12510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.880603][T12510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.890918][T12510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.905471][T12510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.948067][T12510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.983527][T12967] chnl_net:caif_netlink_parms(): no params data found [ 795.076403][T12510] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.089356][T12510] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.126030][T12510] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.147799][T12510] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.241689][T13060] loop1: detected capacity change from 0 to 2048 [ 795.291567][T13060] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=18576, location=18576 [ 795.370836][T13060] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 795.781782][T13069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2262'. [ 795.838330][T12967] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.880712][T12967] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.888617][T12967] bridge_slave_0: entered allmulticast mode [ 795.898507][T12967] bridge_slave_0: entered promiscuous mode [ 795.915957][T12967] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.923435][T12967] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.931124][T12967] bridge_slave_1: entered allmulticast mode [ 795.940841][T12967] bridge_slave_1: entered promiscuous mode [ 795.955934][ T781] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 796.094594][T12513] veth0_macvtap: entered promiscuous mode [ 796.171061][T12967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.190822][T12967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.209956][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.216627][ T781] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 796.280262][ T781] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 796.317352][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.336774][ T781] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 796.390064][ T781] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 796.419758][ T781] usb 3-1: Manufacturer: syz [ 796.432600][ T781] usb 3-1: SerialNumber: syz [ 796.482413][T12513] veth1_macvtap: entered promiscuous mode [ 796.794820][T12967] team0: Port device team_slave_0 added [ 796.941810][T13078] Process accounting paused [ 797.008418][T12967] team0: Port device team_slave_1 added [ 797.020805][T13071] sp0: Synchronizing with TNC [ 797.067423][ T5325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.085145][ T5325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.216577][T12967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.224768][T13087] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2265'. [ 797.235694][T12967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.264491][T12967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.313160][T12967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.322624][T12967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.349767][T12967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.354165][ T781] yealink 3-1:36.0: invalid payload size 0, expected 16 [ 797.409929][ T781] input: Yealink usb-p1k as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:36.0/input/input105 [ 797.429010][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 797.436160][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 797.443315][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 797.450466][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 797.458944][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 797.466195][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 797.473407][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 797.480790][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 797.487826][ C1] yealink 3-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 797.513094][ T781] usb 3-1: USB disconnect, device number 21 [ 797.531614][T12513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.558100][T12513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.569663][T12513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.594985][T12513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.614950][T12513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.644949][T12513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.664957][T12513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.684991][T12513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.711767][T12513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.892030][T12967] hsr_slave_0: entered promiscuous mode [ 797.926882][T12967] hsr_slave_1: entered promiscuous mode [ 797.955441][ T5110] Bluetooth: hci0: command 0x041b tx timeout [ 797.990260][T12513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.001922][T12513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.012289][T12513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.024511][T12513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.035440][T12513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.048051][T12513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.060420][T12513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.073461][T13089] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 798.073472][T12513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.096340][T12513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.258455][T12513] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.301731][T12513] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.370804][T12513] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.427989][T12513] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.543125][T13108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 799.142472][T13117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2274'. [ 799.201960][ T5326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.239758][T13119] loop2: detected capacity change from 0 to 2048 [ 799.247717][ T5326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.307232][T13119] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=18576, location=18576 [ 799.357357][T13119] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 799.469151][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.494138][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.883144][T13130] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2278'. [ 800.419389][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 801.380715][T12967] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 801.455217][T12967] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 801.496274][T12967] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 801.527252][T13149] loop5: detected capacity change from 0 to 1764 [ 801.544470][T12967] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 801.552806][T13149] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 802.652551][ T29] audit: type=1326 audit(1720798051.836:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.5.2283" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac15175bd9 code=0x0 [ 803.684441][T13169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 804.243091][T13175] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 804.243520][T12967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.273116][T13175] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 804.293051][T13175] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 804.322143][T12967] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.336693][T13175] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 804.346754][T13175] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 804.356581][T13175] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 804.393375][T13178] loop1: detected capacity change from 0 to 64 [ 804.405931][T13178] MINIX-fs: mounting file system with errors, running fsck is recommended [ 804.459944][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.467318][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.508855][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.516403][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.873788][T13186] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2293'. [ 804.998734][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.205149][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.319248][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.580122][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.642384][T13201] loop5: detected capacity change from 0 to 1764 [ 805.650762][T13201] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 806.214056][ T29] audit: type=1326 audit(1720798055.416:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.5.2299" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac15175bd9 code=0x0 [ 806.896103][T13175] Bluetooth: hci2: command tx timeout [ 807.539301][T13223] loop1: detected capacity change from 0 to 64 [ 807.556350][T13173] chnl_net:caif_netlink_parms(): no params data found [ 807.605676][T13223] MINIX-fs: mounting file system with errors, running fsck is recommended [ 807.932882][ T61] bridge_slave_1: left allmulticast mode [ 807.975063][ T61] bridge_slave_1: left promiscuous mode [ 807.981068][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.055392][ T61] bridge_slave_0: left allmulticast mode [ 808.063771][ T61] bridge_slave_0: left promiscuous mode [ 808.095930][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.115418][T13234] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2308'. [ 808.840032][T13246] loop5: detected capacity change from 0 to 1764 [ 808.850918][T13246] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 808.905173][T13175] Bluetooth: hci2: command tx timeout [ 809.254502][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 809.287502][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 809.323539][ T61] bond0 (unregistering): Released all slaves [ 809.347843][ T61] bond1 (unregistering): Released all slaves [ 809.429435][ T29] audit: type=1326 audit(1720798058.636:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13245 comm="syz.5.2313" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac15175bd9 code=0x0 [ 809.858044][T13173] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.893855][T13173] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.944970][T13173] bridge_slave_0: entered allmulticast mode [ 809.984365][T13173] bridge_slave_0: entered promiscuous mode [ 810.020403][T13173] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.037442][T13173] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.052075][T13173] bridge_slave_1: entered allmulticast mode [ 810.064869][T13173] bridge_slave_1: entered promiscuous mode [ 810.180344][T13173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.221825][T13173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.727704][T13173] team0: Port device team_slave_0 added [ 810.758943][T13262] loop5: detected capacity change from 0 to 64 [ 810.788699][T13262] MINIX-fs: mounting file system with errors, running fsck is recommended [ 810.976414][ T5218] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 810.997813][T13175] Bluetooth: hci2: command tx timeout [ 811.116687][ T5110] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 811.129747][ T5110] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 811.139629][ T5110] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 811.155333][ T5110] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 811.161863][T13173] team0: Port device team_slave_1 added [ 811.170859][ T5110] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 811.178632][ T5110] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 811.219227][ T5218] usb 4-1: Using ep0 maxpacket: 16 [ 811.247190][ T5218] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 811.256553][ T5218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.264711][ T5218] usb 4-1: Product: syz [ 811.269416][ T5218] usb 4-1: Manufacturer: syz [ 811.274802][ T5218] usb 4-1: SerialNumber: syz [ 811.283665][ T5218] usb 4-1: config 0 descriptor?? [ 811.296483][ T5218] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 811.518428][T13175] Bluetooth: hci4: Unknown advertising packet type: 0x74 [ 811.550345][T13258] input: syz0 as /devices/virtual/input/input106 [ 811.647452][T12967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 811.701370][ T61] hsr_slave_0: left promiscuous mode [ 811.728827][ T61] hsr_slave_1: left promiscuous mode [ 811.750417][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 811.766334][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 811.786503][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 811.804294][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 811.886593][ T61] veth1_macvtap: left promiscuous mode [ 811.898476][ T61] veth0_macvtap: left promiscuous mode [ 811.918701][ T61] veth1_vlan: left promiscuous mode [ 811.928586][ T61] veth0_vlan: left promiscuous mode [ 812.226565][ T5218] gp8psk: usb in 128 operation failed. [ 812.239662][ T5218] gp8psk: usb in 137 operation failed. [ 812.249524][ T5218] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 812.280938][ T5218] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 812.302164][ T5218] usb 4-1: media controller created [ 812.412192][ T5218] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 812.489134][ T5218] gp8psk_fe: Frontend revision 1 attached [ 812.499048][ T5218] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 812.507744][ T5218] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 812.811900][ T5218] gp8psk: usb in 138 operation failed. [ 812.827699][ T5218] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 812.838641][ T5218] gp8psk: found Genpix USB device pID = 201 (hex) [ 812.848841][ T5218] usb 4-1: USB disconnect, device number 19 [ 813.075842][T13175] Bluetooth: hci2: command tx timeout [ 813.153726][ T5218] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 813.242841][T13175] Bluetooth: hci1: command tx timeout [ 813.284099][T13294] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2327'. [ 813.718488][ T61] team0 (unregistering): Port device team_slave_1 removed [ 813.783334][ T61] team0 (unregistering): Port device team_slave_0 removed [ 814.484000][T13173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.493935][T13173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.519911][ C0] vkms_vblank_simulate: vblank timer overrun [ 814.531524][T13173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.586630][T13173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.593651][T13173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.673782][T13173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.031479][T13173] hsr_slave_0: entered promiscuous mode [ 815.052194][T13173] hsr_slave_1: entered promiscuous mode [ 815.070543][T13173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 815.088320][T13173] Cannot create hsr debugfs directory [ 815.345137][T13175] Bluetooth: hci1: command tx timeout [ 815.525128][ T5163] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 815.615273][T13314] capability: warning: `syz.5.2334' uses deprecated v2 capabilities in a way that may be insecure [ 816.114486][T12967] veth0_vlan: entered promiscuous mode [ 816.391248][T12967] veth1_vlan: entered promiscuous mode [ 816.545725][ T5163] usb 2-1: Using ep0 maxpacket: 16 [ 816.605444][ T5163] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 816.617094][ T5163] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.629027][ T5163] usb 2-1: Product: syz [ 816.633262][ T5163] usb 2-1: Manufacturer: syz [ 816.640160][ T5163] usb 2-1: SerialNumber: syz [ 816.666367][ T5163] usb 2-1: config 0 descriptor?? [ 816.688538][ T5163] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 816.795887][T12967] veth0_macvtap: entered promiscuous mode [ 816.849417][T13267] chnl_net:caif_netlink_parms(): no params data found [ 816.923506][T12967] veth1_macvtap: entered promiscuous mode [ 816.966937][T13311] input: syz0 as /devices/virtual/input/input107 [ 817.300817][T12967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.334856][T12967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.360548][T12967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.393568][T13175] Bluetooth: hci1: command tx timeout [ 817.408537][T12967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.431641][T12967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.445187][T12967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.476291][T12967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.487342][T12967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.505221][T12967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.617657][ T5163] gp8psk: usb in 128 operation failed. [ 817.624082][ T5163] gp8psk: usb in 137 operation failed. [ 817.633143][T13267] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.653370][ T5163] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 817.662124][T13267] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.678671][T13267] bridge_slave_0: entered allmulticast mode [ 817.687864][ T5163] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 817.692102][T13267] bridge_slave_0: entered promiscuous mode [ 817.707676][ T5163] usb 2-1: media controller created [ 817.778730][ T5163] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 817.838024][T12967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.864144][T12967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.875788][ T5163] gp8psk_fe: Frontend revision 1 attached [ 817.879167][T12967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.881577][ T5163] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 817.900166][T12967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.915960][ T5163] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 817.924933][T12967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.954012][T12967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.974770][T12967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.997426][T12967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.017397][T12967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 818.038517][T13267] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.056800][T13267] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.064127][T13267] bridge_slave_1: entered allmulticast mode [ 818.081450][T13267] bridge_slave_1: entered promiscuous mode [ 818.142917][T12967] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.166250][T13329] dccp_xmit_packet: Payload too large (65475) for featneg. [ 818.177703][ T5163] gp8psk: usb in 138 operation failed. [ 818.182752][T12967] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.183206][ T5163] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 818.193616][T12967] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.193680][T12967] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.226076][ T5163] gp8psk: found Genpix USB device pID = 201 (hex) [ 818.266868][ T5163] usb 2-1: USB disconnect, device number 21 [ 818.391230][T13332] loop1: detected capacity change from 0 to 1764 [ 818.409841][T13332] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 818.463329][T13267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 818.495833][T13267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.658847][ T5163] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 818.736020][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.742418][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.768682][T13173] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 818.847973][T13335] loop5: detected capacity change from 0 to 64 [ 818.911337][T13173] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 818.934729][T13335] MINIX-fs: mounting file system with errors, running fsck is recommended [ 818.951375][ T29] audit: type=1326 audit(1720798068.136:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13330 comm="syz.1.2341" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1f7775bd9 code=0x0 [ 819.072497][T13267] team0: Port device team_slave_0 added [ 819.116597][T13173] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 819.158732][T13267] team0: Port device team_slave_1 added [ 819.285831][T13173] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 819.354725][T13267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.367785][T13267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.424949][T13267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.450875][T13267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.465297][T13175] Bluetooth: hci1: command tx timeout [ 819.472406][T13267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.503243][T13267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.050218][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 820.516126][T13267] hsr_slave_0: entered promiscuous mode [ 820.537195][T13267] hsr_slave_1: entered promiscuous mode [ 820.564986][T13267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 820.572689][T13267] Cannot create hsr debugfs directory [ 820.815117][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.879446][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.147123][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.173355][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.325140][ T5218] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 821.535515][T13267] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.551031][T13267] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 60180 - 0 [ 821.563623][T13267] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 52298 - 0 [ 821.563930][ T5218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.600641][ T5218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.626215][ T5218] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 821.637366][ T5218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.684101][ T5218] usb 2-1: config 0 descriptor?? [ 821.814761][T13267] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.826331][T13267] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 60180 - 0 [ 821.837169][T13267] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 52298 - 0 [ 822.000047][T13267] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.011263][T13267] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 60180 - 0 [ 822.022142][T13267] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 52298 - 0 [ 822.093204][T13173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.203798][T13267] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.221273][T13267] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 60180 - 0 [ 822.235483][T13267] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 52298 - 0 [ 822.340918][T13173] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.377957][ T4854] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.385388][ T4854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.448472][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.455889][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.544155][ T5218] usb 2-1: string descriptor 0 read error: -71 [ 822.574435][ T5218] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #200: -71 [ 822.596187][ T5218] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71 [ 822.614563][ T5218] uclogic 0003:256C:006D.0007: failed probing pen v2 parameters: -71 [ 822.639510][ T5218] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 822.655738][ T5218] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 822.685689][ T5218] usb 2-1: USB disconnect, device number 22 [ 822.762916][T13173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 822.838484][T13267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 822.862632][T13267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 822.883045][T13267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 822.933741][T13267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 823.512072][T13267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.595808][ T8] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 823.673225][T13267] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.750999][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.758356][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.797185][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 823.803496][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.810797][ T5106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.837905][ T8] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 823.865839][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.878889][T13173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.891183][ T8] usb 2-1: Product: syz [ 823.911431][ T8] usb 2-1: Manufacturer: syz [ 823.919005][ T8] usb 2-1: SerialNumber: syz [ 823.939725][ T8] usb 2-1: config 0 descriptor?? [ 823.969546][ T5110] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 823.990062][ T8] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 824.001401][ T5110] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 824.010589][ T5110] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 824.041512][ T5110] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 824.065916][ T5110] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 824.073862][ T5110] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 824.287619][T13363] input: syz0 as /devices/virtual/input/input108 [ 824.460863][T13173] veth0_vlan: entered promiscuous mode [ 824.700080][T13173] veth1_vlan: entered promiscuous mode [ 824.953262][ T8] gp8psk: usb in 128 operation failed. [ 824.995353][ T8] gp8psk: usb in 137 operation failed. [ 825.012795][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 825.062789][ T8] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 825.119233][ T8] usb 2-1: media controller created [ 825.194296][T13173] veth0_macvtap: entered promiscuous mode [ 825.251540][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 825.351744][ T8] gp8psk_fe: Frontend revision 1 attached [ 825.361890][T13173] veth1_macvtap: entered promiscuous mode [ 825.405909][ T8] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 825.449394][ T8] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 825.528023][T13267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 825.662676][T13173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.699378][T13173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.740306][T13382] loop1: detected capacity change from 0 to 64 [ 825.754939][T13173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.765221][ T8] gp8psk: usb in 138 operation failed. [ 825.778772][T13383] loop5: detected capacity change from 0 to 512 [ 825.784930][T13173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.786121][ T8] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 825.794820][T13173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.815952][ T8] gp8psk: found Genpix USB device pID = 201 (hex) [ 825.820156][ T8] usb 2-1: USB disconnect, device number 23 [ 825.826203][T13173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.838684][T13173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.850640][T13382] MINIX-fs: mounting file system with errors, running fsck is recommended [ 825.867697][T13173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.883356][T13173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.897296][T13173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.911943][T13383] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.944287][T13383] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 825.955149][T13173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.987723][T13365] chnl_net:caif_netlink_parms(): no params data found [ 826.029498][T13173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 826.050694][T13173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.051781][T13383] EXT4-fs error (device loop5): ext4_do_update_inode:5075: inode #2: comm syz.5.2353: corrupted inode contents [ 826.062494][T13173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 826.086454][T13383] EXT4-fs error (device loop5): ext4_dirty_inode:5935: inode #2: comm syz.5.2353: mark_inode_dirty error [ 826.101144][T13383] EXT4-fs error (device loop5): ext4_do_update_inode:5075: inode #2: comm syz.5.2353: corrupted inode contents [ 826.113270][T13173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.127179][T13383] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.2353: mark_inode_dirty error [ 826.138723][T13173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 826.149586][T13173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.164247][T13173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 826.175284][T13173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.195063][T13175] Bluetooth: hci7: command tx timeout [ 826.221703][ T8] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 826.234835][T13173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 826.247778][T13173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.261678][T13173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 826.310533][T12513] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.330762][T13173] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.342235][T13173] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.356779][T13173] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.368065][T13173] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.575877][T13393] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2355'. [ 826.627854][T13397] loop5: detected capacity change from 0 to 1764 [ 826.638358][T13397] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 826.908979][T13365] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.934321][T13365] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.942022][T13365] bridge_slave_0: entered allmulticast mode [ 826.962886][T13365] bridge_slave_0: entered promiscuous mode [ 826.980446][T13365] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.010882][T13365] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.031330][T13365] bridge_slave_1: entered allmulticast mode [ 827.054092][T13365] bridge_slave_1: entered promiscuous mode [ 827.154642][ T29] audit: type=1326 audit(1720798076.356:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13396 comm="syz.5.2356" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac15175bd9 code=0x0 [ 827.495948][T13365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.547440][T13365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.618371][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.631641][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.860305][T13365] team0: Port device team_slave_0 added [ 827.873796][T13365] team0: Port device team_slave_1 added [ 828.196877][T13365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.216240][ T5325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.218121][T13418] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2362'. [ 828.232007][T13365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.266516][ T5325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.269858][T13175] Bluetooth: hci7: command tx timeout [ 828.290162][T13365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.306336][T13365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.313427][T13365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.345374][T13365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.579469][T13267] veth0_vlan: entered promiscuous mode [ 828.664606][T13365] hsr_slave_0: entered promiscuous mode [ 828.676820][T13365] hsr_slave_1: entered promiscuous mode [ 828.692481][T13365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 828.704968][T13365] Cannot create hsr debugfs directory [ 828.815171][ T5163] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 828.996110][T13267] veth1_vlan: entered promiscuous mode [ 829.025008][ T5163] usb 6-1: Using ep0 maxpacket: 16 [ 829.041484][ T5163] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 829.095210][ T5163] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.103335][ T5163] usb 6-1: Product: syz [ 829.155577][ T5163] usb 6-1: Manufacturer: syz [ 829.160268][ T5163] usb 6-1: SerialNumber: syz [ 829.189269][ T5163] usb 6-1: config 0 descriptor?? [ 829.208815][ T5163] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 829.406190][T13175] Bluetooth: hci6: Unknown advertising packet type: 0x74 [ 829.529627][T13267] veth0_macvtap: entered promiscuous mode [ 829.608283][T13267] veth1_macvtap: entered promiscuous mode [ 829.837236][T13429] loop2: detected capacity change from 0 to 512 [ 829.916152][T13429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 829.937329][T13429] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 829.963490][T13429] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz.2.2365: corrupted inode contents [ 829.998162][T13429] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz.2.2365: mark_inode_dirty error [ 830.085726][T13429] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz.2.2365: corrupted inode contents [ 830.114850][T13429] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.2365: mark_inode_dirty error [ 830.166282][ T5163] gp8psk: usb in 128 operation failed. [ 830.187709][ T5163] gp8psk: usb in 137 operation failed. [ 830.193224][ T5163] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 830.223511][T13365] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.267957][ T5163] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 830.268295][T13173] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.306755][ T5163] usb 6-1: media controller created [ 830.345317][T13175] Bluetooth: hci7: command tx timeout [ 830.419665][T13267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.447247][T13267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.460903][ T5163] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 830.480530][T13267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.515238][T13267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.544761][T13267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.558719][ T5163] gp8psk_fe: Frontend revision 1 attached [ 830.564553][ T5163] usb 6-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 830.583125][T13267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.604166][ T5163] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 830.613205][T13267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.644524][T13267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.679642][T13267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.725335][T13267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.764937][T13267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.799297][T13267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.829563][T13267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 830.950685][ T5163] gp8psk: usb in 138 operation failed. [ 830.984771][T13434] loop5: detected capacity change from 0 to 1764 [ 830.995181][ T5163] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 831.015261][ T5163] gp8psk: found Genpix USB device pID = 201 (hex) [ 831.038671][ T5163] usb 6-1: USB disconnect, device number 13 [ 831.052975][T13434] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 831.063512][T13365] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.121649][T13267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.165046][T13267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.206266][T13267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.265069][T13267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.282367][T13267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.325002][T13267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.367243][T13267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.428407][T13267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.481421][T13267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.530954][ T5163] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 831.555049][T13267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.601967][T13267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.638365][ T29] audit: type=1326 audit(1720798080.846:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13433 comm="syz.5.2367" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac15175bd9 code=0x0 [ 831.671168][T13267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.684715][T13267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 831.736989][T13436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2366'. [ 832.039029][T13365] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.134602][T13267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.165065][T13267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.173826][T13267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.215627][T13267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.429751][T13175] Bluetooth: hci7: command tx timeout [ 832.632117][T13365] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.750565][T13452] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2372'. [ 832.973570][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.009095][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.130805][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.156732][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.304497][T13458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2374'. [ 833.369364][T13458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2374'. [ 833.545720][T13365] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 833.584371][T13466] loop1: detected capacity change from 0 to 512 [ 833.613386][T13365] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 833.729274][T13466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 833.804423][T13365] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 833.830047][T13466] ext4 filesystem being mounted at /511/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 833.916456][T13365] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 833.971219][T13466] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.2376: corrupted inode contents [ 834.011324][T13466] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz.1.2376: mark_inode_dirty error [ 834.098086][T13466] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.2376: corrupted inode contents [ 834.152191][T13466] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.2376: mark_inode_dirty error [ 834.310823][ T5901] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.594551][T13365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.632353][T13478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.745117][T13365] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.789588][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.792752][T13456] loop2: detected capacity change from 0 to 40427 [ 834.796913][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.819610][ T5218] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.826934][ T5218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.863684][T13456] F2FS-fs (loop2): Invalid segment count (0) [ 834.873873][T13456] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 834.921419][T13456] F2FS-fs (loop2): invalid crc value [ 834.952748][T13456] F2FS-fs (loop2): Found nat_bits in checkpoint [ 835.032945][T13485] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2380'. [ 835.193524][T13456] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 835.221362][T13456] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 835.551939][T13173] syz-executor: attempt to access beyond end of device [ 835.551939][T13173] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 835.621240][T13173] syz-executor: attempt to access beyond end of device [ 835.621240][T13173] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 835.929173][T13365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.227405][T13365] veth0_vlan: entered promiscuous mode [ 836.261415][ T1096] kworker/u8:6: attempt to access beyond end of device [ 836.261415][ T1096] loop2: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 836.321689][ T1096] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 836.324421][T13365] veth1_vlan: entered promiscuous mode [ 836.389921][ T1096] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 836.431451][ T1096] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 836.648571][T13490] input: syz0 as /devices/virtual/input/input110 [ 836.759196][T13365] veth0_macvtap: entered promiscuous mode [ 836.793096][T13365] veth1_macvtap: entered promiscuous mode [ 837.050710][ T1096] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.200838][T13365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.255333][T13365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.285541][T13365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.317417][T13365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.343365][T13365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.365445][T13365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.386531][T13365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.416886][T13365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.446154][T13365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.487097][T13365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.515060][T13365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.548495][T13365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.572482][T13365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.585568][T13365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.635541][T13365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 837.932174][ T1096] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.151958][T13365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.198060][T13365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.221026][T13365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.232068][T13365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.250495][T13365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.280445][T13365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.293902][T13365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.322483][T13365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.366318][T13365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.405442][T13365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.435352][T13365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.476309][T13365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.501459][T13365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.554222][T13365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.594215][T13365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 838.707060][ T1096] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.747883][T13512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 838.762663][T13365] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.815002][T13365] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.834096][T13365] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.854358][T13365] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.880914][T13518] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2394'. [ 838.960135][ T1096] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.217867][ T5110] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 839.235498][ T5110] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 839.257370][ T5110] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 839.269176][ T5110] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 839.293661][ T5110] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 839.311083][ T5110] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 839.665664][ T45] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 839.700118][ T8827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.715718][ T8827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.833357][ T1096] bridge_slave_1: left allmulticast mode [ 839.846357][T13141] ================================================================== [ 839.854458][T13141] BUG: KASAN: slab-use-after-free in skb_queue_purge_reason+0x37b/0x410 [ 839.862855][T13141] Read of size 8 at addr ffff888079672058 by task syz.4.2281/13141 [ 839.870788][T13141] [ 839.873141][T13141] CPU: 0 PID: 13141 Comm: syz.4.2281 Not tainted 6.10.0-rc7-syzkaller-00141-g43db1e03c086 #0 [ 839.883343][T13141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 839.893862][T13141] Call Trace: [ 839.897166][T13141] [ 839.900228][T13141] dump_stack_lvl+0x116/0x1f0 [ 839.904984][T13141] print_report+0xc3/0x620 [ 839.909455][T13141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.912623][ T1096] bridge_slave_1: left promiscuous mode [ 839.915200][T13141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.915252][T13141] ? __phys_addr+0xc6/0x150 [ 839.924968][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.926388][T13141] kasan_report+0xd9/0x110 [ 839.932309][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 839.937860][T13141] ? skb_queue_purge_reason+0x37b/0x410 [ 839.937930][T13141] ? skb_queue_purge_reason+0x37b/0x410 [ 839.950448][ T45] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 839.952962][T13141] skb_queue_purge_reason+0x37b/0x410 [ 839.973130][T13141] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 839.979096][T13141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.980282][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.984748][T13141] ? lockdep_hardirqs_on+0x7c/0x110 [ 839.997940][T13141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.003623][T13141] ? drain_workqueue+0x309/0x3d0 [ 840.008611][T13141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.014292][T13141] ? __pfx_vhci_flush+0x10/0x10 [ 840.019207][T13141] vhci_flush+0x40/0x50 [ 840.021863][ T45] usb 2-1: Product: syz [ 840.023575][T13141] hci_dev_reset+0x231/0x530 [ 840.032341][T13141] hci_sock_ioctl+0x3d2/0x880 [ 840.034938][ T45] usb 2-1: Manufacturer: syz [ 840.037430][T13141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.045057][ T45] usb 2-1: SerialNumber: syz [ 840.047830][T13141] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 840.057671][T13141] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 840.063771][T13141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.069461][T13141] sock_do_ioctl+0x119/0x280 [ 840.074124][T13141] ? __pfx_sock_do_ioctl+0x10/0x10 [ 840.079310][T13141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.084998][T13141] sock_ioctl+0x22e/0x6c0 [ 840.089504][T13141] ? __pfx_sock_ioctl+0x10/0x10 [ 840.094426][T13141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.100311][T13141] ? __fget_files+0x256/0x400 [ 840.105093][T13141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.110864][T13141] ? __pfx_sock_ioctl+0x10/0x10 [ 840.115773][T13141] __x64_sys_ioctl+0x196/0x220 [ 840.120597][T13141] do_syscall_64+0xcd/0x250 [ 840.125159][T13141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.131383][T13141] RIP: 0033:0x7efe72175bd9 [ 840.136004][T13141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 840.155762][T13141] RSP: 002b:00007efe72e82048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 840.161406][ T45] usb 2-1: config 0 descriptor?? [ 840.164341][T13141] RAX: ffffffffffffffda RBX: 00007efe72304038 RCX: 00007efe72175bd9 [ 840.177360][T13141] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000006 [ 840.178065][ T45] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 840.185336][T13141] RBP: 00007efe721e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 840.185364][T13141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 840.185391][T13141] R13: 000000000000006e R14: 00007efe72304038 R15: 00007fffbc7e92b8 [ 840.185436][T13141] [ 840.221288][T13141] [ 840.223716][T13141] Allocated by task 12967: [ 840.228155][T13141] kasan_save_stack+0x33/0x60 [ 840.232900][T13141] kasan_save_track+0x14/0x30 [ 840.237705][T13141] __kasan_kmalloc+0xaa/0xb0 [ 840.242328][T13141] vhci_open+0x4c/0x440 [ 840.246542][T13141] misc_open+0x3dd/0x4c0 [ 840.250886][T13141] chrdev_open+0x270/0x6f0 [ 840.255344][T13141] do_dentry_open+0x922/0x15f0 [ 840.260141][T13141] vfs_open+0x82/0x3f0 [ 840.264253][T13141] path_openat+0x21fc/0x2e50 [ 840.268871][T13141] do_filp_open+0x1dc/0x430 [ 840.273403][T13141] do_sys_openat2+0x17a/0x1e0 [ 840.278123][T13141] __x64_sys_openat+0x175/0x210 [ 840.283237][T13141] do_syscall_64+0xcd/0x250 [ 840.287834][T13141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.293894][T13141] [ 840.296235][T13141] Freed by task 12967: [ 840.300431][T13141] kasan_save_stack+0x33/0x60 [ 840.305144][T13141] kasan_save_track+0x14/0x30 [ 840.309852][T13141] kasan_save_free_info+0x3b/0x60 [ 840.314929][T13141] poison_slab_object+0xf7/0x160 [ 840.319897][T13141] __kasan_slab_free+0x32/0x50 [ 840.324691][T13141] kfree+0x12a/0x3b0 [ 840.328614][T13141] vhci_release+0xc4/0x100 [ 840.333076][T13141] __fput+0x40b/0xbb0 [ 840.337095][T13141] task_work_run+0x151/0x250 [ 840.341816][T13141] do_exit+0xa9b/0x2ba0 [ 840.346004][T13141] do_group_exit+0xd3/0x2a0 [ 840.350540][T13141] __x64_sys_exit_group+0x3e/0x50 [ 840.355747][T13141] do_syscall_64+0xcd/0x250 [ 840.360485][T13141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.366442][T13141] [ 840.368827][T13141] The buggy address belongs to the object at ffff888079672000 [ 840.368827][T13141] which belongs to the cache kmalloc-1k of size 1024 [ 840.383091][T13141] The buggy address is located 88 bytes inside of [ 840.383091][T13141] freed 1024-byte region [ffff888079672000, ffff888079672400) [ 840.396928][T13141] [ 840.399270][T13141] The buggy address belongs to the physical page: [ 840.405702][T13141] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79670 [ 840.414494][T13141] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 840.423023][T13141] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 840.431034][T13141] page_type: 0xffffefff(slab) [ 840.435742][T13141] raw: 00fff00000000040 ffff888015441dc0 0000000000000000 dead000000000001 [ 840.444366][T13141] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 840.452982][T13141] head: 00fff00000000040 ffff888015441dc0 0000000000000000 dead000000000001 [ 840.461778][T13141] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 840.470489][T13141] head: 00fff00000000003 ffffea0001e59c01 ffffffffffffffff 0000000000000000 [ 840.479192][T13141] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 840.487972][T13141] page dumped because: kasan: bad access detected [ 840.494405][T13141] page_owner tracks the page as allocated [ 840.500219][T13141] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 12, tgid 12 (kworker/u8:1), ts 128223933701, free_ts 128218309824 [ 840.520858][T13141] post_alloc_hook+0x2d1/0x350 [ 840.525681][T13141] get_page_from_freelist+0x1353/0x2e50 [ 840.531283][T13141] __alloc_pages_noprof+0x22b/0x2460 [ 840.537231][T13141] alloc_slab_page+0x56/0x110 [ 840.541963][T13141] new_slab+0x84/0x260 [ 840.546071][T13141] ___slab_alloc+0xdac/0x1870 [ 840.550792][T13141] __slab_alloc.constprop.0+0x56/0xb0 [ 840.556206][T13141] __kmalloc_noprof+0x36d/0x410 [ 840.561095][T13141] ieee802_11_parse_elems_full+0xea/0x15d0 [ 840.563940][T13539] input: syz0 as /devices/virtual/input/input111 [ 840.567004][T13141] ieee80211_ibss_rx_queued_mgmt+0xc4f/0x2f40 [ 840.567069][T13141] ieee80211_iface_work+0xc07/0xf00 [ 840.567128][T13141] cfg80211_wiphy_work+0x258/0x330 [ 840.567168][T13141] process_one_work+0x9c8/0x1b40 [ 840.594934][T13141] worker_thread+0x6c8/0xf30 [ 840.599580][T13141] kthread+0x2c4/0x3a0 [ 840.604058][T13141] ret_from_fork+0x48/0x80 [ 840.608621][T13141] page last free pid 12 tgid 12 stack trace: [ 840.614799][T13141] free_unref_page+0x64a/0xe40 [ 840.619661][T13141] qlist_free_all+0x4e/0x140 [ 840.624304][T13141] kasan_quarantine_reduce+0x192/0x1e0 [ 840.629822][T13141] __kasan_slab_alloc+0x69/0x90 [ 840.634705][T13141] kmalloc_trace_noprof+0x11e/0x300 [ 840.639943][T13141] __ipv6_dev_mc_inc+0x2b7/0xc50 [ 840.645133][T13141] addrconf_dad_work+0x232/0x1500 [ 840.650194][T13141] process_one_work+0x9c8/0x1b40 [ 840.655182][T13141] worker_thread+0x6c8/0xf30 [ 840.659860][T13141] kthread+0x2c4/0x3a0 [ 840.663987][T13141] ret_from_fork+0x48/0x80 [ 840.668470][T13141] ret_from_fork_asm+0x1a/0x30 [ 840.673336][T13141] [ 840.675716][T13141] Memory state around the buggy address: [ 840.681371][T13141] ffff888079671f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 840.689460][T13141] ffff888079671f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 840.697555][T13141] >ffff888079672000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 840.705728][T13141] ^ [ 840.712683][T13141] ffff888079672080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 840.720772][T13141] ffff888079672100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 840.728887][T13141] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 840.737470][ C0] vkms_vblank_simulate: vblank timer overrun [ 840.797209][T13141] Disabling lock debugging due to kernel taint [ 840.799042][ T1096] bridge_slave_0: left allmulticast mode [ 840.803623][T13141] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 840.811426][ T1096] bridge_slave_0: left promiscuous mode [ 840.827465][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.120975][T13141] Process accounting resumed [ 841.305585][T13286] ================================================================== [ 841.313885][T13286] BUG: KASAN: slab-use-after-free in skb_queue_purge_reason+0x37b/0x410 [ 841.322291][T13286] Read of size 8 at addr ffff888079672058 by task syz.3.2325/13286 [ 841.330209][T13286] [ 841.332550][T13286] CPU: 1 PID: 13286 Comm: syz.3.2325 Tainted: G B 6.10.0-rc7-syzkaller-00141-g43db1e03c086 #0 [ 841.344323][T13286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 841.354534][T13286] Call Trace: [ 841.357839][T13286] [ 841.360796][T13286] dump_stack_lvl+0x116/0x1f0 [ 841.365521][T13286] print_report+0xc3/0x620 [ 841.369975][T13286] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.375650][T13286] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.381324][T13286] ? __phys_addr+0xc6/0x150 [ 841.385871][T13286] kasan_report+0xd9/0x110 [ 841.390352][T13286] ? skb_queue_purge_reason+0x37b/0x410 [ 841.395946][T13286] ? skb_queue_purge_reason+0x37b/0x410 [ 841.401542][T13286] skb_queue_purge_reason+0x37b/0x410 [ 841.406965][T13286] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 841.412918][T13286] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.418595][T13286] ? drain_workqueue+0x309/0x3d0 [ 841.423569][T13286] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.429240][T13286] ? __pfx_vhci_flush+0x10/0x10 [ 841.434138][T13286] vhci_flush+0x40/0x50 [ 841.438345][T13286] hci_dev_reset+0x231/0x530 [ 841.442981][T13286] hci_sock_ioctl+0x3d2/0x880 [ 841.447700][T13286] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.453364][T13286] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 841.458596][T13286] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 841.464611][T13286] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.470280][T13286] sock_do_ioctl+0x119/0x280 [ 841.474926][T13286] ? __pfx_sock_do_ioctl+0x10/0x10 [ 841.480105][T13286] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.485773][T13286] sock_ioctl+0x22e/0x6c0 [ 841.490156][T13286] ? __pfx_sock_ioctl+0x10/0x10 [ 841.495055][T13286] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.500723][T13286] ? __fget_files+0x256/0x400 [ 841.505463][T13286] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.511123][T13286] ? __pfx_sock_ioctl+0x10/0x10 [ 841.516020][T13286] __x64_sys_ioctl+0x196/0x220 [ 841.520830][T13286] do_syscall_64+0xcd/0x250 [ 841.525376][T13286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.531319][T13286] RIP: 0033:0x7f88c2b75bd9 [ 841.535749][T13286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 841.555395][T13286] RSP: 002b:00007f88c38ae048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 841.563883][T13286] RAX: ffffffffffffffda RBX: 00007f88c2d04038 RCX: 00007f88c2b75bd9 [ 841.571881][T13286] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000006 [ 841.579956][T13286] RBP: 00007f88c2be4e60 R08: 0000000000000000 R09: 0000000000000000 [ 841.587942][T13286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.595928][T13286] R13: 000000000000006e R14: 00007f88c2d04038 R15: 00007fff57ab16d8 [ 841.603931][T13286] [ 841.606957][T13286] [ 841.609282][T13286] Allocated by task 12967: [ 841.613699][T13286] kasan_save_stack+0x33/0x60 [ 841.618399][T13286] kasan_save_track+0x14/0x30 [ 841.623090][T13286] __kasan_kmalloc+0xaa/0xb0 [ 841.627712][T13286] vhci_open+0x4c/0x440 [ 841.631911][T13286] misc_open+0x3dd/0x4c0 [ 841.636182][T13286] chrdev_open+0x270/0x6f0 [ 841.640622][T13286] do_dentry_open+0x922/0x15f0 [ 841.645420][T13286] vfs_open+0x82/0x3f0 [ 841.649523][T13286] path_openat+0x21fc/0x2e50 [ 841.654130][T13286] do_filp_open+0x1dc/0x430 [ 841.658649][T13286] do_sys_openat2+0x17a/0x1e0 [ 841.663352][T13286] __x64_sys_openat+0x175/0x210 [ 841.668667][T13286] do_syscall_64+0xcd/0x250 [ 841.673204][T13286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.679227][T13286] [ 841.681551][T13286] Freed by task 12967: [ 841.685624][T13286] kasan_save_stack+0x33/0x60 [ 841.690322][T13286] kasan_save_track+0x14/0x30 [ 841.695014][T13286] kasan_save_free_info+0x3b/0x60 [ 841.700097][T13286] poison_slab_object+0xf7/0x160 [ 841.705054][T13286] __kasan_slab_free+0x32/0x50 [ 841.709872][T13286] kfree+0x12a/0x3b0 [ 841.713795][T13286] vhci_release+0xc4/0x100 [ 841.718246][T13286] __fput+0x40b/0xbb0 [ 841.722277][T13286] task_work_run+0x151/0x250 [ 841.726911][T13286] do_exit+0xa9b/0x2ba0 [ 841.731088][T13286] do_group_exit+0xd3/0x2a0 [ 841.735871][T13286] __x64_sys_exit_group+0x3e/0x50 [ 841.740916][T13286] do_syscall_64+0xcd/0x250 [ 841.745459][T13286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.751411][T13286] [ 841.753756][T13286] The buggy address belongs to the object at ffff888079672000 [ 841.753756][T13286] which belongs to the cache kmalloc-1k of size 1024 [ 841.768206][T13286] The buggy address is located 88 bytes inside of [ 841.768206][T13286] freed 1024-byte region [ffff888079672000, ffff888079672400) [ 841.782114][T13286] [ 841.784443][T13286] The buggy address belongs to the physical page: [ 841.790853][T13286] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79670 [ 841.799655][T13286] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 841.808172][T13286] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 841.816164][T13286] page_type: 0xffffefff(slab) [ 841.820861][T13286] raw: 00fff00000000040 ffff888015441dc0 0000000000000000 dead000000000001 [ 841.829485][T13286] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 841.838090][T13286] head: 00fff00000000040 ffff888015441dc0 0000000000000000 dead000000000001 [ 841.846781][T13286] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 841.855477][T13286] head: 00fff00000000003 ffffea0001e59c01 ffffffffffffffff 0000000000000000 [ 841.864166][T13286] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 841.872852][T13286] page dumped because: kasan: bad access detected [ 841.879306][T13286] page_owner tracks the page as allocated [ 841.885023][T13286] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 12, tgid 12 (kworker/u8:1), ts 128223933701, free_ts 128218309824 [ 841.905819][T13286] post_alloc_hook+0x2d1/0x350 [ 841.910625][T13286] get_page_from_freelist+0x1353/0x2e50 [ 841.916204][T13286] __alloc_pages_noprof+0x22b/0x2460 [ 841.921547][T13286] alloc_slab_page+0x56/0x110 [ 841.926280][T13286] new_slab+0x84/0x260 [ 841.930367][T13286] ___slab_alloc+0xdac/0x1870 [ 841.935062][T13286] __slab_alloc.constprop.0+0x56/0xb0 [ 841.940456][T13286] __kmalloc_noprof+0x36d/0x410 [ 841.945350][T13286] ieee802_11_parse_elems_full+0xea/0x15d0 [ 841.951199][T13286] ieee80211_ibss_rx_queued_mgmt+0xc4f/0x2f40 [ 841.957392][T13286] ieee80211_iface_work+0xc07/0xf00 [ 841.962736][T13286] cfg80211_wiphy_work+0x258/0x330 [ 841.967978][T13286] process_one_work+0x9c8/0x1b40 [ 841.972967][T13286] worker_thread+0x6c8/0xf30 [ 841.977594][T13286] kthread+0x2c4/0x3a0 [ 841.981695][T13286] ret_from_fork+0x48/0x80 [ 841.986146][T13286] page last free pid 12 tgid 12 stack trace: [ 841.992135][T13286] free_unref_page+0x64a/0xe40 [ 841.997045][T13286] qlist_free_all+0x4e/0x140 [ 842.001688][T13286] kasan_quarantine_reduce+0x192/0x1e0 [ 842.007213][T13286] __kasan_slab_alloc+0x69/0x90 [ 842.012124][T13286] kmalloc_trace_noprof+0x11e/0x300 [ 842.017369][T13286] __ipv6_dev_mc_inc+0x2b7/0xc50 [ 842.022360][T13286] addrconf_dad_work+0x232/0x1500 [ 842.027521][T13286] process_one_work+0x9c8/0x1b40 [ 842.032871][T13286] worker_thread+0x6c8/0xf30 [ 842.037511][T13286] kthread+0x2c4/0x3a0 [ 842.041636][T13286] ret_from_fork+0x48/0x80 [ 842.046086][T13286] ret_from_fork_asm+0x1a/0x30 [ 842.051159][T13286] [ 842.053484][T13286] Memory state around the buggy address: [ 842.059118][T13286] ffff888079671f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 842.067297][T13286] ffff888079671f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 842.075368][T13286] >ffff888079672000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 842.083876][T13286] ^ [ 842.090822][T13286] ffff888079672080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 842.098897][T13286] ffff888079672100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 842.106963][T13286] ================================================================== [ 842.165018][T13286] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 842.174934][ T8783] Bluetooth: hci2: command tx timeout [ 842.265627][ T45] gp8psk: usb in 128 operation failed. [ 842.275036][ T45] gp8psk: usb in 137 operation failed. [ 842.280516][ T45] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 842.295834][ T45] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 842.315484][ T45] usb 2-1: media controller created [ 842.430637][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 842.521912][ T45] gp8psk_fe: Frontend revision 1 attached [ 842.539294][ T45] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 842.568565][ T45] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 842.873994][ T45] gp8psk: usb in 138 operation failed. [ 842.895045][ T45] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 842.925442][ T45] gp8psk: found Genpix USB device pID = 201 (hex) [ 843.232122][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 843.286163][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.302673][ T1096] bond0 (unregistering): Released all slaves [ 843.941204][ T8] usb 2-1: USB disconnect, device number 24 [ 844.186839][T13175] Bluetooth: hci2: command tx timeout [ 844.192959][ T8] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 844.321265][ T1096] hsr_slave_0: left promiscuous mode [ 844.330903][ T1096] hsr_slave_1: left promiscuous mode [ 844.339405][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 844.354783][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 844.376246][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 844.384081][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 844.396189][ T1096] veth1_macvtap: left promiscuous mode [ 844.402525][ T1096] veth0_macvtap: left promiscuous mode [ 844.410180][ T1096] veth1_vlan: left promiscuous mode [ 844.415821][ T1096] veth0_vlan: left promiscuous mode [ 844.831095][ T1096] team0 (unregistering): Port device team_slave_1 removed [ 844.850693][ T1096] team0 (unregistering): Port device team_slave_0 removed [ 845.580468][ T1096] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.669918][ T1096] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.748161][ T1096] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.816390][ T1096] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.931428][ T1096] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.995977][ T1096] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.057911][ T1096] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.128091][ T1096] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.261440][ T1096] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.271878][ T1096] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 46483 - 0 [ 846.282299][ T1096] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 36672 - 0 [ 846.363628][ T1096] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.374312][ T1096] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 46483 - 0 [ 846.386921][ T1096] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 36672 - 0 [ 846.461080][ T1096] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.472157][ T1096] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 46483 - 0 [ 846.482872][ T1096] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 36672 - 0 [ 846.549870][ T1096] bond0: (slave netdevsim0): Releasing backup interface [ 846.562988][ T1096] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.573534][ T1096] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 46483 - 0 [ 846.583961][ T1096] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 36672 - 0 [ 846.711201][ T1096] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.776254][ T1096] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.824848][ T1096] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.885020][ T1096] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.999742][ T1096] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.056724][ T1096] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.115818][ T1096] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.166859][ T1096] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.283440][ T1096] bridge_slave_1: left allmulticast mode [ 847.289249][ T1096] bridge_slave_1: left promiscuous mode [ 847.296077][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.307176][ T1096] bridge_slave_0: left allmulticast mode [ 847.312831][ T1096] bridge_slave_0: left promiscuous mode [ 847.318772][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.330316][ T1096] bridge_slave_1: left allmulticast mode [ 847.336255][ T1096] bridge_slave_1: left promiscuous mode [ 847.342156][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.352641][ T1096] bridge_slave_0: left allmulticast mode [ 847.358492][ T1096] bridge_slave_0: left promiscuous mode [ 847.364297][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.411246][ T1096] bridge_slave_1: left allmulticast mode [ 847.417286][ T1096] bridge_slave_1: left promiscuous mode [ 847.423054][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.433183][ T1096] bridge_slave_0: left allmulticast mode [ 847.439027][ T1096] bridge_slave_0: left promiscuous mode [ 847.445859][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.491385][ T1096] bridge_slave_1: left allmulticast mode [ 847.497149][ T1096] bridge_slave_1: left promiscuous mode [ 847.502914][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.513338][ T1096] bridge_slave_0: left allmulticast mode [ 847.521932][ T1096] bridge_slave_0: left promiscuous mode [ 847.527863][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.568127][ T1096] bridge_slave_1: left allmulticast mode [ 847.573936][ T1096] bridge_slave_1: left promiscuous mode [ 847.583168][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.592980][ T1096] bridge_slave_0: left allmulticast mode [ 847.601665][ T1096] bridge_slave_0: left promiscuous mode [ 847.608792][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.620766][ T1096] bridge_slave_1: left allmulticast mode [ 847.626644][ T1096] bridge_slave_1: left promiscuous mode [ 847.632407][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.643346][ T1096] bridge_slave_0: left allmulticast mode [ 847.649067][ T1096] bridge_slave_0: left promiscuous mode [ 847.659604][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.189357][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.204391][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.215672][ T1096] bond0 (unregistering): Released all slaves [ 849.241141][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.253270][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.271117][ T1096] bond0 (unregistering): Released all slaves [ 849.290293][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.304691][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.326805][ T1096] bond0 (unregistering): Released all slaves [ 849.345918][ T1096] bond1 (unregistering): Released all slaves [ 849.364828][ T1096] bond2 (unregistering): Released all slaves [ 849.399731][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.414836][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.429486][ T1096] bond0 (unregistering): Released all slaves [ 849.446652][ T1096] bond1 (unregistering): Released all slaves [ 849.463134][ T1096] bond2 (unregistering): Released all slaves [ 849.489880][ T1096] bond3 (unregistering): Released all slaves [ 849.521308][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.535069][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.547973][ T1096] bond0 (unregistering): Released all slaves [ 849.571076][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.582421][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.600443][ T1096] bond0 (unregistering): Released all slaves [ 849.623604][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.638176][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.654802][ T1096] bond0 (unregistering): Released all slaves